@jagilber-org/index-server 1.22.0

package/CODE_OF_CONDUCT.md

@@ -0,0 +1,49 @@
+# Contributor Covenant Code of Conduct
+
+## Our Pledge
+
+We as members, contributors, and leaders pledge to make participation in our community a harassment-free experience for everyone, regardless of age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, level of experience, education, socio-economic status, nationality, personal appearance, race, caste, color, religion, or sexual identity and orientation.
+
+We pledge to act and interact in ways that contribute to an open, welcoming, diverse, inclusive, and healthy community.
+
+## Our Standards
+
+Examples of behavior that contributes to a positive environment for our community include:
+
+- Demonstrating empathy and kindness toward other people
+- Being respectful of differing opinions, viewpoints, and experiences
+- Giving and gracefully accepting constructive feedback
+- Accepting responsibility and apologizing to those affected by our mistakes, and learning from the experience
+- Focusing on what is best not just for us as individuals, but for the overall community
+
+Examples of unacceptable behavior include:
+
+- The use of sexualized language or imagery, and sexual attention or advances of any kind
+- Trolling, insulting or derogatory comments, and personal or political attacks
+- Public or private harassment
+- Publishing others' private information, such as a physical or email address, without their explicit permission
+- Other conduct which could reasonably be considered inappropriate in a professional setting
+
+## Scope
+
+This Code of Conduct applies within all community spaces, including GitHub repositories, issue trackers, pull requests, discussions, and any other communication channels associated with this project. It also applies when an individual is officially representing the community in public spaces.
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the project maintainer via [GitHub Issues](https://github.com/jagilber-org/index-server/issues) or by contacting the maintainer directly.
+
+All complaints will be reviewed and investigated promptly and fairly. The project maintainer is obligated to respect the privacy and security of the reporter of any incident.
+
+### Enforcement Guidelines
+
+**1. Correction** — A private, written warning providing clarity around the nature of the violation and an explanation of why the behavior was inappropriate. A public apology may be requested.
+
+**2. Warning** — A warning with consequences for continued behavior. No interaction with the people involved for a specified period of time. Violating these terms may lead to a temporary or permanent ban.
+
+**3. Temporary Ban** — A temporary ban from any sort of interaction or public communication with the community for a specified period of time.
+
+**4. Permanent Ban** — A permanent ban from any sort of public interaction within the community.
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant](https://www.contributor-covenant.org), version 2.1, available at [https://www.contributor-covenant.org/version/2/1/code_of_conduct.html](https://www.contributor-covenant.org/version/2/1/code_of_conduct.html).

