@agentlensai/server 0.2.0

package/dist/__tests__/events-ingest.test.js

@@ -0,0 +1,248 @@
+/**
+ * Tests for Story 4.4: Event Ingestion Endpoint
+ */
+import { describe, it, expect } from 'vitest';
+import { createTestApp, authHeaders } from './test-helpers.js';
+describe('Event Ingestion — POST /api/events (Story 4.4)', () => {
+    it('ingests a single event and returns id + hash', async () => {
+        const { app, apiKey } = createTestApp();
+        const res = await app.request('/api/events', {
+            method: 'POST',
+            headers: authHeaders(apiKey),
+            body: JSON.stringify({
+                events: [
+                    {
+                        sessionId: 'sess_001',
+                        agentId: 'agent_001',
+                        eventType: 'session_started',
+                        payload: { agentName: 'Test', tags: ['test'] },
+                    },
+                ],
+            }),
+        });
+        expect(res.status).toBe(201);
+        const body = await res.json();
+        expect(body.ingested).toBe(1);
+        expect(body.events).toHaveLength(1);
+        expect(body.events[0].id).toBeTruthy();
+        expect(body.events[0].hash).toHaveLength(64);
+    });
+    it('ingests a batch of events', async () => {
+        const { app, apiKey } = createTestApp();
+        const res = await app.request('/api/events', {
+            method: 'POST',
+            headers: authHeaders(apiKey),
+            body: JSON.stringify({
+                events: [
+                    {
+                        sessionId: 'sess_001',
+                        agentId: 'agent_001',
+                        eventType: 'session_started',
+                        payload: { tags: [] },
+                    },
+                    {
+                        sessionId: 'sess_001',
+                        agentId: 'agent_001',
+                        eventType: 'tool_call',
+                        payload: { toolName: 'search', arguments: {}, callId: 'c1' },
+                    },
+                    {
+                        sessionId: 'sess_001',
+                        agentId: 'agent_001',
+                        eventType: 'tool_response',
+                        payload: { callId: 'c1', toolName: 'search', result: 'found', durationMs: 100 },
+                    },
+                ],
+            }),
+        });
+        expect(res.status).toBe(201);
+        const body = await res.json();
+        expect(body.ingested).toBe(3);
+        expect(body.events).toHaveLength(3);
+    });
+    it('assigns ULIDs as event IDs', async () => {
+        const { app, apiKey } = createTestApp();
+        const res = await app.request('/api/events', {
+            method: 'POST',
+            headers: authHeaders(apiKey),
+            body: JSON.stringify({
+                events: [
+                    {
+                        sessionId: 'sess_001',
+                        agentId: 'agent_001',
+                        eventType: 'custom',
+                        payload: { type: 'test', data: {} },
+                    },
+                ],
+            }),
+        });
+        const body = await res.json();
+        // ULIDs are 26 characters, uppercase alphanumeric
+        expect(body.events[0].id).toMatch(/^[0-9A-Z]{26}$/);
+    });
+    it('chains hashes within a session', async () => {
+        const { app, apiKey } = createTestApp();
+        // First batch
+        const res1 = await app.request('/api/events', {
+            method: 'POST',
+            headers: authHeaders(apiKey),
+            body: JSON.stringify({
+                events: [
+                    {
+                        sessionId: 'sess_001',
+                        agentId: 'agent_001',
+                        eventType: 'session_started',
+                        payload: { tags: [] },
+                    },
+                ],
+            }),
+        });
+        const body1 = await res1.json();
+        const firstHash = body1.events[0].hash;
+        // Second batch — should chain from the first
+        const res2 = await app.request('/api/events', {
+            method: 'POST',
+            headers: authHeaders(apiKey),
+            body: JSON.stringify({
+                events: [
+                    {
+                        sessionId: 'sess_001',
+                        agentId: 'agent_001',
+                        eventType: 'custom',
+                        payload: { type: 'test', data: {} },
+                    },
+                ],
+            }),
+        });
+        expect(res2.status).toBe(201);
+        const body2 = await res2.json();
+        // The second event's hash should be different from the first
+        expect(body2.events[0].hash).not.toBe(firstHash);
+    });
+    it('returns 400 for invalid JSON body', async () => {
+        const { app, apiKey } = createTestApp();
+        const res = await app.request('/api/events', {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${apiKey}`,
+                'Content-Type': 'application/json',
+            },
+            body: 'not json',
+        });
+        expect(res.status).toBe(400);
