@agentlensai/server 0.11.0 → 0.14.0

package/dist/routes/mcp-policies.js

@@ -0,0 +1,200 @@
+/**
+ * MCP Policy Enforcement Routes (Phase 2 — Feature 6)
+ *
+ * GET    /api/mcp/policies         — List MCP tool usage policies
+ * POST   /api/mcp/policies         — Create a policy
+ * DELETE /api/mcp/policies/:id     — Delete a policy
+ * POST   /api/mcp/evaluate         — Check if an MCP tool call is allowed
+ */
+import { Hono } from 'hono';
+import { ulid } from 'ulid';
+import { z } from 'zod';
+import { getTenantId } from './tenant-helper.js';
+import { parseBody, notFound, created } from './helpers.js';
+import { sql } from 'drizzle-orm';
+// ─── Schema ──────────────────────────────────────────────
+const CreateMcpPolicySchema = z.object({
+    name: z.string().min(1).max(200),
+    description: z.string().max(1000).optional(),
+    enabled: z.boolean().default(true),
+    tool_name: z.string().min(1).max(200),
+    agent_id: z.string().optional(),
+    action: z.enum(['allow', 'deny']).default('deny'),
+    conditions: z.record(z.string(), z.unknown()).optional(),
+});
+// ─── Store ───────────────────────────────────────────────
+export class McpPolicyStore {
+    db;
+    constructor(db) {
+        this.db = db;
+        this._ensureTable();
+    }
+    _ensureTable() {
+        this.db.run(sql.raw(`
+      CREATE TABLE IF NOT EXISTS mcp_policies (
+        id TEXT PRIMARY KEY,
+        tenant_id TEXT NOT NULL,
+        name TEXT NOT NULL,
+        description TEXT,
+        enabled INTEGER NOT NULL DEFAULT 1,
+        tool_name TEXT NOT NULL,
+        agent_id TEXT,
+        action TEXT NOT NULL DEFAULT 'deny',
+        conditions TEXT NOT NULL DEFAULT '{}',
+        created_at TEXT NOT NULL,
+        updated_at TEXT NOT NULL
+      )
+    `));
+    }
+    createPolicy(policy) {
+        this.db.run(sql `
+      INSERT INTO mcp_policies (id, tenant_id, name, description, enabled, tool_name, agent_id, action, conditions, created_at, updated_at)
+      VALUES (${policy.id}, ${policy.tenantId}, ${policy.name}, ${policy.description ?? null},
+              ${policy.enabled ? 1 : 0}, ${policy.tool_name}, ${policy.agent_id ?? null},
+              ${policy.action}, ${JSON.stringify(policy.conditions)},
+              ${policy.createdAt}, ${policy.updatedAt})
+    `);
+    }
+    listPolicies(tenantId, toolName) {
+        if (toolName) {
+            const rows = this.db.all(sql `
+        SELECT * FROM mcp_policies WHERE tenant_id = ${tenantId} AND tool_name = ${toolName} ORDER BY created_at DESC
+      `);
+            return rows.map((r) => this._map(r));
+        }
+        const rows = this.db.all(sql `
+      SELECT * FROM mcp_policies WHERE tenant_id = ${tenantId} ORDER BY created_at DESC
+    `);
+        return rows.map((r) => this._map(r));
+    }
+    getPolicy(tenantId, id) {
+        const row = this.db.get(sql `
+      SELECT * FROM mcp_policies WHERE id = ${id} AND tenant_id = ${tenantId}
+    `);
+        return row ? this._map(row) : null;
+    }
+    deletePolicy(tenantId, id) {
+        const existing = this.getPolicy(tenantId, id);
+        if (!existing)
+            return false;
+        this.db.run(sql `DELETE FROM mcp_policies WHERE id = ${id} AND tenant_id = ${tenantId}`);
+        return true;
+    }
+    /** Get all enabled policies matching tool_name and agent_id */
+    findMatchingPolicies(tenantId, toolName, agentId) {
+        const rows = this.db.all(sql `
+      SELECT * FROM mcp_policies
+      WHERE tenant_id = ${tenantId}
+        AND enabled = 1
+        AND tool_name = ${toolName}
+        AND (agent_id IS NULL OR agent_id = ${agentId ?? ''})
+      ORDER BY created_at ASC
+    `);
+        return rows.map((r) => this._map(r));
+    }
+    _map(row) {
+        return {
+            id: row['id'],
+            tenantId: row['tenant_id'],
+            name: row['name'],
+            description: row['description'] || undefined,
+            enabled: row['enabled'] === 1 || row['enabled'] === true,
