@llm-dev-ops/agentics-cli 1.4.27 → 1.4.29

package/dist/pipeline/phase4/phases/http-server-generator.js

@@ -0,0 +1,1010 @@
+/**
+ * Phase 4 Pipeline -- Stage 5: HTTP Server Generator
+ *
+ * Generates Cloud Run-compatible HTTP server code for the resolved implementation
+ * language and framework. Produces main entrypoint, route handlers, middleware,
+ * and health check endpoints derived from Phase 2 bounded context definitions.
+ *
+ * TypeScript target: Hono framework with structured JSON logging.
+ * Rust target: Axum framework with Tower middleware layers.
+ *
+ * All generated files carry a "do not edit manually" header.
+ *
+ * Exports:
+ *   - generateHttpServer(context) -- pipeline entry point
+ *
+ * Error codes:
+ *   ECLI-P4-050  Missing prerequisite stage output (erp-target-resolution)
+ *   ECLI-P4-051  HTTP server file write failure
+ */
+import { mkdirSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { createSpan, endSpan, emitSpan } from '../../phase2/telemetry.js';
+// ============================================================================
+// Constants
+// ============================================================================
+const DIR_MODE = 0o700;
+const FILE_MODE = 0o600;
+const GENERATED_HEADER_TS = '// Generated by Phase 4 pipeline — do not edit manually\n';
+const GENERATED_HEADER_RS = '// Generated by Phase 4 pipeline — do not edit manually\n';
+// ============================================================================
+// Name Helpers
+// ============================================================================
+/**
+ * Convert a name to kebab-case slug.
+ */
+function slugify(name) {
+    return name
+        .replace(/([a-z])([A-Z])/g, '$1-$2')
+        .replace(/[^a-zA-Z0-9]+/g, '-')
+        .replace(/^-|-$/g, '')
+        .toLowerCase();
+}
+/**
+ * Convert a name to snake_case.
+ */
+function snakeCase(name) {
+    return slugify(name).replace(/-/g, '_');
+}
+// ============================================================================
+// Mock Data Generation — High-Fidelity Domain Responses
+// ============================================================================
+/**
+ * Build a realistic mock response body for a command handler based on
+ * keyword analysis of the context and operation names.
+ *
+ * Returns indented TypeScript/JSON-like lines for embedding in route handlers.
+ */
+function buildMockCommandBody(ctxSlug, opSlug) {
+    const lower = `${ctxSlug} ${opSlug}`.toLowerCase();
+    // Contract-related
+    if (lower.includes('contract') || lower.includes('summarize')) {
+        return [
+            `    const startTime = Date.now();`,
+            `    // Simulate AI processing delay`,
+            `    await new Promise(r => setTimeout(r, 50 + Math.random() * 150));`,
+            `    return c.json({`,
+            `      correlationId,`,
+            `      status: 'completed',`,
+            `      data: {`,
+            `        contract_id: body.contract_id ?? 'CONTRACT-2024-001',`,
+            `        summary: 'Purchase agreement for industrial components with 3-year term.',`,
+            `        key_terms: ['net-60 payment', 'FOB destination', 'volume discount 5%', 'annual escalation 2.5%'],`,
+            `        risk_flags: [],`,
+            `        total_value: { amount: 1250000, currency: 'USD' },`,
+            `        confidence: 0.92,`,
+            `        processing_time_ms: Date.now() - startTime,`,
+            `      },`,
+            `      metadata: { model: 'gpt-4o', tokens_used: 1847, erp_source: 'SAP S/4HANA API_CONTRACT_SRV' },`,
+            `    }, 200);`,
+        ];
+    }
+    // Vendor risk
+    if (lower.includes('vendor') || lower.includes('risk') || lower.includes('score')) {
+        return [
+            `    const startTime = Date.now();`,
+            `    await new Promise(r => setTimeout(r, 30 + Math.random() * 100));`,
+            `    return c.json({`,
+            `      correlationId,`,
+            `      status: 'completed',`,
+            `      data: {`,
+            `        vendor_id: body.vendor_id ?? 'V-10001',`,
+            `        risk_score: 23,`,
+            `        risk_level: 'low',`,
+            `        factors: [`,
+            `          { name: 'delivery_reliability', score: 95, weight: 0.3 },`,
+            `          { name: 'financial_stability', score: 88, weight: 0.25 },`,
+            `          { name: 'compliance_history', score: 97, weight: 0.2 },`,
+            `          { name: 'quality_metrics', score: 91, weight: 0.25 },`,
+            `        ],`,
+            `        last_assessed: new Date().toISOString(),`,
+            `        processing_time_ms: Date.now() - startTime,`,
+            `      },`,
+            `      metadata: { model: 'gpt-4o', tokens_used: 2104, erp_source: 'SAP S/4HANA API_BUSINESS_PARTNER' },`,
+            `    }, 200);`,
+        ];
+    }
+    // Anomaly detection
+    if (lower.includes('anomal') || lower.includes('detect')) {
+        return [
+            `    const startTime = Date.now();`,
+            `    await new Promise(r => setTimeout(r, 80 + Math.random() * 200));`,
+            `    return c.json({`,
+            `      correlationId,`,
+            `      status: 'completed',`,
+            `      data: {`,
+            `        scan_id: crypto.randomUUID(),`,
+            `        anomalies_found: 2,`,
+            `        anomalies: [`,
+            `          { type: 'price_spike', entity: 'PO-2024-00847', severity: 'medium', details: 'Unit price 34% above 90-day average', confidence: 0.87 },`,
+            `          { type: 'duplicate_po', entity: 'PO-2024-00851', severity: 'low', details: 'Potential duplicate of PO-2024-00843', confidence: 0.72 },`,
+            `        ],`,
+            `        total_records_scanned: 1247,`,
