"""Starlette application for the internal read-only web UI (#426).""" from __future__ import annotations from datetime import datetime, timezone from starlette.applications import Starlette from starlette.requests import Request from starlette.responses import HTMLResponse, JSONResponse, Response from starlette.routing import Route from webui.layout import render_page from webui.project_registry import find_project, load_registry, registry_to_dict from webui.project_views import render_project_detail, render_projects_list from webui.prompt_library import find_prompt, library_to_dict from webui.prompt_views import render_prompt_detail, render_prompts_page from webui.queue_loader import load_queue_snapshot, snapshot_to_dict from webui.queue_views import render_queue_page from webui.worktree_scanner import load_hygiene_snapshot, snapshot_to_dict as worktree_snapshot_to_dict from webui.worktree_views import render_worktrees_page _READ_ONLY_METHODS = frozenset({"GET", "HEAD", "OPTIONS"}) def _stub_page(title: str, description: str) -> HTMLResponse: body = ( f"

{title}

" f'

{description}

' "

Implementation tracked in a child issue of #425.

" ) return HTMLResponse(render_page(title=title, body_html=body)) async def home(_request: Request) -> HTMLResponse: body = ( "

Operator console

" "

Local entry point for MCP Control Plane operational views.

" "" ) return HTMLResponse(render_page(title="Home", body_html=body)) async def health(_request: Request) -> JSONResponse: return JSONResponse({ "status": "ok", "service": "mcp-control-plane-webui", "mode": "read-only-mvp", "timestamp": datetime.now(timezone.utc).isoformat(), }) async def queue(_request: Request) -> HTMLResponse: snapshot = load_queue_snapshot() return HTMLResponse(render_page(title="Queue", body_html=render_queue_page(snapshot))) async def api_queue(_request: Request) -> JSONResponse: return JSONResponse(snapshot_to_dict(load_queue_snapshot())) async def projects(_request: Request) -> HTMLResponse: registry = load_registry() return HTMLResponse(render_projects_list(registry)) async def project_detail(request: Request) -> HTMLResponse: project_id = request.path_params["project_id"] registry = load_registry() project = find_project(registry, project_id) if project is None: return HTMLResponse( render_page( title="Project not found", body_html=( "

Project not found

" f"

No registry entry for {project_id}.

" '

← All projects

' ), ), status_code=404, ) return HTMLResponse(render_project_detail(project)) async def api_projects(_request: Request) -> JSONResponse: registry = load_registry() return JSONResponse(registry_to_dict(registry)) async def prompts(_request: Request) -> HTMLResponse: return HTMLResponse(render_prompts_page()) async def prompt_detail(request: Request) -> HTMLResponse: prompt_id = request.path_params["prompt_id"] prompt = find_prompt(prompt_id) if prompt is None: return HTMLResponse( render_page( title="Prompt not found", body_html=( "

Prompt not found

" f"

No library entry for {prompt_id}.

" '

← All prompts

' ), ), status_code=404, ) return HTMLResponse(render_prompt_detail(prompt)) async def api_prompts(_request: Request) -> JSONResponse: return JSONResponse(library_to_dict()) async def runtime(_request: Request) -> HTMLResponse: return _stub_page( "Runtime", "Runtime health will report MCP profile, preflight, and stale-server signals.", ) async def audit(_request: Request) -> HTMLResponse: return _stub_page( "Audit", "Report audit will accept pasted final reports and run validator previews.", ) async def worktrees(_request: Request) -> HTMLResponse: snapshot = load_hygiene_snapshot() return HTMLResponse(render_worktrees_page(snapshot)) async def api_worktrees(_request: Request) -> JSONResponse: return JSONResponse(worktree_snapshot_to_dict(load_hygiene_snapshot())) async def leases(_request: Request) -> HTMLResponse: return _stub_page( "Leases", "Lease visibility will show active issue and reviewer PR leases.", ) async def method_not_allowed(request: Request, _exc: Exception) -> Response: if request.method not in _READ_ONLY_METHODS: return JSONResponse( {"error": "read-only-mvp", "detail": f"{request.method} not permitted"}, status_code=405, ) return JSONResponse({"error": "not_found"}, status_code=404) def create_app() -> Starlette: """Build the read-only MVP Starlette app.""" return Starlette( debug=False, routes=[ Route("/", home, methods=["GET"]), Route("/health", health, methods=["GET"]), Route("/queue", queue, methods=["GET"]), Route("/api/queue", api_queue, methods=["GET"]), Route("/projects", projects, methods=["GET"]), Route("/projects/{project_id}", project_detail, methods=["GET"]), Route("/api/projects", api_projects, methods=["GET"]), Route("/prompts", prompts, methods=["GET"]), Route("/prompts/{prompt_id}", prompt_detail, methods=["GET"]), Route("/api/prompts", api_prompts, methods=["GET"]), Route("/runtime", runtime, methods=["GET"]), Route("/audit", audit, methods=["GET"]), Route("/worktrees", worktrees, methods=["GET"]), Route("/api/worktrees", api_worktrees, methods=["GET"]), Route("/leases", leases, methods=["GET"]), ], exception_handlers={405: method_not_allowed}, )