package/CONTRIBUTING.md

@@ -0,0 +1,99 @@
+# Contributing
+
+Thanks for your interest in contributing.
+
+## Contribution Model
+
+Public contributions should target `main` in the public repository.
+
+- Fork `jagilber-org/index-server`
+- Create a feature branch for your change
+- Open a pull request against `main`
+
+Maintainers may use additional private development and publishing workflows internally, but public contributors should work from the public repository and its pull request flow.
+
+## Development Setup
+
+1. Node 22+
+2. `npm install`
+3. `npm test`
+4. `npm run build`
+
+## Branching
+
+Use feature branches. Submit PRs to `main`.
+
+## Commit Messages
+
+Use conventional style where practical (feat:, fix:, docs:, chore:).
+
+## Tests
+
+Include unit tests for new logic. Run `npm test` and ensure coverage not reduced.
+
+### Repo Root Policy
+
+The repository root must stay clean. Do not create directories or files in the repo root
+beyond what is tracked in git. Specifically:
+
+- **No `instructions/` directory** — instruction data lives outside the repo (set `INDEX_SERVER_DIR` env var). Tests use isolated temp directories via `os.tmpdir()`.
+- **No temp/log sprawl** — use `tmp/` (gitignored) for transient files, never the repo root.
+- **No runtime data dirs** — `data/`, `memory/`, `metrics/`, `feedback/` contain `.gitkeep` only; runtime data goes in external paths configured via env vars.
+
+See `docs/testing.md` for the test isolation pattern.
+
+### Configuration & Environment Variables
+
+Do NOT introduce new top-level `process.env.*` usages scattered across the codebase.
+
+All runtime and test tunables must flow through `src/config/runtimeConfig.ts`:
+
+1. If you need a new timing / wait value, extend `INDEX_SERVER_TIMING_JSON` key usage (e.g. `{"featureX.startupWait":5000}`) instead of adding `FEATUREX_STARTUP_WAIT_MS`.
+2. For logging verbosity, use `INDEX_SERVER_LOG_LEVEL` (levels: silent,error,warn,info,debug,trace) or add a trace token to `INDEX_SERVER_TRACE` (comma-separated) rather than a new boolean flag.
+3. For mutation gating, rely on `INDEX_SERVER_MUTATION` (legacy `INDEX_SERVER_MUTATION` is auto-mapped; do not reintroduce it).
+4. Fast coverage paths use `INDEX_SERVER_TEST_MODE=coverage-fast`; legacy `FAST_COVERAGE` accepted but should not appear in new code.
+
+If an absolutely new capability requires configuration:
+
+- Add parsing inside `runtimeConfig.ts` (with JSDoc + deprecation mapping if replacing legacy flags)
+- Update `docs/CONFIGURATION.md` and README consolidation section
+- Add a one-time warning for any temporary legacy alias
+
+PRs adding raw `process.env.X` reads outside the config module will be requested to refactor before merge.
+
+### Automated Enforcement
+
+An automated guard (`npm run guard:env`) executes during `build:verify` and CI to block newly introduced direct `process.env.*` reads. If your change legitimately needs a bootstrap-time read (rare), either:
+
+1. Route through `runtimeConfig.ts` (preferred), or
+2. Add a narrowly scoped allowlist pattern with justification in `scripts/enforce-config-usage.ts` (include a comment referencing the follow-up issue to migrate/remove it).
+
+Do not silence the guard by broadening allowlists—refactor instead. Enforcement failures list file:line with a remediation suggestion.
+
+## Security
+
+Do not include secrets in commits. Report vulnerabilities per `SECURITY.md`.
+
+## Urgent Security Merge Policy
+
+Critical or actively-exploited vulnerabilities may be merged with **zero pre-merge review** when delay would increase exposure risk. The following conditions apply:
+
+1. **Post-merge audit required** — a full code review MUST occur within 24 hours of the merge.
+2. **Commit message rationale** — the merge commit must document why the normal review process was bypassed (e.g., active exploitation, severity, blast radius).
+3. **Async reviewer sign-off** — at least one maintainer must provide a reviewing sign-off within 24 hours, confirming the fix is correct and complete.
+4. **Reference the vulnerability** — the commit and/or PR must reference the relevant CVE, advisory, or issue number.
+5. **Scope limit** — this policy applies **only** to critical and actively-exploited vulnerabilities. Non-critical security issues follow the standard review process.
+
+If the post-merge audit reveals problems, a follow-up fix must be prioritized immediately. Abuse of this policy to bypass review for non-critical changes will be treated as a process violation.
+
+## Code Style
+
+Respect existing formatting. Run any lint scripts if present.
+