+            tool_name: row['tool_name'],
+            agent_id: row['agent_id'] || undefined,
+            action: row['action'] ?? 'deny',
+            conditions: JSON.parse(row['conditions'] || '{}'),
+            createdAt: row['created_at'],
+            updatedAt: row['updated_at'],
+        };
+    }
+}
+// ─── Routes ──────────────────────────────────────────────
+export function mcpPolicyRoutes(db) {
+    const store = new McpPolicyStore(db);
+    const app = new Hono();
+    /**
+     * @summary List MCP tool usage policies
+     * @param {string} [tool_name] — filter by tool name (query param)
+     * @returns {200} `{ policies: McpPolicy[] }`
+     */
+    app.get('/policies', async (c) => {
+        const tenantId = getTenantId(c);
+        const toolName = c.req.query('tool_name');
+        const policies = store.listPolicies(tenantId, toolName || undefined);
+        return c.json({ policies });
+    });
+    /**
+     * @summary Create an MCP tool usage policy
+     * @body {CreateMcpPolicy} — name, tool_name, agent_id, action, conditions
+     * @returns {201} `McpPolicy`
+     * @throws {400} Validation failed
+     */
+    app.post('/policies', async (c) => {
+        const tenantId = getTenantId(c);
+        const parsed = await parseBody(c, CreateMcpPolicySchema);
+        if (!parsed.success)
+            return parsed.response;
+        const now = new Date().toISOString();
+        const policy = {
+            id: ulid(),
+            tenantId,
+            name: parsed.data.name,
+            description: parsed.data.description,
+            enabled: parsed.data.enabled,
+            tool_name: parsed.data.tool_name,
+            agent_id: parsed.data.agent_id,
+            action: parsed.data.action,
+            conditions: parsed.data.conditions ?? {},
+            createdAt: now,
+            updatedAt: now,
+        };
+        store.createPolicy(policy);
+        return created(c, policy);
+    });
+    /**
+     * @summary Delete an MCP policy
+     * @param {string} id — Policy ID (path)
+     * @returns {200} `{ ok: true }`
+     * @throws {404} Policy not found
+     */
+    app.delete('/policies/:id', async (c) => {
+        const tenantId = getTenantId(c);
+        const id = c.req.param('id');
+        const deleted = store.deletePolicy(tenantId, id);
+        if (!deleted)
+            return notFound(c, 'MCP policy');
+        return c.json({ ok: true });
+    });
+    /**
+     * @summary Evaluate if an MCP tool call is allowed by policies
+     * @body { tool_name: string, agent_id?: string }
+     * @returns {200} `{ allowed: boolean, matched_policies: McpPolicy[], reason?: string }`
+     * @throws {400} Missing tool_name
+     */
+    app.post('/evaluate', async (c) => {
+        const tenantId = getTenantId(c);
+        const body = await c.req.json().catch(() => null);
+        if (!body?.tool_name) {
+            return c.json({ error: 'Missing tool_name', status: 400 }, 400);
+        }
+        const toolName = body.tool_name;
+        const agentId = body.agent_id;
+        const matching = store.findMatchingPolicies(tenantId, toolName, agentId);
+        if (matching.length === 0) {
+            // No policies match — allow by default
+            return c.json({ allowed: true, matched_policies: [], reason: 'No matching policies' });
+        }
+        // If any deny policy matches, deny
+        const denyPolicy = matching.find((p) => p.action === 'deny');
+        if (denyPolicy) {
+            return c.json({
+                allowed: false,
+                matched_policies: matching,
+                reason: `Denied by policy "${denyPolicy.name}": tool "${toolName}" ${agentId ? `cannot be called by agent "${agentId}"` : 'is restricted'}`,
+            });
+        }
+        return c.json({ allowed: true, matched_policies: matching, reason: 'Allowed by policy' });
+    });
+    return app;
+}
+//# sourceMappingURL=mcp-policies.js.map

