Recommended Linked-Hybrid Web Manager UI Architecture

Recommended Linked-Hybrid Web Manager UI Architecture A architecture diagram generated by Archify. Operator experience Restricted engineering experience Independent runtime services Production operator · daily equipment workflows · Operator experience Production operator daily equipment workflows Authorized engineer · diagnostics and support · Restricted engineering experience Authorized engineer diagnostics and support HTTPS management edge · proxy, network policy, auth · Architecture component HTTPS management edge proxy, network policy, auth OUI · operator UI and curated configuration · Operator experience OUI operator UI and curated configuration Web Manager Console · separate restricted deployment · Restricted engineering experience Web Manager Console separate restricted deployment Access boundary · sessions, roles, tickets, audit · Restricted engineering experience Access boundary sessions, roles, tickets, audit EAPWebManager · typed operations and diagnostics · Independent runtime services EAPWebManager typed operations and diagnostics Equipment EAP · authoritative command execution · Independent runtime services Equipment EAP authoritative command execution Diagnostics and SQL state · redacted, bounded, auditable · Independent runtime services Diagnostics and SQL state redacted, bounded, auditable HTTPS HTTPS plus management policy operator route /webmanager-console/ explicit navigation links, no iframe approved operator commands engineer authorization scoped management ticket read-only typed diagnostics PLUS commands and events health, versions, retained state Legend Frontend Backend Database Security External

Keep in OUI

  • • Equipment operations, alarms, history, lot dispatch, prompts
  • • Curated tool-type, workstation, and account configuration
  • • Tasks production operators need in one continuous workflow

Separate Console

  • • Runtime and engine health, PLUS connectivity, subscriber diagnostics
  • • Redacted effective configuration and retention health
  • • Independent deployment, release, and failure boundary

Required Guardrails

  • • No iframe and no direct public PlantU listener
  • • Phase 1 is read-only with bounded diagnostic contracts
  • • Future mutations require server validation, authorization, audit, and rollback