@debian777/kairos-mcp 3.0.1-beta.14

package/dist/http/http-health-routes.js

@@ -0,0 +1,117 @@
+import { embeddingService } from '../services/embedding/service.js';
+import { keyValueStore } from '../services/key-value-store-factory.js';
+import { getBuildVersion } from '../utils/build-version.js';
+import { AUTH_ENABLED, USE_REDIS } from '../config.js';
+/**
+ * Set up health check and basic info routes
+ * @param app Express application instance
+ * @param memoryStore Memory store instance for health checks
+ */
+export function setupHealthRoutes(app, memoryStore) {
+    // Health check endpoint (non-MCP)
+    app.get('/health', async (req, res) => {
+        // Qdrant is the critical dependency for store functionality tests.
+        const qdrantHealthy = await memoryStore.checkHealth().catch(() => false);
+        // Redis and embedding providers are non-critical for allowing tests to proceed,
+        // but reported for diagnostics.
+        const redisHealthy = keyValueStore.isConnected();
+        let teiHealth = { healthy: false, message: 'Embedding provider not configured' };
+        // Run embedding health check but bound it with a short timeout so /health is responsive
+        try {
+            const teiCheck = (async () => {
+                if (typeof embeddingService.teiHealthCheck === 'function') {
+                    return await embeddingService.teiHealthCheck().catch(() => ({ healthy: false, message: 'TEI check failed' }));
+                }
+                else {
+                    return await embeddingService.healthCheck().catch(() => ({ healthy: false, message: 'Embedding health check failed' }));
+                }
+            })();
+            // Timeout after 2000ms to avoid blocking during test setup
+            let timeoutId;
+            const timeout = new Promise(resolve => {
+                timeoutId = setTimeout(() => resolve({ healthy: false, message: 'Embedding health check timed out' }), 2000);
+            });
+            teiHealth = (await Promise.race([teiCheck, timeout]));
+            if (timeoutId) {
+                clearTimeout(timeoutId);
+            }
+        }
+        catch {
+            teiHealth = { healthy: false, message: 'Embedding health check failed' };
+        }
+        const teiHealthy = !!teiHealth.healthy;
+        const embeddingCfg = embeddingService.getConfig ? embeddingService.getConfig() : { provider: 'unknown' };
+        // Only treat Qdrant as a blocking failure so tests that exercise store functionality can proceed.
+        const criticalHealthy = qdrantHealthy;
+        const nonCriticalAllHealthy = redisHealthy && teiHealthy;
+        const healthStatus = criticalHealthy ? (nonCriticalAllHealthy ? 'healthy' : 'degraded') : 'unhealthy';
+        const statusCode = criticalHealthy ? 200 : 503;
+        const buildVersion = getBuildVersion();
+        const uptime = Math.floor(process.uptime());
+        const dependencies = {
+            qdrant: qdrantHealthy ? 'healthy' : 'unhealthy',
+            embedding: teiHealthy ? 'healthy' : 'unhealthy'
+        };
+        if (USE_REDIS) {
+            dependencies['redis'] = redisHealthy ? 'healthy' : 'unhealthy';
+        }
+        else {
+            dependencies['cache'] = 'healthy (memory)';
+        }
+        res.status(statusCode).json({
+            status: healthStatus,
+            service: 'KAIROS',
+            version: buildVersion,
+            transport: 'http',
+            uptime: uptime,
+            dependencies,
+            details: {
+                embedding: teiHealth.message,
+                provider: embeddingCfg.provider || 'auto',
+                providerPref: embeddingCfg.providerPref || 'auto',
+                cacheBackend: USE_REDIS ? 'redis' : 'memory'
+            }
+        });
+    });
+    // Basic info endpoint (non-MCP)
+    app.get('/', (req, res) => {
+        const body = {
+            service: 'KAIROS MCP Server',
+            version: getBuildVersion(),
+            transports: ['http'],
+            endpoints: {
+                health: '/health',
+                mcp: '/mcp',
+                api: '/api'
+            },
+            note: 'Use POST /mcp for MCP protocol communication'
+        };
+        if (AUTH_ENABLED) {
+            body['api_note'] = 'GET /api and POST /api/* require authentication (session or Bearer). Use login_url from 401 or /auth/callback flow.';
+        }
+        res.json(body);
+    });
+    // API root (when AUTH_ENABLED, only reached when authenticated)
+    app.get('/api', (req, res) => {
+        const body = {
+            service: 'KAIROS API',
+            version: getBuildVersion(),
+            endpoints: {
+                kairos_search: 'POST /api/kairos_search',
+                kairos_begin: 'POST /api/kairos_begin',
+                kairos_next: 'POST /api/kairos_next',
+                kairos_attest: 'POST /api/kairos_attest',
+                kairos_mint: 'POST /api/kairos_mint/raw',
+                kairos_update: 'POST /api/kairos_update',
+                kairos_delete: 'POST /api/kairos_delete',
+                kairos_dump: 'POST /api/kairos_dump'
+            }
+        };
+        if (AUTH_ENABLED) {
+            body['auth_required'] = true;
+            body['note'] = 'These endpoints require a valid session or Bearer token. Unauthenticated requests receive 401 with login_url.';
+        }
+        res.json(body);
+    });
+}
+//# sourceMappingURL=http-health-routes.js.map