+            `        processing_time_ms: Date.now() - startTime,`,
+            `      },`,
+            `      metadata: { model: 'gpt-4o', tokens_used: 3891, erp_source: 'SAP S/4HANA API_PURCHASEORDER_PROCESS_SRV' },`,
+            `    }, 200);`,
+        ];
+    }
+    // Negotiation / preparation
+    if (lower.includes('negotiat') || lower.includes('prepar') || lower.includes('brief')) {
+        return [
+            `    const startTime = Date.now();`,
+            `    await new Promise(r => setTimeout(r, 100 + Math.random() * 300));`,
+            `    return c.json({`,
+            `      correlationId,`,
+            `      status: 'completed',`,
+            `      data: {`,
+            `        brief_id: crypto.randomUUID(),`,
+            `        vendor: body.vendor_id ?? 'V-10001',`,
+            `        recommended_strategy: 'competitive_leverage',`,
+            `        talking_points: [`,
+            `          'Current contract expires in 45 days — leverage renewal timing',`,
+            `          'Market prices decreased 8% since last negotiation',`,
+            `          'Three qualified alternative suppliers identified',`,
+            `        ],`,
+            `        target_savings_pct: 12,`,
+            `        risk_notes: ['Vendor has exclusive IP on 2 of 7 components'],`,
+            `        processing_time_ms: Date.now() - startTime,`,
+            `      },`,
+            `      metadata: { model: 'gpt-4o', tokens_used: 4215, erp_source: 'Multi-entity' },`,
+            `    }, 200);`,
+        ];
+    }
+    // Order-related
+    if (lower.includes('order') || lower.includes('purchase')) {
+        return [
+            `    const startTime = Date.now();`,
+            `    await new Promise(r => setTimeout(r, 40 + Math.random() * 80));`,
+            `    return c.json({`,
+            `      correlationId,`,
+            `      status: 'completed',`,
+            `      data: {`,
+            `        order_id: body.order_id ?? 'PO-2024-00900',`,
+            `        status: 'processed',`,
+            `        line_items: 5,`,
+            `        total_amount: { amount: 45750, currency: 'USD' },`,
+            `        processing_time_ms: Date.now() - startTime,`,
+            `      },`,
+            `      metadata: { erp_source: 'SAP S/4HANA API_PURCHASEORDER_PROCESS_SRV' },`,
+            `    }, 200);`,
+        ];
+    }
+    // Generic command fallback
+    return [
+        `    const startTime = Date.now();`,
+        `    await new Promise(r => setTimeout(r, 30 + Math.random() * 100));`,
+        `    return c.json({`,
+        `      correlationId,`,
+        `      status: 'completed',`,
+        `      data: { id: crypto.randomUUID(), ...body, processed_at: new Date().toISOString() },`,
+        `      metadata: { processing_time_ms: Date.now() - startTime },`,
+        `    }, 200);`,
+    ];
+}
+/**
+ * Build a realistic mock response body for a query handler.
+ */
+function buildMockQueryBody(ctxSlug, opSlug) {
+    const lower = `${ctxSlug} ${opSlug}`.toLowerCase();
+    if (lower.includes('vendor') || lower.includes('supplier')) {
+        return [
+            `    return c.json({`,
+            `      correlationId,`,
+            `      status: 'ok',`,
+            `      data: [`,
+            `        { vendor_id: 'V-10001', name: 'Acme Industrial Corp', risk_score: 23, risk_level: 'low', category: 'strategic', last_assessed: '2026-02-15' },`,
+            `        { vendor_id: 'V-10002', name: 'GlobalParts Ltd', risk_score: 67, risk_level: 'medium', category: 'leverage', last_assessed: '2026-02-20' },`,
+            `        { vendor_id: 'V-10003', name: 'PrecisionMfg GmbH', risk_score: 12, risk_level: 'low', category: 'strategic', last_assessed: '2026-02-18' },`,
+            `      ],`,
+            `      pagination: { page: parseInt(params.page ?? '1'), per_page: 20, total: 3 },`,
+            `    }, 200);`,
+        ];
+    }
+    if (lower.includes('contract')) {
+        return [
+            `    return c.json({`,
+            `      correlationId,`,
+            `      status: 'ok',`,
+            `      data: [`,
+            `        { contract_id: 'C-2024-001', vendor: 'Acme Industrial Corp', value: 1250000, currency: 'USD', status: 'active', expires: '2027-03-15' },`,
+            `        { contract_id: 'C-2024-002', vendor: 'GlobalParts Ltd', value: 890000, currency: 'USD', status: 'active', expires: '2026-12-01' },`,
+            `      ],`,
+            `      pagination: { page: parseInt(params.page ?? '1'), per_page: 20, total: 2 },`,
+            `    }, 200);`,
+        ];
+    }
+    if (lower.includes('order') || lower.includes('purchase')) {
+        return [
+            `    return c.json({`,
+            `      correlationId,`,
+            `      status: 'ok',`,
+            `      data: [`,
+            `        { order_id: 'PO-2024-00847', vendor: 'Acme Industrial Corp', amount: 45750, currency: 'USD', status: 'approved', created: '2026-02-22' },`,
+            `        { order_id: 'PO-2024-00851', vendor: 'GlobalParts Ltd', amount: 23100, currency: 'USD', status: 'pending', created: '2026-02-25' },`,
+            `      ],`,
+            `      pagination: { page: parseInt(params.page ?? '1'), per_page: 20, total: 2 },`,
+            `    }, 200);`,
+        ];
+    }
+    if (lower.includes('polic') || lower.includes('governance')) {
+        return [
+            `    return c.json({`,
+            `      correlationId,`,
+            `      status: 'ok',`,
+            `      data: {`,
+            `        policies: [`,
+            `          { id: 'POL-001', name: 'read-only-access', description: 'All ERP surface calls are read-only', enforced: true },`,
+            `          { id: 'POL-002', name: 'pii-redaction', description: 'PII fields are redacted before AI processing', enforced: true },`,
