@kb-labs/rest-api-core 1.0.0

package/README.md

@@ -0,0 +1,72 @@
+# @kb-labs/rest-api-core
+
+Configuration loader and shared types for the KB Labs REST API runtime.
+
+## Overview
+
+Provides the Zod schema, loader, and environment variable mapping for `@kb-labs/rest-api-app`.
+No business logic — pure configuration infrastructure.
+
+## API Reference
+
+- `loadRestApiConfig(options)` — load and validate REST API config from `kb-labs.config.json`
+- `restApiConfigSchema` — Zod schema for REST API configuration
+- `RestApiConfig` — TypeScript type for validated config
+
+## Configuration
+
+Loaded from `kb-labs.config.json` under the `restApi` key:
+
+```json
+{
+  "restApi": {
+    "port": 5050,
+    "basePath": "/api/v1",
+    "apiVersion": "1.0.0",
+    "cors": {
+      "origins": ["http://localhost:3000"],
+      "profile": "dev"
+    },
+    "http2": {
+      "enabled": false,
+      "allowHTTP1": true
+    }
+  }
+}
+```
+
+Environment variables (`KB_REST_*`) override file config — see root [README.md](../../README.md) for full list.
+
+### HTTP/2
+
+Enable HTTP/2 to remove the 6-connection browser limit (important for SSE):
+
+```json
+{
+  "restApi": {
+    "http2": { "enabled": true, "allowHTTP1": true },
+    "ssl": { "keyPath": "ssl/server.key", "certPath": "ssl/server.cert" }
+  }
+}
+```
+
+Generate a self-signed cert for local development:
+
+```bash
+mkdir -p ssl
+openssl req -x509 -newkey rsa:2048 -nodes \
+  -keyout ssl/server.key -out ssl/server.cert \
+  -days 365 -subj "/CN=localhost"
+```
+
+## Usage
+
+```typescript
+import { loadRestApiConfig } from '@kb-labs/rest-api-core';
+
+const config = await loadRestApiConfig({ cwd: process.cwd() });
+```
+
+## License
+
+KB Public License v1.1 © KB Labs

package/dist/index.d.ts

@@ -0,0 +1,251 @@
+import { z } from 'zod';
+import { ManifestV3 } from '@kb-labs/plugin-contracts';
+import { StudioPluginEntry, StudioWidgetDecl, StudioMenuDecl, StudioLayoutDecl, StudioRegistry } from '@kb-labs/rest-api-contracts';
+
+/**
+ * @module @kb-labs/rest-api-core/config/schema
+ * Zod schema for REST API configuration
+ */
+
+declare const restApiConfigSchema: z.ZodObject<{
+    port: z.ZodDefault<z.ZodNumber>;
+    basePath: z.ZodDefault<z.ZodString>;
+    apiVersion: z.ZodDefault<z.ZodString>;
+    cors: z.ZodDefault<z.ZodObject<{
+        origins: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        allowCredentials: z.ZodDefault<z.ZodBoolean>;
+        profile: z.ZodDefault<z.ZodEnum<["dev", "preview", "prod"]>>;
+    }, "strip", z.ZodTypeAny, {
+        origins: string[];
+        allowCredentials: boolean;
+        profile: "dev" | "preview" | "prod";
+    }, {
+        origins?: string[] | undefined;
+        allowCredentials?: boolean | undefined;
+        profile?: "dev" | "preview" | "prod" | undefined;
+    }>>;
+    timeouts: z.ZodOptional<z.ZodObject<{
+        requestTimeout: z.ZodDefault<z.ZodNumber>;
+        bodyLimit: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        requestTimeout: number;
+        bodyLimit: number;
+    }, {
+        requestTimeout?: number | undefined;
+        bodyLimit?: number | undefined;
+    }>>;
+    rateLimit: z.ZodOptional<z.ZodObject<{
+        max: z.ZodDefault<z.ZodNumber>;
+        timeWindow: z.ZodDefault<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        max: number;
+        timeWindow: string;
+    }, {
+        max?: number | undefined;
+        timeWindow?: string | undefined;
+    }>>;
+    startup: z.ZodOptional<z.ZodObject<{
+        maxConcurrent: z.ZodDefault<z.ZodNumber>;
+        queueLimit: z.ZodDefault<z.ZodNumber>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
+        retryAfterSeconds: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        maxConcurrent: number;
+        queueLimit: number;
+        timeoutMs: number;
+        retryAfterSeconds: number;
+    }, {
+        maxConcurrent?: number | undefined;
+        queueLimit?: number | undefined;
+        timeoutMs?: number | undefined;
+        retryAfterSeconds?: number | undefined;
+    }>>;
+    plugins: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    mockMode: z.ZodDefault<z.ZodBoolean>;
+    redis: z.ZodOptional<z.ZodObject<{
+        url: z.ZodString;
+        namespace: z.ZodDefault<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        url: string;
+        namespace: string;
+    }, {
+        url: string;
+        namespace?: string | undefined;
+    }>>;
+    events: z.ZodOptional<z.ZodObject<{
+        registry: z.ZodOptional<z.ZodObject<{
+            token: z.ZodString;
+            headerName: z.ZodDefault<z.ZodString>;
+            queryParam: z.ZodDefault<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            token: string;
