Struct UiServer 

pub struct UiServer { /* private fields */ }

Implementations

impl UiServer

pub fn new(facade: AreevFacade, db_label: String) -> Self

pub fn with_sso( self, header: impl Into<String>, secret: impl Into<String>, ) -> Self

Enable trusted-header SSO (v0). header names the identity header the authenticating proxy forwards; secret is the proxy’s shared secret, demanded in x-areev-proxy-secret on every SSO request.

pub fn with_credentials(self, map: CredentialMap) -> Self

Multi-principal mode: attach the credential map (areev-auth.json). Tokens resolve to principal names; rights come from the memory file’s own grant grains; unauthenticated requests run as anonymous. See docs/cal-reference.md §9.

pub fn with_loop_policy(self, policy: Policy) -> Self

Attach a host loop policy to the console’s loop routes, so a console-triggered run honors the same auto-apply grants, denies, and severity floors as areev loop run --policy.

pub fn allow_remote(self, yes: bool) -> Self

Accept requests whose Host header is non-loopback. Off by default so the loopback console is protected against DNS-rebinding reads even when unauthenticated; the CLI enables it under --allow-remote.

pub fn with_auth(self, token: String) -> Self

Require a shared secret on every request (the console page, reads, and writes). Browsers authenticate through the native Basic prompt (any username; password = token); scripts may send Authorization: Bearer <token>. Use this to serve the console to more than a single trusted local operator. Pair with a TLS-terminating proxy for non-local exposure — the token crosses the wire in the clear otherwise.

pub fn allow_destructive_ops(self, allow: bool) -> Self

Permit or forbid destructive CAL (FORGET <hash>) from the query console. Enabled by default; pass false to serve a read-only console. Since the plain console is unauthenticated, disabling this is the safe choice when the console is exposed beyond a trusted local operator.

pub fn into_hub(self, token: Option<String>, dir: &str) -> Result<Self>

areevd mode: require Authorization: Bearer <token> on POST endpoints and accept segment push/pull under dir.

pub fn bind(addr: &str) -> Result<TcpListener>

Bind and return the listener (lets callers learn the ephemeral port).

pub fn serve(&self, listener: TcpListener) -> Result<()>

Serve forever on an already-bound listener.