+## Constitution
+
+This project is governed by a machine-readable constitution (`constitution.json` / `.specify/memory/constitution.md`). All contributions must align with its principles — review it before submitting significant changes.
+
+## Questions
+
+Open a discussion or issue.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 jagilber
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,228 @@
+# Index Server
+
+**Governed knowledge base for AI agents via the Model Context Protocol (MCP).**
+
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
+[![npm version](https://img.shields.io/github/v/tag/jagilber-org/index-server?label=GitHub%20Packages)](https://github.com/jagilber-org/index-server/packages)
+[![Node.js Version](https://img.shields.io/badge/node-%3E%3D22%20LTS-brightgreen)](package.json)
+[![codecov](https://codecov.io/gh/jagilber-org/index-server/graph/badge.svg)](https://codecov.io/gh/jagilber-org/index-server)
+[![VS Code Marketplace](https://img.shields.io/visual-studio-marketplace/v/jagilber-org.index-server?label=VS%20Code%20Marketplace)](https://marketplace.visualstudio.com/items?itemName=jagilber-org.index-server)
+[![Open VSX](https://img.shields.io/open-vsx/v/jagilber-org/index-server?label=Open%20VSX)](https://open-vsx.org/extension/jagilber-org/index-server)
+
+---
+
+> **🚀 [Quick Start Guide](docs/quickstart.md)** — Get running in 5 minutes with HTTPS and semantic search
+>
+> **📖 [Use Case Scenarios](docs/use-cases.md)** — Real-world examples for support engineers, dev teams, and knowledge management
+
+## What Is Index Server?
+
+Index Server is a central knowledge base that AI agents connect to via the [Model Context Protocol (MCP)](https://modelcontextprotocol.io). Agents search, read, and contribute knowledge that persists across sessions and repositories — building a governed catalog with versioning, audit trails, and approval workflows. An optional admin dashboard provides real-time monitoring of catalog health, usage analytics, and drift detection.
+
+---
+
+## Quick Start
+
+### Path A: npx (zero install)
+
+```bash
+npx @jagilber-org/index-server --dashboard
+```
+
+### Path B: VS Code Extension
+
+Install **Index Server** from the [VS Code Marketplace](https://marketplace.visualstudio.com/items?itemName=jagilber-org.index-server) or [Open VSX](https://open-vsx.org/extension/jagilber-org/index-server).
+
+### Path C: Docker
+
+```bash
+docker compose up        # HTTP on :8787
+docker compose up tls    # HTTPS on :8787 with self-signed certs
+```
+
+See [Docker Deployment Guide](docs/docker_deployment.md) for volumes, environment variables, and production configuration.
+
+### Path D: From source
+
+```bash
+git clone https://github.com/jagilber-org/index-server.git
+cd index-server
+npm install
+npm run build
+```
+
+### Configure your MCP client
+
+Add to VS Code (`.vscode/mcp.json`):
+
+```jsonc
+{
+  "servers": {
+    "index-server": {
+      "type": "stdio",
+      "command": "npx",
+      "args": [
+        "@jagilber-org/index-server",
+        "--dashboard"
+      ]
+    }
+  }
+}
+```
+
+Copilot CLI (`~/.copilot/mcp-config.json`):
+
+```json
+{
+  "mcpServers": {
+    "index-server": {
+      "type": "stdio",
+      "command": "npx",
+      "args": ["@jagilber-org/index-server", "--dashboard"],
+      "tools": ["*"]
+    }
+  }
+}
+```
+
+Claude Desktop (`claude_desktop_config.json`):
+
+```json
+{
+  "mcpServers": {
+    "index-server": {
+      "type": "stdio",
+      "command": "npx",
+      "args": ["@jagilber-org/index-server", "--dashboard"],
+      "tools": ["*"]
+    }
+  }
+}
+```
+
+See [MCP Configuration Guide](docs/mcp_configuration.md) for advanced patterns, environment variables, and TLS setup.
+
+### Verify
+
+- Server appears in your MCP client's server list
+- Run `tools/list` to see 40+ available tools
+- Dashboard (if enabled) at `http://localhost:8787`
+
+### Enable Semantic Search (optional)
+
+Add one env variable to any MCP config above to get embedding-based similarity search:
+
+```jsonc
+"env": {
+  "INDEX_SERVER_SEMANTIC_ENABLED": "1"
+}
+```
+
+First search downloads a ~90MB model (one-time). After that, all searches automatically use semantic mode — no code changes needed. See [Quick Start Guide](docs/quickstart.md#4-enable-semantic-search-optional) for GPU acceleration and offline options.
+
+---
+
+## Teach Your Agents
+
+Copy-paste these instructions so your AI agents discover and use the shared knowledge base automatically.
+
+### Global instructions (`~/.github/copilot-instructions.md`)
+
+```markdown
+## Index Server