+            headerName: string;
+            queryParam: string;
+        }, {
+            token: string;
+            headerName?: string | undefined;
+            queryParam?: string | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        registry?: {
+            token: string;
+            headerName: string;
+            queryParam: string;
+        } | undefined;
+    }, {
+        registry?: {
+            token: string;
+            headerName?: string | undefined;
+            queryParam?: string | undefined;
+        } | undefined;
+    }>>;
+    http2: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        allowHTTP1: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        allowHTTP1: boolean;
+    }, {
+        enabled?: boolean | undefined;
+        allowHTTP1?: boolean | undefined;
+    }>>;
+    ssl: z.ZodOptional<z.ZodObject<{
+        keyPath: z.ZodString;
+        certPath: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        keyPath: string;
+        certPath: string;
+    }, {
+        keyPath: string;
+        certPath: string;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    port: number;
+    basePath: string;
+    apiVersion: string;
+    cors: {
+        origins: string[];
+        allowCredentials: boolean;
+        profile: "dev" | "preview" | "prod";
+    };
+    plugins: string[];
+    mockMode: boolean;
+    timeouts?: {
+        requestTimeout: number;
+        bodyLimit: number;
+    } | undefined;
+    rateLimit?: {
+        max: number;
+        timeWindow: string;
+    } | undefined;
+    startup?: {
+        maxConcurrent: number;
+        queueLimit: number;
+        timeoutMs: number;
+        retryAfterSeconds: number;
+    } | undefined;
+    redis?: {
+        url: string;
+        namespace: string;
+    } | undefined;
+    events?: {
+        registry?: {
+            token: string;
+            headerName: string;
+            queryParam: string;
+        } | undefined;
+    } | undefined;
+    http2?: {
+        enabled: boolean;
+        allowHTTP1: boolean;
+    } | undefined;
+    ssl?: {
+        keyPath: string;
+        certPath: string;
+    } | undefined;
+}, {
+    port?: number | undefined;
+    basePath?: string | undefined;
+    apiVersion?: string | undefined;
+    cors?: {
+        origins?: string[] | undefined;
+        allowCredentials?: boolean | undefined;
+        profile?: "dev" | "preview" | "prod" | undefined;
+    } | undefined;
+    timeouts?: {
+        requestTimeout?: number | undefined;
+        bodyLimit?: number | undefined;
+    } | undefined;
+    rateLimit?: {
+        max?: number | undefined;
+        timeWindow?: string | undefined;
+    } | undefined;
+    startup?: {
+        maxConcurrent?: number | undefined;
+        queueLimit?: number | undefined;
+        timeoutMs?: number | undefined;
+        retryAfterSeconds?: number | undefined;
+    } | undefined;
+    plugins?: string[] | undefined;
+    mockMode?: boolean | undefined;
+    redis?: {
+        url: string;
+        namespace?: string | undefined;
+    } | undefined;
+    events?: {
+        registry?: {
+            token: string;
+            headerName?: string | undefined;
+            queryParam?: string | undefined;
+        } | undefined;
+    } | undefined;
+    http2?: {
+        enabled?: boolean | undefined;
+        allowHTTP1?: boolean | undefined;
+    } | undefined;
+    ssl?: {
+        keyPath: string;
+        certPath: string;
+    } | undefined;
+}>;
+type RestApiConfig = z.infer<typeof restApiConfigSchema>;
+
+/**
+ * @module @kb-labs/rest-api-core/config/loader
+ * Configuration loader using loadBundle from @kb-labs/core-bundle
+ */
+
+/**
+ * Load REST API configuration
+ */
+declare function loadRestApiConfig(cwd?: string, cliOverrides?: Partial<RestApiConfig>): Promise<{
+    config: RestApiConfig;
+    diagnostics: Array<{
+        level: string;
+        code: string;
+        message: string;
+    }>;
+}>;
+
+/**
+ * @module @kb-labs/rest-api-core/studio-registry
+ *
+ * Transforms ManifestV3 studio sections into StudioRegistry format.
+ * REST API uses this to provide pre-computed registry data to Studio frontend.
+ */
+
+/**
+ * Convert a single ManifestV3 to StudioRegistry entries.
+ */
+declare function manifestToRegistry(manifest: ManifestV3): {
+    plugin: StudioPluginEntry;
+    widgets: StudioWidgetDecl[];
+    menus: StudioMenuDecl[];
+    layouts: StudioLayoutDecl[];
+};
+/**
+ * Combine multiple manifests into a single StudioRegistry.
+ */
+declare function combineManifestsToRegistry(manifests: ManifestV3[], _registryVersion?: string): StudioRegistry;
+
+export { type RestApiConfig, combineManifestsToRegistry, loadRestApiConfig, manifestToRegistry, restApiConfigSchema };

