@inso_web/els-mcp 0.1.0

package/dist/elsClient.d.ts

@@ -0,0 +1,137 @@
+import { type Dispatcher } from 'undici';
+import type { Logger } from 'pino';
+import type { SearchLogsRawResponse, ErrorLog, HistogramBucket } from './types.js';
+export interface ElsClientOptions {
+    baseUrl: string;
+    apiKey: string;
+    timeoutMs?: number;
+    log?: Logger;
+    /** Внешний dispatcher (для тестов через MockAgent). */
+    dispatcher?: Dispatcher;
+}
+export interface RequestOptions {
+    /** ISO timestamp filter (по умолчанию — не передаётся). */
+    query?: Record<string, string | number | boolean | undefined | null>;
+    /** Принудительно отключить retry (для отдельных вызовов). */
+    noRetry?: boolean;
+    /** HTTP method, default GET. */
+    method?: 'GET' | 'POST';
+    /** JSON body (для POST). */
+    body?: unknown;
+}
+export declare class ElsClient {
+    private readonly baseUrl;
+    private readonly origin;
+    private readonly basePath;
+    private readonly apiKey;
+    private readonly timeoutMs;
+    private readonly log;
+    private readonly dispatcher;
+    private readonly ownDispatcher;
+    constructor(opts: ElsClientOptions);
+    close(): Promise<void>;
+    /** Низкоуровневый GET с retry/backoff. Возвращает уже-распарсенный JSON. */
+    private request;
+    searchLogs(params: Record<string, string | number | boolean | undefined>): Promise<{
+        data: SearchLogsRawResponse;
+        elsRequestId: string | null;
+    }>;
+    getLogDetails(traceId: string): Promise<{
+        data: ErrorLog;
+        elsRequestId: string | null;
+    }>;
+    findSimilarErrors(traceId: string, params?: Record<string, string | undefined>): Promise<{
+        data: unknown;
+        elsRequestId: string | null;
+    }>;
+    findCorrelatedErrors(traceId: string, params?: Record<string, string | number | undefined>): Promise<{
+        data: unknown;
+        elsRequestId: string | null;
+    }>;
+    topErrorMessages(params: Record<string, string | number | undefined>): Promise<{
+        data: {
+            data: unknown[];
+            take: number;
+        };
+        elsRequestId: string | null;
+    }>;
+    errorHistogram(params: Record<string, string | undefined>): Promise<{
+        data: {
+            data: HistogramBucket[];
+            interval: string;
+            from: string;
+            to: string;
+        };
+        elsRequestId: string | null;
+    }>;
+    trafficStats(params: Record<string, string | undefined>): Promise<{
+        data: unknown;
+        elsRequestId: string | null;
+    }>;
+    /**
+     * GET /apps — требует master-key (`requireMaster`). Для обычного ELS-key
+     * вернёт 403. Tool listApps в свою очередь обрабатывает 403 и возвращает
+     * derived-from-context результат.
+     */
+    listApps(): Promise<{
+        data: {
+            apps: Array<{
+                slug: string;
+                name: string;
+                isActive: boolean;
+                rateLimitTier?: string;
+                createdAt?: string;
+            }>;
+        };
+        elsRequestId: string | null;
+    }>;
+    /**
+     * POST /errors/query — JQL-style structured filter (AST + pagination + search).
+     * Возвращает items + total + facets + histogram (та же форма что GET /errors).
