Struct UiServer 

pub struct UiServer { /* private fields */ }

Implementations

impl UiServer

pub fn new(facade: DejaDbFacade, db_label: String) -> Self

pub fn allow_remote(self, yes: bool) -> Self

Accept requests whose Host header is non-loopback. Off by default so the loopback console is protected against DNS-rebinding reads even when unauthenticated; the CLI enables it under --allow-remote.

pub fn with_auth(self, token: String) -> Self

Require a shared secret on every request (the console page, reads, and writes). Browsers authenticate through the native Basic prompt (any username; password = token); scripts may send Authorization: Bearer <token>. Use this to serve the console to more than a single trusted local operator. Pair with a TLS-terminating proxy for non-local exposure — the token crosses the wire in the clear otherwise.

pub fn allow_destructive_ops(self, allow: bool) -> Self

Permit or forbid destructive CAL (FORGET <hash>) from the query console. Enabled by default; pass false to serve a read-only console. Since the plain console is unauthenticated, disabling this is the safe choice when the console is exposed beyond a trusted local operator.

pub fn into_hub(self, token: Option<String>, dir: &str) -> Result<Self>

dejad mode: require Authorization: Bearer <token> on POST endpoints and accept segment push/pull under dir.

pub fn bind(addr: &str) -> Result<TcpListener>

Bind and return the listener (lets callers learn the ephemeral port).

pub fn serve(&self, listener: TcpListener) -> Result<()>

Serve forever on an already-bound listener.