package/dist/index.js

@@ -0,0 +1,253 @@
+import { loadBundle } from '@kb-labs/core-bundle';
+import { findNearestConfig, readJsonWithDiagnostics, resolveConfig } from '@kb-labs/core-config';
+import { z } from 'zod';
+
+// src/config/loader.ts
+var restApiConfigSchema = z.object({
+  port: z.number().int().positive().default(5050),
+  basePath: z.string().default("/api/v1"),
+  apiVersion: z.string().default("1.0.0"),
+  cors: z.object({
+    origins: z.array(z.string()).default(["http://localhost:3000", "http://localhost:5173"]),
+    allowCredentials: z.boolean().default(true),
+    profile: z.enum(["dev", "preview", "prod"]).default("dev")
+  }).default({}),
+  timeouts: z.object({
+    requestTimeout: z.number().int().positive().default(3e4),
+    bodyLimit: z.number().int().positive().default(10485760)
+  }).optional(),
+  rateLimit: z.object({
+    max: z.number().int().positive().default(60),
+    timeWindow: z.string().default("1 minute")
+  }).optional(),
+  startup: z.object({
+    maxConcurrent: z.number().int().positive().default(32),
+    queueLimit: z.number().int().nonnegative().default(128),
+    timeoutMs: z.number().int().positive().default(5e3),
+    retryAfterSeconds: z.number().int().positive().default(2)
+  }).optional(),
+  plugins: z.array(z.string()).default([]),
+  mockMode: z.boolean().default(false),
+  redis: z.object({
+    url: z.string().min(1),
+    namespace: z.string().default("kb")
+  }).optional(),
+  events: z.object({
+    registry: z.object({
+      token: z.string().min(1),
+      headerName: z.string().default("authorization"),
+      queryParam: z.string().default("access_token")
+    }).optional()
+  }).optional(),
+  http2: z.object({
+    enabled: z.boolean().default(false),
+    allowHTTP1: z.boolean().default(true)
+    // Fallback for old clients
+  }).optional(),
+  ssl: z.object({
+    keyPath: z.string().min(1),
+    certPath: z.string().min(1)
+  }).optional()
+});
+
+// src/config/loader.ts
+async function loadRestApiConfig(cwd = process.cwd(), cliOverrides) {
+  let bundleConfig = {};
+  try {
+    const bundle = await loadBundle({
+      cwd,
+      product: "restApi",
+      // TODO: Add 'restApi' to ProductId type
+      profileId: "default"
+    });
+    bundleConfig = bundle.config;
+  } catch {
+    const { path: configPath } = await findNearestConfig({
+      startDir: cwd,
+      filenames: [".kb/kb.config.json", ".kb/kb.config.yaml"]
+    });
+    if (configPath) {
+      const readResult = await readJsonWithDiagnostics(configPath);
+      if (readResult.ok && readResult.data?.rest) {
+        bundleConfig = readResult.data.rest;
+      }
+    }
+  }
+  const defaults = {
+    port: 5050,
+    basePath: "/api/v1",
+    apiVersion: "1.0.0",
+    cors: {
+      origins: ["http://localhost:3000", "http://localhost:5173"],
+      allowCredentials: true,
+      profile: "dev"
+    },
+    timeouts: {
+      requestTimeout: 3e4,
+      bodyLimit: 10485760
+    },
+    rateLimit: {
+      // 600/min for dev (dashboard needs ~10 requests per page load)
+      // Override with KB_REST_RATE_LIMIT_MAX=60 for production public API
+      max: 600,
+      timeWindow: "1 minute"
+    },
+    plugins: [],
+    mockMode: false
+  };
+  const envMapper = (env) => {
+    const overrides = {};
+    if (env.KB_REST_PORT) {
+      const parsedPort = Number.parseInt(env.KB_REST_PORT, 10);
+      if (!Number.isNaN(parsedPort)) {
+        overrides.port = parsedPort;
+      }
+    }
+    if (env.KB_REST_BASE_PATH) {
+      overrides.basePath = env.KB_REST_BASE_PATH;
+    }
+    if (env.KB_REST_API_VERSION) {
+      overrides.apiVersion = env.KB_REST_API_VERSION;
+    }
+    if (env.KB_REST_CORS_ORIGINS) {
+      const origins = env.KB_REST_CORS_ORIGINS.split(",").map((origin) => origin.trim()).filter(Boolean);
+      overrides.cors = {
+        ...overrides.cors ?? defaults.cors,
+        origins
+      };
+    }
+    if (env.KB_REST_CORS_PROFILE) {
+      overrides.cors = {
+        ...overrides.cors ?? defaults.cors,
+        profile: env.KB_REST_CORS_PROFILE
+      };
+    }
+    if (env.KB_REST_MOCK_MODE === "true" || env.KB_REST_MOCK_MODE === "1") {
+      overrides.mockMode = true;
+    }
+    if (env.KB_REST_REDIS_URL) {
+      overrides.redis = {
+        ...overrides.redis ?? {},
+        url: env.KB_REST_REDIS_URL,
+        namespace: overrides.redis?.namespace ?? defaults.redis?.namespace ?? "kb"
+      };
+    }
+    if (env.KB_REST_REDIS_NAMESPACE) {
+      overrides.redis = {
+        ...overrides.redis ?? (env.KB_REST_REDIS_URL ? { url: env.KB_REST_REDIS_URL } : defaults.redis ?? {}),
+        namespace: env.KB_REST_REDIS_NAMESPACE
+      };
+    }