+            `          { id: 'POL-003', name: 'audit-trail', description: 'All requests logged with correlation ID', enforced: true },`,
+            `        ],`,
+            `        max_tokens_per_request: 4096,`,
+            `      },`,
+            `    }, 200);`,
+        ];
+    }
+    if (lower.includes('audit') || lower.includes('log') || lower.includes('trail')) {
+        return [
+            `    return c.json({`,
+            `      correlationId,`,
+            `      status: 'ok',`,
+            `      data: [`,
+            `        { id: 'AUD-001', timestamp: '2026-02-27T10:15:00Z', action: 'contract.summarize', user: 'svc-procurement-ai', status: 'success', duration_ms: 234 },`,
+            `        { id: 'AUD-002', timestamp: '2026-02-27T10:14:30Z', action: 'vendor.risk_score', user: 'svc-procurement-ai', status: 'success', duration_ms: 178 },`,
+            `      ],`,
+            `      pagination: { page: parseInt(params.page ?? '1'), per_page: 50, total: 2 },`,
+            `    }, 200);`,
+        ];
+    }
+    // Generic query fallback
+    return [
+        `    return c.json({`,
+        `      correlationId,`,
+        `      status: 'ok',`,
+        `      data: [],`,
+        `      pagination: { page: parseInt(params.page ?? '1'), per_page: 20, total: 0 },`,
+        `    }, 200);`,
+    ];
+}
+// ============================================================================
+// TypeScript / Hono Generation
+// ============================================================================
+/**
+ * Generate the TypeScript main.ts entrypoint for Hono on Cloud Run.
+ */
+function tsMain() {
+    return [
+        GENERATED_HEADER_TS,
+        `import { serve } from '@hono/node-server';`,
+        `import { app } from './routes.js';`,
+        '',
+        'const PORT = parseInt(process.env.PORT ?? \'8080\', 10);',
+        '',
+        'serve({ fetch: app.fetch, port: PORT }, (info) => {',
+        '  process.stdout.write(',
+        '    JSON.stringify({',
+        '      severity: \'INFO\',',
+        '      message: \'HTTP server started\',',
+        '      port: info.port,',
+        '      pid: process.pid,',
+        '      timestamp: new Date().toISOString(),',
+        '    }) + \'\\n\',',
+        '  );',
+        '});',
+        '',
+        'process.on(\'SIGTERM\', () => {',
+        '  process.stdout.write(',
+        '    JSON.stringify({',
+        '      severity: \'INFO\',',
+        '      message: \'Received SIGTERM — shutting down gracefully\',',
+        '      timestamp: new Date().toISOString(),',
+        '    }) + \'\\n\',',
+        '  );',
+        '  process.exit(0);',
+        '});',
+        '',
+    ].join('\n');
+}
+/**
+ * Generate TypeScript routes.ts with one POST route per command and one GET
+ * route per query, across all bounded contexts.
+ */
+function tsRoutes(contexts) {
+    const lines = [
+        GENERATED_HEADER_TS,
+        `import { Hono } from 'hono';`,
+        `import * as crypto from 'node:crypto';`,
+        `import { correlationMiddleware, iamMiddleware, loggingMiddleware } from './middleware.js';`,
+        `import { healthRouter } from './health.js';`,
+        '',
+        'const app = new Hono();',
+        '',
+        '// Global middleware',
+        'app.use(\'*\', correlationMiddleware);',
+        'app.use(\'*\', iamMiddleware);',
+        'app.use(\'*\', loggingMiddleware);',
+        '',
+        '// Health endpoints',
+        `app.route('/health', healthRouter);`,
+        '',
+    ];
+    let routeCount = 0;
+    for (const ctx of contexts) {
+        const ctxSlug = slugify(ctx.name.replace(/Context$/i, ''));
+        lines.push(`// Bounded context: ${ctx.name}`);
+        for (const cmd of ctx.commands) {
+            const cmdSlug = slugify(cmd.name);
+            lines.push(`app.post('/api/${ctxSlug}/${cmdSlug}', async (c) => {`);
+            lines.push(`  const correlationId = c.get('correlationId') as string;`);
+            lines.push(`  try {`);
+            lines.push(`    const body = await c.req.json();`);
+            // High-fidelity mock handler
+            const cmdMockLines = buildMockCommandBody(ctxSlug, cmdSlug);
+            lines.push(...cmdMockLines);
+            lines.push(`  } catch (err) {`);
+            lines.push(`    const message = err instanceof Error ? err.message : 'Unknown error';`);
+            lines.push(`    return c.json({ error: { code: 'COMMAND_ERROR', message }, correlationId }, 500);`);
+            lines.push(`  }`);
+            lines.push(`});`);
+            lines.push('');
+            routeCount++;
+        }
+        for (const query of ctx.queries) {
+            const querySlug = slugify(query.name);
+            lines.push(`app.get('/api/${ctxSlug}/${querySlug}', async (c) => {`);
+            lines.push(`  const correlationId = c.get('correlationId') as string;`);
+            lines.push(`  try {`);
+            lines.push(`    const params = c.req.query();`);
+            // High-fidelity mock handler
+            const queryMockLines = buildMockQueryBody(ctxSlug, querySlug);
+            lines.push(...queryMockLines);
+            lines.push(`  } catch (err) {`);
+            lines.push(`    const message = err instanceof Error ? err.message : 'Unknown error';`);
+            lines.push(`    return c.json({ error: { code: 'QUERY_ERROR', message }, correlationId }, 500);`);
+            lines.push(`  }`);
+            lines.push(`});`);
+            lines.push('');
+            routeCount++;
+        }
+    }
+    lines.push('export { app };');
+    lines.push('');
+    return { content: lines.join('\n'), routeCount };
+}
+/**
+ * Generate TypeScript middleware.ts with IAM token validation,
+ * correlation ID injection, and structured request/response logging.
