npm - @llm-dev-ops/agentics-cli - Versions diffs - 2.1.4 → 2.3.0 - Mend

@llm-dev-ops/agentics-cli 2.1.4 → 2.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (76) hide show

package/dist/pipeline/phase4/phases/http-server-generator.js CHANGED Viewed

@@ -1050,6 +1050,7 @@ function tsRoutes(erpSystem, contexts, simulationContext, hasRustOptimizer = fal
         `import { Hono } from 'hono';`,
         `import { createMiddleware } from 'hono/factory';`,
         `import type { MiddlewareHandler } from 'hono';`,
+        `import type { AppEnv } from './types.js';`,
         `import { z } from 'zod';`,
         `import * as crypto from 'node:crypto';`,
         `import { correlationMiddleware, iamMiddleware, loggingMiddleware } from './middleware.js';`,
@@ -1129,9 +1130,9 @@ function tsRoutes(erpSystem, contexts, simulationContext, hasRustOptimizer = fal
         '//',
         '',
         'function requireRole(...roles: string[]) {',
-        '  return createMiddleware(async (c, next) => {',
-        '    const correlationId = c.get(\'correlationId\') as string ?? \'unknown\';',
-        '    const claims = c.get(\'iamClaims\') as Record<string, unknown> | undefined;',
+        '  return createMiddleware<AppEnv>(async (c, next) => {',
+        '    const correlationId = getCorrelationId(c);',
+        '    const claims = getIamClaims(c);',
         '    if (!claims) {',
         '      return c.json({ error: { code: \'UNAUTHORIZED\', message: \'No claims available\' }, correlationId }, 401);',
         '    }',
@@ -1228,7 +1229,7 @@ function tsRoutes(erpSystem, contexts, simulationContext, hasRustOptimizer = fal
         '// App & Middleware',
         '// ============================================================================',
         '',
-        'const app = new Hono();',
+        'const app = new Hono<AppEnv>();',
         '',
         'app.use(\'*\', correlationMiddleware);',
         'app.use(\'*\', iamMiddleware);',
@@ -1248,7 +1249,7 @@ function tsRoutes(erpSystem, contexts, simulationContext, hasRustOptimizer = fal
         '      status: c.res.status,',
         '      durationMs: Date.now() - start,',
         '    },',
-        '  }, { tier: \'should-have\', correlationId: c.get(\'correlationId\') as string }).catch(() => {});',
+        '  }, { tier: \'should-have\', correlationId: getCorrelationId(c) }).catch(() => {});',
         '});',
         '',
         'app.route(\'/health\', healthRouter);',
@@ -1256,7 +1257,7 @@ function tsRoutes(erpSystem, contexts, simulationContext, hasRustOptimizer = fal
         '// ADR-076: Shield inbound security scanning middleware (must-have — blocks if unavailable)',
         'app.use(\'/api/v1/*\', async (c, next) => {',
         '  if ([\'POST\', \'PUT\', \'PATCH\'].includes(c.req.method)) {',
-        '    const correlationId = c.get(\'correlationId\') as string ?? \'unknown\';',
+        '    const correlationId = getCorrelationId(c);',
         '    try {',
         '      const bodyText = await c.req.text();',
         '      const scanResult = await callPlatformService(',
@@ -1312,7 +1313,7 @@ function tsRoutes(erpSystem, contexts, simulationContext, hasRustOptimizer = fal
             const isApproval = /^(?:approve|reject|review|authorize)/i.test(cmd.name);
             const isErpWrite = /^(?:sync|push|write|export).*(?:erp|oracle|sap|workday)/i.test(cmd.name);
             const requiredRole = isApproval ? "'approver', 'admin'" : isErpWrite ? "'erp_writer', 'admin'" : "'writer', 'admin'";
-            lines.push(`app.post('/api/v1/${ctxSlug}/${cmdSlug}', requireRole(${requiredRole}), async (c) => {`, '  const correlationId = c.get(\'correlationId\') as string;', '  const actor = ((c.get(\'iamClaims\') as Record<string, unknown>) ?? {})[\'sub\'] as string ?? \'unknown\';', '  const startTime = Date.now();', '  try {', '    const body = await c.req.json();', `    const parsed = ${schemaName}.safeParse(body);`, '    if (!parsed.success) {', '      return c.json(validationError(correlationId, parsed.error.issues), 400);', '    }', `    const result = await deps.${portName}.execute('${cmd.name}', parsed.data);`, `    await deps.audit.log('${ctxSlug}', result?.id ?? correlationId, '${cmdSlug}', actor, parsed.data);`, '    return c.json({', '      correlationId,', '      status: \'completed\',', '      data: result,', '      metadata: { response_time_ms: Date.now() - startTime },', '    }, 201);', '  } catch (err) {', '    console.error(JSON.stringify({ level: \'error\', correlationId, error: err instanceof Error ? err.message : String(err), stack: err instanceof Error ? err.stack : undefined, path: c.req.path }));', `    await deps.audit.log('${ctxSlug}', correlationId, '${cmdSlug}:failed', actor, { error: err instanceof Error ? err.message : String(err) });`, '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '');