+    if (env.KB_REST_RATE_LIMIT_MAX) {
+      const parsedMax = Number.parseInt(env.KB_REST_RATE_LIMIT_MAX, 10);
+      if (!Number.isNaN(parsedMax)) {
+        overrides.rateLimit = {
+          ...overrides.rateLimit ?? defaults.rateLimit ?? { max: 600, timeWindow: "1 minute" },
+          max: parsedMax
+        };
+      }
+    }
+    if (env.KB_REST_RATE_LIMIT_WINDOW) {
+      overrides.rateLimit = {
+        ...overrides.rateLimit ?? defaults.rateLimit ?? { max: 600, timeWindow: "1 minute" },
+        timeWindow: env.KB_REST_RATE_LIMIT_WINDOW
+      };
+    }
+    if (env.KB_REST_REQUEST_TIMEOUT) {
+      const parsedTimeout = Number.parseInt(env.KB_REST_REQUEST_TIMEOUT, 10);
+      if (!Number.isNaN(parsedTimeout)) {
+        const baseTimeout = overrides.timeouts ?? defaults.timeouts;
+        overrides.timeouts = {
+          requestTimeout: parsedTimeout,
+          bodyLimit: baseTimeout?.bodyLimit ?? defaults.timeouts?.bodyLimit ?? 10485760
+        };
+      }
+    }
+    if (env.KB_REST_BODY_LIMIT) {
+      const parsedBodyLimit = Number.parseInt(env.KB_REST_BODY_LIMIT, 10);
+      if (!Number.isNaN(parsedBodyLimit)) {
+        const baseTimeout = overrides.timeouts ?? defaults.timeouts;
+        overrides.timeouts = {
+          requestTimeout: baseTimeout?.requestTimeout ?? defaults.timeouts?.requestTimeout ?? 3e4,
+          bodyLimit: parsedBodyLimit
+        };
+      }
+    }
+    return overrides;
+  };
+  const resolved = resolveConfig({
+    defaults,
+    fileConfig: bundleConfig,
+    envMapper,
+    cliOverrides,
+    validate: (cfg) => {
+      const result = restApiConfigSchema.safeParse(cfg);
+      if (result.success) {
+        return { ok: true };
+      }
+      return {
+        ok: false,
+        diagnostics: result.error.errors.map((err) => ({
+          level: "error",
+          code: "CONFIG_VALIDATION_ERROR",
+          message: `${err.path.join(".")}: ${err.message}`
+        }))
+      };
+    }
+  });
+  const validated = restApiConfigSchema.parse(resolved.value);
+  return {
+    config: validated,
+    diagnostics: resolved.diagnostics
+  };
+}
+
+// src/studio-registry.ts
+function manifestToRegistry(manifest) {
+  const studio = manifest.studio;
+  if (!studio) {
+    return {
+      plugin: {
+        pluginId: manifest.id,
+        displayName: manifest.display?.name,
+        widgets: [],
+        menus: [],
+        layouts: []
+      },
+      widgets: [],
+      menus: [],
+      layouts: []
+    };
+  }
+  const widgets = studio.widgets ?? [];
+  const menus = studio.menus ?? [];
+  const layouts = studio.layouts ?? [];
+  const plugin = {
+    pluginId: manifest.id,
+    displayName: manifest.display?.name,
+    widgets,
+    menus,
+    layouts
+  };
+  return { plugin, widgets, menus, layouts };
+}
+function combineManifestsToRegistry(manifests, _registryVersion) {
+  const plugins = [];
+  for (const manifest of manifests) {
+    if (!manifest.studio) {
+      continue;
+    }
+    const { plugin } = manifestToRegistry(manifest);
+    plugins.push(plugin);
+  }
+  return {
+    schema: "kb.studio/1",
+    schemaVersion: 1,
+    generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    plugins
+  };
+}
+
+export { combineManifestsToRegistry, loadRestApiConfig, manifestToRegistry, restApiConfigSchema };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/config/schema.ts","../src/config/loader.ts","../src/studio-registry.ts"],"names":[],"mappings":";;;;;AAOO,IAAM,mBAAA,GAAsB,EAAE,MAAA,CAAO;AAAA,EAC1C,IAAA,EAAM,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,EAAS,CAAE,OAAA,CAAQ,IAAI,CAAA;AAAA,EAC9C,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,QAAQ,SAAS,CAAA;AAAA,EACtC,UAAA,EAAY,CAAA,CAAE,MAAA,EAAO,CAAE,QAAQ,OAAO,CAAA;AAAA,EACtC,IAAA,EAAM,EAAE,MAAA,CAAO;AAAA,IACb,OAAA,EAAS,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,MAAA,EAAQ,CAAA,CAAE,OAAA,CAAQ,CAAC,uBAAA,EAAyB,uBAAuB,CAAC,CAAA;AAAA,IACvF,gBAAA,EAAkB,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAQ,IAAI,CAAA;AAAA,IAC1C,OAAA,EAAS,CAAA,CAAE,IAAA,CAAK,CAAC,KAAA,EAAO,WAAW,MAAM,CAAC,CAAA,CAAE,OAAA,CAAQ,KAAK;AAAA,GAC1D,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA,EACb,QAAA,EAAU,EAAE,MAAA,CAAO;AAAA,IACjB,cAAA,EAAgB,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,EAAS,CAAE,OAAA,CAAQ,GAAK,CAAA;AAAA,IACzD,SAAA,EAAW,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,EAAS,CAAE,OAAA,CAAQ,QAAU;AAAA,GAC1D,EAAE,QAAA,EAAS;AAAA,EACZ,SAAA,EAAW,EAAE,MAAA,CAAO;AAAA,IAClB,GAAA,EAAK,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,EAAS,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA,IAC3C,UAAA,EAAY,CAAA,CAAE,MAAA,EAAO,CAAE,QAAQ,UAAU;AAAA,GAC1C,EAAE,QAAA,EAAS;AAAA,EACZ,OAAA,EAAS,EAAE,MAAA,CAAO;AAAA,IAChB,aAAA,EAAe,