monitor-app 2.1.0__tar.gz → 2.3.0__tar.gz

{monitor_app-2.1.0 → monitor_app-2.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: monitor-app
-Version: 2.1.0
+Version: 2.3.0
 Summary: Drop in a CSV, write one config file, and get a live-updating Web UI + REST API. FastAPI-based data monitoring for shop floors and small teams.
 License-Expression: MIT
 License-File: LICENSE
@@ -72,9 +72,12 @@ Monitor App is a FastAPI-based data monitoring tool designed for shop floors, la
 | Feature | What it does | How to enable |
 |---|---|---|
 | Auto data ingest | Watches `csv/` for changes; `POST /api/ingest/{table}` for sensors/PLC/MES | `MONITOR_INGEST_WATCH` / always on |
-| Threshold alerts | On-screen banner + beep, Webhook (Slack/Teams), LINE, e-mail; edge-triggered | `alerts=[AlertRule(...)]` |
+| Threshold alerts | On-screen banner + browser notification, Webhook (Slack/Teams), e-mail; edge-triggered | `alerts=[AlertRule(...)]` |
 | Andon wallboard | Full-screen rotating views with a green/amber/red status light at `/kiosk` | `kiosk=KioskConfig(...)` |
 | Trend / SPC charts | Line & bar charts with UCL/LCL/target lines, out-of-control points highlighted | `ViewDef(chart=ChartDef(...))` |
+| Dashboard | Home page shows mini-chart grid (columns=1–4) for chart-enabled views; non-chart views listed below | `dashboard=DashboardConfig(columns=2)` |
+| Group navigation | Sidebar and view list support named groups; `ViewDef(group="...")` | `ViewDef(group=...)` |
+| Dark theme | Toggle between light and dark; persisted in `localStorage["monitor-theme"]`; `<html data-theme="dark">` | theme-toggle button (☀️/🌙) |
 | KPI cards | Scalar SQL (counts, rates, OEE) as color-coded cards on the home page | `kpis={...}` |
 | Operator entry forms | Touch-friendly forms generated from your table schema at `/form/{table}` | `TableDef(form=FormDef(...))` |
 | Audit log | Who changed what and when, for every write | `MONITOR_AUDIT_ENABLED` |
@@ -172,7 +175,7 @@ MONITOR_WEBHOOK_URL=https://hooks.slack.com/services/...
 
 | Path | Description |
 |---|---|
-| `/` | Home: KPI cards + view list |
+| `/` | Home: dashboard with mini-charts, KPI cards, and view list |
 | `/table/{view}` | Live table / chart page |
 | `/kiosk` | Andon wallboard (full screen, auto-rotating) |
 | `/form/{table}` | Operator entry form |
@@ -182,6 +185,24 @@ MONITOR_WEBHOOK_URL=https://hooks.slack.com/services/...
 | `/api/views/{view}` | View data (+ `/stream` for SSE, `/export` for CSV/Excel) |
 | `/api/kpis`, `/api/alerts`, `/api/audit`, `/api/schema`, `/api/health` | KPIs, active alerts, audit log, schema, health |
 
+## 🔌 External tool integrations (v2.2)
+
+Connect procdiag, netdiag, and network-checker to Monitor App with a few lines — no changes to the external tools required (read-only, pull-based).
+
+```python
+from monitor_app.integrations import procdiag, netdiag, network_checker
+
+config = procdiag.attach(config, db_path="/opt/procdiag/data/procdiag.db")
+config = netdiag.attach(config)
+config = network_checker.attach(config, hosts=["plc-01", "gateway"])
+```
+
+Each `attach()` call merges tables, views, KPIs, and alert rules into your existing config. Run `monitor-app sync-sources` to ingest on demand, or set `MONITOR_INGEST_WATCH=1` for continuous polling.
+
+Full reference: [docs/integrations_v2_2.md](https://github.com/mikawa-bushi/monitor-app/blob/main/docs/integrations_v2_2.md)
+
+---
+
 ## 🔄 Migrating from v0.x
 
 v2 was rebuilt on FastAPI + Pydantic. The legacy dict-style `config.py`
@@ -193,7 +214,9 @@ compatibility shim, but new projects should use `MonitorConfig`. Key changes:
 - API paths: `/api/<table>` → `/api/tables/{table}`, `/api/view/<v>` → `/api/views/{view}`
 