+ */
+function tsMiddleware() {
+    return [
+        GENERATED_HEADER_TS,
+        `import type { MiddlewareHandler } from 'hono';`,
+        `import { createMiddleware } from 'hono/factory';`,
+        `import * as crypto from 'node:crypto';`,
+        '',
+        '// ---------------------------------------------------------------------------',
+        '// Correlation ID middleware',
+        '// ---------------------------------------------------------------------------',
+        '',
+        '/**',
+        ' * Injects or propagates X-Correlation-ID for request tracing.',
+        ' */',
+        'export const correlationMiddleware: MiddlewareHandler = createMiddleware(async (c, next) => {',
+        '  const correlationId = c.req.header(\'X-Correlation-ID\') ?? crypto.randomUUID();',
+        '  c.set(\'correlationId\', correlationId);',
+        '  c.header(\'X-Correlation-ID\', correlationId);',
+        '  await next();',
+        '});',
+        '',
+        '// ---------------------------------------------------------------------------',
+        '// IAM token validation middleware (GCP identity token via JWKS)',
+        '// ---------------------------------------------------------------------------',
+        '',
+        '/**',
+        ' * Validates GCP service account identity tokens on every inbound request.',
+        ' * Skips validation for health check endpoints.',
+        ' */',
+        'export const iamMiddleware: MiddlewareHandler = createMiddleware(async (c, next) => {',
+        '  // Skip IAM check for health/readiness probes',
+        '  const path = new URL(c.req.url).pathname;',
+        '  if (path === \'/health/healthz\' || path === \'/health/readyz\') {',
+        '    await next();',
+        '    return;',
+        '  }',
+        '',
+        '  const authHeader = c.req.header(\'Authorization\');',
+        '  if (!authHeader?.startsWith(\'Bearer \')) {',
+        '    return c.json({ error: { code: \'UNAUTHORIZED\', message: \'Missing Bearer token\' } }, 401);',
+        '  }',
+        '',
+        '  const token = authHeader.slice(7);',
+        '  // TODO: verify GCP identity token via JWKS endpoint:',
+        '  // https://www.googleapis.com/oauth2/v3/certs',
+        '  // Validate iss, aud, exp claims.',
+        '  if (!token) {',
+        '    return c.json({ error: { code: \'UNAUTHORIZED\', message: \'Invalid token\' } }, 401);',
+        '  }',
+        '',
+        '  await next();',
+        '});',
+        '',
+        '// ---------------------------------------------------------------------------',
+        '// Structured JSON request/response logging middleware',
+        '// ---------------------------------------------------------------------------',
+        '',
+        '/**',
+        ' * Emits structured JSON log lines for each request and response.',
+        ' */',
+        'export const loggingMiddleware: MiddlewareHandler = createMiddleware(async (c, next) => {',
+        '  const startTime = Date.now();',
+        '  const correlationId = c.get(\'correlationId\') as string | undefined;',
+        '',
+        '  process.stdout.write(',
+        '    JSON.stringify({',
+        '      severity: \'INFO\',',
+        '      message: \'request received\',',
+        '      httpRequest: {',
+        '        method: c.req.method,',
+        '        url: c.req.url,',
+        '        userAgent: c.req.header(\'user-agent\'),',
+        '      },',
+        '      correlationId,',
+        '      timestamp: new Date().toISOString(),',
+        '    }) + \'\\n\',',
+        '  );',
+        '',
+        '  await next();',
+        '',
+        '  const durationMs = Date.now() - startTime;',
+        '  process.stdout.write(',
+        '    JSON.stringify({',
+        '      severity: \'INFO\',',
+        '      message: \'request completed\',',
+        '      httpRequest: {',
+        '        method: c.req.method,',
+        '        url: c.req.url,',
+        '        status: c.res.status,',
+        '        latency: `${durationMs}ms`,',
+        '      },',
+        '      correlationId,',
+        '      timestamp: new Date().toISOString(),',
+        '    }) + \'\\n\',',
+        '  );',
+        '});',
+        '',
+    ].join('\n');
+}
+/**
+ * Generate TypeScript health.ts with /healthz and /readyz endpoints.