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,EAAS,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA,IACrD,UAAA,EAAY,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,WAAA,EAAY,CAAE,OAAA,CAAQ,GAAG,CAAA;AAAA,IACtD,SAAA,EAAW,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,EAAS,CAAE,OAAA,CAAQ,GAAI,CAAA;AAAA,IACnD,iBAAA,EAAmB,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,EAAS,CAAE,OAAA,CAAQ,CAAC;AAAA,GACzD,EAAE,QAAA,EAAS;AAAA,EACZ,OAAA,EAAS,EAAE,KAAA,CAAM,CAAA,CAAE,QAAQ,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA,EACvC,QAAA,EAAU,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK,CAAA;AAAA,EACnC,KAAA,EAAO,EACJ,MAAA,CAAO;AAAA,IACN,GAAA,EAAK,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,IACrB,SAAA,EAAW,CAAA,CAAE,MAAA,EAAO,CAAE,QAAQ,IAAI;AAAA,GACnC,EACA,QAAA,EAAS;AAAA,EACZ,MAAA,EAAQ,EACL,MAAA,CAAO;AAAA,IACN,QAAA,EAAU,EACP,MAAA,CAAO;AAAA,MACN,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,MACvB,UAAA,EAAY,CAAA,CAAE,MAAA,EAAO,CAAE,QAAQ,eAAe,CAAA;AAAA,MAC9C,UAAA,EAAY,CAAA,CAAE,MAAA,EAAO,CAAE,QAAQ,cAAc;AAAA,KAC9C,EACA,QAAA;AAAS,GACb,EACA,QAAA,EAAS;AAAA,EACZ,KAAA,EAAO,EACJ,MAAA,CAAO;AAAA,IACN,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK,CAAA;AAAA,IAClC,UAAA,EAAY,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAQ,IAAI;AAAA;AAAA,GACrC,EACA,QAAA,EAAS;AAAA,EACZ,GAAA,EAAK,EACF,MAAA,CAAO;AAAA,IACN,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,IACzB,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC;AAAA,GAC3B,EACA,QAAA;AACL,CAAC;;;ACjDD,eAAsB,iBAAA,CACpB,GAAA,GAAc,OAAA,CAAQ,GAAA,IACtB,YAAA,EAC0G;AAG1G,EAAA,IAAI,eAAoB,EAAC;AAEzB,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,MAAM,UAAA,CAAW;AAAA,MAC9B,GAAA;AAAA,MACA,OAAA,EAAS,SAAA;AAAA;AAAA,MACT,SAAA,EAAW;AAAA,KACZ,CAAA;AACD,IAAA,YAAA,GAAe,MAAA,CAAO,MAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AAEN,IAAA,MAAM,EAAE,IAAA,EAAM,UAAA,EAAW,GAAI,MAAM,iBAAA,CAAkB;AAAA,MACnD,QAAA,EAAU,GAAA;AAAA,MACV,SAAA,EAAW,CAAC,oBAAA,EAAsB,oBAAoB;AAAA,KACvD,CAAA;AAED,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,MAAM,UAAA,GAAa,MAAM,uBAAA,CAA6B,UAAU,CAAA;AAChE,MAAA,IAAI,UAAA,CAAW,EAAA,IAAM,UAAA,CAAW,IAAA,EAAM,IAAA,EAAM;AAC1C,QAAA,YAAA,GAAe,WAAW,IAAA,CAAK,IAAA;AAAA,MACjC;AAAA,IACF;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,GAA0B;AAAA,IAC9B,IAAA,EAAM,IAAA;AAAA,IACN,QAAA,EAAU,SAAA;AAAA,IACV,UAAA,EAAY,OAAA;AAAA,IACZ,IAAA,EAAM;AAAA,MACJ,OAAA,EAAS,CAAC,uBAAA,EAAyB,uBAAuB,CAAA;AAAA,MAC1D,gBAAA,EAAkB,IAAA;AAAA,MAClB,OAAA,EAAS;AAAA,KACX;AAAA,IACA,QAAA,EAAU;AAAA,MACR,cAAA,EAAgB,GAAA;AAAA,MAChB,SAAA,EAAW;AAAA,KACb;AAAA,IACA,SAAA,EAAW;AAAA;AAAA;AAAA,MAGT,GAAA,EAAK,GAAA;AAAA,MACL,UAAA,EAAY;AAAA,KACd;AAAA,IACA,SAAS,EAAC;AAAA,IACV,QAAA,EAAU;AAAA,GACZ;AAEA,EAAA,MAAM,SAAA,GAAY,CAAC,GAAA,KAAmD;AACpE,IAAA,MAAM,YAAoC,EAAC;AAE3C,IAAA,IAAI,IAAI,YAAA,EAAc;AACpB,MAAA,MAAM,UAAA,GAAa,MAAA,CAAO,QAAA,CAAS,GAAA,CAAI,cAAc,EAAE,CAAA;AACvD,MAAA,IAAI,CAAC,MAAA,CAAO,KAAA,CAAM,UAAU,CAAA,EAAG;AAC7B,QAAA,SAAA,CAAU,IAAA,GAAO,UAAA;AAAA,MACnB;AAAA,IACF;AAEA,IAAA,IAAI,IAAI,iBAAA,EAAmB;AACzB,MAAA,SAAA,CAAU,WAAW,GAAA,CAAI,iBAAA;AAAA,IAC3B;AAEA,IAAA,IAAI,IAAI,mBAAA,EAAqB;AAC3B,MAAA,SAAA,CAAU,aAAa,GAAA,CAAI,mBAAA;AAAA,IAC7B;AAEA,IAAA,IAAI,IAAI,oBAAA,EAAsB;AAC5B,MAAA,MAAM,OAAA,GAAU,GAAA,CAAI,oBAAA,CAAqB,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,CAAI,CAAA,MAAA,KAAU,MAAA,CAAO,IAAA,EAAM,CAAA,CAAE,OAAO,OAAO,CAAA;AAC/F,MAAA,SAAA,CAAU,IAAA,GAAO;AAAA,QACf,GAAI,SAAA,CAAU,IAAA,IAAQ,QAAA,CAAS,IAAA;AAAA,QAC/B;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IAAI,IAAI,oBAAA,EAAsB;AAC5B,MAAA,SAAA,CAAU,IAAA,GAAO;AAAA,QACf,GAAI,SAAA,CAAU,IAAA,IAAQ,QAAA,CAAS,IAAA;AAAA,QAC/B,SAAS,GAAA,CAAI;AAAA,OACf;AAAA,IACF;AAEA,IAAA,IAAI,GAAA,CAAI,iBAAA,KAAsB,MAAA,IAAU,GAAA,CAAI,sBAAsB,GAAA,EAAK;AACrE,MAAA,SAAA,CAAU,QAAA,GAAW,IAAA;AAAA,IACvB;AAEA,IAAA,IAAI,IAAI,iBAAA,EAAmB;AACzB,MAAA,SAAA,CAAU,KAAA,GAAQ;AAAA,QAChB,GAAI,SAAA,CAAU,KAAA,IAAS,EAAC;AAAA,QACxB,KAAK,GAAA,CAAI,iBAAA;AAAA,QACT,WAAW,SAAA,CAAU,KAAA,EAAO,SAAA,IAAa,QAAA,CAAS,OAAO,SAAA,IAAa;AAAA,OACxE;AAAA,IACF;AAEA,IAAA,IAAI,IAAI,uBAAA,EAAyB;AAC/B,MAAA,SAAA,CAAU,KAAA,GAAQ;AAAA,QAChB,GAAI,SAAA,CAAU,KAAA,KAAU,GAAA,CAAI,iBAAA,GAAoB,EAAE,GAAA,EAAK,GAAA,CAAI,iBAAA,EAAkB,GAAI,QAAA,CAAS,KAAA,IAAS,EAAC,CAAA;AAAA,QACpG,WAAW,GAAA,CAAI;AAAA,OACjB;AAAA,IACF;AAEA,IAAA,IAAI,IAAI,sBAAA,EAAwB;AAC9B,MAAA,MAAM,SAAA,GAAY,MAAA,CAAO,QAAA,CAAS,GAAA,CAAI,wBAAwB,EAAE,CAAA;AAChE,MAAA,IAAI,CAAC,MAAA,CAAO,KAAA,CAAM,SAAS,CAAA,EAAG;AAC5B,QAAA,SAAA,CAAU,SAAA,GAAY;AAAA,UACpB,GAAI,UAAU,SAAA,IAAa,QAAA,CAAS,aAAa,EAAE,GAAA,EAAK,GAAA,EAAK,UAAA,EAAY,UAAA,EAAW;AAAA,UACpF,GAAA,EAAK;AAAA,SACP;AAAA,MACF;AAAA,IACF;AAEA,IAAA,IAAI,IAAI,yBAAA,EAA2B;AACjC,MAAA,SAAA,CAAU,SAAA,GAAY;AAAA,QACpB,GAAI,UAAU,SAAA,IAAa,QAAA,CAAS,aAAa,EAAE,GAAA,EAAK,GAAA,EAAK,UAAA,EAAY,UAAA,EAAW;AAAA,QACpF,YAAY,