+     */
+    queryLogsJql(body: unknown): Promise<{
+        data: SearchLogsRawResponse & {
+            offset?: number;
+        };
+        elsRequestId: string | null;
+    }>;
+    /** GET /analytics/stats. */
+    errorStats(params: Record<string, string | undefined>): Promise<{
+        data: unknown;
+        elsRequestId: string | null;
+    }>;
+    /** GET /analytics/grouped-errors. */
+    groupedErrors(params: Record<string, string | number | undefined>): Promise<{
+        data: unknown;
+        elsRequestId: string | null;
+    }>;
+    /** GET /analytics/impact. */
+    impact(params: Record<string, string | undefined>): Promise<{
+        data: unknown;
+        elsRequestId: string | null;
+    }>;
+    /** GET /analytics/baseline. */
+    baseline(params: Record<string, string | number | undefined>): Promise<{
+        data: unknown;
+        elsRequestId: string | null;
+    }>;
+    /** GET /analytics/version-timeline. */
+    versionRegression(params: Record<string, string | undefined>): Promise<{
+        data: unknown;
+        elsRequestId: string | null;
+    }>;
+    /** GET /analytics/heatmap — 7×24 матрица счётчиков. */
+    heatmap(params: Record<string, string | undefined>): Promise<{
+        data: {
+            data: Array<{
+                dayOfWeek: number;
+                hour: number;
+                count: number;
+            }>;
+            from: string;
+            to: string;
+        };
+        elsRequestId: string | null;
+    }>;
+}
+//# sourceMappingURL=elsClient.d.ts.map

package/dist/elsClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"elsClient.d.ts","sourceRoot":"","sources":["../src/elsClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACnC,OAAO,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AA0CnF,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC;IACrE,6DAA6D;IAC7D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gCAAgC;IAChC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IACxB,4BAA4B;IAC5B,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAQD,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAqB;IACzC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAU;gBAE5B,IAAI,EAAE,gBAAgB;IAsB5B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAM5B,4EAA4E;YAC9D,OAAO;IAwFf,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC;QACvF,IAAI,EAAE,qBAAqB,CAAC;QAC5B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC;IAQI,aAAa,CACjB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IASrD,iBAAiB,CACrB,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAM,GAC9C,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IASpD,oBAAoB,CACxB,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAM,GACvD,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IASpD,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC;QACnF,IAAI,EAAE;YAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QACxC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC;IAQI,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC;QACxE,IAAI,EAAE;YAAE,IAAI,EAAE,eAAe,EAAE,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;QAC9E,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC;IAQI,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC;QACtE,IAAI,EAAE,OAAO,CAAC;QACd,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC;IAQF;;;;OAIG;IACG,QAAQ,IAAI,OAAO,CAAC;QACxB,IAAI,EAAE;YAAE,IAAI,EAAE,KAAK,CAAC;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAC;gBAAC,QAAQ,EAAE,OAAO,CAAC;gBAAC,aAAa,CAAC,EAAE,MAAM,CAAC;gBAAC,SAAS,CAAC,EAAE,MAAM,CAAA;aAAE,CAAC,CAAA;SAAE,CAAC;QACrH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC;IAYF;;;OAGG;IACG,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;QACzC,IAAI,EAAE,qBAAqB,GAAG;YAAE,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAClD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC;IAQF,4BAA4B;IACtB,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC;QACpE,IAAI,EAAE,OAAO,CAAC;QACd,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC;IAQF,qCAAqC;IAC/B,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC;QAChF,IAAI,EAAE,OAAO,CAAC;QACd,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC;IAQF,6BAA6B;IACvB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC;QAChE,IAAI,EAAE,OAAO,CAAC;QACd,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC;IAQF,+BAA+B;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC;QAC3E,IAAI,EAAE,OAAO,CAAC;QACd,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC;IAQF,uCAAuC;IACjC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC;QAC3E,IAAI,EAAE,OAAO,CAAC;QACd,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC;IAQF,uDAAuD;IACjD,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC;QACjE,IAAI,EAAE;YAAE,IAAI,EAAE,KAAK,CAAC;gBAAE,SAAS,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAC;gBAAC,KAAK,EAAE,MAAM,CAAA;aAAE,CAAC,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;QACpG,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC;CAOH"}

package/dist/elsClient.js

@@ -0,0 +1,285 @@
+import { Pool } from 'undici';
+import { mapHttpToToolError, ToolError } from './lib/errors.js';
+/**
+ * Phase 2 расширяет клиент новыми analytics-endpoint'ами:
+ *   - POST /errors/query              → queryLogsJql
+ *   - GET  /analytics/stats           → errorStats
+ *   - GET  /analytics/grouped-errors  → groupedErrors
+ *   - GET  /analytics/impact          → impact
+ *   - GET  /analytics/baseline        → baseline
+ *   - GET  /analytics/version-timeline→ versionRegression
+ *   - GET  /analytics/heatmap         → heatmap
+ *
+ * POST-варианты с filter-AST (`/analytics/<x>/query`) в Phase 2 НЕ выставляются
+ * через tools (LLM может сформировать AST через query_logs_jql); добавим
+ * по необходимости в Phase 3.
+ */
+/**
+ * Тонкий read-only клиент над ELS HTTP API.
+ *
+ * Дизайн:
+ *   - undici `Pool` с keep-alive (per-process, 16 connections).
+ *   - Bearer auth (ELS API key).
+ *   - Retry 5xx: 3 попытки, exponential backoff (250ms / 500ms / 1000ms).
+ *   - 429 НЕ ретраится — прокидывается LLM'у через ToolError + retryAfter.
+ *   - Timeout 30s per request (single ELS hop; AI-tools в Phase 5 получат свой).