package/dist/http/http-health-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-health-routes.js","sourceRoot":"","sources":["../../src/http/http-health-routes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEvD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAoB,EAAE,WAA8B;IAClF,kCAAkC;IAClC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClC,mEAAmE;QACnE,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACzE,gFAAgF;QAChF,gCAAgC;QAChC,MAAM,YAAY,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;QACjD,IAAI,SAAS,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mCAA6C,EAAE,CAAC;QAE3F,wFAAwF;QACxF,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;gBACzB,IAAI,OAAQ,gBAAwB,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;oBACjE,OAAO,MAAO,gBAAwB,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;gBAC3H,CAAC;qBAAM,CAAC;oBACJ,OAAO,MAAM,gBAAgB,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC,CAAC;gBAC5H,CAAC;YACL,CAAC,CAAC,EAAE,CAAC;YAEL,2DAA2D;YAC3D,IAAI,SAAqC,CAAC;YAC1C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;gBAClC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;YACjH,CAAC,CAAC,CAAC;YACH,SAAS,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAA0C,CAAC;YAC/F,IAAI,SAAS,EAAE,CAAC;gBACZ,YAAY,CAAC,SAAS,CAAC,CAAC;YAC5B,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,SAAS,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;QAC7E,CAAC;QAED,MAAM,UAAU,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC;QACvC,MAAM,YAAY,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC,CAAE,EAAE,QAAQ,EAAE,SAAS,EAAU,CAAC;QAElH,kGAAkG;QAClG,MAAM,eAAe,GAAG,aAAa,CAAC;QACtC,MAAM,qBAAqB,GAAG,YAAY,IAAI,UAAU,CAAC;QACzD,MAAM,YAAY,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QACtG,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAE/C,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAE5C,MAAM,YAAY,GAA2B;YACzC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;YAC/C,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;SAClD,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACZ,YAAY,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;QACnE,CAAC;aAAM,CAAC;YACJ,YAAY,CAAC,OAAO,CAAC,GAAG,kBAAkB,CAAC;QAC/C,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;YACxB,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE,MAAM;YACjB,MAAM,EAAE,MAAM;YACd,YAAY;YACZ,OAAO,EAAE;gBACL,SAAS,EAAE,SAAS,CAAC,OAAO;gBAC5B,QAAQ,EAAE,YAAY,CAAC,QAAQ,IAAI,MAAM;gBACzC,YAAY,EAAG,YAAoB,CAAC,YAAY,IAAI,MAAM;gBAC1D,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;aAC/C;SACJ,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,gCAAgC;IAChC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACtB,MAAM,IAAI,GAA4B;YAClC,OAAO,EAAE,mBAAmB;YAC5B,OAAO,EAAE,eAAe,EAAE;YAC1B,UAAU,EAAE,CAAC,MAAM,CAAC;YACpB,SAAS,EAAE;gBACP,MAAM,EAAE,SAAS;gBACjB,GAAG,EAAE,MAAM;gBACX,GAAG,EAAE,MAAM;aACd;YACD,IAAI,EAAE,8CAA8C;SACvD,CAAC;QACF,IAAI,YAAY,EAAE,CAAC;YACf,IAAI,CAAC,UAAU,CAAC,GAAG,qHAAqH,CAAC;QAC7I,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,gEAAgE;IAChE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACzB,MAAM,IAAI,GAA4B;YAClC,OAAO,EAAE,YAAY;YACrB,OAAO,EAAE,eAAe,EAAE;YAC1B,SAAS,EAAE;gBACP,aAAa,EAAE,yBAAyB;gBACxC,YAAY,EAAE,wBAAwB;gBACtC,WAAW,EAAE,uBAAuB;gBACpC,aAAa,EAAE,yBAAyB;gBACxC,WAAW,EAAE,2BAA2B;gBACxC,aAAa,EAAE,yBAAyB;gBACxC,aAAa,EAAE,yBAAyB;gBACxC,WAAW,EAAE,uBAAuB;aACvC;SACJ,CAAC;QACF,IAAI,YAAY,EAAE,CAAC;YACf,IAAI,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,+GAA+G,CAAC;QACnI,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/http/http-mcp-handler.d.ts