+- If index-server MCP tools are available, use them as a shared knowledge base for validated cross-repo patterns and standards.
+- Search before creating: use `index_search` with 2-5 keywords, then `index_dispatch` with action="get" for details.
+- After learning something reusable, add it with `index_add` or promote from a repo with `promote_from_repo`.
+- Index entries are promoted snapshots — always prefer current repo files over index content.
+```
+
+### Per-repo instructions (`.github/copilot-instructions.md`)
+
+```markdown
+## Index Server Integration
+- Search order: repo files → .instructions/ → index-server → external docs
+- **Search before add/promote**: Always search for existing guidance before creating new instructions. Use `index_search` with relevant keywords and inspect top results.
+- To retrieve: `index_search` → `index_dispatch` with action="get" and the instruction ID
+- To contribute: validate locally in `.instructions/` first, then promote with `promote_from_repo`
+- To maintain: use `index_dispatch` with action="groom" to clean duplicates, `index_governanceUpdate` to deprecate stale content
+- Current repo state always wins over promoted index snapshots
+```
+
+---
+
+## Dashboard
+
+The optional admin dashboard provides a Grafana-dark themed interface for monitoring and catalog management:
+
+![Overview](docs/screenshots/panel-overview.png)
+
+| Panel | Description |
+|-------|-------------|
+| **Overview** | Server health, uptime, system status |
+| **Instructions** | Catalog browser with usage counts and governance status |
+| **Monitoring** | Performance metrics and error rates |
+| **Maintenance** | Backup, repair, and catalog operations |
+| **Graph** | Mermaid dependency graph of instructions |
+
+See [dashboard.md](docs/dashboard.md) for full details. REST client scripts (`scripts/index-server-client.ps1` and `scripts/index-server-client.sh`) provide full CRUD access for CI pipelines and subagents without MCP — see [tools.md](docs/tools.md#rest-client-scripts-agent-access-without-mcp).
+
+---
+
+## Key Features
+
+- **MCP protocol compliance** — Full JSON-RPC 2.0 over stdio with schema validation
+- **40+ tools** for search, CRUD, governance, analytics, messaging, and feedback
+- **Semantic search** — Optional embedding-based similarity search (HuggingFace models)
+- **Bootstrap security** — Mutations gated until human confirmation on fresh installs
+- **Cross-repo knowledge promotion** — Validate locally, then promote proven patterns to the shared catalog
+- **Governance workflows** — Ownership, versioning, approval status, and deterministic governance hashing
+- **REST client scripts** — PowerShell and Bash scripts for CI/agents without MCP
+
+---
+
+## Documentation
+
+| Document | Purpose |
+|----------|---------|
+| [Quick Start](docs/quickstart.md) | Get running in 5 minutes |
+| [Use Cases](docs/use-cases.md) | Real-world scenarios and workflows |
+| [API Reference](docs/tools.md) | Complete MCP tool documentation |
+| [MCP Configuration](docs/mcp_configuration.md) | Setup patterns for all environments |
+| [Server Configuration](docs/configuration.md) | Environment variables and CLI options |
+| [Architecture](docs/architecture.md) | System design and component overview |
+| [Admin Dashboard](docs/dashboard.md) | UI features, drift monitoring, maintenance |
+| [Content Guidance](docs/content_guidance.md) | Local vs. central instruction guidance |
+| [Network Privacy](docs/network-privacy.md) | Network transparency and offline deployment |
+| [Documentation Index](docs/docs_index.md) | Full documentation map |
+
+---
+
+## Security
+
+Index Server makes **zero telemetry calls** and sends **no data to external services** during normal operation. The dashboard binds to **localhost only** by default. All mutations require explicit enablement and are audit-logged. Fresh installations gate mutations until human confirmation via the bootstrap workflow.
+
+See [SECURITY.md](SECURITY.md) for vulnerability reporting and [Network Privacy Guide](docs/network-privacy.md) for offline deployment and verification.
+
+---
+
+## Development
+
+```bash
+npm install          # Install dependencies
+npm run build        # Build TypeScript
+npm test             # Run test suite
+npm run typecheck    # Type checking
+npm run lint         # Linting
+```
+
+See [CONTRIBUTING.md](CONTRIBUTING.md) for the full workflow, code standards, and testing requirements.
+
+---
+
+## License
+
+MIT License — see [LICENSE](LICENSE) file for details.
+
+---
+
+Built with [Model Context Protocol (MCP)](https://modelcontextprotocol.io), TypeScript, Node.js, Vitest, and AJV.