+ *
+ * Маппинг tools → endpoints (см. README + 03-tools-catalog.md):
+ *   - GET /errors                     → searchLogs
+ *   - GET /errors/:traceId            → getLogDetails
+ *   - GET /errors/:traceId/similar    → findSimilarErrors
+ *   - GET /errors/:traceId/correlated → findCorrelatedErrors
+ *   - GET /analytics/top-messages     → topErrorMessages
+ *   - GET /analytics/histogram        → errorHistogram
+ *   - GET /analytics/traffic          → trafficStats
+ *   - GET /apps                       → listApps (master-only; на 403 → graceful fallback в tool)
+ */
+const MAX_RETRIES = 3;
+const BASE_BACKOFF_MS = 250;
+export class ElsClient {
+    baseUrl;
+    origin;
+    basePath;
+    apiKey;
+    timeoutMs;
+    log;
+    dispatcher;
+    ownDispatcher;
+    constructor(opts) {
+        this.baseUrl = opts.baseUrl.replace(/\/$/, '');
+        const u = new URL(this.baseUrl);
+        this.origin = `${u.protocol}//${u.host}`;
+        this.basePath = u.pathname.replace(/\/$/, '');
+        this.apiKey = opts.apiKey;
+        this.timeoutMs = opts.timeoutMs ?? 30_000;
+        this.log = opts.log;
+        if (opts.dispatcher) {
+            this.dispatcher = opts.dispatcher;
+            this.ownDispatcher = false;
+        }
+        else {
+            this.dispatcher = new Pool(this.origin, {
+                connections: 16,
+                keepAliveTimeout: 60_000,
+                keepAliveMaxTimeout: 300_000,
+            });
+            this.ownDispatcher = true;
+        }
+    }
+    async close() {
+        if (this.ownDispatcher && 'close' in this.dispatcher) {
+            await this.dispatcher.close();
+        }
+    }
+    /** Низкоуровневый GET с retry/backoff. Возвращает уже-распарсенный JSON. */
+    async request(path, opts = {}) {
+        const qs = new URLSearchParams();
+        if (opts.query) {
+            for (const [k, v] of Object.entries(opts.query)) {
+                if (v === undefined || v === null || v === '')
+                    continue;
+                qs.append(k, String(v));
+            }
+        }
+        const fullPath = `${this.basePath}${path}` + (qs.toString() ? `?${qs.toString()}` : '');
+        let attempt = 0;
+        let lastError;
+        while (attempt <= (opts.noRetry ? 0 : MAX_RETRIES)) {
+            attempt += 1;
+            try {
+                const method = opts.method ?? 'GET';
+                const hasBody = method === 'POST' && opts.body !== undefined;
+                const res = await this.dispatcher.request({
+                    origin: this.origin,
+                    method,
+                    path: fullPath,
+                    headers: {
+                        authorization: `Bearer ${this.apiKey}`,
+                        accept: 'application/json',
+                        'user-agent': 'els-mcp/0.1',
+                        ...(hasBody ? { 'content-type': 'application/json' } : {}),
+                    },
+                    body: hasBody ? JSON.stringify(opts.body) : undefined,
+                    headersTimeout: this.timeoutMs,
+                    bodyTimeout: this.timeoutMs,
+                });
+                const status = res.statusCode;
+                const text = await res.body.text();
+                let body;
+                try {
+                    body = text ? JSON.parse(text) : null;
+                }
+                catch {
+                    body = text;
+                }
+                const headers = {};
+                for (const [k, v] of Object.entries(res.headers)) {
+                    headers[k.toLowerCase()] = v;
+                }
+                if (status === 429) {
+                    const retryAfter = pickHeader(headers, 'retry-after');
+                    throw mapHttpToToolError(429, body, retryAfter ?? null);
+                }
+                if (status >= 500 && attempt <= MAX_RETRIES && !opts.noRetry) {
+                    this.log?.warn?.({ path: fullPath, status, attempt }, 'ELS upstream 5xx, will retry');
+                    await sleep(BASE_BACKOFF_MS * Math.pow(2, attempt - 1));
+                    continue;
+                }
+                if (status >= 400) {
+                    throw mapHttpToToolError(status, body, pickHeader(headers, 'retry-after') ?? null);
+                }
+                return { status, body, headers };
+            }
+            catch (err) {
+                if (err instanceof ToolError)
+                    throw err;
+                lastError = err;
+                if (attempt > MAX_RETRIES || opts.noRetry) {
+                    this.log?.error?.({ err, path: fullPath, attempt }, 'ELS request failed');
+                    throw new ToolError('UPSTREAM_UNAVAILABLE', `ELS request failed: ${err instanceof Error ? err.message : String(err)}`, { cause: err, retryAfter: 5 });
+                }
+                await sleep(BASE_BACKOFF_MS * Math.pow(2, attempt - 1));
+            }
+        }
+        throw new ToolError('UPSTREAM_UNAVAILABLE', `ELS request exhausted retries: ${lastError instanceof Error ? lastError.message : String(lastError)}`, { cause: lastError, retryAfter: 5 });
+    }
+    // ─── Public methods (per-tool) ───────────────────────────────────────────
+    async searchLogs(params) {