@@ -0,0 +1,8 @@
+import express from 'express';
+/**
+ * Set up MCP endpoint handling
+ * @param app Express application instance
+ * @param server MCP server instance
+ */
+export declare function setupMcpRoutes(app: express.Express, server: any): void;
+//# sourceMappingURL=http-mcp-handler.d.ts.map

package/dist/http/http-mcp-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-mcp-handler.d.ts","sourceRoot":"","sources":["../../src/http/http-mcp-handler.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAW9B;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,QA8I/D"}

package/dist/http/http-mcp-handler.js

@@ -0,0 +1,136 @@
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { structuredLogger } from '../utils/structured-logger.js';
+import { LOG_LEVEL, AUTH_ENABLED } from '../config.js';
+import { setWwwAuthenticate } from './http-auth-middleware.js';
+/**
+ * Track request start times by ID for accurate cancellation timing
+ */
+const requestTimestamps = new Map();
+/**
+ * Set up MCP endpoint handling
+ * @param app Express application instance
+ * @param server MCP server instance
+ */
+export function setupMcpRoutes(app, server) {
+    // MCP endpoint using StreamableHTTPServerTransport
+    app.post('/mcp', async (req, res) => {
+        const requestStart = Date.now();
+        const requestId = req.body?.id || 'unknown';
+        const method = req.body?.method || 'unknown';
+        const toolName = req.body?.params?.name || 'unknown';
+        // Store timestamp for non-notification requests
+        if (method !== 'notifications/cancelled' && requestId !== 'unknown') {
+            requestTimestamps.set(requestId, requestStart);
+        }
+        // Log incoming request with level control
+        const logLevel = LOG_LEVEL;
+        if (logLevel === 'debug' || method !== 'notifications/cancelled') {
+            structuredLogger.info(`→ MCP ${method}${toolName !== 'unknown' ? ` (${toolName})` : ''} [id: ${requestId}]`);
+        }
+        // listOfferingsForUI (MCP Apps / UI discovery): not implemented by SDK. Handle here so the client
+        // gets a proper auth-related response when auth is required, instead of -32601 Method not found.
+        if (method === 'listOfferingsForUI') {
+            const id = req.body?.id ?? null;
+            if (AUTH_ENABLED && !req.auth) {
+                setWwwAuthenticate(res, {
+                    error: 'invalid_token',
+                    error_description: 'Authentication required for UI offerings'
+                });
+                res.status(401).json({
+                    jsonrpc: '2.0',
+                    error: {
+                        code: -32001,
+                        message: 'Authentication required for UI offerings'
+                    },
+                    id
+                });
+                return;
+            }
+            res.status(200).json({
+                jsonrpc: '2.0',
+                result: { tools: [], prompts: [], resources: [] },
+                id
+            });
+            return;
+        }
+        try {
+            // Create new transport for each request to prevent request ID collisions
+            const transport = new StreamableHTTPServerTransport({
+                enableJsonResponse: true
+            });
+            // Track request timeout - log at 25s (before typical 30s client timeout)
+            let requestCompleted = false;
+            const timeoutHandler = setTimeout(() => {
+                if (!requestCompleted) {
+                    const duration = Date.now() - requestStart;
+                    structuredLogger.requestTimeout(`${method} ${toolName ? `(${toolName})` : ''} [id: ${requestId}]`, duration);
+                }
+            }, 25000); // Log at 25s (before typical 30s client timeout)
+            res.on('close', () => {
+                requestCompleted = true;
+                clearTimeout(timeoutHandler);
+                const duration = Date.now() - requestStart;
+                if (method === 'notifications/cancelled') {
+                    // For cancellation notifications, find the original request's start time
+                    const originalStart = requestTimestamps.get(requestId);
+                    const actualDuration = originalStart ? Date.now() - originalStart : duration;
+                    structuredLogger.warn(`⚡ Client cancelled request after ${actualDuration}ms [id: ${requestId}] - operation may continue in background`);
+                    // Clean up timestamp
+                    if (requestId !== 'unknown') {
+                        requestTimestamps.delete(requestId);
+                    }
+                }
+                else if (duration > 20000) {
+                    structuredLogger.warn(`← Request closed after ${duration}ms: ${method}${toolName !== 'unknown' ? ` (${toolName})` : ''} [id: ${requestId}]`);
+                    // Clean up timestamp
+                    if (requestId !== 'unknown') {
+                        requestTimestamps.delete(requestId);
+                    }
+                }
+                else if (logLevel === 'debug') {
+                    structuredLogger.info(`← Request closed ${duration}ms [id: ${requestId}]`);
+                }
+                transport.close();
+            });
+            res.on('finish', () => {
+                requestCompleted = true;
+                clearTimeout(timeoutHandler);
+                const duration = Date.now() - requestStart;
+                if (duration > 10000 && method !== 'notifications/cancelled') {
+                    structuredLogger.info(`✓ Request completed in ${duration}ms: ${method}${toolName !== 'unknown' ? ` (${toolName})` : ''} [id: ${requestId}]`);
+                }
+                else if (logLevel === 'debug') {
+                    structuredLogger.info(`✓ Completed ${duration}ms [id: ${requestId}]`);
+                }
+            });
+            // Connect server with request context for tool handlers
+            await server.connect(transport);
+            // Set up request context for model identity detection
+            transport._requestContext = req;
+            // Set up global context for tools to access
+            globalThis._mcpRequestContext = req;
+            globalThis._mcpTransport = transport;
+            await transport.handleRequest(req, res, req.body);
+            // Clean up context after request
+            delete globalThis._mcpRequestContext;
+            delete globalThis._mcpTransport;
+            requestCompleted = true;
+            clearTimeout(timeoutHandler);
+        }
+        catch (error) {
+            const duration = Date.now() - requestStart;
+            structuredLogger.error(`✗ MCP error: ${method}${toolName !== 'unknown' ? ` (${toolName})` : ''} after ${duration}ms`, error, { request_id: requestId });
+            if (!res.headersSent) {
+                res.status(500).json({
+                    jsonrpc: '2.0',
+                    error: {
+                        code: -32603,
+                        message: 'Internal server error'
+                    },
+                    id: requestId === 'unknown' ? null : requestId
+                });
+            }
+        }
+    });
+}
+//# sourceMappingURL=http-mcp-handler.js.map