package/dist/routes/mcp-policies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-policies.js","sourceRoot":"","sources":["../../src/routes/mcp-policies.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5D,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,4DAA4D;AAE5D,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACjD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAC;AAkBH,4DAA4D;AAE5D,MAAM,OAAO,cAAc;IACI;IAA7B,YAA6B,EAAY;QAAZ,OAAE,GAAF,EAAE,CAAU;QACvC,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;;;;;;;;;;;;;;KAcnB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,YAAY,CAAC,MAAiB;QAC5B,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAA;;gBAEH,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,WAAW,IAAI,IAAI;gBAC5E,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,QAAQ,IAAI,IAAI;gBACvE,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC;gBACnD,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;KAChD,CAAC,CAAC;IACL,CAAC;IAED,YAAY,CAAC,QAAgB,EAAE,QAAiB;QAC9C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,CAA0B,GAAG,CAAA;uDACJ,QAAQ,oBAAoB,QAAQ;OACpF,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,CAA0B,GAAG,CAAA;qDACJ,QAAQ;KACxD,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,SAAS,CAAC,QAAgB,EAAE,EAAU;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,CAA0B,GAAG,CAAA;8CACV,EAAE,oBAAoB,QAAQ;KACvE,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;IAED,YAAY,CAAC,QAAgB,EAAE,EAAU;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5B,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAA,uCAAuC,EAAE,oBAAoB,QAAQ,EAAE,CAAC,CAAC;QACxF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+DAA+D;IAC/D,oBAAoB,CAAC,QAAgB,EAAE,QAAgB,EAAE,OAAgB;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,CAA0B,GAAG,CAAA;;0BAE/B,QAAQ;;0BAER,QAAQ;8CACY,OAAO,IAAI,EAAE;;KAEtD,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IAEO,IAAI,CAAC,GAA4B;QACvC,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,IAAI,CAAW;YACvB,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAW;YACpC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAW;YAC3B,WAAW,EAAG,GAAG,CAAC,aAAa,CAAY,IAAI,SAAS;YACxD,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,IAAI;YACxD,SAAS,EAAE,GAAG,CAAC,WAAW,CAAW;YACrC,QAAQ,EAAG,GAAG,CAAC,UAAU,CAAY,IAAI,SAAS;YAClD,MAAM,EAAG,GAAG,CAAC,QAAQ,CAAsB,IAAI,MAAM;YACrD,UAAU,EAAE,IAAI,CAAC,KAAK,CAAE,GAAG,CAAC,YAAY,CAAY,IAAI,IAAI,CAAC;YAC7D,SAAS,EAAE,GAAG,CAAC,YAAY,CAAW;YACtC,SAAS,EAAE,GAAG,CAAC,YAAY,CAAW;SACvC,CAAC;IACJ,CAAC;CACF;AAED,4DAA4D;AAE5D,MAAM,UAAU,eAAe,CAAC,EAAY;IAC1C,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,EAAE,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAgC,CAAC;IAErD;;;;OAIG;IACH,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,IAAI,SAAS,CAAC,CAAC;QACrE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH;;;;;OAKG;IACH,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;QAE5C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,MAAM,GAAc;YACxB,EAAE,EAAE,IAAI,EAAE;YACV,QAAQ;YACR,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;YACtB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;YACpC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;YAC5B,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;YAChC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;YAC9B,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;YAC1B,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE;YACxC,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;QAEF,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC3B,OAAO,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH;;;;;OAKG;IACH,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH;;;;;OAKG;IACH,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;YACrB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAmB,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,QAA8B,CAAC;QAEpD,MAAM,QAAQ,GAAG,KAAK,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEzE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,uCAAuC;YACvC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,mCAAmC;QACnC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAC7D,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,KAAK;gBACd,gBAAgB,EAAE,QAAQ;gBAC1B,MAAM,EAAE,qBAAqB,UAAU,CAAC,IAAI,YAAY,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,8BAA8B,OAAO,GAAG,CAAC,CAAC,CAAC,eAAe,EAAE;aAC5I,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/routes/mesh-proxy.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Mesh proxy routes — forwards requests to the agentkit-mesh HTTP server.
+ */
+import { Hono } from 'hono';
+import type { MeshAdapter } from '../lib/mesh-client.js';
+export declare function meshProxyRoutes(adapter: MeshAdapter): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=mesh-proxy.d.ts.map