+ */
+function tsHealth() {
+    return [
+        GENERATED_HEADER_TS,
+        `import { Hono } from 'hono';`,
+        '',
+        'export const healthRouter = new Hono();',
+        '',
+        '/**',
+        ' * GET /healthz',
+        ' * Liveness probe — returns 200 when the process is running.',
+        ' */',
+        'healthRouter.get(\'/healthz\', (c) => {',
+        '  return c.json({ status: \'ok\' }, 200);',
+        '});',
+        '',
+        '/**',
+        ' * GET /readyz',
+        ' * Readiness probe — returns 200 when the service is ready to receive traffic.',
+        ' */',
+        'healthRouter.get(\'/readyz\', (c) => {',
+        '  return c.json({ status: \'ready\' }, 200);',
+        '});',
+        '',
+    ].join('\n');
+}
+// ============================================================================
+// Rust Mock Data Helpers
+// ============================================================================
+function buildRustMockCommandJson(ctxSlug, opSlug) {
+    const lower = `${ctxSlug} ${opSlug}`.toLowerCase();
+    if (lower.includes('contract') || lower.includes('summarize')) {
+        return `    Ok(Json(json!({
+        "status": "completed",
+        "data": {
+            "contract_id": body.get("contract_id").and_then(|v| v.as_str()).unwrap_or("CONTRACT-2024-001"),
+            "summary": "Purchase agreement for industrial components with 3-year term.",
+            "key_terms": ["net-60 payment", "FOB destination", "volume discount 5%"],
+            "confidence": 0.92,
+            "processing_time_ms": start.elapsed().as_millis() as u64
+        },
+        "metadata": { "model": "gpt-4o", "erp_source": "SAP S/4HANA API_CONTRACT_SRV" }
+    })))`;
+    }
+    if (lower.includes('vendor') || lower.includes('risk') || lower.includes('score')) {
+        return `    Ok(Json(json!({
+        "status": "completed",
+        "data": {
+            "vendor_id": body.get("vendor_id").and_then(|v| v.as_str()).unwrap_or("V-10001"),
+            "risk_score": 23,
+            "risk_level": "low",
+            "factors": [
+                { "name": "delivery_reliability", "score": 95, "weight": 0.3 },
+                { "name": "financial_stability", "score": 88, "weight": 0.25 }
+            ],
+            "processing_time_ms": start.elapsed().as_millis() as u64
+        },
+        "metadata": { "model": "gpt-4o", "erp_source": "SAP S/4HANA API_BUSINESS_PARTNER" }
+    })))`;
+    }
+    if (lower.includes('anomal') || lower.includes('detect')) {
+        return `    Ok(Json(json!({
+        "status": "completed",
+        "data": {
+            "anomalies_found": 2,
+            "anomalies": [
+                { "type": "price_spike", "entity": "PO-2024-00847", "severity": "medium", "confidence": 0.87 },
+                { "type": "duplicate_po", "entity": "PO-2024-00851", "severity": "low", "confidence": 0.72 }
+            ],
+            "total_records_scanned": 1247,
+            "processing_time_ms": start.elapsed().as_millis() as u64
+        },
+        "metadata": { "model": "gpt-4o", "erp_source": "SAP S/4HANA API_PURCHASEORDER_PROCESS_SRV" }
+    })))`;
+    }
+    return `    Ok(Json(json!({
+        "status": "completed",
+        "data": body,
+        "processing_time_ms": start.elapsed().as_millis() as u64
+    })))`;
+}
+function buildRustMockQueryJson(ctxSlug, opSlug) {
+    const lower = `${ctxSlug} ${opSlug}`.toLowerCase();
+    if (lower.includes('vendor') || lower.includes('supplier')) {
+        return `    let page: usize = params.get("page").and_then(|p| p.parse().ok()).unwrap_or(1);
+    Ok(Json(json!({
+        "status": "ok",
+        "data": [
+            { "vendor_id": "V-10001", "name": "Acme Industrial Corp", "risk_score": 23, "risk_level": "low" },
+            { "vendor_id": "V-10002", "name": "GlobalParts Ltd", "risk_score": 67, "risk_level": "medium" }
+        ],
+        "pagination": { "page": page, "per_page": 20, "total": 2 }
+    })))`;
+    }
+    if (lower.includes('contract')) {
+        return `    let page: usize = params.get("page").and_then(|p| p.parse().ok()).unwrap_or(1);
+    Ok(Json(json!({
+        "status": "ok",
+        "data": [
+            { "contract_id": "C-2024-001", "vendor": "Acme Industrial Corp", "value": 1250000, "currency": "USD", "status": "active" },
+            { "contract_id": "C-2024-002", "vendor": "GlobalParts Ltd", "value": 890000, "currency": "USD", "status": "active" }
+        ],
+        "pagination": { "page": page, "per_page": 20, "total": 2 }
+    })))`;
+    }
+    return `    let page: usize = params.get("page").and_then(|p| p.parse().ok()).unwrap_or(1);
+    Ok(Json(json!({
+        "status": "ok",
+        "data": [],
+        "pagination": { "page": page, "per_page": 20, "total": 0 }
+    })))`;
+}
+// ============================================================================
+// Rust / Axum Generation
+// ============================================================================
+/**
+ * Generate Rust main.rs entrypoint for Axum on Cloud Run.
+ */
+function rustMain() {
+    return [
+        GENERATED_HEADER_RS,
+        'mod health;',
+        'mod middleware;',
+        'mod routes;',
+        '',
+        'use axum::Router;',
+        'use std::net::SocketAddr;',
+        '',
+        '#[tokio::main]',
+        'async fn main() {',
+        '    let port: u16 = std::env::var("PORT")',
+        '        .unwrap_or_else(|_| "8080".to_string())',
+        '        .parse()',
+        '        .expect("PORT must be a valid port number");',
+        '',
+        '    let app = routes::create_router();',
+        '',
+        '    let addr = SocketAddr::from(([0, 0, 0, 0], port));',
+        '    println!("{}", serde_json::json!({',
+        '        "severity": "INFO",',
+        '        "message": "HTTP server started",',
+        '        "port": port,',
+        '        "timestamp": chrono::Utc::now().to_rfc3339()',
+        '    }));',
+        '',
+        '    axum::Server::bind(&addr)',
+        '        .serve(app.into_make_service())',
+        '        .await',
+        '        .unwrap();',
+        '}',
+        '',
+    ].join('\n');
+}
+/**
+ * Generate Rust routes.rs with axum Router and route handlers.