package/dist/http/http-mcp-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-mcp-handler.js","sourceRoot":"","sources":["../../src/http/http-mcp-handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D;;GAEG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEpD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,GAAoB,EAAE,MAAW;IAC5D,mDAAmD;IACnD,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAChC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,SAAS,CAAC;QAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,SAAS,CAAC;QAC7C,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,SAAS,CAAC;QAErD,gDAAgD;QAChD,IAAI,MAAM,KAAK,yBAAyB,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAClE,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACnD,CAAC;QAED,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,SAAS,CAAC;QAC3B,IAAI,QAAQ,KAAK,OAAO,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;YAC/D,gBAAgB,CAAC,IAAI,CAAC,SAAS,MAAM,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,SAAS,GAAG,CAAC,CAAC;QACjH,CAAC;QAED,kGAAkG;QAClG,iGAAiG;QACjG,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;YAClC,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC;YAChC,IAAI,YAAY,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC5B,kBAAkB,CAAC,GAAG,EAAE;oBACpB,KAAK,EAAE,eAAe;oBACtB,iBAAiB,EAAE,0CAA0C;iBAChE,CAAC,CAAC;gBACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACjB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACH,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,0CAA0C;qBACtD;oBACD,EAAE;iBACL,CAAC,CAAC;gBACH,OAAO;YACX,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACjB,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;gBACjD,EAAE;aACL,CAAC,CAAC;YACH,OAAO;QACX,CAAC;QAED,IAAI,CAAC;YACD,yEAAyE;YACzE,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;gBAChD,kBAAkB,EAAE,IAAI;aAC3B,CAAC,CAAC;YAEH,yEAAyE;YACzE,IAAI,gBAAgB,GAAG,KAAK,CAAC;YAC7B,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;gBACnC,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;oBAC3C,gBAAgB,CAAC,cAAc,CAAC,GAAG,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,SAAS,GAAG,EAAE,QAAQ,CAAC,CAAC;gBACjH,CAAC;YACL,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,iDAAiD;YAE5D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACjB,gBAAgB,GAAG,IAAI,CAAC;gBACxB,YAAY,CAAC,cAAc,CAAC,CAAC;gBAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;gBAE3C,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;oBACvC,yEAAyE;oBACzE,MAAM,aAAa,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBACvD,MAAM,cAAc,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;oBAC7E,gBAAgB,CAAC,IAAI,CAAC,oCAAoC,cAAc,WAAW,SAAS,0CAA0C,CAAC,CAAC;oBAExI,qBAAqB;oBACrB,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;wBAC1B,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACxC,CAAC;gBACL,CAAC;qBAAM,IAAI,QAAQ,GAAG,KAAK,EAAE,CAAC;oBAC1B,gBAAgB,CAAC,IAAI,CAAC,0BAA0B,QAAQ,OAAO,MAAM,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,SAAS,GAAG,CAAC,CAAC;oBAE7I,qBAAqB;oBACrB,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;wBAC1B,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACxC,CAAC;gBACL,CAAC;qBAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;oBAC9B,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,QAAQ,WAAW,SAAS,GAAG,CAAC,CAAC;gBAC/E,CAAC;gBAED,SAAS,CAAC,KAAK,EAAE,CAAC;YACtB,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAClB,gBAAgB,GAAG,IAAI,CAAC;gBACxB,YAAY,CAAC,cAAc,CAAC,CAAC;gBAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;gBAE3C,IAAI,QAAQ,GAAG,KAAK,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;oBAC3D,gBAAgB,CAAC,IAAI,CAAC,0BAA0B,QAAQ,OAAO,MAAM,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,SAAS,GAAG,CAAC,CAAC;gBACjJ,CAAC;qBAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;oBAC9B,gBAAgB,CAAC,IAAI,CAAC,eAAe,QAAQ,WAAW,SAAS,GAAG,CAAC,CAAC;gBAC1E,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,wDAAwD;YACxD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,sDAAsD;YACrD,SAAiB,CAAC,eAAe,GAAG,GAAG,CAAC;YAEzC,4CAA4C;YAC5C,UAAU,CAAC,kBAAkB,GAAG,GAAG,CAAC;YACpC,UAAU,CAAC,aAAa,GAAG,SAAS,CAAC;YAErC,MAAM,SAAS,CAAC,aAAa,CAC3B,GAA+D,EAC/D,GAAG,EACH,GAAG,CAAC,IAAI,CACT,CAAC;YAEF,iCAAiC;YACjC,OAAO,UAAU,CAAC,kBAAkB,CAAC;YACrC,OAAO,UAAU,CAAC,aAAa,CAAC;YAEhC,gBAAgB,GAAG,IAAI,CAAC;YACxB,YAAY,CAAC,cAAc,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;YAC3C,gBAAgB,CAAC,KAAK,CACpB,gBAAgB,MAAM,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,UAAU,QAAQ,IAAI,EAC7F,KAAK,EACL,EAAE,UAAU,EAAE,SAAS,EAAE,CAC1B,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACjB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACH,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,uBAAuB;qBACnC;oBACD,EAAE,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;iBACjD,CAAC,CAAC;YACP,CAAC;QACL,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/http/http-metrics-middleware.d.ts