package/dist/routes/mesh-proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mesh-proxy.d.ts","sourceRoot":"","sources":["../../src/routes/mesh-proxy.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAUzD,wBAAgB,eAAe,CAAC,OAAO,EAAE,WAAW,8EAkFnD"}

package/dist/routes/mesh-proxy.js

@@ -0,0 +1,94 @@
+/**
+ * Mesh proxy routes — forwards requests to the agentkit-mesh HTTP server.
+ */
+import { Hono } from 'hono';
+import { MeshError } from '../lib/mesh-client.js';
+function handleError(err) {
+    if (err instanceof MeshError) {
+        return { status: err.statusCode, body: { error: err.message } };
+    }
+    return { status: 502, body: { error: 'Mesh service unavailable' } };
+}
+export function meshProxyRoutes(adapter) {
+    const app = new Hono();
+    app.get('/agents', async (c) => {
+        try {
+            return c.json(await adapter.listAgents());
+        }
+        catch (err) {
+            const { status, body } = handleError(err);
+            return c.json(body, status);
+        }
+    });
+    app.post('/agents', async (c) => {
+        try {
+            const data = await c.req.json();
+            return c.json(await adapter.registerAgent(data), 201);
+        }
+        catch (err) {
+            const { status, body } = handleError(err);
+            return c.json(body, status);
+        }
+    });
+    app.get('/agents/:name', async (c) => {
+        try {
+            return c.json(await adapter.getAgent(c.req.param('name')));
+        }
+        catch (err) {
+            const { status, body } = handleError(err);
+            return c.json(body, status);
+        }
+    });
+    app.delete('/agents/:name', async (c) => {
+        try {
+            return c.json(await adapter.unregisterAgent(c.req.param('name')));
+        }
+        catch (err) {
+            const { status, body } = handleError(err);
+            return c.json(body, status);
+        }
+    });
+    app.post('/agents/:name/heartbeat', async (c) => {
+        try {
+            return c.json(await adapter.heartbeatAgent(c.req.param('name')));
+        }
+        catch (err) {
+            const { status, body } = handleError(err);
+            return c.json(body, status);
+        }
+    });
+    app.get('/discover', async (c) => {
+        try {
+            const query = c.req.query('query') ?? '';
+            const limit = c.req.query('limit') ? Number(c.req.query('limit')) : undefined;
+            return c.json(await adapter.discover(query, limit));
+        }
+        catch (err) {
+            const { status, body } = handleError(err);
+            return c.json(body, status);
+        }
+    });
+    app.post('/delegate', async (c) => {
+        try {
+            const data = await c.req.json();
+            return c.json(await adapter.delegate(data));
+        }
+        catch (err) {
+            const { status, body } = handleError(err);
+            return c.json(body, status);
+        }
+    });
+    app.get('/delegations', async (c) => {
+        try {
+            const limit = c.req.query('limit') ? Number(c.req.query('limit')) : undefined;
+            const offset = c.req.query('offset') ? Number(c.req.query('offset')) : undefined;
+            return c.json(await adapter.listDelegations(limit, offset));
+        }
+        catch (err) {
+            const { status, body } = handleError(err);
+            return c.json(body, status);
+        }
+    });
+    return app;
+}
+//# sourceMappingURL=mesh-proxy.js.map