+            lines.push(`app.post('/api/v1/${ctxSlug}/${cmdSlug}', requireRole(${requiredRole}), async (c) => {`, '  const correlationId = getCorrelationId(c);', '  const actor = getActor(c);', '  const startTime = Date.now();', '  try {', '    const body = await c.req.json();', `    const parsed = ${schemaName}.safeParse(body);`, '    if (!parsed.success) {', '      return c.json(validationError(correlationId, parsed.error.issues), 400);', '    }', `    const result = await deps.${portName}.execute('${cmd.name}', parsed.data);`, `    await deps.audit.log('${ctxSlug}', result?.id ?? correlationId, '${cmdSlug}', actor, parsed.data);`, '    return c.json({', '      correlationId,', '      status: \'completed\',', '      data: result,', '      metadata: { response_time_ms: Date.now() - startTime },', '    }, 201);', '  } catch (err) {', '    console.error(JSON.stringify({ level: \'error\', correlationId, error: err instanceof Error ? err.message : String(err), stack: err instanceof Error ? err.stack : undefined, path: c.req.path }));', `    await deps.audit.log('${ctxSlug}', correlationId, '${cmdSlug}:failed', actor, { error: err instanceof Error ? err.message : String(err) });`, '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '');
             routeCount++;
         }
         // GET handlers for queries
@@ -1320,28 +1321,28 @@ function tsRoutes(erpSystem, contexts, simulationContext, hasRustOptimizer = fal
             const querySlug = slugify(query.name);
             const schemaName = `${pascalCase(query.name)}Schema`;
             const portName = `${camelCase(ctx.name.replace(/Context$/i, ''))}Port`;
-            lines.push(`app.get('/api/v1/${ctxSlug}/${querySlug}', requireRole('viewer', 'writer', 'admin'), async (c) => {`, '  const correlationId = c.get(\'correlationId\') as string;', '  const actor = ((c.get(\'iamClaims\') as Record<string, unknown>) ?? {})[\'sub\'] as string ?? \'unknown\';', '  const startTime = Date.now();', '  try {', '    const params = c.req.query();', `    const parsed = ${schemaName}.safeParse(params);`, '    if (!parsed.success) {', '      return c.json(validationError(correlationId, parsed.error.issues), 400);', '    }', `    const result = await deps.${portName}.query('${query.name}', parsed.data);`, `    await deps.audit.log('${ctxSlug}', correlationId, '${querySlug}:read', actor, { resultCount: result.total });`, '    return c.json({', '      correlationId,', '      status: \'ok\',', '      data: result.rows,', '      pagination: { limit: parsed.data.limit ?? 50, offset: parsed.data.offset ?? 0, total: result.total },', '      metadata: { response_time_ms: Date.now() - startTime },', '    }, 200);', '  } catch (err) {', '    console.error(JSON.stringify({ level: \'error\', correlationId, error: err instanceof Error ? err.message : String(err), stack: err instanceof Error ? err.stack : undefined, path: c.req.path }));', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '');
+            lines.push(`app.get('/api/v1/${ctxSlug}/${querySlug}', requireRole('viewer', 'writer', 'admin'), async (c) => {`, '  const correlationId = getCorrelationId(c);', '  const actor = getActor(c);', '  const startTime = Date.now();', '  try {', '    const params = c.req.query();', `    const parsed = ${schemaName}.safeParse(params);`, '    if (!parsed.success) {', '      return c.json(validationError(correlationId, parsed.error.issues), 400);', '    }', `    const result = await deps.${portName}.query('${query.name}', parsed.data);`, `    await deps.audit.log('${ctxSlug}', correlationId, '${querySlug}:read', actor, { resultCount: result.total });`, '    return c.json({', '      correlationId,', '      status: \'ok\',', '      data: result.rows,', '      pagination: { limit: parsed.data.limit ?? 50, offset: parsed.data.offset ?? 0, total: result.total },', '      metadata: { response_time_ms: Date.now() - startTime },', '    }, 200);', '  } catch (err) {', '    console.error(JSON.stringify({ level: \'error\', correlationId, error: err instanceof Error ? err.message : String(err), stack: err instanceof Error ? err.stack : undefined, path: c.req.path }));', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '');
             routeCount++;
         }
     }
     // ADR-062: Simulation execution endpoint (when Rust optimizer present)
     if (hasRustOptimizer) {