 Details: [redesign notes](https://github.com/mikawa-bushi/monitor-app/blob/main/docs/redesign_v2.md) ·
-[v2.1 feature design](https://github.com/mikawa-bushi/monitor-app/blob/main/docs/feature_expansion_v2.1.md)
+[v2.1 feature design](https://github.com/mikawa-bushi/monitor-app/blob/main/docs/feature_expansion_v2.1.md) ·
+[v2.2 integrations](https://github.com/mikawa-bushi/monitor-app/blob/main/docs/integrations_v2_2.md) ·
+[v2.3 UI redesign](https://github.com/mikawa-bushi/monitor-app/blob/main/docs/ui_redesign_v2_3.md)
 
 ## 🐳 Docker
 

{monitor_app-2.1.0 → monitor_app-2.3.0}/README.md

@@ -27,9 +27,12 @@ Monitor App is a FastAPI-based data monitoring tool designed for shop floors, la
 | Feature | What it does | How to enable |
 |---|---|---|
 | Auto data ingest | Watches `csv/` for changes; `POST /api/ingest/{table}` for sensors/PLC/MES | `MONITOR_INGEST_WATCH` / always on |
-| Threshold alerts | On-screen banner + beep, Webhook (Slack/Teams), LINE, e-mail; edge-triggered | `alerts=[AlertRule(...)]` |
+| Threshold alerts | On-screen banner + browser notification, Webhook (Slack/Teams), e-mail; edge-triggered | `alerts=[AlertRule(...)]` |
 | Andon wallboard | Full-screen rotating views with a green/amber/red status light at `/kiosk` | `kiosk=KioskConfig(...)` |
 | Trend / SPC charts | Line & bar charts with UCL/LCL/target lines, out-of-control points highlighted | `ViewDef(chart=ChartDef(...))` |
+| Dashboard | Home page shows mini-chart grid (columns=1–4) for chart-enabled views; non-chart views listed below | `dashboard=DashboardConfig(columns=2)` |
+| Group navigation | Sidebar and view list support named groups; `ViewDef(group="...")` | `ViewDef(group=...)` |
+| Dark theme | Toggle between light and dark; persisted in `localStorage["monitor-theme"]`; `<html data-theme="dark">` | theme-toggle button (☀️/🌙) |
 | KPI cards | Scalar SQL (counts, rates, OEE) as color-coded cards on the home page | `kpis={...}` |
 | Operator entry forms | Touch-friendly forms generated from your table schema at `/form/{table}` | `TableDef(form=FormDef(...))` |
 | Audit log | Who changed what and when, for every write | `MONITOR_AUDIT_ENABLED` |
@@ -127,7 +130,7 @@ MONITOR_WEBHOOK_URL=https://hooks.slack.com/services/...
 
 | Path | Description |
 |---|---|
-| `/` | Home: KPI cards + view list |
+| `/` | Home: dashboard with mini-charts, KPI cards, and view list |
 | `/table/{view}` | Live table / chart page |
 | `/kiosk` | Andon wallboard (full screen, auto-rotating) |
 | `/form/{table}` | Operator entry form |
@@ -137,6 +140,24 @@ MONITOR_WEBHOOK_URL=https://hooks.slack.com/services/...
 | `/api/views/{view}` | View data (+ `/stream` for SSE, `/export` for CSV/Excel) |
 | `/api/kpis`, `/api/alerts`, `/api/audit`, `/api/schema`, `/api/health` | KPIs, active alerts, audit log, schema, health |
 