package/dist/routes/mesh-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mesh-proxy.js","sourceRoot":"","sources":["../../src/routes/mesh-proxy.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;IAClE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAoB;IAClD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7B,IAAI,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAa,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAChC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAa,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,IAAI,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAa,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,IAAI,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAa,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9C,IAAI,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAa,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAa,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAChC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAa,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjF,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAa,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/routes/notifications.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Notification Channel & Log endpoints (Feature 12, Story 12.10)
+ *
+ * POST   /api/notifications/channels         — create channel
+ * GET    /api/notifications/channels         — list channels
+ * GET    /api/notifications/channels/:id     — get channel
+ * PUT    /api/notifications/channels/:id     — update channel
+ * DELETE /api/notifications/channels/:id     — delete channel
+ * POST   /api/notifications/channels/:id/test — test channel
+ * GET    /api/notifications/log              — list notification log
+ */
+import { Hono } from 'hono';
+import type { AuthVariables } from '../middleware/auth.js';
+import type { NotificationChannelRepository } from '../db/repositories/notification-channel-repository.js';
+import type { NotificationRouter } from '../lib/notifications/router.js';
+export declare function notificationRoutes(repo: NotificationChannelRepository, router: NotificationRouter): Hono<{
+    Variables: AuthVariables;
+}, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=notifications.d.ts.map

package/dist/routes/notifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.d.ts","sourceRoot":"","sources":["../../src/routes/notifications.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAQ5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,uDAAuD,CAAC;AAC3G,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAoBzE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,6BAA6B,EAAE,MAAM,EAAE,kBAAkB;eAC9D,aAAa;0CA4GhD"}