-        lines.push('// ============================================================================', '// POST /api/v1/simulate — Invoke Rust optimizer engine (ADR-062)', '// ============================================================================', '', "app.post('/api/v1/simulate', requireRole('writer', 'admin'), async (c) => {", '  const correlationId = c.get(\'correlationId\') as string;', '  const actor = ((c.get(\'iamClaims\') as Record<string, unknown>) ?? {})[\'sub\'] as string ?? \'unknown\';', '  const startTime = Date.now();', '  try {', '    const body = await c.req.json();', '    const parsed = SimulateInputSchema.safeParse(body);', '    if (!parsed.success) {', '      return c.json(validationError(correlationId, parsed.error.issues), 400);', '    }', '', '    // Invoke Rust optimizer via subprocess bridge', '    const rawResult = await runOptimizer(parsed.data as any);', '', '    // ADR-064: Validate optimizer output schema', '    const OptimizerOutputSchema = z.object({', '      scenarios: z.array(z.object({', '        strategy_id: z.string(),', '        strategy_name: z.string(),', '        emissions_reduction_pct: z.number(),', '        cost_delta: z.number(),', '        risk_level: z.string(),', '        lead_time_impact_days: z.number(),', '        reliability_score: z.number(),', '      })),', '      pareto_frontier: z.array(z.string()),', '      recommended: z.string().nullable(),', '      weights_used: z.object({ cost: z.number(), emissions: z.number(), resilience: z.number(), complexity: z.number() }),', '    });', '    const validated = OptimizerOutputSchema.safeParse(rawResult);', "    if (!validated.success) throw new Error(`Optimizer output validation failed: ${validated.error.message}`);", '    const result = validated.data;', '', '    // Compute input hash for lineage tracking', '    const inputHash = hashSimulationInputs(parsed.data as Record<string, unknown>);', '', '    // Audit the simulation run', '    const durationMs = Date.now() - startTime;', '    await deps.audit.log(\'simulation\', correlationId, \'simulate:completed\', actor, {', '      inputHash,', '      scenarioCount: result.scenarios?.length ?? 0,', '      recommended: result.recommended,', '      responseTimeMs: durationMs,', '    });', '', '    // ADR-075: Track simulation cost via CostOps (fire-and-forget)', '    callPlatformService(process.env.AGENTICS_COSTOPS_URL, \'/api/v1/track\', {', '      operation: \'scenario_simulation\',', '      domain: c.req.path.split(\'/\')[3] ?? \'unknown\',', '      metadata: {', '        scenarioCount: result.scenarios?.length ?? 0,', '        paretoFrontierSize: result.pareto_frontier?.length ?? 0,', '        durationMs,', '        inputHash,', '        actor,', '      },', '    }, { tier: \'should-have\', correlationId }).catch(() => {});', '', '    // ADR-077: Sentinel anomaly detection on simulation outputs (non-blocking)', '    let warnings: Array<{ type: string; message: string; severity: string }> = [];', '    try {', '      const anomalyCheck = await callPlatformService(', '        process.env.AGENTICS_SENTINEL_URL,', '        \'/api/v1/check\',', '        {', '          type: \'simulation_output\',', '          data: {', '            costDeltas: result.scenarios?.map((s: { cost_delta: number }) => s.cost_delta) ?? [],', '            emissionsReductions: result.scenarios?.map((s: { emissions_reduction_pct: number }) => s.emissions_reduction_pct) ?? [],', '            reliabilityScores: result.scenarios?.map((s: { reliability_score: number }) => s.reliability_score) ?? [],', '          },', '          context: { scenarioCount: result.scenarios?.length ?? 0, runId: correlationId },', '        },', '        { tier: \'operational\', correlationId },', '      ) as { anomalies?: Array<{ description: string; severity: string }> } | null;', '      if (anomalyCheck?.anomalies?.length) {', '        warnings = anomalyCheck.anomalies.map(a => ({ type: \'anomaly_detected\', message: a.description, severity: a.severity }));', '      }', '    } catch { /* operational tier — Sentinel unavailable */ }', '', '    // ADR-079: Persist simulation lineage to Memory-Graph', '    callPlatformService(process.env.AGENTICS_MEMORY_GRAPH_URL, \'/api/v1/decisions/store\', {', '      type: \'simulation_run\',', '      runId: correlationId,', '      inputHash,', '      inputs: parsed.data,', '      outputs: {', '        scenarioCount: result.scenarios?.length ?? 