VisualGrid Access Surfaces

VisualGrid provides root-only access for operators and engineers who need unrestricted visibility into the entire data topology.

---

Root Mode

Audience

Operators, platform engineers, and support staff who need unrestricted visibility into the entire data topology across all 20 services (20 DynamoDB tables).

Authentication

1. Operator calls POST /visualgrid/root/auth with the root secret_code.
2. The secret code is verified against a scrypt hash stored in the visualgrid_main DDB table (PK=SYSTEM#SECRET_CODE, SK=META).
3. On success, a short-lived token (1h TTL) is returned and stored as a VG_SESSION#<token> record.
4. All subsequent requests include the token as an x-vg-token header.

Capabilities

Capability	Details
Graph entry	GET /root/graph returns all 20 service tables as entry nodes
Node load	Load any item from any table by PK + SK
Node children	Browse children of any node with pagination
Node export	Export any node as JSON
No org scoping	Root mode sees everything — no org filter applied
Unredacted	All fields returned as-is (root-only access = no untrusted users)

Accessed Tables (all 20)

#	Table	Service
1	uas_main	UAS — User Account Service
2	usm_main	USM — User Session Management
3	ofm_main	OFM — Organization and Facility Management
4	mrs_main	MRS — Metarecord Service
5	pvm_main	PVM — Product & Vendor Management
6	pmc_main	PMC — Product Merchandising Control
7	pmc_group_rollup	PMC — Group Rollup Aggregates
8	ics_main	ICS — Inventory Control Service
9	ppm_main	PPM — Pricing & Promotions Management
10	scm_main	SCM — Sales Cycle Management
11	pcm_main	PCM — Procurement Cycle Management
12	crm_main	CRM — Customer Relationship & Loyalty
13	influencer_main	Influencer — Influencer & Referral Earnings
14	accounting_main	Accounting — Accounting & ERP Integration Readiness
15	ipm_main	IPM — Integration Plane Management
16	ipm_events	IPM — Integration Events
17	rbs_main	RBS — Retail Bus Service
18	utl_main	UTL — Utility Service
19	ops_main	OPS — Operations Management
20	ucp_main	UCP — Universal Commerce Protocol Adapter

Use Cases

• Incident investigation: Trace a user account across UAS -> USM -> OFM -> SCM to understand session, membership, and order state during an incident.
• Data integrity checks: Browse DDB records directly to verify cross-service references (e.g., PVM product exists before SCM order references it).
• Onboarding verification: Walk through a new org's setup across OFM, PVM, ICS, and PPM to confirm all data is seeded correctly.
• Architecture exploration: Navigate the live graph to understand PK/SK patterns and cross-table relationships.

---

Security Notes

• Root-only access. All fields are returned unredacted. Root access is restricted to operators with the secret code.
• Root secret rotation: Update the scrypt hash in visualgrid_main (PK=SYSTEM#SECRET_CODE, SK=META). All existing root sessions continue until their 1h TTL expires.
• Audit: All VisualGrid API calls are logged to EventBridge (visualgrid-events) and Firehose for compliance.