+        const res = await this.request('/errors', { query: params });
+        return {
+            data: res.body,
+            elsRequestId: pickStringHeader(res.headers, 'x-request-id'),
+        };
+    }
+    async getLogDetails(traceId) {
+        const encoded = encodeURIComponent(traceId);
+        const res = await this.request(`/errors/${encoded}`);
+        return {
+            data: res.body,
+            elsRequestId: pickStringHeader(res.headers, 'x-request-id'),
+        };
+    }
+    async findSimilarErrors(traceId, params = {}) {
+        const encoded = encodeURIComponent(traceId);
+        const res = await this.request(`/errors/${encoded}/similar`, { query: params });
+        return {
+            data: res.body,
+            elsRequestId: pickStringHeader(res.headers, 'x-request-id'),
+        };
+    }
+    async findCorrelatedErrors(traceId, params = {}) {
+        const encoded = encodeURIComponent(traceId);
+        const res = await this.request(`/errors/${encoded}/correlated`, { query: params });
+        return {
+            data: res.body,
+            elsRequestId: pickStringHeader(res.headers, 'x-request-id'),
+        };
+    }
+    async topErrorMessages(params) {
+        const res = await this.request('/analytics/top-messages', { query: params });
+        return {
+            data: res.body,
+            elsRequestId: pickStringHeader(res.headers, 'x-request-id'),
+        };
+    }
+    async errorHistogram(params) {
+        const res = await this.request('/analytics/histogram', { query: params });
+        return {
+            data: res.body,
+            elsRequestId: pickStringHeader(res.headers, 'x-request-id'),
+        };
+    }
+    async trafficStats(params) {
+        const res = await this.request('/analytics/traffic', { query: params });
+        return {
+            data: res.body,
+            elsRequestId: pickStringHeader(res.headers, 'x-request-id'),
+        };
+    }
+    /**
+     * GET /apps — требует master-key (`requireMaster`). Для обычного ELS-key
+     * вернёт 403. Tool listApps в свою очередь обрабатывает 403 и возвращает
+     * derived-from-context результат.
+     */
+    async listApps() {
+        const res = await this.request('/apps');
+        return {
+            data: res.body,
+            elsRequestId: pickStringHeader(res.headers, 'x-request-id'),
+        };
+    }
+    // ─── Phase 2 endpoints ────────────────────────────────────────────────────
+    /**
+     * POST /errors/query — JQL-style structured filter (AST + pagination + search).
+     * Возвращает items + total + facets + histogram (та же форма что GET /errors).
+     */
+    async queryLogsJql(body) {
+        const res = await this.request('/errors/query', { method: 'POST', body });
+        return {
+            data: res.body,
+            elsRequestId: pickStringHeader(res.headers, 'x-request-id'),
+        };
+    }
+    /** GET /analytics/stats. */
+    async errorStats(params) {
+        const res = await this.request('/analytics/stats', { query: params });
+        return {
+            data: res.body,
+            elsRequestId: pickStringHeader(res.headers, 'x-request-id'),
+        };
+    }
+    /** GET /analytics/grouped-errors. */
+    async groupedErrors(params) {
+        const res = await this.request('/analytics/grouped-errors', { query: params });
+        return {
+            data: res.body,
+            elsRequestId: pickStringHeader(res.headers, 'x-request-id'),
+        };
+    }
+    /** GET /analytics/impact. */
+    async impact(params) {
+        const res = await this.request('/analytics/impact', { query: params });
+        return {
+            data: res.body,
+            elsRequestId: pickStringHeader(res.headers, 'x-request-id'),
+        };
+    }
+    /** GET /analytics/baseline. */
+    async baseline(params) {
+        const res = await this.request('/analytics/baseline', { query: params });
+        return {
+            data: res.body,
+            elsRequestId: pickStringHeader(res.headers, 'x-request-id'),
+        };
+    }
+    /** GET /analytics/version-timeline. */
+    async versionRegression(params) {
+        const res = await this.request('/analytics/version-timeline', { query: params });
+        return {
+            data: res.body,
+            elsRequestId: pickStringHeader(res.headers, 'x-request-id'),
+        };
+    }
+    /** GET /analytics/heatmap — 7×24 матрица счётчиков. */
+    async heatmap(params) {
+        const res = await this.request('/analytics/heatmap', { query: params });
+        return {
+            data: res.body,
+            elsRequestId: pickStringHeader(res.headers, 'x-request-id'),
+        };
+    }
+}
+function pickHeader(headers, name) {
+    const v = headers[name.toLowerCase()];
+    if (Array.isArray(v))
+        return v[0];
+    return v;
+}
+function pickStringHeader(headers, name) {
+    const v = pickHeader(headers, name);
+    return typeof v === 'string' ? v : null;
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=elsClient.js.map