0,', '        paretoFrontier: result.pareto_frontier,', '        recommended: result.recommended,', '      },', '      lineage: { triggerSource: \'api_request\', actor },', '    }, { tier: \'should-have\', correlationId }).catch(() => {});', '', '    // ADR-081: Index results for search (results-index)', '    callPlatformService(process.env.AGENTICS_RESULTS_INDEX_URL, \'/api/v1/index\', {', '      type: \'simulation_result\', id: correlationId, data: result,', '      searchableFields: [\'scenarios\', \'pareto_frontier\', \'recommended\'],', '    }, { tier: \'operational\', correlationId }).catch(() => {});', '', '    // ADR-081: Record usage in immutable ledger', '    callPlatformService(process.env.AGENTICS_USAGE_LEDGER_URL, \'/api/v1/record\', {', '      operation: \'simulation_run\', actor,', '      resources: { computeMs: durationMs, scenarioCount: result.scenarios?.length ?? 0 },', '    }, { tier: \'operational\', correlationId }).catch(() => {});', '', '    // ADR-081: Apex Platform — risk score for decision-grade output', '    let riskScore: unknown = null;', '    try {', '      riskScore = await callPlatformService(process.env.AGENTICS_PLATFORM_URL, \'/api/v1/risk-score\', {', '        scenarios: result.scenarios, paretoFrontier: result.pareto_frontier,', '      }, { tier: \'operational\', correlationId });', '    } catch { /* operational tier */ }', '', '    return c.json({', '      correlationId,', "      status: 'completed',", '      data: result,', '      ...(warnings.length > 0 ? { warnings } : {}),', '      ...(riskScore ? { riskScore } : {}),', '      lineage: { inputHash, simulationId: correlationId },', '      metadata: { response_time_ms: Date.now() - startTime },', '    }, 200);', '  } catch (err) {', '    console.error(JSON.stringify({ level: \'error\', correlationId, error: err instanceof Error ? err.message : String(err), stack: err instanceof Error ? err.stack : undefined, path: c.req.path }));', '    await deps.audit.log(\'simulation\', correlationId, \'simulate:failed\', actor, { error: err instanceof Error ? err.message : String(err) });', '    // ADR-079: Escalate simulation failure to Incident-Manager', '    callPlatformService(process.env.AGENTICS_INCIDENT_URL, \'/api/v1/escalate\', {', '      severity: \'medium\', type: \'simulation_failed\',', '      context: { correlationId, actor, error: err instanceof Error ? err.message : String(err) },', '    }, { tier: \'operational\', correlationId }).catch(() => {});', "    const message = process.env.NODE_ENV === 'production' ? 'Internal server error' : (err instanceof Error ? err.message : 'Unknown error');", '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '');
+        lines.push('// ============================================================================', '// POST /api/v1/simulate — Invoke Rust optimizer engine (ADR-062)', '// ============================================================================', '', "app.post('/api/v1/simulate', requireRole('writer', 'admin'), async (c) => {", '  const correlationId = getCorrelationId(c);', '  const actor = getActor(c);', '  const startTime = Date.now();', '  try {', '    const body = await c.req.json();', '    const parsed = SimulateInputSchema.safeParse(body);', '    if (!parsed.success) {', '      return c.json(validationError(correlationId, parsed.error.issues), 400);', '    }', '', '    // Invoke Rust optimizer via subprocess bridge', '    const rawResult = await runOptimizer(parsed.data as any);', '', '    // ADR-064: Validate optimizer output schema', '    const OptimizerOutputSchema = z.object({', '      scenarios: z.array(z.object({', '        strategy_id: z.string(),', '        strategy_name: z.string(),', '        emissions_reduction_pct: z.number(),', '        cost_delta: z.number(),', '        risk_level: z.string(),', '        lead_time_impact_days: z.number(),', '        reliability_score: z.number(),', '      })),', '      pareto_frontier: z.array(z.string()),', '      recommended: z.string().nullable(),', '      weights_used: z.object({ cost: z.number(), emissions: z.number(), resilience: z.number(), complexity: z.number() }),', '    });', '    const validated = OptimizerOutputSchema.safeParse(rawResult);', "    if (!validated.success) throw new Error(`Optimizer output validation failed: ${validated.error.message}`);", '    const result = validated.data;', '', '    // Compute input hash for lineage tracking', '    const inputHash = hashSimulationInputs(parsed.data as Record<string, unknown>);', '', '    // Audit the simulation run', '    const durationMs = Date.now() - startTime;', '    await deps.audit.log(\'simulation\', correlationId, \'simulate:completed\', actor, {', '      inputHash,', '      scenarioCount: result.scenarios?.length ?? 