package/SECURITY.md

@@ -0,0 +1,50 @@
+# Security Policy
+
+## Supported Versions
+
+| Version | Supported          |
+|---------|--------------------|
+| 1.x.x   | ✅ Active support  |
+| < 1.0   | ❌ End of life     |
+
+## Reporting a Vulnerability
+
+**Do NOT open public issues for security vulnerabilities.**
+
+Please report suspected vulnerabilities privately using one of these methods:
+
+1. **GitHub Security Advisories** (preferred) — create a new advisory on the [public repository](https://github.com/jagilber-org/index-server/security/advisories).
+2. **Email** — contact the maintainer at the email listed in the repository's GitHub profile.
+
+When reporting, include:
+
+- Reproduction steps and environment details
+- Impact assessment and affected versions
+- Any relevant logs or proof-of-concept (redact sensitive data)
+
+### Response Timeline
+
+- **Acknowledgement**: within 48 hours of receipt
+- **Detailed response**: within 7 business days
+- **Fix or mitigation**: coordinated with reporter before public disclosure
+
+## Vulnerability Disclosure
+
+We follow responsible disclosure practices:
+
+- Confirm the issue and assign a CVE if applicable.
+- Prepare a fix and coordinate a release timeline with the reporter.
+- Credit reporters who wish to be acknowledged in the advisory and changelog.
+
+## Security Practices
+
+- **Pre-commit hooks** scan for secrets and PII before code leaves the developer machine
+- **Bootstrap gating** — all mutation operations require explicit bootstrap confirmation
+- **Audit logging** — every Index mutation is logged with timestamp, action, and actor
+- **Content scanning** — automated checks before public publishing via dual-repo workflow
+- **Mutation controls** — `INDEX_SERVER_MUTATION` environment variable gates write operations
+- **Auth key support** — optional `INDEX_SERVER_AUTH_KEY` for securing dashboard and API access
+
+## Hardening Notes
+
+This project includes enterprise hardening (see `HARDENING-DESIGN.md`). Keep auth secrets (`INDEX_SERVER_AUTH_KEY`) private. Avoid committing credentials or tokens.

package/dist/config/configUtils.d.ts

@@ -0,0 +1,11 @@
+export type LogLevel = 'error' | 'warn' | 'info' | 'debug' | 'trace';
+export declare const CWD: string;
+export declare function toAbsolute(raw: string | undefined, fallback?: string): string;
+export declare function numberFromEnv(name: string, defaultValue: number): number;
+export declare function optionalNumberFromEnv(name: string): number | undefined;
+export declare function floatFromEnv(name: string, defaultValue: number): number;
+export declare function optionalIntFromEnv(name: string): number | undefined;
+export declare function clamp(value: number, min: number, max: number): number;
+export declare function stringFromEnv(name: string, defaultValue: string): string;
+export declare function parseCsvEnv(name: string): string[];
+export declare function parseJSONMaybe<T = unknown>(src?: string): T | undefined;

package/dist/config/configUtils.js

@@ -0,0 +1,87 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CWD = void 0;
+exports.toAbsolute = toAbsolute;
+exports.numberFromEnv = numberFromEnv;
+exports.optionalNumberFromEnv = optionalNumberFromEnv;
+exports.floatFromEnv = floatFromEnv;
+exports.optionalIntFromEnv = optionalIntFromEnv;
+exports.clamp = clamp;
+exports.stringFromEnv = stringFromEnv;
+exports.parseCsvEnv = parseCsvEnv;
+exports.parseJSONMaybe = parseJSONMaybe;
+/**
+ * Shared low-level utilities used by config domain modules.
+ * No imports from other local config files — safe to import anywhere.
+ */
+const path_1 = __importDefault(require("path"));
+exports.CWD = process.cwd();
+function toAbsolute(raw, fallback) {
+    if (raw && raw.trim().length) {
+        return path_1.default.isAbsolute(raw) ? raw : path_1.default.resolve(exports.CWD, raw);
+    }
+    if (fallback && fallback.trim().length) {
+        return path_1.default.isAbsolute(fallback) ? fallback : path_1.default.resolve(exports.CWD, fallback);
+    }
+    return exports.CWD;
+}
+function numberFromEnv(name, defaultValue) {
+    const raw = process.env[name];
+    if (!raw)
+        return defaultValue;
+    const value = Number(raw);
+    return Number.isFinite(value) ? value : defaultValue;
+}
+function optionalNumberFromEnv(name) {
+    const raw = process.env[name];
+    if (raw === undefined)
+        return undefined;
+    const value = Number(raw);
+    return Number.isFinite(value) ? value : undefined;
+}
+function floatFromEnv(name, defaultValue) {
+    const raw = process.env[name];
+    if (!raw)
+        return defaultValue;
+    const value = Number.parseFloat(raw);
+    return Number.isFinite(value) ? value : defaultValue;
+}
+function optionalIntFromEnv(name) {
+    const raw = process.env[name];
+    if (raw === undefined)
+        return undefined;
+    const value = Number.parseInt(raw, 10);
+    return Number.isFinite(value) ? value : undefined;
+}
+function clamp(value, min, max) {
+    if (value < min)
+        return min;
+    if (value > max)
+        return max;
+    return value;
+}
+function stringFromEnv(name, defaultValue) {
+    const raw = process.env[name];
+    if (raw && raw.trim().length)
+        return raw;
+    return defaultValue;
+}
+function parseCsvEnv(name) {
+    const raw = process.env[name];
+    if (!raw)
+        return [];
+    return raw.split(/[,\s]+/).map(s => s.trim()).filter(Boolean);
+}
+function parseJSONMaybe(src) {
+    if (!src)
+        return undefined;
+    try {
+        return JSON.parse(src);
+    }
+    catch {
+        return undefined;
+    }
+}