+    });
+    it('returns 400 for missing required fields', async () => {
+        const { app, apiKey } = createTestApp();
+        const res = await app.request('/api/events', {
+            method: 'POST',
+            headers: authHeaders(apiKey),
+            body: JSON.stringify({
+                events: [
+                    {
+                    // Missing sessionId, agentId, eventType, payload
+                    },
+                ],
+            }),
+        });
+        expect(res.status).toBe(400);
+        const body = await res.json();
+        expect(body.error).toBe('Validation failed');
+        expect(body.details).toBeInstanceOf(Array);
+        expect(body.details.length).toBeGreaterThan(0);
+    });
+    it('returns 400 for invalid eventType', async () => {
+        const { app, apiKey } = createTestApp();
+        const res = await app.request('/api/events', {
+            method: 'POST',
+            headers: authHeaders(apiKey),
+            body: JSON.stringify({
+                events: [
+                    {
+                        sessionId: 'sess_001',
+                        agentId: 'agent_001',
+                        eventType: 'not_a_valid_type',
+                        payload: {},
+                    },
+                ],
+            }),
+        });
+        expect(res.status).toBe(400);
+    });
+    it('returns 400 for empty events array', async () => {
+        const { app, apiKey } = createTestApp();
+        const res = await app.request('/api/events', {
+            method: 'POST',
+            headers: authHeaders(apiKey),
+            body: JSON.stringify({ events: [] }),
+        });
+        expect(res.status).toBe(400);
+    });
+    it('validates payload against event-type-specific schema', async () => {
+        const { app, apiKey } = createTestApp();
+        // tool_call requires toolName, arguments, callId
+        const res = await app.request('/api/events', {
+            method: 'POST',
+            headers: authHeaders(apiKey),
+            body: JSON.stringify({
+                events: [
+                    {
+                        sessionId: 'sess_001',
+                        agentId: 'agent_001',
+                        eventType: 'tool_call',
+                        payload: { missing: 'required fields' },
+                    },
+                ],
+            }),
+        });
+        expect(res.status).toBe(400);
+        const body = await res.json();
+        expect(body.details.some((d) => d.path.startsWith('events.0.payload'))).toBe(true);
+    });
+    it('defaults severity to info when not provided', async () => {
+        const { app, apiKey, store } = createTestApp();
+        const res = await app.request('/api/events', {
+            method: 'POST',
+            headers: authHeaders(apiKey),
+            body: JSON.stringify({
+                events: [
+                    {
+                        sessionId: 'sess_001',
+                        agentId: 'agent_001',
+                        eventType: 'custom',
+                        payload: { type: 'test', data: {} },
+                    },
+                ],
+            }),
+        });
+        const body = await res.json();
+        const event = await store.getEvent(body.events[0].id);
+        expect(event?.severity).toBe('info');
+    });
+    it('handles events across multiple sessions in a single batch', async () => {
+        const { app, apiKey } = createTestApp();
+        const res = await app.request('/api/events', {
+            method: 'POST',
+            headers: authHeaders(apiKey),
+            body: JSON.stringify({
+                events: [
+                    {
+                        sessionId: 'sess_001',
+                        agentId: 'agent_001',
+                        eventType: 'session_started',
+                        payload: { tags: [] },
+                    },
+                    {
+                        sessionId: 'sess_002',
+                        agentId: 'agent_001',
+                        eventType: 'session_started',
+                        payload: { tags: [] },
+                    },
+                ],
+            }),
+        });
+        expect(res.status).toBe(201);
+        const body = await res.json();
+        expect(body.ingested).toBe(2);
+    });
+});
+//# sourceMappingURL=events-ingest.test.js.map