GAAA,CAAI;AAAA,OAClB;AAAA,IACF;AAEA,IAAA,IAAI,IAAI,uBAAA,EAAyB;AAC/B,MAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,QAAA,CAAS,GAAA,CAAI,yBAAyB,EAAE,CAAA;AACrE,MAAA,IAAI,CAAC,MAAA,CAAO,KAAA,CAAM,aAAa,CAAA,EAAG;AAChC,QAAA,MAAM,WAAA,GAAc,SAAA,CAAU,QAAA,IAAY,QAAA,CAAS,QAAA;AACnD,QAAA,SAAA,CAAU,QAAA,GAAW;AAAA,UACnB,cAAA,EAAgB,aAAA;AAAA,UAChB,SAAA,EAAW,WAAA,EAAa,SAAA,IAAa,QAAA,CAAS,UAAU,SAAA,IAAa;AAAA,SACvE;AAAA,MACF;AAAA,IACF;AAEA,IAAA,IAAI,IAAI,kBAAA,EAAoB;AAC1B,MAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,QAAA,CAAS,GAAA,CAAI,oBAAoB,EAAE,CAAA;AAClE,MAAA,IAAI,CAAC,MAAA,CAAO,KAAA,CAAM,eAAe,CAAA,EAAG;AAClC,QAAA,MAAM,WAAA,GAAc,SAAA,CAAU,QAAA,IAAY,QAAA,CAAS,QAAA;AACnD,QAAA,SAAA,CAAU,QAAA,GAAW;AAAA,UACnB,cAAA,EAAgB,WAAA,EAAa,cAAA,IAAkB,QAAA,CAAS,UAAU,cAAA,IAAkB,GAAA;AAAA,UACpF,SAAA,EAAW;AAAA,SACb;AAAA,MACF;AAAA,IACF;AAEA,IAAA,OAAO,SAAA;AAAA,EACT,CAAA;AAGA,EAAA,MAAM,WAAW,aAAA,CAA6B;AAAA,IAC5C,QAAA;AAAA,IACA,UAAA,EAAY,YAAA;AAAA,IACZ,SAAA;AAAA,IACA,YAAA;AAAA,IACA,QAAA,EAAU,CAAC,GAAA,KAAQ;AACjB,MAAA,MAAM,MAAA,GAAS,mBAAA,CAAoB,SAAA,CAAU,GAAG,CAAA;AAChD,MAAA,IAAI,OAAO,OAAA,EAAS;AAClB,QAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AAAA,MACpB;AACA,MAAA,OAAO;AAAA,QACL,EAAA,EAAI,KAAA;AAAA,QACJ,aAAa,MAAA,CAAO,KAAA,CAAM,MAAA,CAAO,GAAA,CAAI,CAAC,GAAA,MAAS;AAAA,UAC7C,KAAA,EAAO,OAAA;AAAA,UACP,IAAA,EAAM,yBAAA;AAAA,UACN,OAAA,EAAS,GAAG,GAAA,CAAI,IAAA,CAAK,KAAK,GAAG,CAAC,CAAA,EAAA,EAAK,GAAA,CAAI,OAAO,CAAA;AAAA,SAChD,CAAE;AAAA,OACJ;AAAA,IACF;AAAA,GACD,CAAA;AAGD,EAAA,MAAM,SAAA,GAAY,mBAAA,CAAoB,KAAA,CAAM,QAAA,CAAS,KAAK,CAAA;AAE1D,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,SAAA;AAAA,IACR,aAAa,QAAA,CAAS;AAAA,GACxB;AACF;;;ACzKO,SAAS,mBAAmB,QAAA,EAKjC;AACA,EAAA,MAAM,SAAS,QAAA,CAAS,MAAA;AACxB,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ;AAAA,QACN,UAAU,QAAA,CAAS,EAAA;AAAA,QACnB,WAAA,EAAa,SAAS,OAAA,EAAS,IAAA;AAAA,QAC/B,SAAS,EAAC;AAAA,QACV,OAAO,EAAC;AAAA,QACR,SAAS;AAAC,OACZ;AAAA,MACA,SAAS,EAAC;AAAA,MACV,OAAO,EAAC;AAAA,MACR,SAAS;AAAC,KACZ;AAAA,EACF;AAGA,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,EAAC;AACnC,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,IAAS,EAAC;AAC/B,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,EAAC;AAEnC,EAAA,MAAM,MAAA,GAA4B;AAAA,IAChC,UAAU,QAAA,CAAS,EAAA;AAAA,IACnB,WAAA,EAAa,SAAS,OAAA,EAAS,IAAA;AAAA,IAC/B,OAAA;AAAA,IACA,KAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,OAAA,EAAS,KAAA,EAAO,OAAA,EAAQ;AAC3C;AAKO,SAAS,0BAAA,CACd,WACA,gBAAA,EACgB;AAChB,EAAA,MAAM,UAA+B,EAAC;AAEtC,EAAA,KAAA,MAAW,YAAY,SAAA,EAAW;AAChC,IAAA,IAAI,CAAC,SAAS,MAAA,EAAQ;AAAC,MAAA;AAAA,IAAS;AAEhC,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,kBAAA,CAAmB,QAAQ,CAAA;AAC9C,IAAA,OAAA,CAAQ,KAAK,MAAM,CAAA;AAAA,EACrB;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,aAAA;AAAA,IACR,aAAA,EAAe,CAAA;AAAA,IACf,WAAA,EAAA,iBAAa,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,IACpC;AAAA,GACF;AACF","file":"index.js","sourcesContent":["/**\n * @module @kb-labs/rest-api-core/config/schema\n * Zod schema for REST API configuration\n */\n\nimport { z } from 'zod';\n\nexport const restApiConfigSchema = z.object({\n  port: z.number().int().positive().default(5050),\n  basePath: z.string().default('/api/v1'),\n  apiVersion: z.string().default('1.0.0'),\n  cors: z.object({\n    origins: z.array(z.string()).default(['http://localhost:3000', 'http://localhost:5173']),\n    allowCredentials: z.boolean().default(true),\n    profile: z.enum(['dev', 'preview', 'prod']).default('dev'),\n  }).default({}),\n  timeouts: z.object({\n    requestTimeout: z.number().int().positive().default(30000),\n    bodyLimit: z.number().int().positive().default(10_485_760),\n  }).optional(),\n  rateLimit: z.object({\n    max: z.number().int().positive().default(60),\n    timeWindow: z.string().default('1 minute'),\n  }).optional(),\n  startup: z.object({\n    maxConcurrent: z.number().int().positive().default(32),\n    queueLimit: z.number().int().nonnegative().default(128),\n    timeoutMs: z.number().int().positive().default(5000),\n    retryAfterSeconds: z.number().int().positive().default(2),\n  }).optional(),\n  plugins: z.array(z.string()).default([]),\n  mockMode: z.boolean().default(false),\n  redis: z\n    .object({\n      url: z.string().min(1),\n      namespace: z.string().default('kb'),\n    })\n    .optional(),\n  events: z\n    .object({\n      registry: z\n        .object({\n          token: z.string().min(1),\n          headerName: z.string().default('authorization'),\n          queryParam: z.string().default('access_token'),\n        })\n        .optional(),\n    })\n    .optional(),\n  http2: z\n    .object({\n      enabled: z.boolean().default(false),\n      allowHTTP1: z.boolean().default(true), // Fallback for old clients\n    })\n    .optional(),\n  