0,', '      recommended: result.recommended,', '      responseTimeMs: durationMs,', '    });', '', '    // ADR-075: Track simulation cost via CostOps (fire-and-forget)', '    callPlatformService(process.env.AGENTICS_COSTOPS_URL, \'/api/v1/track\', {', '      operation: \'scenario_simulation\',', '      domain: c.req.path.split(\'/\')[3] ?? \'unknown\',', '      metadata: {', '        scenarioCount: result.scenarios?.length ?? 0,', '        paretoFrontierSize: result.pareto_frontier?.length ?? 0,', '        durationMs,', '        inputHash,', '        actor,', '      },', '    }, { tier: \'should-have\', correlationId }).catch(() => {});', '', '    // ADR-077: Sentinel anomaly detection on simulation outputs (non-blocking)', '    let warnings: Array<{ type: string; message: string; severity: string }> = [];', '    try {', '      const anomalyCheck = await callPlatformService(', '        process.env.AGENTICS_SENTINEL_URL,', '        \'/api/v1/check\',', '        {', '          type: \'simulation_output\',', '          data: {', '            costDeltas: result.scenarios?.map((s: { cost_delta: number }) => s.cost_delta) ?? [],', '            emissionsReductions: result.scenarios?.map((s: { emissions_reduction_pct: number }) => s.emissions_reduction_pct) ?? [],', '            reliabilityScores: result.scenarios?.map((s: { reliability_score: number }) => s.reliability_score) ?? [],', '          },', '          context: { scenarioCount: result.scenarios?.length ?? 0, runId: correlationId },', '        },', '        { tier: \'operational\', correlationId },', '      ) as { anomalies?: Array<{ description: string; severity: string }> } | null;', '      if (anomalyCheck?.anomalies?.length) {', '        warnings = anomalyCheck.anomalies.map(a => ({ type: \'anomaly_detected\', message: a.description, severity: a.severity }));', '      }', '    } catch { /* operational tier — Sentinel unavailable */ }', '', '    // ADR-079: Persist simulation lineage to Memory-Graph', '    callPlatformService(process.env.AGENTICS_MEMORY_GRAPH_URL, \'/api/v1/decisions/store\', {', '      type: \'simulation_run\',', '      runId: correlationId,', '      inputHash,', '      inputs: parsed.data,', '      outputs: {', '        scenarioCount: result.scenarios?.length ?? 0,', '        paretoFrontier: result.pareto_frontier,', '        recommended: result.recommended,', '      },', '      lineage: { triggerSource: \'api_request\', actor },', '    }, { tier: \'should-have\', correlationId }).catch(() => {});', '', '    // ADR-081: Index results for search (results-index)', '    callPlatformService(process.env.AGENTICS_RESULTS_INDEX_URL, \'/api/v1/index\', {', '      type: \'simulation_result\', id: correlationId, data: result,', '      searchableFields: [\'scenarios\', \'pareto_frontier\', \'recommended\'],', '    }, { tier: \'operational\', correlationId }).catch(() => {});', '', '    // ADR-081: Record usage in immutable ledger', '    callPlatformService(process.env.AGENTICS_USAGE_LEDGER_URL, \'/api/v1/record\', {', '      operation: \'simulation_run\', actor,', '      resources: { computeMs: durationMs, scenarioCount: result.scenarios?.length ?? 0 },', '    }, { tier: \'operational\', correlationId }).catch(() => {});', '', '    // ADR-081: Apex Platform — risk score for decision-grade output', '    let riskScore: unknown = null;', '    try {', '      riskScore = await callPlatformService(process.env.AGENTICS_PLATFORM_URL, \'/api/v1/risk-score\', {', '        scenarios: result.scenarios, paretoFrontier: result.pareto_frontier,', '      }, { tier: \'operational\', correlationId });', '    } catch { /* operational tier */ }', '', '    return c.json({', '      correlationId,', "      status: 'completed',", '      data: result,', '      ...(warnings.length > 0 ? { warnings } : {}),', '      ...(riskScore ? { riskScore } : {}),', '      lineage: { inputHash, simulationId: correlationId },', '      metadata: { response_time_ms: Date.now() - startTime },', '    }, 200);', '  } catch (err) {', '    console.error(JSON.stringify({ level: \'error\', correlationId, error: err instanceof Error ? err.message : String(err), stack: err instanceof Error ? err.stack : undefined, path: c.req.path }));', '    await deps.audit.log(\'simulation\', correlationId, \'simulate:failed\', actor, { error: err instanceof Error ? err.message : String(err) });', '    // ADR-079: Escalate simulation failure to Incident-Manager', '    callPlatformService(process.env.AGENTICS_INCIDENT_URL, \'/api/v1/escalate\', {', '      severity: \'medium\', type: \'simulation_failed\',', '      context: { correlationId, actor, error: err instanceof Error ? err.message : String(err) },', '    }, { tier: \'operational\', correlationId }).catch(() => {});', "    const message = process.env.NODE_ENV === 'production' ? 'Internal server error' : (err instanceof Error ? err.message : 'Unknown error');", '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '');