package/dist/routes/notifications.js

@@ -0,0 +1,129 @@
+/**
+ * Notification Channel & Log endpoints (Feature 12, Story 12.10)
+ *
+ * POST   /api/notifications/channels         — create channel
+ * GET    /api/notifications/channels         — list channels
+ * GET    /api/notifications/channels/:id     — get channel
+ * PUT    /api/notifications/channels/:id     — update channel
+ * DELETE /api/notifications/channels/:id     — delete channel
+ * POST   /api/notifications/channels/:id/test — test channel
+ * GET    /api/notifications/log              — list notification log
+ */
+import { Hono } from 'hono';
+import { ulid } from 'ulid';
+import { createNotificationChannelSchema, updateNotificationChannelSchema, validateChannelConfig, } from '@agentlensai/core';
+import { NotFoundError } from '../db/errors.js';
+/** Secret fields that should be redacted in API responses (SEC-3) */
+const SECRET_FIELDS = ['smtpPass', 'routingKey', 'webhookUrl', 'headers'];
+function redactSecrets(config) {
+    const redacted = { ...config };
+    for (const field of SECRET_FIELDS) {
+        if (redacted[field] && typeof redacted[field] === 'string') {
+            redacted[field] = '***';
+        }
+    }
+    return redacted;
+}
+function redactChannel(ch) {
+    return { ...ch, config: redactSecrets(ch.config) };
+}
+export function notificationRoutes(repo, router) {
+    const app = new Hono();
+    // POST /channels — create
+    app.post('/channels', async (c) => {
+        const rawBody = await c.req.json().catch(() => null);
+        if (!rawBody)
+            return c.json({ error: 'Invalid JSON body', status: 400 }, 400);
+        const parseResult = createNotificationChannelSchema.safeParse(rawBody);
+        if (!parseResult.success) {
+            return c.json({ error: 'Validation failed', status: 400, details: parseResult.error.issues }, 400);
+        }
+        const input = parseResult.data;
+        // Validate type-specific config
+        const configCheck = validateChannelConfig(input.type, input.config);
+        if (!configCheck.valid) {
+            return c.json({ error: `Invalid config for type ${input.type}: ${configCheck.error}`, status: 400 }, 400);
+        }
+        const now = new Date().toISOString();
+        const tenantId = c.get('tenantId') ?? 'default';
+        const channel = {
+            id: ulid(),
+            tenantId,
+            type: input.type,
+            name: input.name,
+            config: input.config,
+            enabled: input.enabled ?? true,
+            createdAt: now,
+            updatedAt: now,
+        };
+        await repo.createChannel(channel);
+        return c.json(redactChannel(channel), 201);
+    });
+    // GET /channels — list
+    app.get('/channels', async (c) => {
+        const tenantId = c.get('tenantId') ?? 'default';
+        const channels = await repo.listChannels(tenantId);
+        return c.json({ channels: channels.map(redactChannel) });
+    });
+    // GET /channels/:id
+    app.get('/channels/:id', async (c) => {
+        const tenantId = c.get('tenantId') ?? 'default';
+        const channel = await repo.getChannel(c.req.param('id'), tenantId);
+        if (!channel)
+            return c.json({ error: 'Not found', status: 404 }, 404);
+        return c.json(redactChannel(channel));
+    });
+    // PUT /channels/:id
+    app.put('/channels/:id', async (c) => {
+        const rawBody = await c.req.json().catch(() => null);
+        if (!rawBody)
+            return c.json({ error: 'Invalid JSON body', status: 400 }, 400);
+        const parseResult = updateNotificationChannelSchema.safeParse(rawBody);
+        if (!parseResult.success) {
+            return c.json({ error: 'Validation failed', status: 400, details: parseResult.error.issues }, 400);
+        }
+        const tenantId = c.get('tenantId') ?? 'default';
+        const now = new Date().toISOString();
+        try {
+            await repo.updateChannel(c.req.param('id'), { ...parseResult.data, updatedAt: now }, tenantId);
+            const updated = await repo.getChannel(c.req.param('id'), tenantId);
+            return c.json(updated ? redactChannel(updated) : {});
+        }
+        catch (err) {
+            if (err instanceof NotFoundError)
+                return c.json({ error: 'Not found', status: 404 }, 404);
+            throw err;
+        }
+    });
+    // DELETE /channels/:id
+    app.delete('/channels/:id', async (c) => {
+        const tenantId = c.get('tenantId') ?? 'default';
+        try {
+            await repo.deleteChannel(c.req.param('id'), tenantId);
+            return c.json({ success: true });
+        }
+        catch (err) {
+            if (err instanceof NotFoundError)
+                return c.json({ error: 'Not found', status: 404 }, 404);
+            throw err;
+        }
+    });
+    // POST /channels/:id/test — test send
+    app.post('/channels/:id/test', async (c) => {
+        const tenantId = c.get('tenantId') ?? 'default';
+        const result = await router.testChannel(c.req.param('id'), tenantId);
+        return c.json(result, result.success ? 200 : 502);
+    });
+    // GET /log — notification delivery log
+    app.get('/log', async (c) => {
+        const tenantId = c.get('tenantId') ?? 'default';
+        const channelId = c.req.query('channelId');
+        const ruleId = c.req.query('ruleId');
+        const limit = parseInt(c.req.query('limit') ?? '50', 10);
+        const offset = parseInt(c.req.query('offset') ?? '0', 10);
+        const result = await repo.listLog({ tenantId, channelId, ruleId, limit, offset });
+        return c.json(result);
+    });
+    return app;
+}
+//# sourceMappingURL=notifications.js.map