ssl: z\n    .object({\n      keyPath: z.string().min(1),\n      certPath: z.string().min(1),\n    })\n    .optional(),\n});\n\nexport type RestApiConfig = z.infer<typeof restApiConfigSchema>;\n\n","/**\n * @module @kb-labs/rest-api-core/config/loader\n * Configuration loader using loadBundle from @kb-labs/core-bundle\n */\n\nimport { loadBundle } from '@kb-labs/core-bundle';\nimport { resolveConfig, findNearestConfig, readJsonWithDiagnostics } from '@kb-labs/core-config';\nimport { restApiConfigSchema, type RestApiConfig } from './schema';\n\n/**\n * Load REST API configuration\n */\nexport async function loadRestApiConfig(\n  cwd: string = process.cwd(),\n  cliOverrides?: Partial<RestApiConfig>\n): Promise<{ config: RestApiConfig; diagnostics: Array<{ level: string; code: string; message: string }> }> {\n  // Try to load bundle with 'restApi' product\n  // Note: if 'restApi' is not registered as ProductId, we'll fall back to direct config loading\n  let bundleConfig: any = {};\n  \n  try {\n    const bundle = await loadBundle({\n      cwd,\n      product: 'restApi' as any, // TODO: Add 'restApi' to ProductId type\n      profileId: 'default',\n    });\n    bundleConfig = bundle.config;\n  } catch {\n    // If bundle loading fails (product not registered), try direct config loading\n    const { path: configPath } = await findNearestConfig({\n      startDir: cwd,\n      filenames: ['.kb/kb.config.json', '.kb/kb.config.yaml'],\n    });\n    \n    if (configPath) {\n      const readResult = await readJsonWithDiagnostics<any>(configPath);\n      if (readResult.ok && readResult.data?.rest) {\n        bundleConfig = readResult.data.rest;\n      }\n    }\n  }\n  \n  const defaults: RestApiConfig = {\n    port: 5050,\n    basePath: '/api/v1',\n    apiVersion: '1.0.0',\n    cors: {\n      origins: ['http://localhost:3000', 'http://localhost:5173'],\n      allowCredentials: true,\n      profile: 'dev',\n    },\n    timeouts: {\n      requestTimeout: 30000,\n      bodyLimit: 10_485_760,\n    },\n    rateLimit: {\n      // 600/min for dev (dashboard needs ~10 requests per page load)\n      // Override with KB_REST_RATE_LIMIT_MAX=60 for production public API\n      max: 600,\n      timeWindow: '1 minute',\n    },\n    plugins: [],\n    mockMode: false,\n  };\n\n  const envMapper = (env: NodeJS.ProcessEnv): Partial<RestApiConfig> => {\n    const overrides: Partial<RestApiConfig> = {};\n\n    if (env.KB_REST_PORT) {\n      const parsedPort = Number.parseInt(env.KB_REST_PORT, 10);\n      if (!Number.isNaN(parsedPort)) {\n        overrides.port = parsedPort;\n      }\n    }\n\n    if (env.KB_REST_BASE_PATH) {\n      overrides.basePath = env.KB_REST_BASE_PATH;\n    }\n\n    if (env.KB_REST_API_VERSION) {\n      overrides.apiVersion = env.KB_REST_API_VERSION;\n    }\n\n    if (env.KB_REST_CORS_ORIGINS) {\n      const origins = env.KB_REST_CORS_ORIGINS.split(',').map(origin => origin.trim()).filter(Boolean);\n      overrides.cors = {\n        ...(overrides.cors ?? defaults.cors),\n        origins,\n      };\n    }\n\n    if (env.KB_REST_CORS_PROFILE) {\n      overrides.cors = {\n        ...(overrides.cors ?? defaults.cors),\n        profile: env.KB_REST_CORS_PROFILE as RestApiConfig['cors']['profile'],\n      };\n    }\n\n    if (env.KB_REST_MOCK_MODE === 'true' || env.KB_REST_MOCK_MODE === '1') {\n      overrides.mockMode = true;\n    }\n\n    if (env.KB_REST_REDIS_URL) {\n      overrides.redis = {\n        ...(overrides.redis ?? {}),\n        url: env.KB_REST_REDIS_URL,\n        namespace: overrides.redis?.namespace ?? defaults.redis?.namespace ?? 'kb',\n      } as RestApiConfig['redis'];\n    }\n\n    if (env.KB_REST_REDIS_NAMESPACE) {\n      overrides.redis = {\n        ...(overrides.redis ?? (env.KB_REST_REDIS_URL ? { url: env.KB_REST_REDIS_URL } : defaults.redis ?? {})),\n        namespace: env.KB_REST_REDIS_NAMESPACE,\n      } as RestApiConfig['redis'];\n    }\n\n    if (env.KB_REST_RATE_LIMIT_MAX) {\n      const parsedMax = Number.parseInt(env.KB_REST_RATE_LIMIT_MAX, 10);\n      if (!Number.isNaN(parsedMax)) {\n        overrides.rateLimit = {\n          ...(overrides.rateLimit ?? defaults.rateLimit ?? { max: 600, timeWindow: '1 minute' }),\n          max: parsedMax,\n        };\n      }\n    }\n\n    if (env.KB_REST_RATE_LIMIT_WINDOW) {\n      overrides.rateLimit = {\n        ...(overrides.rateLimit ?? defaults.rateLimit ?? { max: 600, timeWindow: '1 minute' }),\n        timeWindow: env.KB_REST_RATE_LIMIT_WINDOW,\n      };\n    }\n\n    if (env.KB_REST_REQUEST_TIMEOUT) {\n      const parsedTimeout = Number.parseInt(env.KB_REST_REQUEST_TIMEOUT, 10);\n      if (!Number.isNaN(parsedTimeout)) {\n        const baseTimeout = overrides.timeouts ?? defaults.timeouts;\n        overrides.timeouts = {\n          requestTimeout: parsedTimeout,\n          bodyLimit: baseTimeout?.bodyLimit ?? defaults.timeouts?.bodyLimit ?? 