@@ -0,0 +1,7 @@
+import express from 'express';
+/**
+ * HTTP metrics middleware for Prometheus
+ * Tracks requests, response times, payload sizes, and active connections
+ */
+export declare function httpMetricsMiddleware(req: express.Request, res: express.Response, next: express.NextFunction): void;
+//# sourceMappingURL=http-metrics-middleware.d.ts.map

package/dist/http/http-metrics-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-metrics-middleware.d.ts","sourceRoot":"","sources":["../../src/http/http-metrics-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAU9B;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,YAAY,QAwD5G"}

package/dist/http/http-metrics-middleware.js

@@ -0,0 +1,56 @@
+import { httpRequests, httpRequestDuration, httpRequestSize, httpResponseSize, httpActiveConnections } from '../services/metrics/http-metrics.js';
+import { getTenantId } from '../utils/tenant-context.js';
+/**
+ * HTTP metrics middleware for Prometheus
+ * Tracks requests, response times, payload sizes, and active connections
+ */
+export function httpMetricsMiddleware(req, res, next) {
+    const tenantId = getTenantId(req);
+    const method = req.method;
+    const route = req.route?.path || req.path;
+    // Track request size
+    const requestSize = req.headers['content-length'] ? parseInt(req.headers['content-length'], 10) : 0;
+    if (requestSize > 0) {
+        httpRequestSize.observe({ method, route, tenant_id: tenantId }, requestSize);
+    }
+    // Increment active connections
+    httpActiveConnections.inc({ tenant_id: tenantId });
+    // Start duration timer
+    const timer = httpRequestDuration.startTimer({
+        method,
+        route,
+        tenant_id: tenantId
+    });
+    // Track response size
+    const originalSend = res.send;
+    res.send = function (body) {
+        const responseSize = typeof body === 'string' ? Buffer.byteLength(body) : JSON.stringify(body).length;
+        httpResponseSize.observe({
+            method,
+            route,
+            status: res.statusCode.toString(),
+            tenant_id: tenantId
+        }, responseSize);
+        return originalSend.call(this, body);
+    };
+    res.on('finish', () => {
+        // Track request
+        httpRequests.inc({
+            method,
+            route,
+            status: res.statusCode.toString(),
+            tenant_id: tenantId
+        });
+        // End duration timer
+        timer({
+            method,
+            route,
+            status: res.statusCode.toString(),
+            tenant_id: tenantId
+        });
+        // Decrement active connections
+        httpActiveConnections.dec({ tenant_id: tenantId });
+    });
+    next();
+}
+//# sourceMappingURL=http-metrics-middleware.js.map