package/dist/__tests__/events-ingest.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events-ingest.test.js","sourceRoot":"","sources":["../../src/__tests__/events-ingest.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAE/D,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;QAExC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;YAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,MAAM,EAAE;oBACN;wBACE,SAAS,EAAE,UAAU;wBACrB,OAAO,EAAE,WAAW;wBACpB,SAAS,EAAE,iBAAiB;wBAC5B,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE;qBAC/C;iBACF;aACF,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;QAExC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;YAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,MAAM,EAAE;oBACN;wBACE,SAAS,EAAE,UAAU;wBACrB,OAAO,EAAE,WAAW;wBACpB,SAAS,EAAE,iBAAiB;wBAC5B,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;qBACtB;oBACD;wBACE,SAAS,EAAE,UAAU;wBACrB,OAAO,EAAE,WAAW;wBACpB,SAAS,EAAE,WAAW;wBACtB,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;qBAC7D;oBACD;wBACE,SAAS,EAAE,UAAU;wBACrB,OAAO,EAAE,WAAW;wBACpB,SAAS,EAAE,eAAe;wBAC1B,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE;qBAChF;iBACF;aACF,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;QAExC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;YAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,MAAM,EAAE;oBACN;wBACE,SAAS,EAAE,UAAU;wBACrB,OAAO,EAAE,WAAW;wBACpB,SAAS,EAAE,QAAQ;wBACnB,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;qBACpC;iBACF;aACF,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,kDAAkD;QAClD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;QAExC,cAAc;QACd,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;YAC5C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;YAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,MAAM,EAAE;oBACN;wBACE,SAAS,EAAE,UAAU;wBACrB,OAAO,EAAE,WAAW;wBACpB,SAAS,EAAE,iBAAiB;wBAC5B,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;qBACtB;iBACF;aACF,CAAC;SACH,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEvC,6CAA6C;QAC7C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;YAC5C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;YAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,MAAM,EAAE;oBACN;wBACE,SAAS,EAAE,UAAU;wBACrB,OAAO,EAAE,WAAW;wBACpB,SAAS,EAAE,QAAQ;wBACnB,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;qBACpC;iBACF;aACF,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,6DAA6D;QAC7D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;QAExC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,EAAE;gBACjC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,UAAU;SACjB,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;QAExC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;YAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,MAAM,EAAE;oBACN;oBACE,iDAAiD;qBAClD;iBACF;aACF,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;QAExC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;YAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,MAAM,EAAE;oBACN;wBACE,SAAS,EAAE,UAAU;wBACrB,OAAO,EAAE,WAAW;wBACpB,SAAS,EAAE,kBAAkB;wBAC7B,OAAO,EAAE,EAAE;qBACZ;iBACF;aACF,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;QAExC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;YAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;SACrC,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;QAExC,iDAAiD;QACjD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;YAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,MAAM,EAAE;oBACN;wBACE,SAAS,EAAE,UAAU;wBACrB,OAAO,EAAE,WAAW;wBACpB,SAAS,EAAE,WAAW;wBACtB,OAAO,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE;qBACxC;iBACF;aACF,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,aAAa,EAAE,CAAC;QAE/C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;YAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,MAAM,EAAE;oBACN;wBACE,SAAS,EAAE,UAAU;wBACrB,OAAO,EAAE,WAAW;wBACpB,SAAS,EAAE,QAAQ;wBACnB,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;qBACpC;iBACF;aACF,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;QAExC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;YAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,MAAM,EAAE;oBACN;wBACE,SAAS,EAAE,UAAU;wBACrB,OAAO,EAAE,WAAW;wBACpB,SAAS,EAAE,iBAAiB;wBAC5B,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;qBACtB;oBACD;wBACE,SAAS,EAAE,UAAU;wBACrB,OAAO,EAAE,WAAW;wBACpB,SAAS,EAAE,iBAAiB;wBAC5B,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;qBACtB;iBACF;aACF,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/events-query.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests for Story 4.5: Event Query Endpoints
+ */
+export {};
+//# sourceMappingURL=events-query.test.d.ts.map

package/dist/__tests__/events-query.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events-query.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/events-query.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/__tests__/events-query.test.js

@@ -0,0 +1,205 @@
+/**
+ * Tests for Story 4.5: Event Query Endpoints
+ */
+import { describe, it, expect, beforeEach } from 'vitest';
+import { createTestApp, authHeaders } from './test-helpers.js';
+// Helper to ingest events
+async function ingestEvents(app, apiKey, events) {
+    return app.request('/api/events', {
+        method: 'POST',
+        headers: authHeaders(apiKey),
+        body: JSON.stringify({ events }),
+    });
+}
+describe('Event Query Endpoints (Story 4.5)', () => {
+    let app;
+    let apiKey;
+    beforeEach(async () => {
+        const ctx = createTestApp();
+        app = ctx.app;
+        apiKey = ctx.apiKey;
+        // Seed some events
+        await ingestEvents(app, apiKey, [
+            {
+                sessionId: 'sess_001',
+                agentId: 'agent_001',
+                eventType: 'session_started',
+                severity: 'info',
+                timestamp: '2026-01-01T10:00:00Z',
+                payload: { agentName: 'Agent One', tags: ['prod'] },
