Module ui 

The built-in operations UI (/ui/).

Static HTML, CSS and JavaScript compiled into the binary. The assets hold no data and no secrets, so they are served without authentication; the page asks for a token and calls the HTTP API (/v1/*) with it, so the API’s own authentication and authorization decide what each caller sees.

The router is merged outside the API’s authentication and cluster layers: a standby or shared-mode node serves the UI itself, and its API answers the reads exactly as it would for any other client.

Constants

CSP

Content-Security-Policy of every UI response. Scripts and styles come only from the separate same-origin assets (no inline script or style), the page talks only to its own origin, and it cannot be framed.

Functions

router

Routes of the UI: /ui/ and its assets, and / (a redirect to /ui/ for browsers).