package/dist/http/http-metrics-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-metrics-middleware.js","sourceRoot":"","sources":["../../src/http/http-metrics-middleware.ts"],"names":[],"mappings":"AACA,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACtB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEzD;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAoB,EAAE,GAAqB,EAAE,IAA0B;IAC3G,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC;IAE1C,qBAAqB;IACrB,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpG,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QACpB,eAAe,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,WAAW,CAAC,CAAC;IAC/E,CAAC;IAED,+BAA+B;IAC/B,qBAAqB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IAEnD,uBAAuB;IACvB,MAAM,KAAK,GAAG,mBAAmB,CAAC,UAAU,CAAC;QAC3C,MAAM;QACN,KAAK;QACL,SAAS,EAAE,QAAQ;KACpB,CAAC,CAAC;IAEH,sBAAsB;IACtB,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC;IAC9B,GAAG,CAAC,IAAI,GAAG,UAAS,IAAS;QAC3B,MAAM,YAAY,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QACtG,gBAAgB,CAAC,OAAO,CAAC;YACvB,MAAM;YACN,KAAK;YACL,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE;YACjC,SAAS,EAAE,QAAQ;SACpB,EAAE,YAAY,CAAC,CAAC;QACjB,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACpB,gBAAgB;QAChB,YAAY,CAAC,GAAG,CAAC;YACf,MAAM;YACN,KAAK;YACL,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE;YACjC,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;QAEH,qBAAqB;QACrB,KAAK,CAAC;YACJ,MAAM;YACN,KAAK;YACL,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE;YACjC,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;QAEH,+BAA+B;QAC/B,qBAAqB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,IAAI,EAAE,CAAC;AACT,CAAC"}

package/dist/http/http-server-config.d.ts

@@ -0,0 +1,11 @@
+import express from 'express';
+declare global {
+    var _mcpRequestContext: any;
+    var _mcpTransport: any;
+}
+/**
+ * Configure Express application with middleware
+ * @param app Express application instance
+ */
+export declare function configureMiddleware(app: express.Express): void;
+//# sourceMappingURL=http-server-config.d.ts.map

package/dist/http/http-server-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server-config.d.ts","sourceRoot":"","sources":["../../src/http/http-server-config.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAK9B,OAAO,CAAC,MAAM,CAAC;IACX,IAAI,kBAAkB,EAAE,GAAG,CAAC;IAC5B,IAAI,aAAa,EAAE,GAAG,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,QAMvD"}

package/dist/http/http-server-config.js

@@ -0,0 +1,15 @@
+import express from 'express';
+import { httpLogger } from '../utils/structured-logger.js';
+import { httpMetricsMiddleware } from './http-metrics-middleware.js';
+/**
+ * Configure Express application with middleware
+ * @param app Express application instance
+ */
+export function configureMiddleware(app) {
+    // Structured HTTP access logging middleware
+    app.use(httpLogger);
+    // HTTP metrics middleware for Prometheus
+    app.use(httpMetricsMiddleware);
+    app.use(express.json());
+}
+//# sourceMappingURL=http-server-config.js.map

package/dist/http/http-server-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server-config.js","sourceRoot":"","sources":["../../src/http/http-server-config.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAQrE;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAoB;IACpD,4CAA4C;IAC5C,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpB,yCAAyC;IACzC,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC/B,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;AAC5B,CAAC"}

package/dist/http/http-server-startup.d.ts

@@ -0,0 +1,9 @@
+import express from 'express';
+/**
+ * Start HTTP server with error handling
+ * @param app Express application instance
+ * @param port Port to listen on
+ * @returns HTTP server instance
+ */
+export declare function startHttpServerWithErrorHandling(app: express.Express, port: number): import("node:http").Server<typeof import("node:http").IncomingMessage, typeof import("node:http").ServerResponse>;
+//# sourceMappingURL=http-server-startup.d.ts.map

package/dist/http/http-server-startup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server-startup.d.ts","sourceRoot":"","sources":["../../src/http/http-server-startup.ts"],"names":[],"mappings":"AACA,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,qHAkBlF"}