+            },
+            {
+                sessionId: 'sess_001',
+                agentId: 'agent_001',
+                eventType: 'tool_call',
+                severity: 'info',
+                timestamp: '2026-01-01T10:01:00Z',
+                payload: { toolName: 'search', arguments: { q: 'hello' }, callId: 'c1' },
+            },
+            {
+                sessionId: 'sess_001',
+                agentId: 'agent_001',
+                eventType: 'tool_error',
+                severity: 'error',
+                timestamp: '2026-01-01T10:02:00Z',
+                payload: { callId: 'c1', toolName: 'search', error: 'timeout', durationMs: 5000 },
+            },
+        ]);
+        // Different session/agent
+        await ingestEvents(app, apiKey, [
+            {
+                sessionId: 'sess_002',
+                agentId: 'agent_002',
+                eventType: 'session_started',
+                severity: 'info',
+                timestamp: '2026-01-01T11:00:00Z',
+                payload: { agentName: 'Agent Two', tags: [] },
+            },
+        ]);
+    });
+    describe('GET /api/events', () => {
+        it('returns all events with default pagination', async () => {
+            const res = await app.request('/api/events', {
+                headers: authHeaders(apiKey),
+            });
+            expect(res.status).toBe(200);
+            const body = await res.json();
+            expect(body.events).toBeInstanceOf(Array);
+            expect(body.events.length).toBe(4);
+            expect(body.total).toBe(4);
+            expect(body.hasMore).toBe(false);
+        });
+        it('filters by sessionId', async () => {
+            const res = await app.request('/api/events?sessionId=sess_001', {
+                headers: authHeaders(apiKey),
+            });
+            const body = await res.json();
+            expect(body.events.length).toBe(3);
+            expect(body.events.every((e) => e.sessionId === 'sess_001')).toBe(true);
+        });
+        it('filters by agentId', async () => {
+            const res = await app.request('/api/events?agentId=agent_002', {
+                headers: authHeaders(apiKey),
+            });
+            const body = await res.json();
+            expect(body.events.length).toBe(1);
+            expect(body.events[0].agentId).toBe('agent_002');
+        });
+        it('filters by eventType', async () => {
+            const res = await app.request('/api/events?eventType=tool_call', {
+                headers: authHeaders(apiKey),
+            });
+            const body = await res.json();
+            expect(body.events.length).toBe(1);
+            expect(body.events[0].eventType).toBe('tool_call');
+        });
+        it('filters by multiple eventTypes (comma-separated)', async () => {
+            const res = await app.request('/api/events?eventType=tool_call,tool_error', {
+                headers: authHeaders(apiKey),
+            });
+            const body = await res.json();
+            expect(body.events.length).toBe(2);
+        });
+        it('filters by severity', async () => {
+            const res = await app.request('/api/events?severity=error', {
+                headers: authHeaders(apiKey),
+            });
+            const body = await res.json();
+            expect(body.events.length).toBe(1);
+            expect(body.events[0].severity).toBe('error');
+        });
+        it('filters by time range (from/to)', async () => {
+            const res = await app.request('/api/events?from=2026-01-01T10:00:30Z&to=2026-01-01T10:01:30Z', { headers: authHeaders(apiKey) });
+            const body = await res.json();
+            expect(body.events.length).toBe(1);
+            expect(body.events[0].eventType).toBe('tool_call');
+        });
+        it('respects limit and offset for pagination', async () => {
+            const res = await app.request('/api/events?limit=2&offset=0&order=asc', {
+                headers: authHeaders(apiKey),
+            });
+            const body = await res.json();
+            expect(body.events.length).toBe(2);
+            expect(body.total).toBe(4);
+            expect(body.hasMore).toBe(true);
+        });
+        it('defaults to descending order (newest first)', async () => {
+            const res = await app.request('/api/events', {
+                headers: authHeaders(apiKey),
+            });
+            const body = await res.json();
+            // First event should be the newest
+            expect(body.events[0].timestamp >= body.events[body.events.length - 1].timestamp).toBe(true);
+        });
+        it('supports ascending order', async () => {
+            const res = await app.request('/api/events?order=asc', {
+                headers: authHeaders(apiKey),
+            });
+            const body = await res.json();
+            expect(body.events[0].timestamp <= body.events[body.events.length - 1].timestamp).toBe(true);
+        });
+        it('supports search on payload content', async () => {
+            const res = await app.request('/api/events?search=timeout', {
+                headers: authHeaders(apiKey),