package/dist/elsClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"elsClient.js","sourceRoot":"","sources":["../src/elsClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAmB,MAAM,QAAQ,CAAC;AAG/C,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEhE;;;;;;;;;;;;;GAaG;AAEH;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,eAAe,GAAG,GAAG,CAAC;AA4B5B,MAAM,OAAO,SAAS;IACH,OAAO,CAAS;IAChB,MAAM,CAAS;IACf,QAAQ,CAAS;IACjB,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,GAAG,CAAqB;IACxB,UAAU,CAAa;IACvB,aAAa,CAAU;IAExC,YAAY,IAAsB;QAChC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;QAC1C,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QAEpB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;YAClC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBACtC,WAAW,EAAE,EAAE;gBACf,gBAAgB,EAAE,MAAM;gBACxB,mBAAmB,EAAE,OAAO;aAC7B,CAAC,CAAC;YACH,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,aAAa,IAAI,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrD,MAAO,IAAI,CAAC,UAAmB,CAAC,KAAK,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,4EAA4E;IACpE,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,OAAuB,EAAE;QAC3D,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE;oBAAE,SAAS;gBACxD,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAExF,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,SAAkB,CAAC;QAEvB,OAAO,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;gBACpC,MAAM,OAAO,GAAG,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC;gBAC7D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;oBACxC,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,MAAM;oBACN,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;wBACtC,MAAM,EAAE,kBAAkB;wBAC1B,YAAY,EAAE,aAAa;wBAC3B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC3D;oBACD,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;oBACrD,cAAc,EAAE,IAAI,CAAC,SAAS;oBAC9B,WAAW,EAAE,IAAI,CAAC,SAAS;iBAC5B,CAAC,CAAC;gBAEH,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC;gBAC9B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACnC,IAAI,IAAa,CAAC;gBAClB,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACxC,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,GAAG,IAAI,CAAC;gBACd,CAAC;gBAED,MAAM,OAAO,GAAkD,EAAE,CAAC;gBAClE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBACjD,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,GAAG,CAAkC,CAAC;gBAChE,CAAC;gBAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;oBACnB,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;oBACtD,MAAM,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,IAAI,IAAI,CAAC,CAAC;gBAC1D,CAAC;gBACD,IAAI,MAAM,IAAI,GAAG,IAAI,OAAO,IAAI,WAAW,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;oBAC7D,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,CACd,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,EACnC,8BAA8B,CAC/B,CAAC;oBACF,MAAM,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;oBACxD,SAAS;gBACX,CAAC;gBACD,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;oBAClB,MAAM,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,IAAI,CAAC,CAAC;gBACrF,CAAC;gBAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YACnC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,SAAS;oBAAE,MAAM,GAAG,CAAC;gBACxC,SAAS,GAAG,GAAG,CAAC;gBAChB,IAAI,OAAO,GAAG,WAAW,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBAC1C,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAAC;oBAC1E,MAAM,IAAI,SAAS,CACjB,sBAAsB,EACtB,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACzE,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,CAC9B,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,MAAM,IAAI,SAAS,CACjB,sBAAsB,EACtB,kCAAkC,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EACtG,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,EAAE,CACpC,CAAC;IACJ,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,UAAU,CAAC,MAA6D;QAI5E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAA6B;YACvC,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC;SAC5D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,OAAe;QAEf,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;QACrD,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAgB;YAC1B,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC;SAC5D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,OAAe,EACf,SAA6C,EAAE;QAE/C,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,OAAO,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAChF,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC;SAC5D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,OAAe,EACf,SAAsD,EAAE;QAExD,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,OAAO,aAAa,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACnF,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC;SAC5D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAmD;QAIxE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7E,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAyC;YACnD,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC;SAC5D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAA0C;QAI7D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1E,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAA+E;YACzF,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC;SAC5D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAA0C;QAI3D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACxE,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC;SAC5D,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ;QAIZ,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAET;YACD,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC;SAC