+## 🔌 External tool integrations (v2.2)
+
+Connect procdiag, netdiag, and network-checker to Monitor App with a few lines — no changes to the external tools required (read-only, pull-based).
+
+```python
+from monitor_app.integrations import procdiag, netdiag, network_checker
+
+config = procdiag.attach(config, db_path="/opt/procdiag/data/procdiag.db")
+config = netdiag.attach(config)
+config = network_checker.attach(config, hosts=["plc-01", "gateway"])
+```
+
+Each `attach()` call merges tables, views, KPIs, and alert rules into your existing config. Run `monitor-app sync-sources` to ingest on demand, or set `MONITOR_INGEST_WATCH=1` for continuous polling.
+
+Full reference: [docs/integrations_v2_2.md](https://github.com/mikawa-bushi/monitor-app/blob/main/docs/integrations_v2_2.md)
+
+---
+
 ## 🔄 Migrating from v0.x
 
 v2 was rebuilt on FastAPI + Pydantic. The legacy dict-style `config.py`
@@ -148,7 +169,9 @@ compatibility shim, but new projects should use `MonitorConfig`. Key changes:
 - API paths: `/api/<table>` → `/api/tables/{table}`, `/api/view/<v>` → `/api/views/{view}`
 
 Details: [redesign notes](https://github.com/mikawa-bushi/monitor-app/blob/main/docs/redesign_v2.md) ·
-[v2.1 feature design](https://github.com/mikawa-bushi/monitor-app/blob/main/docs/feature_expansion_v2.1.md)
+[v2.1 feature design](https://github.com/mikawa-bushi/monitor-app/blob/main/docs/feature_expansion_v2.1.md) ·
+[v2.2 integrations](https://github.com/mikawa-bushi/monitor-app/blob/main/docs/integrations_v2_2.md) ·
+[v2.3 UI redesign](https://github.com/mikawa-bushi/monitor-app/blob/main/docs/ui_redesign_v2_3.md)
 
 ## 🐳 Docker
 

monitor_app-2.3.0/monitor_app/api/deps.py

@@ -0,0 +1,140 @@
+"""FastAPI 依存。アプリ状態(app.state)へのアクセスと API キー / セッション検証。
+
+認証(#11): 書き込み系は ``api_key`` 設定時に必須、読み取り系は ``protect_reads``
+有効時に必須。クライアントは **X-API-Key ヘッダ** か **セッション Cookie** の
+どちらかで認証できる。Cookie は同梱 Web UI がブラウザから認証するための経路で、
+``/api/login`` がキー検証後に発行する(値はキーの HMAC で、生キーは保存しない)。
+"""
+
+from __future__ import annotations
+
+import hashlib
+import hmac
+import secrets
+
+from fastapi import Depends, HTTPException, Request, Security
+from fastapi.security import APIKeyHeader
+
+from ..services.crud_service import CrudService
+from ..services.view_service import ViewService
+from ..settings.declarative import MonitorConfig
+from ..settings.runtime import AppSettings
+
+_api_key_header = APIKeyHeader(name="X-API-Key", auto_error=False)
+
+#: セッション Cookie 名(#11)。
+SESSION_COOKIE = "monitor_session"
+
+
+def session_token(api_key: str) -> str:
+    """API キーから導出する署名付きセッショントークン。
+
+    生キーを Cookie に置かないための HMAC。ステートレスなので再起動・多ワーカーでも
+    一貫して検証できる。"""
+    return hmac.new(
+        api_key.encode("utf-8"), b"monitor-session", hashlib.sha256
+    ).hexdigest()
+
+
+def get_settings(request: Request) -> AppSettings:
+    return request.app.state.settings
+
+
+def get_config(request: Request) -> MonitorConfig:
+    return request.app.state.config
+
+
+def get_crud_service(request: Request) -> CrudService:
+    return request.app.state.crud_service
+
+
+def get_view_service(request: Request) -> ViewService:
+    return request.app.state.view_service
+
+
+def get_alert_engine(request: Request):
+    """AlertEngine を返す(フェーズ1・A)。"""
+    return request.app.state.alert_engine
+
+
+def get_kpi_service(request: Request):
+    """KpiService を返す(フェーズ2・E)。"""
+    return request.app.state.kpi_service
+
+
+def get_audit_service(request: Request):
+    """AuditService を返す(フェーズ4・G)。"""
+    return request.app.state.audit_service
+
+
+def _is_authed(settings: AppSettings, request: Request, provided: str | None) -> bool:
+    """ヘッダ or セッション Cookie で認証済みか。api_key 未設定なら常に True。"""
+    if settings.api_key is None:
+        return True
+    if provided and secrets.compare_digest(provided, settings.api_key):
+        return True
+    cookie = request.cookies.get(SESSION_COOKIE)
+    if cookie and secrets.compare_digest(cookie, session_token(settings.api_key)):
+        return True
+    return False
+
+
+def get_actor(
+    request: Request,
+    provided: str | None = Security(_api_key_header),
+) -> str:
+    """監査用の実行主体を表す文字列(フェーズ4・G)。
+
+    ヘッダ認証なら "api"、Cookie セッションなら "ui"、いずれも無ければ "anon"。
+    クライアント IP を添える。
+    """
+    client = request.client.host if request.client else "unknown"
+    if provided:
+        who = "api"
+    elif request.cookies.get(SESSION_COOKIE):
+        who = "ui"
+    else:
+        who = "anon"
+    return f"{who}@{client}"
+
+
+def _check_auth(settings: AppSettings, request: Request, provided: str | None) -> None:
+    if not _is_authed(settings, request, provided):
+        raise HTTPException(
+            status_code=401,
+            detail={"code": "UNAUTHORIZED", "message": "API キーが無効です"},
+        )
+
+
+def require_write_auth(
+    request: Request,
+    settings: AppSettings = Depends(get_settings),
+    provided: str | None = Security(_api_key_header),
+) -> None:
+    """書き込み系(POST/PUT/DELETE)で必須。api_key 未設定なら素通り。"""
+    _check_auth(settings, request, provided)
+
+
+def require_read_auth(
+    request: Request,
+    settings: AppSettings = Depends(get_settings),
+    provided: str | None = Security(_api_key_header),
+) -> None:
+    """読み取り系。protect_reads=True かつ api_key 設定時のみ検証。"""
+    if settings.protect_reads:
+        _check_auth(settings, request, provided)
+
+
+class RedirectToLogin(Exception):
+    """HTML ページが未認証のとき送出。/login へのリダイレクトに変換される(#11)。"""
+
+
+def page_auth_guard(
+    request: Request,
+    settings: AppSettings = Depends(get_settings),
+    provided: str | None = Security(_api_key_header),
+) -> None:
+    """HTML ページ用ガード。protect_reads+api_key 有効かつ未認証なら /login へ。"""
+    if settings.protect_reads and settings.api_key:
+        if not _is_authed(settings, request, provided):
+            raise RedirectToLogin()