+ */
+function rustRoutes(contexts) {
+    const lines = [
+        GENERATED_HEADER_RS,
+        'use axum::{',
+        '    extract::Query,',
+        '    http::StatusCode,',
+        '    response::Json,',
+        '    routing::{get, post},',
+        '    Router,',
+        '};',
+        'use serde_json::{json, Value};',
+        'use std::collections::HashMap;',
+        'use tokio;',
+        '',
+        'pub fn create_router() -> Router {',
+        '    Router::new()',
+        '        .route("/health/healthz", get(crate::health::healthz))',
+        '        .route("/health/readyz", get(crate::health::readyz))',
+    ];
+    let routeCount = 0;
+    for (const ctx of contexts) {
+        const ctxSlug = slugify(ctx.name.replace(/Context$/i, ''));
+        for (const cmd of ctx.commands) {
+            const cmdSlug = slugify(cmd.name);
+            const fnName = snakeCase(cmd.name);
+            lines.push(`        .route("/api/${ctxSlug}/${cmdSlug}", post(handle_${fnName}))`);
+            routeCount++;
+        }
+        for (const query of ctx.queries) {
+            const querySlug = slugify(query.name);
+            const fnName = snakeCase(query.name);
+            lines.push(`        .route("/api/${ctxSlug}/${querySlug}", get(handle_${fnName}))`);
+            routeCount++;
+        }
+    }
+    lines.push('}');
+    lines.push('');
+    for (const ctx of contexts) {
+        const ctxSlug = slugify(ctx.name.replace(/Context$/i, ''));
+        lines.push(`// Bounded context: ${ctx.name}`);
+        for (const cmd of ctx.commands) {
+            const fnName = snakeCase(cmd.name);
+            const cmdSlug = slugify(cmd.name);
+            lines.push(`async fn handle_${fnName}(`);
+            lines.push(`    Json(body): Json<Value>,`);
+            lines.push(`) -> Result<Json<Value>, StatusCode> {`);
+            lines.push(`    let start = std::time::Instant::now();`);
+            lines.push(`    // Simulated processing delay`);
+            lines.push(`    tokio::time::sleep(tokio::time::Duration::from_millis(50)).await;`);
+            lines.push(buildRustMockCommandJson(ctxSlug, cmdSlug));
+            lines.push(`}`);
+            lines.push('');
+        }
+        for (const query of ctx.queries) {
+            const fnName = snakeCase(query.name);
+            const querySlug = slugify(query.name);
+            lines.push(`async fn handle_${fnName}(`);
+            lines.push(`    Query(params): Query<HashMap<String, String>>,`);
+            lines.push(`) -> Result<Json<Value>, StatusCode> {`);
+            lines.push(buildRustMockQueryJson(ctxSlug, querySlug));
+            lines.push(`}`);
+            lines.push('');
+        }
+    }
+    return { content: lines.join('\n'), routeCount };
+}
+/**
+ * Generate Rust middleware.rs with Tower middleware layers.
+ */
+function rustMiddleware() {
+    return [
+        GENERATED_HEADER_RS,
+        'use axum::{',
+        '    body::Body,',
+        '    http::{Request, Response},',
+        '    middleware::Next,',
+        '    response::IntoResponse,',
+        '};',
+        'use uuid::Uuid;',
+        '',
+        '/// Inject or propagate X-Correlation-ID for request tracing.',
+        'pub async fn correlation_middleware(',
+        '    mut req: Request<Body>,',
+        '    next: Next<Body>,',
+        ') -> impl IntoResponse {',
+        '    let correlation_id = req',
+        '        .headers()',
+        '        .get("x-correlation-id")',
+        '        .and_then(|v| v.to_str().ok())',
+        '        .map(|s| s.to_string())',
+        '        .unwrap_or_else(|| Uuid::new_v4().to_string());',
+        '',
+        '    req.extensions_mut().insert(correlation_id.clone());',
+        '',
+        '    let mut response = next.run(req).await;',
+        '    response.headers_mut().insert(',
+        '        "x-correlation-id",',
+        '        correlation_id.parse().unwrap(),',
+        '    );',
+        '    response',
+        '}',
+        '',
+        '/// Validate GCP service account identity tokens (JWKS verification).',
+        'pub async fn iam_middleware(',
+        '    req: Request<Body>,',
+        '    next: Next<Body>,',
+        ') -> impl IntoResponse {',
+        '    let path = req.uri().path().to_string();',
+        '    if path == "/health/healthz" || path == "/health/readyz" {',
+        '        return next.run(req).await.into_response();',
+        '    }',
+        '',
+        '    let auth_header = req',
+        '        .headers()',
+        '        .get("authorization")',
+        '        .and_then(|v| v.to_str().ok())',
+        '        .map(|s| s.to_string());',
+        '',
+        '    match auth_header {',
+        '        Some(header) if header.starts_with("Bearer ") => {',
+        '            // TODO: verify GCP identity token via JWKS endpoint',
+        '            // https://www.googleapis.com/oauth2/v3/certs',
+        '            next.run(req).await.into_response()',