5D,CAAC;IACJ,CAAC;IAED,6EAA6E;IAE7E;;;OAGG;IACH,KAAK,CAAC,YAAY,CAAC,IAAa;QAI9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAmD;YAC7D,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC;SAC5D,CAAC;IACJ,CAAC;IAED,4BAA4B;IAC5B,KAAK,CAAC,UAAU,CAAC,MAA0C;QAIzD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC;SAC5D,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,KAAK,CAAC,aAAa,CAAC,MAAmD;QAIrE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/E,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC;SAC5D,CAAC;IACJ,CAAC;IAED,6BAA6B;IAC7B,KAAK,CAAC,MAAM,CAAC,MAA0C;QAIrD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACvE,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC;SAC5D,CAAC;IACJ,CAAC;IAED,+BAA+B;IAC/B,KAAK,CAAC,QAAQ,CAAC,MAAmD;QAIhE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACzE,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC;SAC5D,CAAC;IACJ,CAAC;IAED,uCAAuC;IACvC,KAAK,CAAC,iBAAiB,CAAC,MAA0C;QAIhE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACjF,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC;SAC5D,CAAC;IACJ,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,OAAO,CAAC,MAA0C;QAItD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACxE,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAqG;YAC/G,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC;SAC5D,CAAC;IACJ,CAAC;CACF;AAED,SAAS,UAAU,CACjB,OAAsD,EACtD,IAAY;IAEZ,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAsD,EACtD,IAAY;IAEZ,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACpC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/http/app.d.ts

@@ -0,0 +1,40 @@
+import { type Express, type Request, type Response, type NextFunction } from 'express';
+import type { Logger } from 'pino';
+import type { Config } from '../config.js';
+import { ElsClient } from '../elsClient.js';
+import { HttpTransportManager } from '../transports/http.js';
+import { createJwksResolver } from './jwks.js';
+import type { RedisService } from '../cache/redis.js';
+import type { MiddlewareDeps } from '../middleware/withMiddleware.js';
+/**
+ * Создаёт Express-приложение для Streamable HTTP transport.
+ *
+ * Структура:
+ *   - `/els/healthz`, `/els/readyz` — public, без auth
+ *   - `/els/metrics` — public, Prometheus (отключаемо через MCP_METRICS_ENABLED=false)
+ *   - `/els/.well-known/*` — public, без auth
+ *   - `/els/mcp` — требует Bearer (ELS-key или OIDC JWT), + originGuard
+ *
+ * Возвращает app + manager (нужен для graceful shutdown).
+ */
+export interface CreateHttpAppOptions {
+    config: Config;
+    log: Logger;
+    /** Для тестов: ManaualTransportManager / mock JWKS. */
+    transportManager?: HttpTransportManager;
+    jwksResolver?: ReturnType<typeof createJwksResolver>;
+    /** Для тестов: внешний ElsClient (probe). */
+    probeElsClient?: ElsClient;
+    /** Phase 6: Redis для readyz / cache / DCR. */
+    redis?: RedisService | null;
+    /** Phase 6: middleware deps (передаём в transport manager). */
+    middlewareDeps?: MiddlewareDeps;
+}
+export interface HttpAppHandle {
+    app: Express;
+    manager: HttpTransportManager;
+    probeClient: ElsClient | undefined;
+}
+export declare function createHttpApp(opts: CreateHttpAppOptions): HttpAppHandle;
+export type { NextFunction, Request, Response };
+//# sourceMappingURL=app.d.ts.map

package/dist/http/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/http/app.ts"],"names":[],"mappings":"AAAA,OAAgB,EAAE,KAAK,OAAO,EAAU,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,SAAS,CAAC;AAGxG,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACnC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAQ/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAKtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEtE;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,uDAAuD;IACvD,gBAAgB,CAAC,EAAE,oBAAoB,CAAC;IACxC,YAAY,CAAC,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;IACrD,6CAA6C;IAC7C,cAAc,CAAC,EAAE,SAAS,CAAC;IAC3B,+CAA+C;IAC/C,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B,+DAA+D;IAC/D,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,OAAO,CAAC;IACb,OAAO,EAAE,oBAAoB,CAAC;IAC9B,WAAW,EAAE,SAAS,GAAG,SAAS,CAAC;CACpC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,aAAa,CAuHvE;AAgDD,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC"}

package/dist/http/app.js

@@ -0,0 +1,135 @@
+import express, { Router } from 'express';
+import helmet from 'helmet';
+import cors from 'cors';
+import { HttpTransportManager } from '../transports/http.js';
+import { createJwksResolver } from './jwks.js';
+import { createAuthMiddleware } from './middleware/auth.js';
+import { requestId } from './middleware/requestId.js';
+import { errorHandler } from './middleware/errorHandler.js';
+import { createOriginGuard } from './middleware/originGuard.js';
+import { createHealthRouter } from './routes/health.js';
+import { createWellKnownRouter } from './routes/wellKnown.js';
+import { ALL_TOOL_NAMES } from '../tools/index.js';
+import { getMetricsContentType, getMetricsText, } from '../observability/metrics.js';
+export function createHttpApp(opts) {
+    const { config, log } = opts;
+    const app = express();
+    app.disable('x-powered-by');
+    app.set('trust proxy', true);
+    // helmet — безопасные defaults. CSP в API-сервисе не нужен.