{monitor_app-2.1.0 → monitor_app-2.3.0}/monitor_app/api/errors.py

@@ -6,9 +6,10 @@ import logging
 import uuid
 
 from fastapi import FastAPI, Request
-from fastapi.responses import JSONResponse
+from fastapi.responses import JSONResponse, RedirectResponse
 
 from ..exceptions import MonitorAppError
+from .deps import RedirectToLogin
 
 logger = logging.getLogger("monitor_app.api")
 
@@ -31,3 +32,8 @@ def register_exception_handlers(app: FastAPI) -> None:
         return JSONResponse(
             status_code=exc.status_code, content=_body(exc.code, exc.message)
         )
+
+    @app.exception_handler(RedirectToLogin)
+    async def _handle_login_redirect(_request: Request, _exc: RedirectToLogin):
+        # 未認証の HTML ページアクセスはログインページへ誘導する(#11)。
+        return RedirectResponse(url="/login", status_code=303)

monitor_app-2.3.0/monitor_app/api/routers/auth.py

@@ -0,0 +1,51 @@
+"""UI 向けセッション認証エンドポイント(#11)。
+
+``protect_reads``/``api_key`` 有効時に、ブラウザからキーを渡して同梱 UI を使える
+ようにする。検証成功で HttpOnly な署名付き Cookie を発行し、以後の同一オリジン
+fetch が自動的に認証される。
+"""
+
+from __future__ import annotations
+
+import secrets
+
+from fastapi import APIRouter, Depends, Form, Request
+from fastapi.responses import RedirectResponse
+
+from ...settings.runtime import AppSettings
+from ..deps import SESSION_COOKIE, get_settings, session_token
+
+router = APIRouter(prefix="/api", tags=["Auth"])
+
+
+@router.post("/login")
+def login(
+    request: Request,
+    key: str = Form(...),
+    settings: AppSettings = Depends(get_settings),
+):
+    """キーを検証し、成功なら HttpOnly セッション Cookie を発行して / へ。"""
+    if settings.api_key is not None and not secrets.compare_digest(
+        key, settings.api_key
+    ):
+        return RedirectResponse(url="/login?error=1", status_code=303)
+
+    resp = RedirectResponse(url="/", status_code=303)
+    if settings.api_key is not None:
+        resp.set_cookie(
+            SESSION_COOKIE,
+            session_token(settings.api_key),
+            httponly=True,
+            samesite="lax",
+            secure=request.url.scheme == "https",
+            max_age=60 * 60 * 12,  # 12 時間
+        )
+    return resp
+
+
+@router.post("/logout")
+def logout():
+    """セッション Cookie を失効させ、ログインページへ。"""
+    resp = RedirectResponse(url="/login", status_code=303)
+    resp.delete_cookie(SESSION_COOKIE)
+    return resp

{monitor_app-2.1.0 → monitor_app-2.3.0}/monitor_app/api/routers/crud.py

@@ -2,10 +2,11 @@
 
 from __future__ import annotations
 
-from typing import Any, Dict
+from typing import Any, Dict, Optional
 
-from fastapi import APIRouter, Body, Depends
+from fastapi import APIRouter, Body, Depends, Query
 
+from ...services.crud_service import CrudService
 from ..deps import (
     get_actor,
     get_crud_service,
@@ -13,7 +14,6 @@ from ..deps import (
     require_write_auth,
 )
 from ..schemas import MessageResponse, RecordResponse, TableDataResponse
-from ...services.crud_service import CrudService
 
 router = APIRouter(prefix="/api/tables", tags=["CRUD"])
 
@@ -21,11 +21,13 @@ router = APIRouter(prefix="/api/tables", tags=["CRUD"])
 @router.get("/{table_name}", response_model=TableDataResponse)
 def list_records(
     table_name: str,
+    limit: Optional[int] = Query(None, ge=1, description="返す最大行数(#17)"),
+    offset: int = Query(0, ge=0, description="先頭からのスキップ行数(#17)"),
     service: CrudService = Depends(get_crud_service),
     _: None = Depends(require_read_auth),
 ):
-    """テーブルの全レコードを取得する。"""
-    rows = service.list_records(table_name)
+    """テーブルのレコードを取得する。``limit``/``offset`` 省略時は全件。"""
+    rows = service.list_records(table_name, limit=limit, offset=offset)
     columns = service.config.tables[table_name].column_names
     return TableDataResponse(
         table_name=table_name, columns=columns, data=rows, count=len(rows)