package/dist/http/http-server-startup.js

@@ -0,0 +1,26 @@
+import { structuredLogger } from '../utils/structured-logger.js';
+/**
+ * Start HTTP server with error handling
+ * @param app Express application instance
+ * @param port Port to listen on
+ * @returns HTTP server instance
+ */
+export function startHttpServerWithErrorHandling(app, port) {
+    const httpServer = app.listen(port, '0.0.0.0', () => {
+        structuredLogger.success('HTTP server', 'listening on port ' + port);
+        structuredLogger.info('Health check: http://localhost:' + port + '/health');
+        structuredLogger.info('MCP endpoint: http://localhost:' + port + '/mcp');
+    });
+    httpServer.on('error', (error) => {
+        if (error.code === 'EADDRINUSE') {
+            structuredLogger.error(`Port ${port} is already in use. Please choose a different port.`);
+            process.exit(1);
+        }
+        else {
+            structuredLogger.error('HTTP server error:', error.message);
+            process.exit(1);
+        }
+    });
+    return httpServer;
+}
+//# sourceMappingURL=http-server-startup.js.map

package/dist/http/http-server-startup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server-startup.js","sourceRoot":"","sources":["../../src/http/http-server-startup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAGjE;;;;;GAKG;AACH,MAAM,UAAU,gCAAgC,CAAC,GAAoB,EAAE,IAAY;IAC/E,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;QAChD,gBAAgB,CAAC,OAAO,CAAC,aAAa,EAAE,oBAAoB,GAAG,IAAI,CAAC,CAAC;QACrE,gBAAgB,CAAC,IAAI,CAAC,iCAAiC,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;QAC5E,gBAAgB,CAAC,IAAI,CAAC,iCAAiC,GAAG,IAAI,GAAG,MAAM,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;QACpD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC9B,gBAAgB,CAAC,KAAK,CAAC,QAAQ,IAAI,qDAAqD,CAAC,CAAC;YAC1F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;aAAM,CAAC;YACJ,gBAAgB,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,UAAU,CAAC;AACtB,CAAC"}

package/dist/http/http-server.d.ts

@@ -0,0 +1,4 @@
+import { MemoryQdrantStore } from '../services/memory/store.js';
+export declare function startHttpServer(port: number, server: any, memoryStore: MemoryQdrantStore): import("node:http").Server<typeof import("node:http").IncomingMessage, typeof import("node:http").ServerResponse>;
+export declare function startServer(server: any, memoryStore: MemoryQdrantStore): Promise<void>;
+//# sourceMappingURL=http-server.d.ts.map

package/dist/http/http-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../../src/http/http-server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAgBhE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iBAAiB,qHAqBxF;AAED,wBAAsB,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iBAAiB,iBAQ5E"}

package/dist/http/http-server.js

@@ -0,0 +1,39 @@
+import express from 'express';
+import { structuredLogger } from '../utils/structured-logger.js';
+import { PORT } from '../config.js';
+// Import modular components
+import { configureMiddleware } from './http-server-config.js';
+import { authMiddleware } from './http-auth-middleware.js';
+import { setupAuthCallback } from './http-auth-callback.js';
+import { setupHealthRoutes } from './http-health-routes.js';
+import { setupWellKnown } from './http-well-known.js';
+import { setupApiRoutes } from './http-api-routes.js';
+import { setupMcpRoutes } from './http-mcp-handler.js';
+import { setupErrorHandlers } from './http-error-handlers.js';
+import { startHttpServerWithErrorHandling } from './http-server-startup.js';
+import { qdrantService } from '../services/qdrant/index.js';
+export function startHttpServer(port, server, memoryStore) {
+    const app = express();
+    // Configure middleware
+    configureMiddleware(app);
+    setupAuthCallback(app);
+    // Well-known must be registered before auth middleware so RFC 9728 discovery
+    // is reachable without credentials (MCP clients call it before authenticating).
+    setupWellKnown(app);
+    app.use(authMiddleware);
+    // Protected route handlers (require auth when AUTH_ENABLED)
+    setupHealthRoutes(app, memoryStore);
+    setupApiRoutes(app, memoryStore, { qdrantService });
+    setupMcpRoutes(app, server);
+    setupErrorHandlers(app);
+    // Start server with error handling
+    return startHttpServerWithErrorHandling(app, port);
+}
+export async function startServer(server, memoryStore) {
+    const httpPort = PORT;
+    structuredLogger.success('🚀 KAIROS MCP Server starting', 'HTTP transport only');
+    structuredLogger.info('HTTP transport: enabled');
+    structuredLogger.info('Port: ' + httpPort);
+    startHttpServer(httpPort, server, memoryStore);
+}
+//# sourceMappingURL=http-server.js.map