+        '        }',
+        '        _ => axum::http::Response::builder()',
+        '            .status(401)',
+        '            .body(axum::body::Body::from(r#"{"error":{"code":"UNAUTHORIZED"}}"#))',
+        '            .unwrap()',
+        '            .into_response(),',
+        '    }',
+        '}',
+        '',
+        '/// Emit structured JSON log lines for each request and response.',
+        'pub async fn logging_middleware(',
+        '    req: Request<Body>,',
+        '    next: Next<Body>,',
+        ') -> impl IntoResponse {',
+        '    let method = req.method().clone();',
+        '    let uri = req.uri().clone();',
+        '    let start = std::time::Instant::now();',
+        '',
+        '    println!("{}", serde_json::json!({',
+        '        "severity": "INFO",',
+        '        "message": "request received",',
+        '        "httpRequest": { "method": method.as_str(), "url": uri.to_string() },',
+        '        "timestamp": chrono::Utc::now().to_rfc3339()',
+        '    }));',
+        '',
+        '    let response = next.run(req).await;',
+        '    let duration_ms = start.elapsed().as_millis();',
+        '',
+        '    println!("{}", serde_json::json!({',
+        '        "severity": "INFO",',
+        '        "message": "request completed",',
+        '        "httpRequest": {',
+        '            "method": method.as_str(),',
+        '            "url": uri.to_string(),',
+        '            "status": response.status().as_u16(),',
+        '            "latency": format!("{}ms", duration_ms)',
+        '        },',
+        '        "timestamp": chrono::Utc::now().to_rfc3339()',
+        '    }));',
+        '',
+        '    response',
+        '}',
+        '',
+    ].join('\n');
+}
+/**
+ * Generate Rust health.rs with healthz and readyz handlers.
+ */
+function rustHealth() {
+    return [
+        GENERATED_HEADER_RS,
+        'use axum::{http::StatusCode, response::Json};',
+        'use serde_json::{json, Value};',
+        '',
+        '/// GET /health/healthz — liveness probe.',
+        'pub async fn healthz() -> (StatusCode, Json<Value>) {',
+        '    (StatusCode::OK, Json(json!({ "status": "ok" })))',
+        '}',
+        '',
+        '/// GET /health/readyz — readiness probe.',
+        'pub async fn readyz() -> (StatusCode, Json<Value>) {',
+        '    (StatusCode::OK, Json(json!({ "status": "ready" })))',
+        '}',
+        '',
+    ].join('\n');
+}
+// ============================================================================
+// File Writing
+// ============================================================================
+/**
+ * Write a server file to disk, creating parent directories as needed.
+ */
+function writeServerFile(absPath, content) {
+    const dir = absPath.substring(0, absPath.lastIndexOf('/'));
+    mkdirSync(dir, { recursive: true, mode: DIR_MODE });
+    try {
+        writeFileSync(absPath, content, { encoding: 'utf-8', mode: FILE_MODE });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new Error(`ECLI-P4-051: Failed to write server file ${absPath}: ${message}`);
+    }
+}
+// ============================================================================
+// Public: Pipeline Entry Point
+// ============================================================================
+/**
+ * Stage 5 entry point: generate Cloud Run-compatible HTTP server code
+ * for the resolved implementation language.
+ *
+ * Reads ERPResolution from context.stageOutputs.get('erp-target-resolution'),
+ * reads bounded contexts from Phase 2 domain model, and writes server files
+ * to phase4/project/src/server/.
+ *
+ * @param context - The Phase 4 pipeline context
+ * @returns Stage output describing success or failure
+ */
+export function generateHttpServer(context) {
+    const startTime = Date.now();
+    const rootSpan = createSpan('http-server-generation', 'generate-http-server', {
+        phase4Dir: context.phase4Dir,
+        traceId: context.traceId,
+    });
+    try {
+        // Verify ERP target resolution completed
+        const erpStage = context.stageOutputs.get('erp-target-resolution');
+        if (!erpStage || erpStage.status !== 'completed') {
+            throw new Error('ECLI-P4-050: ERP target resolution not available on context. ' +
+                'Ensure the erp-target-resolution stage completed successfully before running http-server-generation.');
+        }
+        const erpResolution = erpStage.data;
+        void erpResolution;
+        // Resolve implementation language and bounded contexts
+        const language = context.phase3Artifacts.implementationLanguage;
+        const domainModel = context.phase3Artifacts.phase2Artifacts.domainModel;
+        // Flatten commands/queries from aggregates to context level for route generation.
+        // The DDD domain model stores commands/queries inside aggregates, but the route
+        // generator needs them at the context level.