+            });
+            const body = await res.json();
+            expect(body.events.length).toBe(1);
+            expect(body.events[0].eventType).toBe('tool_error');
+        });
+    });
+    it('clamps negative limit to 1', async () => {
+        const res = await app.request('/api/events?limit=-5', {
+            headers: authHeaders(apiKey),
+        });
+        expect(res.status).toBe(200);
+        const body = await res.json();
+        // Negative limit parsed as NaN → default, then clamped to at least 1
+        expect(body.events.length).toBeGreaterThanOrEqual(1);
+        expect(body.events.length).toBeLessThanOrEqual(4);
+    });
+    it('clamps negative offset to 0', async () => {
+        const res = await app.request('/api/events?offset=-10', {
+            headers: authHeaders(apiKey),
+        });
+        expect(res.status).toBe(200);
+        const body = await res.json();
+        // Should return all events (offset clamped to 0)
+        expect(body.events.length).toBe(4);
+    });
+    it('clamps zero limit to 1', async () => {
+        const res = await app.request('/api/events?limit=0', {
+            headers: authHeaders(apiKey),
+        });
+        expect(res.status).toBe(200);
+        const body = await res.json();
+        // limit=0 → NaN via parseInt or 0, falls back to DEFAULT then clamped
+        expect(body.events.length).toBeGreaterThanOrEqual(1);
+    });
+    describe('GET /api/events/:id', () => {
+        it('returns a single event by ID', async () => {
+            // Get the list first to find an ID
+            const listRes = await app.request('/api/events?limit=1', {
+                headers: authHeaders(apiKey),
+            });
+            const { events } = await listRes.json();
+            const eventId = events[0].id;
+            const res = await app.request(`/api/events/${eventId}`, {
+                headers: authHeaders(apiKey),
+            });
+            expect(res.status).toBe(200);
+            const body = await res.json();
+            expect(body.id).toBe(eventId);
+            expect(body.sessionId).toBeTruthy();
+            expect(body.hash).toBeTruthy();
+        });
+        it('returns 404 for non-existent event', async () => {
+            const res = await app.request('/api/events/nonexistent-id', {
+                headers: authHeaders(apiKey),
+            });
+            expect(res.status).toBe(404);
+            const body = await res.json();
+            expect(body.error).toBe('Event not found');
+        });
+    });
+});
+//# sourceMappingURL=events-query.test.js.map

package/dist/__tests__/events-query.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events-query.test.js","sourceRoot":"","sources":["../../src/__tests__/events-query.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAG/D,0BAA0B;AAC1B,KAAK,UAAU,YAAY,CAAC,GAAS,EAAE,MAAc,EAAE,MAAgB;IACrE,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;QAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;KACjC,CAAC,CAAC;AACL,CAAC;AAED,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,IAAI,GAAS,CAAC;IACd,IAAI,MAAc,CAAC;IAEnB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;QAC5B,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;QACd,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAEpB,mBAAmB;QACnB,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE;YAC9B;gBACE,SAAS,EAAE,UAAU;gBACrB,OAAO,EAAE,WAAW;gBACpB,SAAS,EAAE,iBAAiB;gBAC5B,QAAQ,EAAE,MAAM;gBAChB,SAAS,EAAE,sBAAsB;gBACjC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE;aACpD;YACD;gBACE,SAAS,EAAE,UAAU;gBACrB,OAAO,EAAE,WAAW;gBACpB,SAAS,EAAE,WAAW;gBACtB,QAAQ,EAAE,MAAM;gBAChB,SAAS,EAAE,sBAAsB;gBACjC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;aACzE;YACD;gBACE,SAAS,EAAE,UAAU;gBACrB,OAAO,EAAE,WAAW;gBACpB,SAAS,EAAE,YAAY;gBACvB,QAAQ,EAAE,OAAO;gBACjB,SAAS,EAAE,sBAAsB;gBACjC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE;aAClF;SACF,CAAC,CAAC;QAEH,0BAA0B;QAC1B,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE;YAC9B;gBACE,SAAS,EAAE,UAAU;gBACrB,OAAO,EAAE,WAAW;gBACpB,SAAS,EAAE,iBAAiB;gBAC5B,QAAQ,EAAE,MAAM;gBAChB,SAAS,EAAE,sBAAsB;gBACjC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;aAC9C;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;gBAC3C,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;aAC7B,CAAC,CAAC;YAEH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;YACpC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,gCAAgC,EAAE;gBAC9D,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;aAC7B,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAwB,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjG,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;YAClC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,+BAA+B,EAAE;gBAC7D,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;aAC7B,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;YACpC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,iCAAiC,EAAE;gBAC/D,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;aAC7B,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,4CAA4C,EAAE;gBAC1E,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;aAC7B,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