package/dist/http/http-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server.js","sourceRoot":"","sources":["../../src/http/http-server.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAEpC,4BAA4B;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,MAAW,EAAE,WAA8B;IACrF,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IAEtB,uBAAuB;IACvB,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzB,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAEvB,6EAA6E;IAC7E,gFAAgF;IAChF,cAAc,CAAC,GAAG,CAAC,CAAC;IAEpB,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAExB,4DAA4D;IAC5D,iBAAiB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACpC,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;IACpD,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC5B,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAExB,mCAAmC;IACnC,OAAO,gCAAgC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAW,EAAE,WAA8B;IACzE,MAAM,QAAQ,GAAG,IAAI,CAAC;IAEtB,gBAAgB,CAAC,OAAO,CAAC,+BAA+B,EAAE,qBAAqB,CAAC,CAAC;IACjF,gBAAgB,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACjD,gBAAgB,CAAC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC;IAE3C,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AACnD,CAAC"}

package/dist/http/http-well-known.d.ts

@@ -0,0 +1,13 @@
+/**
+ * OAuth 2.0 Protected Resource Metadata (RFC 9728) for MCP authorization discovery.
+ *
+ * Serves metadata at:
+ *   GET /.well-known/oauth-protected-resource       (root — fallback)
+ *   GET /.well-known/oauth-protected-resource/mcp   (path-specific — tried first by spec-compliant clients)
+ *
+ * MCP clients use this to discover the authorization server and initiate OAuth 2.1 flows.
+ * See: https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization
+ */
+import type { Express } from 'express';
+export declare function setupWellKnown(app: Express): void;
+//# sourceMappingURL=http-well-known.d.ts.map

package/dist/http/http-well-known.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-well-known.d.ts","sourceRoot":"","sources":["../../src/http/http-well-known.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAyB1D,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAajD"}

package/dist/http/http-well-known.js

@@ -0,0 +1,32 @@
+import { AUTH_CALLBACK_BASE_URL, KEYCLOAK_URL, KEYCLOAK_REALM } from '../config.js';
+import { structuredLogger } from '../utils/structured-logger.js';
+function buildProtectedResourceMetadata() {
+    const base = AUTH_CALLBACK_BASE_URL.replace(/\/$/, '');
+    const resource = `${base}/mcp`;
+    const issuer = KEYCLOAK_URL
+        ? `${KEYCLOAK_URL.replace(/\/$/, '')}/realms/${KEYCLOAK_REALM}`
+        : '';
+    const metadata = {
+        resource,
+        authorization_servers: issuer ? [issuer] : [],
+        scopes_supported: ['openid'],
+        bearer_methods_supported: ['header'],
+        resource_name: 'KAIROS MCP'
+    };
+    // RFC 9728 allows additional parameters. MCP clients that support it should add these
+    // to the authorization request (e.g. prompt=login) to avoid already_logged_in when
+    // the user is logged in elsewhere, without disabling SSO for normal browser use.
+    metadata['authorization_request_parameters'] = { prompt: 'login' };
+    return metadata;
+}
+export function setupWellKnown(app) {
+    if (!AUTH_CALLBACK_BASE_URL) {
+        structuredLogger.warn('[well-known] AUTH_CALLBACK_BASE_URL is empty — Protected Resource Metadata will use relative URIs (non-compliant with RFC 9728). Set AUTH_CALLBACK_BASE_URL for production.');
+    }
+    const handler = (_req, res) => {
+        res.json(buildProtectedResourceMetadata());
+    };
+    app.get('/.well-known/oauth-protected-resource', handler);
+    app.get('/.well-known/oauth-protected-resource/mcp', handler);
+}
+//# sourceMappingURL=http-well-known.js.map

package/dist/http/http-well-known.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-well-known.js","sourceRoot":"","sources":["../../src/http/http-well-known.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEjE,SAAS,8BAA8B;IACrC,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,GAAG,IAAI,MAAM,CAAC;IAC/B,MAAM,MAAM,GAAG,YAAY;QACzB,CAAC,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,cAAc,EAAE;QAC/D,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,QAAQ,GAA4B;QACxC,QAAQ;QACR,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QAC7C,gBAAgB,EAAE,CAAC,QAAQ,CAAC;QAC5B,wBAAwB,EAAE,CAAC,QAAQ,CAAC;QACpC,aAAa,EAAE,YAAY;KAC5B,CAAC;IACF,sFAAsF;IACtF,mFAAmF;IACnF,iFAAiF;IACjF,QAAQ,CAAC,kCAAkC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACnE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5B,gBAAgB,CAAC,IAAI,CACnB,6KAA6K,CAC9K,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QAC/C,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,uCAAuC,EAAE,OAAO,CAAC,CAAC;IAC1D,GAAG,CAAC,GAAG,CAAC,2CAA2C,EAAE,OAAO,CAAC,CAAC;AAChE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * KAIROS MCP Server
+ *
+ * Supporting HTTP transport only (STDIO removed for simplicity)
+ */
+import './services/metrics/system-metrics.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAcH,OAAO,sCAAsC,CAAC"}