package/dist/routes/notifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.js","sourceRoot":"","sources":["../../src/routes/notifications.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EACL,+BAA+B,EAC/B,+BAA+B,EAC/B,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,qEAAqE;AACrE,MAAM,aAAa,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;AAE1E,SAAS,aAAa,CAAC,MAA+B;IACpD,MAAM,QAAQ,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC3D,QAAQ,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,EAAuB;IAC5C,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAmC,EAAE,MAA0B;IAChG,MAAM,GAAG,GAAG,IAAI,IAAI,EAAgC,CAAC;IAErD,0BAA0B;IAC1B,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QAE9E,MAAM,WAAW,GAAG,+BAA+B,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACvE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QACrG,CAAC;QAED,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC;QAE/B,gCAAgC;QAChC,MAAM,WAAW,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAiC,CAAC,CAAC;QAC/F,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;YACvB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5G,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAI,CAAC,CAAC,GAAW,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;QAEzD,MAAM,OAAO,GAAwB;YACnC,EAAE,EAAE,IAAI,EAAE;YACV,QAAQ;YACR,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAiC;YAC/C,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;YAC9B,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;QAEF,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,uBAAuB;IACvB,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAI,CAAC,CAAC,GAAW,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;QACzD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,oBAAoB;IACpB,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,QAAQ,GAAI,CAAC,CAAC,GAAW,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;QACnE,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QACtE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,oBAAoB;IACpB,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QAE9E,MAAM,WAAW,GAAG,+BAA+B,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACvE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QACrG,CAAC;QAED,MAAM,QAAQ,GAAI,CAAC,CAAC,GAAW,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;QACzD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAkC,EAAE,QAAQ,CAAC,CAAC;YAC/H,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;YACnE,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;YAC1F,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,uBAAuB;IACvB,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,QAAQ,GAAI,CAAC,CAAC,GAAW,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;YACtD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;YAC1F,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,sCAAsC;IACtC,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzC,MAAM,QAAQ,GAAI,CAAC,CAAC,GAAW,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;QACrE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,uCAAuC;IACvC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1B,MAAM,QAAQ,GAAI,CAAC,CAAC,GAAW,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;QACzD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAClF,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/routes/optimization-advisor.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Optimization Advisor Endpoints (Feature 10)
+ *
+ * GET /api/agents/:id/optimize — per-agent optimization suggestions
+ * GET /api/optimize/summary    — aggregate suggestions across all agents
+ */
+import { Hono } from 'hono';
+import type { IEventStore } from '@agentlensai/core';
+import type { AuthVariables } from '../middleware/auth.js';
+export declare function optimizationAdvisorRoutes(store: IEventStore): Hono<{
+    Variables: AuthVariables;
+}, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=optimization-advisor.d.ts.map

package/dist/routes/optimization-advisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"optimization-advisor.d.ts","sourceRoot":"","sources":["../../src/routes/optimization-advisor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAI3D,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,WAAW;eACxB,aAAa;0CAkChD"}

package/dist/routes/optimization-advisor.js

@@ -0,0 +1,42 @@
+/**
+ * Optimization Advisor Endpoints (Feature 10)
+ *
+ * GET /api/agents/:id/optimize — per-agent optimization suggestions
+ * GET /api/optimize/summary    — aggregate suggestions across all agents
+ */
+import { Hono } from 'hono';
+import { getTenantStore } from './tenant-helper.js';
+import { getOptimizationSuggestions, getOptimizationSummary } from '../services/optimization-advisor.js';
+export function optimizationAdvisorRoutes(store) {
+    const app = new Hono();
+    // GET /api/agents/:id/optimize
+    app.get('/agents/:id/optimize', async (c) => {
+        const tenantStore = getTenantStore(store, c);
+        const agentId = c.req.param('id');
+        if (!agentId) {
+            return c.json({ error: 'Agent ID is required', status: 400 }, 400);
+        }
+        try {
+            const result = await getOptimizationSuggestions(tenantStore, agentId);
+            return c.json(result);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Internal error';
+            return c.json({ error: message, status: 500 }, 500);
+        }
+    });
+    // GET /api/optimize/summary
+    app.get('/optimize/summary', async (c) => {
+        const tenantStore = getTenantStore(store, c);
+        try {
+            const result = await getOptimizationSummary(tenantStore);
+            return c.json(result);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Internal error';
+            return c.json({ error: message, status: 500 }, 500);
+        }
+    });
+    return app;
+}
+//# sourceMappingURL=optimization-advisor.js.map