monitor_app-2.3.0/monitor_app/api/routers/pages.py

@@ -0,0 +1,282 @@
+"""HTML ページ配信(ホーム・ビュー表示)。Jinja2 テンプレートを使う。"""
+
+from __future__ import annotations
+
+import json
+
+from fastapi import APIRouter, Depends, Request
+from fastapi.responses import HTMLResponse
+
+from ...exceptions import TableNotFoundError, ViewNotFoundError
+from ...settings.declarative import MonitorConfig
+from ..deps import get_config, page_auth_guard
+
+router = APIRouter(tags=["Pages"], include_in_schema=False)
+
+
+def _escape_json_for_script(raw: str) -> str:
+    """``<script type="application/json">`` 内へ安全に埋め込める JSON 文字列を返す(#S1)。
+
+    ``json.dumps(ensure_ascii=False)`` / Pydantic の ``model_dump_json`` は ``<`` ``>``
+    ``&`` を素通しするため、ビュータイトル等に ``</script>`` が含まれると script タグを
+    閉じて DOM 破壊・XSS になり得る。HTML で意味を持つ文字と行区切り(JS では文字列を
+    壊す U+2028/U+2029)を ``\\uXXXX`` へ置換する。``JSON.parse`` が元の文字へ復号する
+    ため、埋め込まれるデータの意味は変わらない。
+    """
+    return (
+        raw.replace("<", "\\u003c")
+        .replace(">", "\\u003e")
+        .replace("&", "\\u0026")
+        .replace("\u2028", "\\u2028")
+        .replace("\u2029", "\\u2029")
+    )
+
+
+def _nav_groups(config: MonitorConfig) -> list[dict]:
+    """ナビゲーション用グループリストを返す。
+
+    config.views の出現順でグループ化する。group=="" のビューは、他にグループが
+    存在する場合のみ「その他」として末尾に集約する。全ビューが group=="" の場合は
+    group 名 "" の単一グループを返す。
+    """
+    named: dict[str, list[dict]] = {}  # group 名 → ビューリスト(出現順)
+    ungrouped: list[dict] = []
+
+    for vname, vdef in config.views.items():
+        entry = {"name": vname, "title": vdef.title or vname}
+        if vdef.group:
+            if vdef.group not in named:
+                named[vdef.group] = []
+            named[vdef.group].append(entry)
+        else:
+            ungrouped.append(entry)
+
+    # グループが一切ない場合は単一の無名グループを返す
+    if not named:
+        return [{"group": "", "views": ungrouped}]
+
+    result = [{"group": g, "views": vs} for g, vs in named.items()]
+    if ungrouped:
+        result.append({"group": "その他", "views": ungrouped})
+    return result
+
+
+def _nav_groups_filtered(
+    config: MonitorConfig, *, chart: bool | None = None
+) -> list[dict]:
+    """nav_groups と同形式で、chart の有無でビューを絞り込んで返す。
+
+    chart=True  → chart 付きビューのみ
+    chart=False → chart なしビューのみ
+    chart=None  → 全ビュー(_nav_groups と同じ)
+    """
+    named: dict[str, list[dict]] = {}
+    ungrouped: list[dict] = []
+
+    for vname, vdef in config.views.items():
+        if chart is True and vdef.chart is None:
+            continue
+        if chart is False and vdef.chart is not None:
+            continue
+        entry = {"name": vname, "title": vdef.title or vname}
+        if vdef.group:
+            if vdef.group not in named:
+                named[vdef.group] = []
+            named[vdef.group].append(entry)
+        else:
+            ungrouped.append(entry)
+
+    if not named:
+        return [{"group": "", "views": ungrouped}]
+
+    result = [{"group": g, "views": vs} for g, vs in named.items()]
+    if ungrouped:
+        result.append({"group": "その他", "views": ungrouped})
+    return result
+
+
+def _ctx(config: MonitorConfig, **extra) -> dict:
+    return {
+        "app_title": config.app_title,
+        "header_text": config.header_text,
+        "footer_text": config.footer_text,
+        "favicon_path": config.favicon_path,
+        "nav_groups": _nav_groups(config),
+        **extra,
+    }
+
+
+@router.get("/", response_class=HTMLResponse)
+def index(
+    request: Request,
+    config: MonitorConfig = Depends(get_config),
+    _: None = Depends(page_auth_guard),
+):
+    """ビュー一覧を表示するホームページ。"""
+    templates = request.app.state.templates
+
+    # ダッシュボード用: dashboard.views 指定がある場合はその順、なければ chart 付き全ビュー
+    if config.dashboard.views:
+        dash_views = [
+            {
+                "name": vname,
+                "title": config.views[vname].title or vname,
+                "chart": config.views[vname].chart.model_dump(),
+            }
+            for vname in config.dashboard.views
+        ]
+    else:
+        dash_views = [
+            {
+                "name": vname,
+                "title": vdef.title or vname,
+                "chart": vdef.chart.model_dump(),
+            }
+            for vname, vdef in config.views.items()
+            if vdef.chart is not None
+        ]
+    dashboard_json = _escape_json_for_script(
+        json.dumps(