         routeCount++;
     }
     // ADR-054: Decision approval workflow endpoints (always generated)
-    lines.push('// ============================================================================', '// Decision Approval Workflow (ADR-054) — human-in-the-loop governance', '// ============================================================================', '', "app.post('/api/v1/decisions', requireRole('writer', 'admin'), async (c) => {", '  const correlationId = c.get(\'correlationId\') as string;', '  const actor = ((c.get(\'iamClaims\') as Record<string, unknown>) ?? {})[\'sub\'] as string ?? \'unknown\';', '  const actorRoles = ((c.get(\'iamClaims\') as Record<string, unknown>) ?? {})[\'roles\'] as string[] ?? [];', '  try {', '    const body = await c.req.json();', '    const { simulationRunId, strategyId, recommendedAction, justification, costImpactPct } = body as Record<string, string>;', '    if (!simulationRunId || !strategyId || !recommendedAction || !justification) {', '      return c.json(validationError(correlationId, [{ message: \'Required: simulationRunId, strategyId, recommendedAction, justification\' }]), 400);', '    }', '', '    // ADR-082: Enforce cost threshold — high-impact decisions require CFO role', '    const costPct = parseFloat(String(costImpactPct ?? \'0\'));', '    const costThreshold = parseFloat(process.env.GOVERNANCE_COST_THRESHOLD_PCT ?? \'5\');', '    if (Math.abs(costPct) > costThreshold && !actorRoles.includes(\'cfo\') && !actorRoles.includes(\'admin\')) {', '      await deps.audit.log(\'decisions\', correlationId, \'submit:cost_threshold_exceeded\', actor, { costImpactPct: costPct, threshold: costThreshold });', '      return c.json({', '        error: { code: \'COST_THRESHOLD_EXCEEDED\', message: `Cost impact ${costPct}% exceeds ${costThreshold}% threshold — requires CFO approval` },', '        correlationId,', '      }, 422);', '    }', '', '    // ADR-082: Validate simulation lineage at creation (not just execution)', '    const lineageResult = await validateLineage(simulationRunId, deps as unknown as { query: DbClient[\'query\'] });', '    if (!lineageResult.valid) {', '      await deps.audit.log(\'decisions\', correlationId, \'submit:lineage_failed\', actor, { simulationRunId, reason: lineageResult.reason });', '      return c.json({ error: { code: \'LINEAGE_INVALID\', message: lineageResult.reason }, correlationId }, 422);', '    }', '', '    const result = await deps.decisions.submit(simulationRunId, strategyId, recommendedAction, justification, actor);', '    await deps.audit.log(\'decisions\', result.id, \'submitted\', actor, { simulationRunId, strategyId, costImpactPct: costPct });', '    return c.json({ correlationId, status: \'created\', data: result }, 201);', '  } catch (err) {', '    console.error(JSON.stringify({ level: \'error\', correlationId, error: err instanceof Error ? err.message : String(err), path: c.req.path }));', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '', "app.post('/api/v1/decisions/:id/approve', requireRole('approver', 'admin'), async (c) => {", '  const correlationId = c.get(\'correlationId\') as string;', '  const actor = ((c.get(\'iamClaims\') as Record<string, unknown>) ?? {})[\'sub\'] as string ?? \'unknown\';', '  const id = c.req.param(\'id\');', '  try {', '    // ADR-070: Cross-validate simulation lineage before approval', '    const lineageResult = await validateLineage(id, deps as unknown as { query: DbClient[\'query\'] });', '    if (!lineageResult.valid) {', '      await deps.audit.log(\'decisions\', id, \'approve:lineage_failed\', actor, { reason: lineageResult.reason });', '      return c.json({ error: { code: \'LINEAGE_INVALID\', message: lineageResult.reason }, correlationId }, 422);', '    }', '    const result = await deps.decisions.approve(id, actor);', '    await deps.audit.log(\'decisions\', id, \'approved\', actor, { approvedBy: actor });', '    // ADR-075: Track approval cost via CostOps', '    callPlatformService(process.env.AGENTICS_COSTOPS_URL, \'/api/v1/track\', {', '      operation: \'decision_approved\',', '      metadata: { decisionId: id, actor },', '    }, { tier: \'should-have\', correlationId }).catch(() => {});', '    // ADR-079: Persist decision state change to Memory-Graph', '    callPlatformService(process.env.AGENTICS_MEMORY_GRAPH_URL, \'/api/v1/decisions/store\', {', '      type: \'decision_approved\', decisionId: id, actor, timestamp: new Date().toISOString(),', '    }, { tier: \'should-have\', correlationId }).catch(() => {});', '    return c.json({ correlationId, status: \'approved\', data: result }, 200);', '  } catch (err) {', '    console.error(JSON.stringify({ level: \'error\', correlationId, error: err instanceof Error ? err.message : String(err), path: c.req.path }));', '    await deps.audit.log(\'decisions\', id, \'approve:failed\', actor, { error: err instanceof Error ? err.message : String(err) });', '    const message = err instanceof Error ? err.message : \'Unknown error\';', '    const status = message.includes(\'not found\') ? 