package/dist/routes/optimization-advisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"optimization-advisor.js","sourceRoot":"","sources":["../../src/routes/optimization-advisor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAEzG,MAAM,UAAU,yBAAyB,CAAC,KAAkB;IAC1D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAgC,CAAC;IAErD,+BAA+B;IAC/B,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1C,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACtE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC;YAC1E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,4BAA4B;IAC5B,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAE7C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC;YACzD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC;YAC1E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/routes/optimize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"optimize.d.ts","sourceRoot":"","sources":["../../src/routes/optimize.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAI3D,wBAAgB,cAAc,CAAC,KAAK,EAAE,WAAW;eACb,aAAa;0CAqDhD"}
+{"version":3,"file":"optimize.d.ts","sourceRoot":"","sources":["../../src/routes/optimize.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAM3D,wBAAgB,cAAc,CAAC,KAAK,EAAE,WAAW;eACb,aAAa;0CAsGhD"}

package/dist/routes/optimize.js

@@ -9,6 +9,8 @@
 import { Hono } from 'hono';
 import { getTenantStore } from './tenant-helper.js';
 import { OptimizationEngine } from '../lib/optimization/index.js';
+import { CostOptimizer } from '../lib/optimization/cost-optimizer.js';
+import { CostForecaster } from '../lib/optimization/forecast.js';
 export function optimizeRoutes(store) {
     const app = new Hono();
     // GET /api/optimize/recommendations
@@ -18,6 +20,8 @@ export function optimizeRoutes(store) {
         const agentId = c.req.query('agentId') || undefined;
         const periodStr = c.req.query('period');
         const limitStr = c.req.query('limit');
+        const enhanced = c.req.query('enhanced') === 'true';
+        const crossAgent = c.req.query('crossAgent') === 'true';
         // period: integer 1-90, default 7
         let period = 7;
         if (periodStr !== undefined && periodStr !== '') {
@@ -37,6 +41,18 @@ export function optimizeRoutes(store) {
             limit = parsed;
         }
         try {
+            if (enhanced) {
+                // Feature 17: Enhanced multi-dimensional recommendations
+                const optimizer = new CostOptimizer(tenantStore);
+                const result = await optimizer.getRecommendations({
+                    agentId,
+                    period,
+                    limit,
+                    includeCrossAgent: crossAgent,
+                });
+                return c.json(result);
+            }
+            // Legacy format (backward compatible)
             const engine = new OptimizationEngine();
             const result = await engine.getRecommendations(tenantStore, {
                 agentId,
@@ -50,6 +66,34 @@ export function optimizeRoutes(store) {
             return c.json({ error: message, status: 500 }, 500);
         }
     });
+    // GET /api/optimize/forecast (Feature 17 — Story 17.6)
+    app.get('/forecast', async (c) => {
+        const tenantStore = getTenantStore(store, c);
+        const agentId = c.req.query('agentId') || undefined;
+        const daysStr = c.req.query('days');
+        let days = 30;
+        if (daysStr !== undefined && daysStr !== '') {
+            const parsed = parseInt(daysStr, 10);
+            if (isNaN(parsed) || parsed < 1 || parsed > 180) {
+                return c.json({ error: 'Invalid days: must be an integer between 1 and 180', status: 400 }, 400);
+            }
+            days = parsed;
+        }
+        try {
+            const optimizer = new CostOptimizer(tenantStore);
+            const forecaster = new CostForecaster(optimizer);
+            const result = await forecaster.forecast({
+                agentId,
+                days,
+                store: tenantStore,
+            });
+            return c.json(result);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Internal error';
+            return c.json({ error: message, status: 500 }, 500);
+        }
+    });
     return app;
 }
 //# sourceMappingURL=optimize.js.map