package/dist/config/dashboardConfig.d.ts

@@ -0,0 +1,46 @@
+interface DashboardTlsConfig {
+    enabled: boolean;
+    certPath?: string;
+    keyPath?: string;
+    caPath?: string;
+}
+interface DashboardHttpConfig {
+    enable: boolean;
+    port: number;
+    host: string;
+    maxPortTries: number;
+    enableHttpMetrics: boolean;
+    requestTimeoutMs: number;
+    maxConnections: number;
+    verboseLogging: boolean;
+    mutationEnabled: boolean;
+    adminApiKey?: string;
+    rateLimitEnabled: boolean;
+    tls: DashboardTlsConfig;
+}
+interface DashboardAdminConfig {
+    maxSessionHistory: number;
+    backupsDir: string;
+    instructionsDir: string;
+    stateDir: string;
+}
+interface DashboardSessionPersistenceConfig {
+    enabled: boolean;
+    persistenceDir: string;
+    backupIntegration: boolean;
+    retention: {
+        maxHistoryEntries: number;
+        maxHistoryDays: number;
+        maxConnectionHistoryDays: number;
+    };
+    persistenceIntervalMs: number;
+    deduplicationEnabled: boolean;
+}
+export interface DashboardConfig {
+    http: DashboardHttpConfig;
+    admin: DashboardAdminConfig;
+    sessionPersistence: DashboardSessionPersistenceConfig;
+    graphEnabled: boolean;
+}
+export declare function parseDashboardConfig(mutationEnabled: boolean, instructionsBaseDir: string): DashboardConfig;
+export {};