404 : message.includes(\'transition\') || message.includes(\'Self-approval\') || message.includes(\'LINEAGE\') ? 422 : 500;', '    return c.json({ error: { code: status === 404 ? \'NOT_FOUND\' : status === 422 ? \'INVALID_TRANSITION\' : \'INTERNAL_ERROR\', message }, correlationId }, status);', '  }', '});', '', "app.post('/api/v1/decisions/:id/reject', requireRole('approver', 'admin'), async (c) => {", '  const correlationId = c.get(\'correlationId\') as string;', '  const actor = ((c.get(\'iamClaims\') as Record<string, unknown>) ?? {})[\'sub\'] as string ?? \'unknown\';', '  const id = c.req.param(\'id\');', '  try {', '    const body = await c.req.json();', '    const reason = (body as Record<string, string>).reason;', '    if (!reason || reason.length < 10) return c.json(validationError(correlationId, [{ message: \'Rejection reason required (min 10 chars)\' }]), 400);', '    const result = await deps.decisions.reject(id, actor, reason);', '    await deps.audit.log(\'decisions\', id, \'rejected\', actor, { rejectedBy: actor, reason });', '    return c.json({ correlationId, status: \'rejected\', data: result }, 200);', '  } catch (err) {', '    console.error(JSON.stringify({ level: \'error\', correlationId, error: err instanceof Error ? err.message : String(err), path: c.req.path }));', '    const message = err instanceof Error ? err.message : \'Unknown error\';', '    return c.json(serverError(correlationId, message), message.includes(\'not found\') ? 404 : 500);', '  }', '});', '', "app.post('/api/v1/decisions/:id/execute', requireRole('erp_writer', 'admin'), async (c) => {", '  const correlationId = c.get(\'correlationId\') as string;', '  const actor = ((c.get(\'iamClaims\') as Record<string, unknown>) ?? {})[\'sub\'] as string ?? \'unknown\';', '  const id = c.req.param(\'id\');', '  try {', '    // ADR-054: Validate simulation lineage before ERP writeback', '    const lineageResult = await validateLineage(id, deps as unknown as { query: DbClient[\'query\'] });', '    if (!lineageResult.valid) {', '      await deps.audit.log(\'decisions\', id, \'execute:lineage_failed\', actor, { reason: lineageResult.reason });', '      return c.json({ error: { code: \'LINEAGE_INVALID\', message: lineageResult.reason }, correlationId }, 422);', '    }', '    const result = await deps.decisions.execute(id, actor);', '    await deps.audit.log(\'decisions\', id, \'executed\', actor, { executedBy: actor });', '    // ADR-075: Track ERP writeback cost via CostOps', '    callPlatformService(process.env.AGENTICS_COSTOPS_URL, \'/api/v1/track\', {', '      operation: \'erp_writeback\',', '      metadata: { decisionId: id, actor },', '    }, { tier: \'should-have\', correlationId }).catch(() => {});', '    // ADR-079: Persist execution to Memory-Graph lineage', '    callPlatformService(process.env.AGENTICS_MEMORY_GRAPH_URL, \'/api/v1/decisions/store\', {', '      type: \'decision_executed\', decisionId: id, actor, timestamp: new Date().toISOString(),', '    }, { tier: \'should-have\', correlationId }).catch(() => {});', '    // ADR-081: Record ERP writeback in usage ledger', '    callPlatformService(process.env.AGENTICS_USAGE_LEDGER_URL, \'/api/v1/record\', {', '      operation: \'erp_writeback\', actor, resources: { decisionId: id },', '    }, { tier: \'operational\', correlationId }).catch(() => {});', '    return c.json({ correlationId, status: \'executed\', data: result }, 200);', '  } catch (err) {', '    console.error(JSON.stringify({ level: \'error\', correlationId, error: err instanceof Error ? err.message : String(err), path: c.req.path }));', '    await deps.audit.log(\'decisions\', id, \'execute:failed\', actor, { error: err instanceof Error ? err.message : String(err) });', '    // ADR-079: Escalate ERP writeback failure to Incident-Manager', '    callPlatformService(process.env.AGENTICS_INCIDENT_URL, \'/api/v1/escalate\', {', '      severity: \'high\', type: \'erp_writeback_failed\',', '      context: { decisionId: id, actor, error: err instanceof Error ? err.message : String(err) },', '    }, { tier: \'operational\', correlationId }).catch(() => {});', '    const message = err instanceof Error ? err.message : \'Unknown error\';', '    return c.json(serverError(correlationId, message), message.includes(\'not found\') ? 