Engine HTTP + SSE API (cst-webui/1). This process serves the
control plane, not a full browser app.
GET /api/stateGET /api/events (SSE)POST /api/turnFull SPA reference: archive/web-spa —
hermit --web --web-dev archive/web-spa.
Contract: docs/webui.md.