Module server

Expand description

Minimal HTTP server for RedDB management and remote access.

Re-exports§

handlers_admin: Lifecycle / admin HTTP endpoints (PLAN.md Phase 1).
header_escape_guard: HeaderEscapeGuard — typed boundary guard for HTTP response header values.
http_connection_limiter: Bounded handler-thread admission for the clear-text HTTP accept loop.
http_handler_metrics: Prometheus metrics for the HTTP handler-thread pool.
http_limits: Resolution of the three HTTP handler-pool knobs (issue #574 slice 5).
http_principal_limiter: Per-principal in-flight admission for the async HTTP edge (issue #934, PRD #930).
ingest_pipeline: JSON-first ingest pipeline — autodetects JSON-array bodies, NDJSON streams, and envelope-style payloads, then hands the rows over to the storage layer as a Vec<HashMap<String, Value>>.
output_stream: Output streaming primitives for issue #760 (PRD #759 / ADR 0029) — the “shim slice” of bidirectional streaming.
tls: HTTP TLS termination for the embedded HTTP server.
ui_auth: Credential handoff for red ui (issue #1048, PRD #1041; ADR 0051 auth model, ADR 0036 handshake auth).
ui_bridge: Local red ui bridge — the tracer-bullet spine of the red-ui integration (issue #1042, PRD #1041; ADR 0047 bridge, ADR 0049 RedWire-over-WS transport, ADR 0036 WS edge).
ui_bundle_resolver: red ui bundle resolver — pin→URL resolution, HTTPS download, SHA-256 verification, tgz extraction, and local cache management.
ui_deeplink: Deep-link dispatch for red ui <uri> (ADR 0051, issue #1046, PRD #1041).

ServerSurface: PLAN.md Phase 6.2 — endpoint segregation. A given HTTP listener can serve either every public surface (Public, default) or a restricted slice (AdminOnly, MetricsOnly). The route filter at the top of route() consults this so a port bound only to loopback for admin work won’t accidentally hand out DML.