+        const contexts = domainModel.contexts.map((ctx) => {
+            const aggregates = ctx['aggregates'] ?? [];
+            const commands = [];
+            const queries = [];
+            for (const agg of aggregates) {
+                const aggCommands = agg['commands'] ?? [];
+                const aggQueries = agg['queries'] ?? [];
+                commands.push(...aggCommands);
+                queries.push(...aggQueries);
+            }
+            // Also include any commands/queries already present at context level
+            const ctxCommands = ctx['commands'] ?? [];
+            const ctxQueries = ctx['queries'] ?? [];
+            commands.push(...ctxCommands);
+            queries.push(...ctxQueries);
+            return { name: ctx['name'], commands, queries };
+        });
+        const isTs = language === 'typescript';
+        const framework = isTs ? 'hono' : 'axum';
+        // Output directory: phase4/project/src/server/
+        const serverDir = join(context.phase4Dir, 'project', 'src', 'server');
+        mkdirSync(serverDir, { recursive: true, mode: DIR_MODE });
+        const serverFiles = [];
+        const writtenPaths = [];
+        const genSpan = createSpan('http-server-generation', 'generate-files', { language, framework, contextCount: contexts.length }, rootSpan.spanId);
+        if (isTs) {
+            // main.ts
+            const mainContent = tsMain();
+            const mainPath = join(serverDir, 'main.ts');
+            writeServerFile(mainPath, mainContent);
+            serverFiles.push({ relativePath: 'project/src/server/main.ts', content: mainContent, kind: 'server' });
+            writtenPaths.push(mainPath);
+            // routes.ts
+            const { content: routesContent, routeCount } = tsRoutes(contexts);
+            const routesPath = join(serverDir, 'routes.ts');
+            writeServerFile(routesPath, routesContent);
+            serverFiles.push({ relativePath: 'project/src/server/routes.ts', content: routesContent, kind: 'server' });
+            writtenPaths.push(routesPath);
+            // middleware.ts
+            const middlewareContent = tsMiddleware();
+            const middlewarePath = join(serverDir, 'middleware.ts');
+            writeServerFile(middlewarePath, middlewareContent);
+            serverFiles.push({ relativePath: 'project/src/server/middleware.ts', content: middlewareContent, kind: 'server' });
+            writtenPaths.push(middlewarePath);
+            // health.ts
+            const healthContent = tsHealth();
+            const healthPath = join(serverDir, 'health.ts');
+            writeServerFile(healthPath, healthContent);
+            serverFiles.push({ relativePath: 'project/src/server/health.ts', content: healthContent, kind: 'server' });
+            writtenPaths.push(healthPath);
+            const finalGenSpan = endSpan(genSpan, 'ok', { filesGenerated: 4, routeCount });
+            emitSpan(finalGenSpan);
+            const finalRootSpan = endSpan(rootSpan, 'ok', { framework, filesGenerated: 4, routeCount });
+            emitSpan(finalRootSpan);
+            const timing = Date.now() - startTime;
+            const output = {
+                stage: 'http-server-generation',
+                status: 'completed',
+                data: {
+                    framework,
+                    files: serverFiles,
+                    routeCount,
+                },
+                artifacts: writtenPaths,
+                timing,
+                summary: `Generated ${framework} HTTP server (${language}): ` +
+                    `${routeCount} routes across ${contexts.length} bounded contexts ` +
+                    `(${writtenPaths.length} files in ${timing}ms)`,
+            };
+            context.stageOutputs.set('http-server-generation', output);
+            return output;
+        }
+        else {
+            // Rust: main.rs, routes.rs, middleware.rs, health.rs
+            const mainContent = rustMain();
+            const mainPath = join(serverDir, 'main.rs');
+            writeServerFile(mainPath, mainContent);
+            serverFiles.push({ relativePath: 'project/src/server/main.rs', content: mainContent, kind: 'server' });
+            writtenPaths.push(mainPath);
+            const { content: routesContent, routeCount } = rustRoutes(contexts);
+            const routesPath = join(serverDir, 'routes.rs');
+            writeServerFile(routesPath, routesContent);
+            serverFiles.push({ relativePath: 'project/src/server/routes.rs', content: routesContent, kind: 'server' });
+            writtenPaths.push(routesPath);
+            const middlewareContent = rustMiddleware();
+            const middlewarePath = join(serverDir, 'middleware.rs');
+            writeServerFile(middlewarePath, middlewareContent);
+            serverFiles.push({ relativePath: 'project/src/server/middleware.rs', content: middlewareContent, kind: 'server' });
+            writtenPaths.push(middlewarePath);
+            const healthContent = rustHealth();
+            const healthPath = join(serverDir, 'health.rs');
+            writeServerFile(healthPath, healthContent);
+            serverFiles.push({ relativePath: 'project/src/server/health.rs', content: healthContent, kind: 'server' });
+            writtenPaths.push(healthPath);
+            const finalGenSpan = endSpan(genSpan, 'ok', { filesGenerated: 4, routeCount });
+            emitSpan(finalGenSpan);
+            const finalRootSpan = endSpan(rootSpan, 'ok', { framework, filesGenerated: 4, routeCount });
+            emitSpan(finalRootSpan);
+            const timing = Date.now() - startTime;
+            const output = {
+                stage: 'http-server-generation',
+                status: 'completed',
+                data: {
+                    framework,
+                    files: serverFiles,
+                    routeCount,
+                },
+                artifacts: writtenPaths,
+                timing,
+                summary: `Generated ${framework} HTTP server (${language}): ` +
+                    `${routeCount} routes across ${contexts.length} bounded contexts ` +
+                    `(${writtenPaths.length} files in ${timing}ms)`,
+            };
+            context.stageOutputs.set('http-server-generation', output);
+            return output;
+        }
+    }
+    catch (err) {
+        const errorMessage = err instanceof Error ? err.message : String(err);
+        const finalRootSpan = endSpan(rootSpan, 'error', { error: errorMessage });
+        emitSpan(finalRootSpan);
+        const timing = Date.now() - startTime;
+        const output = {
+            stage: 'http-server-generation',
+            status: 'failed',
+            data: { error: errorMessage },
+            artifacts: [],
+            timing,
+            summary: `HTTP server generation failed: ${errorMessage}`,
+        };
+        context.stageOutputs.set('http-server-generation', output);
+        return output;
+    }
+}
+//# sourceMappingURL=http-server-generator.js.map