package/dist/config/dashboardConfig.js

@@ -0,0 +1,67 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseDashboardConfig = parseDashboardConfig;
+/**
+ * Dashboard domain config: HTTP server, TLS, WebSocket, and session persistence settings.
+ */
+const path_1 = __importDefault(require("path"));
+const envUtils_1 = require("../utils/envUtils");
+const SessionPersistence_js_1 = require("../models/SessionPersistence.js");
+const configUtils_1 = require("./configUtils");
+const dirConstants_1 = require("./dirConstants");
+const defaultValues_1 = require("./defaultValues");
+function isDevMode() {
+    return process.env.NODE_ENV === 'development' || process.argv.some(a => a === '--watch' || a.includes('--watch'));
+}
+function parseDashboardConfig(mutationEnabled, instructionsBaseDir) {
+    const persistenceDefaults = SessionPersistence_js_1.DEFAULT_SESSION_PERSISTENCE_CONFIG;
+    const persistenceEnv = SessionPersistence_js_1.SESSION_PERSISTENCE_ENV_VARS;
+    const persistenceEnabled = (0, envUtils_1.parseBooleanEnv)(process.env[persistenceEnv.ENABLED], persistenceDefaults.enabled);
+    const persistenceDir = (0, configUtils_1.toAbsolute)(process.env[persistenceEnv.PERSISTENCE_DIR], persistenceDefaults.persistenceDir);
+    const persistenceInterval = (0, configUtils_1.numberFromEnv)(persistenceEnv.PERSISTENCE_INTERVAL_MS, persistenceDefaults.persistence.intervalMs);
+    const backupsDir = (0, configUtils_1.toAbsolute)(process.env.INDEX_SERVER_BACKUPS_DIR, path_1.default.join(configUtils_1.CWD, dirConstants_1.DIR.BACKUPS));
+    const stateDir = (0, configUtils_1.toAbsolute)(process.env.INDEX_SERVER_STATE_DIR, path_1.default.join(configUtils_1.CWD, dirConstants_1.DIR.DATA_STATE));
+    return {
+        http: {
+            enable: (0, envUtils_1.getBooleanEnv)('INDEX_SERVER_DASHBOARD'),
+            port: (0, configUtils_1.numberFromEnv)('INDEX_SERVER_DASHBOARD_PORT', isDevMode() ? defaultValues_1.DEFAULT_PORTS.DASHBOARD_DEV : defaultValues_1.DEFAULT_PORTS.DASHBOARD),
+            host: (0, configUtils_1.stringFromEnv)('INDEX_SERVER_DASHBOARD_HOST', '127.0.0.1'),
+            maxPortTries: Math.max(1, (0, configUtils_1.numberFromEnv)('INDEX_SERVER_DASHBOARD_TRIES', defaultValues_1.DEFAULT_LIMITS.MAX_PORT_TRIES)),
+            enableHttpMetrics: (0, envUtils_1.getBooleanEnv)('INDEX_SERVER_HTTP_METRICS', true),
+            requestTimeoutMs: (0, configUtils_1.numberFromEnv)('INDEX_SERVER_REQUEST_TIMEOUT', defaultValues_1.DEFAULT_TIMEOUTS_MS.REQUEST_TIMEOUT),
+            maxConnections: (0, configUtils_1.numberFromEnv)('INDEX_SERVER_MAX_CONNECTIONS', defaultValues_1.DEFAULT_LIMITS.MAX_CONNECTIONS),
+            verboseLogging: (0, envUtils_1.getBooleanEnv)('INDEX_SERVER_VERBOSE_LOGGING'),
+            mutationEnabled,
+            adminApiKey: process.env.INDEX_SERVER_ADMIN_API_KEY || undefined,
+            rateLimitEnabled: !(0, envUtils_1.getBooleanEnv)('INDEX_SERVER_DISABLE_RATE_LIMIT'),
+            tls: {
+                enabled: (0, envUtils_1.getBooleanEnv)('INDEX_SERVER_DASHBOARD_TLS'),
+                certPath: process.env.INDEX_SERVER_DASHBOARD_TLS_CERT || undefined,
+                keyPath: process.env.INDEX_SERVER_DASHBOARD_TLS_KEY || undefined,
+                caPath: process.env.INDEX_SERVER_DASHBOARD_TLS_CA || undefined,
+            },
+        },
+        admin: {
+            maxSessionHistory: (0, configUtils_1.numberFromEnv)('INDEX_SERVER_ADMIN_MAX_SESSION_HISTORY', defaultValues_1.DEFAULT_LIMITS.MAX_SESSION_HISTORY),
+            backupsDir,
+            instructionsDir: instructionsBaseDir,
+            stateDir,
+        },
+        sessionPersistence: {
+            enabled: persistenceEnabled,
+            persistenceDir,
+            backupIntegration: (0, envUtils_1.parseBooleanEnv)(process.env[persistenceEnv.BACKUP_INTEGRATION], persistenceDefaults.backupIntegration),
+            retention: {
+                maxHistoryEntries: (0, configUtils_1.numberFromEnv)(persistenceEnv.MAX_HISTORY_ENTRIES, persistenceDefaults.retention.maxHistoryEntries),
+                maxHistoryDays: (0, configUtils_1.numberFromEnv)(persistenceEnv.MAX_HISTORY_DAYS, persistenceDefaults.retention.maxHistoryDays),
+                maxConnectionHistoryDays: (0, configUtils_1.numberFromEnv)(persistenceEnv.MAX_CONNECTION_HISTORY_DAYS, persistenceDefaults.retention.maxConnectionHistoryDays),
+            },
+            persistenceIntervalMs: persistenceInterval,
+            deduplicationEnabled: (0, envUtils_1.parseBooleanEnv)(process.env[persistenceEnv.DEDUPLICATION_ENABLED], persistenceDefaults.deduplication.enabled),
+        },
+        graphEnabled: (0, envUtils_1.getBooleanEnv)('INDEX_SERVER_DASHBOARD_GRAPH'),
+    };
+}