+    app.use(helmet({
+        contentSecurityPolicy: false,
+        crossOriginEmbedderPolicy: false,
+    }));
+    // CORS: allow известные origins + dev-friendly localhost-*.
+    app.use(cors(buildCorsOptions(config.corsOrigins)));
+    // Phase 6: request-id middleware с child logger.
+    app.use(requestId({ logger: log }));
+    // JSON body parser. MCP messages могут быть batch'ами; лимит 4 MB
+    // (типичные tool responses ELS ≤ 1 MB).
+    app.use(express.json({ limit: '4mb' }));
+    // ─── /els router ──────────────────────────────────────────────────────
+    const router = Router();
+    // Public — health
+    // Phase 6: используем Phase 4 health-handlers с реальными probes (redis + ELS).
+    router.use('/', createHealthRouter({
+        ...(opts.probeElsClient ? { elsClient: opts.probeElsClient } : {}),
+        ...(opts.redis ? { redis: opts.redis } : {}),
+        log,
+    }));
+    // Public — Prometheus metrics endpoint.
+    if (config.metricsEnabled) {
+        router.get('/metrics', async (_req, res) => {
+            try {
+                const body = await getMetricsText();
+                res.status(200);
+                res.setHeader('content-type', getMetricsContentType());
+                res.send(body);
+            }
+            catch (err) {
+                res.status(500).type('text/plain').send(`# metrics error: ${err.message}\n`);
+            }
+        });
+    }
+    else {
+        router.get('/metrics', (_req, res) => {
+            res.status(404).json({ error: 'metrics_disabled' });
+        });
+    }
+    // Public — well-known
+    router.use('/.well-known', createWellKnownRouter({
+        config,
+        toolNames: ALL_TOOL_NAMES,
+    }));
+    // Protected — MCP endpoint
+    const jwks = opts.jwksResolver ?? createJwksResolver(config);
+    const manager = opts.transportManager ??
+        new HttpTransportManager({
+            config,
+            log,
+            ...(opts.redis ? { redis: opts.redis } : {}),
+            ...(opts.middlewareDeps ? { middlewareDeps: opts.middlewareDeps } : {}),
+        });
+    // Phase 6 originGuard — защита от browser-clients с unknown origin.
+    const originGuard = createOriginGuard({
+        allowed: config.corsOrigins,
+        log,
+    });
+    router.post('/mcp', originGuard, createAuthMiddleware({ config, jwks, log }), async (req, res) => {
+        await manager.handleRequest(req, res);
+    });
+    // GET /mcp — long-lived SSE (server → client notifications). Hand off to SDK.
+    router.get('/mcp', originGuard, createAuthMiddleware({ config, jwks, log }), async (req, res) => {
+        await manager.handleRequest(req, res);
+    });
+    // DELETE /mcp — explicit session termination.
+    router.delete('/mcp', originGuard, createAuthMiddleware({ config, jwks, log }), async (req, res) => {
+        await manager.handleRequest(req, res);
+    });
+    app.use('/els', router);
+    app.use(errorHandler(log));
+    return { app, manager, probeClient: opts.probeElsClient };
+}
+function buildCorsOptions(allowList) {
+    const exact = new Set();
+    // Точные origin'ы из конфига
+    for (const o of allowList) {
+        if (o === 'http://localhost' || o === 'http://127.0.0.1')
+            continue;
+        exact.add(o);
+    }
+    return {
+        origin(origin, cb) {
+            if (!origin) {
+                // not-a-browser request (curl, server-to-server) — пропускаем без CORS-проверки
+                cb(null, true);
+                return;
+            }
+            if (exact.has(origin)) {
+                cb(null, true);
+                return;
+            }
+            // dev: любой порт на localhost / 127.0.0.1
+            if (allowList.includes('http://localhost') &&
+                /^http:\/\/(localhost|127\.0\.0\.1)(:\d+)?$/.test(origin)) {
+                cb(null, true);
+                return;
+            }
+            cb(new Error(`CORS: origin "${origin}" not allowed`));
+        },
+        methods: ['GET', 'POST', 'DELETE', 'OPTIONS'],
+        allowedHeaders: [
+            'Authorization',
+            'Content-Type',
+            'Accept',
+            'Mcp-Session-Id',
+            'Last-Event-ID',
+            'MCP-Protocol-Version',
+            'X-Request-Id',
+        ],
+        exposedHeaders: ['Mcp-Session-Id', 'X-Request-Id'],
+        credentials: false,
+        maxAge: 600,
+    };
+}
+//# sourceMappingURL=app.js.map