+            {"columns": config.dashboard.columns, "views": dash_views},
+            ensure_ascii=False,
+        )
+    )
+
+    # chart を持たないビューのみ nav_groups と同形式で返す(リンク一覧用)
+    list_views = _nav_groups_filtered(config, chart=False)
+
+    return templates.TemplateResponse(
+        request,
+        "index.html",
+        _ctx(
+            config,
+            views=list(config.views.keys()),
+            has_kiosk=config.kiosk is not None,
+            has_kpis=bool(config.kpis),
+            refresh_interval_ms=config.refresh_interval_ms,
+            form_tables=[
+                name for name, t in config.tables.items() if t.form is not None
+            ],
+            dashboard_json=dashboard_json,
+            list_views=list_views,
+        ),
+    )
+
+
+@router.get("/form/{table_name}", response_class=HTMLResponse)
+def show_form(
+    request: Request,
+    table_name: str,
+    config: MonitorConfig = Depends(get_config),
+    _: None = Depends(page_auth_guard),
+):
+    """作業者向け入力フォーム(フェーズ3・F)。
+
+    テーブルスキーマからタッチ向けフォームを自動生成する。送信は既存の
+    CRUD API(POST /api/tables/{table})を使う。
+    """
+    if table_name not in config.tables:
+        raise TableNotFoundError(f"テーブル '{table_name}' は定義されていません")
+    service = request.app.state.crud_service
+    form = service.form_schema(table_name)
+    templates = request.app.state.templates
+    return templates.TemplateResponse(
+        request,
+        "form.html",
+        _ctx(config, table_name=table_name, form=form),
+    )
+
+
+@router.get("/kiosk", response_class=HTMLResponse)
+def kiosk(
+    request: Request,
+    config: MonitorConfig = Depends(get_config),
+    _: None = Depends(page_auth_guard),
+):
+    """Andon / 大型表示モード(フェーズ1・B)。
+
+    複数ビューを一定間隔で自動ローテーションし、アラートを大きく表示する。
+    ラインの大型モニタに常時表示することを想定する。
+    """
+    templates = request.app.state.templates
+    kiosk_cfg = config.kiosk
+    kiosk_views = [
+        {
+            "name": name,
+            "title": config.views[name].title or name,
+            "chart": (
+                config.views[name].chart.model_dump()
+                if config.views[name].chart
+                else None
+            ),
+        }
+        for name in config.kiosk_views()
+        if name in config.views
+    ]
+    return templates.TemplateResponse(
+        request,
+        "kiosk.html",
+        _ctx(
+            config,
+            kiosk_json=_escape_json_for_script(
+                json.dumps({"views": kiosk_views}, ensure_ascii=False)
+            ),
+            has_kiosk_charts=any(v["chart"] for v in kiosk_views),
+            has_kpis=bool(config.kpis),
+            rotate_seconds=kiosk_cfg.rotate_seconds if kiosk_cfg else 15,
+            theme=kiosk_cfg.theme if kiosk_cfg else "dark",
+            refresh_interval_ms=config.refresh_interval_ms,
+        ),
+    )
+
+
+@router.get("/login", response_class=HTMLResponse)
+def login_page(
+    request: Request,
+    error: int = 0,
+    config: MonitorConfig = Depends(get_config),
+):
+    """ログインページ(#11)。protect_reads 有効時に未認証だと誘導される。"""
+    templates = request.app.state.templates
+    return templates.TemplateResponse(
+        request,
+        "login.html",
+        {
+            "app_title": config.app_title,
+            "header_text": config.header_text,
+            "favicon_path": config.favicon_path,
+            "error": bool(error),
+        },
+    )
+
+
+@router.get("/table/{view_name}", response_class=HTMLResponse)
+def show_table(
+    request: Request,
+    view_name: str,
+    config: MonitorConfig = Depends(get_config),
+    _: None = Depends(page_auth_guard),
+):
+    """1 つのビューを表示するページ。データは JS が API から取得する。"""
+    if view_name not in config.views:
+        raise ViewNotFoundError(f"ビュー '{view_name}' は定義されていません")
+    templates = request.app.state.templates
+    vdef = config.views[view_name]
+    chart_json = (
+        _escape_json_for_script(vdef.chart.model_dump_json()) if vdef.chart else "null"
+    )
+    return templates.TemplateResponse(
+        request,
+        "table.html",
+        _ctx(
+            config,
+            view_name=view_name,
+            view_title=vdef.title or view_name,
+            view_description=vdef.description,
+            refresh_interval_ms=config.refresh_interval_ms,
+            refresh_mode=config.refresh_mode,
+            has_chart=vdef.chart is not None,
+            chart_json=chart_json,
+            current_view=view_name,
+        ),
+    )