;YACnC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,4BAA4B,EAAE;gBAC1D,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;aAC7B,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAC/C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAC3B,+DAA+D,EAC/D,EAAE,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CACjC,CAAC;YAEF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,wCAAwC,EAAE;gBACtE,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;aAC7B,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;gBAC3C,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;aAC7B,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,mCAAmC;YACnC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,uBAAuB,EAAE;gBACrD,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;aAC7B,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,4BAA4B,EAAE;gBAC1D,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;aAC7B,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAED,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,sBAAsB,EAAE;YACpD,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,qEAAqE;QACrE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,wBAAwB,EAAE;YACtD,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,iDAAiD;QACjD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE;YACnD,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,sEAAsE;QACtE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEL,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACnC,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,mCAAmC;YACnC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE;gBACvD,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;aAC7B,CAAC,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAE7B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,eAAe,OAAO,EAAE,EAAE;gBACtD,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;aAC7B,CAAC,CAAC;YAEH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,4BAA4B,EAAE;gBAC1D,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC;aAC7B,CAAC,CAAC;YAEH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/health.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests for Story 4.1: Bootstrap Hono Server with Middleware
+ */
+export {};
+//# sourceMappingURL=health.test.d.ts.map

package/dist/__tests__/health.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/health.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/__tests__/health.test.js

@@ -0,0 +1,40 @@
+/**
+ * Tests for Story 4.1: Bootstrap Hono Server with Middleware
+ */
+import { describe, it, expect } from 'vitest';
+import { createTestApp } from './test-helpers.js';
+describe('Health & Server Bootstrap (Story 4.1)', () => {
+    it('GET /api/health returns { status: "ok", version: "0.1.0" }', async () => {
+        const { app } = createTestApp({ authDisabled: true });
+        const res = await app.request('/api/health');
+        expect(res.status).toBe(200);
+        const body = await res.json();
+        expect(body).toEqual({ status: 'ok', version: '0.1.0' });
+    });
+    it('GET /api/health does not require auth', async () => {
+        const { app } = createTestApp({ authDisabled: false });
+        // No auth header
+        const res = await app.request('/api/health');
+        expect(res.status).toBe(200);
+        const body = await res.json();
+        expect(body.status).toBe('ok');
+    });
+    it('unknown routes return 404 JSON', async () => {
+        const { app } = createTestApp({ authDisabled: true });
+        const res = await app.request('/api/nonexistent');
+        expect(res.status).toBe(404);
+        const body = await res.json();
+        expect(body.error).toBe('Not found');
+        expect(body.status).toBe(404);
+    });
+    it('CORS headers are set on /api/* routes', async () => {
+        const { app } = createTestApp({ authDisabled: true });
+        const res = await app.request('/api/health', {
+            headers: { Origin: 'http://example.com' },
+        });
+        expect(res.status).toBe(200);
+        // CORS header should be present
+        expect(res.headers.get('access-control-allow-origin')).toBeTruthy();
+    });
+});
+//# sourceMappingURL=health.test.js.map

package/dist/__tests__/health.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.test.js","sourceRoot":"","sources":["../../src/__tests__/health.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAE7C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,iBAAiB;QACjB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAE7C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAElD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;YAC3C,OAAO,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE;SAC1C,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,gCAAgC;QAChC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/sessions.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests for Story 4.6: Session Endpoints
+ */
+export {};
+//# sourceMappingURL=sessions.test.d.ts.map

package/dist/__tests__/sessions.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/sessions.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}