package/dist/http/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/http/app.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,EAAE,EAAgB,MAAM,EAAkD,MAAM,SAAS,CAAC;AACxG,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,IAA0B,MAAM,MAAM,CAAC;AAI9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,OAAO,EACL,qBAAqB,EACrB,cAAc,GACf,MAAM,6BAA6B,CAAC;AAmCrC,MAAM,UAAU,aAAa,CAAC,IAA0B;IACtD,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAE7B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5B,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAE7B,4DAA4D;IAC5D,GAAG,CAAC,GAAG,CACL,MAAM,CAAC;QACL,qBAAqB,EAAE,KAAK;QAC5B,yBAAyB,EAAE,KAAK;KACjC,CAAC,CACH,CAAC;IAEF,4DAA4D;IAC5D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAEpD,iDAAiD;IACjD,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAEpC,kEAAkE;IAClE,wCAAwC;IACxC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAExC,yEAAyE;IACzE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,kBAAkB;IAClB,gFAAgF;IAChF,MAAM,CAAC,GAAG,CACR,GAAG,EACH,kBAAkB,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG;KACJ,CAAC,CACH,CAAC;IAEF,wCAAwC;IACxC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,IAAa,EAAE,GAAa,EAAE,EAAE;YAC5D,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,qBAAqB,EAAE,CAAC,CAAC;gBACvD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CACrC,oBAAqB,GAAa,CAAC,OAAO,IAAI,CAC/C,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;YACtD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,sBAAsB;IACtB,MAAM,CAAC,GAAG,CACR,cAAc,EACd,qBAAqB,CAAC;QACpB,MAAM;QACN,SAAS,EAAE,cAAc;KAC1B,CAAC,CACH,CAAC;IAEF,2BAA2B;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,OAAO,GACX,IAAI,CAAC,gBAAgB;QACrB,IAAI,oBAAoB,CAAC;YACvB,MAAM;YACN,GAAG;YACH,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,CAAC,CAAC;IAEL,oEAAoE;IACpE,MAAM,WAAW,GAAG,iBAAiB,CAAC;QACpC,OAAO,EAAE,MAAM,CAAC,WAAW;QAC3B,GAAG;KACJ,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CACT,MAAM,EACN,WAAW,EACX,oBAAoB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAC3C,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjB,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC,CACF,CAAC;IAEF,8EAA8E;IAC9E,MAAM,CAAC,GAAG,CACR,MAAM,EACN,WAAW,EACX,oBAAoB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAC3C,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjB,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC,CACF,CAAC;IAEF,8CAA8C;IAC9C,MAAM,CAAC,MAAM,CACX,MAAM,EACN,WAAW,EACX,oBAAoB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAC3C,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjB,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAExB,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IAE3B,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAmB;IAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,6BAA6B;IAC7B,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,kBAAkB,IAAI,CAAC,KAAK,kBAAkB;YAAE,SAAS;QACnE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;IAED,OAAO;QACL,MAAM,CAAC,MAAM,EAAE,EAAE;YACf,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,gFAAgF;gBAChF,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACf,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtB,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACf,OAAO;YACT,CAAC;YACD,2CAA2C;YAC3C,IACE,SAAS,CAAC,QAAQ,CAAC,kBAAkB,CAAC;gBACtC,4CAA4C,CAAC,IAAI,CAAC,MAAM,CAAC,EACzD,CAAC;gBACD,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACf,OAAO;YACT,CAAC;YACD,EAAE,CAAC,IAAI,KAAK,CAAC,iBAAiB,MAAM,eAAe,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC7C,cAAc,EAAE;YACd,eAAe;YACf,cAAc;YACd,QAAQ;YACR,gBAAgB;YAChB,eAAe;YACf,sBAAsB;YACtB,cAAc;SACf;QACD,cAAc,EAAE,CAAC,gBAAgB,EAAE,cAAc,CAAC;QAClD,WAAW,EAAE,KAAK;QAClB,MAAM,EAAE,GAAG;KACZ,CAAC;AACJ,CAAC"}

package/dist/http/jwks.d.ts

@@ -0,0 +1,8 @@
+import { type JWTPayload } from 'jose';
+import type { Config } from '../config.js';
+export interface JwksResolver {
+    /** Проверяет JWT, возвращает payload или бросает JOSE-исключение. */
+    verify(token: string): Promise<JWTPayload>;
+}
+export declare function createJwksResolver(config: Config): JwksResolver;
+//# sourceMappingURL=jwks.d.ts.map

package/dist/http/jwks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwks.d.ts","sourceRoot":"","sources":["../../src/http/jwks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,UAAU,EAAa,MAAM,MAAM,CAAC;AACtE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAmB3C,MAAM,WAAW,YAAY;IAC3B,qEAAqE;IACrE,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAC5C;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAiB/D"}