10_485_760,\n        };\n      }\n    }\n\n    if (env.KB_REST_BODY_LIMIT) {\n      const parsedBodyLimit = Number.parseInt(env.KB_REST_BODY_LIMIT, 10);\n      if (!Number.isNaN(parsedBodyLimit)) {\n        const baseTimeout = overrides.timeouts ?? defaults.timeouts;\n        overrides.timeouts = {\n          requestTimeout: baseTimeout?.requestTimeout ?? defaults.timeouts?.requestTimeout ?? 30000,\n          bodyLimit: parsedBodyLimit,\n        };\n      }\n    }\n\n    return overrides;\n  };\n  \n  // Resolve configuration: defaults → bundleConfig → env → cliOverrides\n  const resolved = resolveConfig<RestApiConfig>({\n    defaults,\n    fileConfig: bundleConfig,\n    envMapper,\n    cliOverrides,\n    validate: (cfg) => {\n      const result = restApiConfigSchema.safeParse(cfg);\n      if (result.success) {\n        return { ok: true };\n      }\n      return {\n        ok: false,\n        diagnostics: result.error.errors.map((err) => ({\n          level: 'error' as const,\n          code: 'CONFIG_VALIDATION_ERROR',\n          message: `${err.path.join('.')}: ${err.message}`,\n        })),\n      };\n    },\n  });\n  \n  // Parse with Zod to get properly typed config\n  const validated = restApiConfigSchema.parse(resolved.value);\n  \n  return {\n    config: validated,\n    diagnostics: resolved.diagnostics,\n  };\n}\n\n","/**\n * @module @kb-labs/rest-api-core/studio-registry\n *\n * Transforms ManifestV3 studio sections into StudioRegistry format.\n * REST API uses this to provide pre-computed registry data to Studio frontend.\n */\n\nimport type { ManifestV3 } from '@kb-labs/plugin-contracts';\nimport type {\n  StudioRegistry,\n  StudioPluginEntry,\n  StudioWidgetDecl,\n  StudioMenuDecl,\n  StudioLayoutDecl,\n} from '@kb-labs/rest-api-contracts';\n\n/**\n * Convert a single ManifestV3 to StudioRegistry entries.\n */\nexport function manifestToRegistry(manifest: ManifestV3): {\n  plugin: StudioPluginEntry;\n  widgets: StudioWidgetDecl[];\n  menus: StudioMenuDecl[];\n  layouts: StudioLayoutDecl[];\n} {\n  const studio = manifest.studio;\n  if (!studio) {\n    return {\n      plugin: {\n        pluginId: manifest.id,\n        displayName: manifest.display?.name,\n        widgets: [],\n        menus: [],\n        layouts: [],\n      },\n      widgets: [],\n      menus: [],\n      layouts: [],\n    };\n  }\n\n  // Widgets, menus, layouts are already in correct format from manifest.studio\n  const widgets = studio.widgets ?? [];\n  const menus = studio.menus ?? [];\n  const layouts = studio.layouts ?? [];\n\n  const plugin: StudioPluginEntry = {\n    pluginId: manifest.id,\n    displayName: manifest.display?.name,\n    widgets,\n    menus,\n    layouts,\n  };\n\n  return { plugin, widgets, menus, layouts };\n}\n\n/**\n * Combine multiple manifests into a single StudioRegistry.\n */\nexport function combineManifestsToRegistry(\n  manifests: ManifestV3[],\n  _registryVersion?: string\n): StudioRegistry {\n  const plugins: StudioPluginEntry[] = [];\n\n  for (const manifest of manifests) {\n    if (!manifest.studio) {continue;}\n\n    const { plugin } = manifestToRegistry(manifest);\n    plugins.push(plugin);\n  }\n\n  return {\n    schema: 'kb.studio/1',\n    schemaVersion: 1,\n    generatedAt: new Date().toISOString(),\n    plugins,\n  };\n}\n"]}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@kb-labs/rest-api-core",
+  "version": "1.0.0",
+  "description": "Core REST API functionality for KB Labs, including request handling and routing",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "sideEffects": false,
+  "dependencies": {
+    "zod": "^3.23.8",
+    "@kb-labs/core-bundle": "link:../../../kb-labs-core/packages/core-bundle",
+    "@kb-labs/core-config": "link:../../../kb-labs-core/packages/core-config",
+    "@kb-labs/plugin-contracts": "link:../../../kb-labs-plugin/packages/plugin-contracts",
+    "@kb-labs/rest-api-contracts": "link:../rest-api-contracts"
+  },
+  "devDependencies": {
+    "vitest": "^3.2.4",
+    "@kb-labs/devkit": "link:../../../kb-labs-devkit",
+    "tsup": "^8.5.0",
+    "@types/node": "^24.3.3",
+    "rimraf": "^6.0.1",
+    "typescript": "^5.6.3"
+  },
+  "engines": {
+    "node": ">=20.0.0",
+    "pnpm": ">=9.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "clean": "rimraf dist",
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "type-check": "tsc --noEmit",
+    "lint": "eslint .",
+    "lint:fix": "eslint . --fix",
+    "test": "vitest run --passWithNoTests -c ../../vitest.config.ts",
+    "test:watch": "vitest --passWithNoTests -c ../../vitest.config.ts"
+  }
+}