404 : 500);', '  }', '});', '', "app.get('/api/v1/decisions/:id', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = c.get(\'correlationId\') as string;', '  const actor = ((c.get(\'iamClaims\') as Record<string, unknown>) ?? {})[\'sub\'] as string ?? \'unknown\';', '  const id = c.req.param(\'id\');', '  try {', '    const decision = await deps.decisions.getById(id);', '    if (!decision) return c.json({ error: { code: \'NOT_FOUND\', message: `Decision ${id} not found` }, correlationId }, 404);', '    // ADR-070: Audit read access for compliance (SOX, GDPR Article 30)', '    await deps.audit.log(\'decisions\', id, \'read\', actor, { correlationId });', '    // ADR-080: Data-Vault anonymization for viewer-role access', '    const roles = ((c.get(\'iamClaims\') as Record<string, unknown>) ?? {})[\'roles\'] as string[] ?? [];', '    if (roles.includes(\'viewer\') && !roles.includes(\'writer\') && !roles.includes(\'admin\')) {', '      const vaultResult = await callPlatformService(process.env.AGENTICS_DATAVAULT_URL, \'/api/v1/access\', {', '        data: decision, requester: { roles }, dataClassification: \'confidential\',', '      }, { tier: \'operational\', correlationId }).catch(() => null) as { data?: unknown } | null;', '      if (vaultResult?.data) return c.json({ correlationId, status: \'ok\', data: vaultResult.data }, 200);', '    }', '    return c.json({ correlationId, status: \'ok\', data: decision }, 200);', '  } catch (err) {', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '', "app.get('/api/v1/decisions', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = c.get(\'correlationId\') as string;', '  const actor = ((c.get(\'iamClaims\') as Record<string, unknown>) ?? {})[\'sub\'] as string ?? \'unknown\';', "  const status = c.req.query('status') as import('./dependencies.js').DecisionStatus | undefined;", '  try {', '    const decisions = status ? await deps.decisions.listByStatus(status) : await deps.decisions.listByStatus(\'submitted\');', '    // ADR-070: Audit read access for compliance', '    await deps.audit.log(\'decisions\', correlationId, \'list\', actor, { filter: status ?? \'submitted\', resultCount: decisions.length });', '    return c.json({ correlationId, status: \'ok\', data: decisions }, 200);', '  } catch (err) {', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '', "app.get('/api/v1/decisions/:id/lineage', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = c.get(\'correlationId\') as string;', '  const actor = ((c.get(\'iamClaims\') as Record<string, unknown>) ?? {})[\'sub\'] as string ?? \'unknown\';', '  const id = c.req.param(\'id\');', '  try {', '    const decision = await deps.decisions.getById(id);', '    if (!decision) return c.json({ error: { code: \'NOT_FOUND\', message: `Decision ${id} not found` }, correlationId }, 404);', '    const lineage = await validateLineage(id, deps as unknown as { query: DbClient[\'query\'] });', '    // ADR-070: Audit lineage read access for compliance', '    await deps.audit.log(\'decisions\', id, \'read_lineage\', actor, { correlationId, lineageValid: lineage.valid });', '    return c.json({ correlationId, status: \'ok\', data: { decision, lineage } }, 200);', '  } catch (err) {', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '');
+    lines.push('// ============================================================================', '// Decision Approval Workflow (ADR-054) — human-in-the-loop governance', '// ============================================================================', '', "app.post('/api/v1/decisions', requireRole('writer', 'admin'), async (c) => {", '  const correlationId = getCorrelationId(c);', '  const actor = getActor(c);', '  const actorRoles = getActorRoles(c);', '  try {', '    const body = await c.req.json();', '    const { simulationRunId, strategyId, recommendedAction, justification, costImpactPct } = body as Record<string, string>;', '    if (!simulationRunId || !strategyId || !recommendedAction || !justification) {', '      return c.json(validationError(correlationId, [{ message: \'Required: simulationRunId, strategyId, recommendedAction, justification\' }]), 400);', '    }', '', '    // ADR-082: Enforce cost threshold — high-impact decisions require CFO role', '    const costPct = parseFloat(String(costImpactPct ?? \'0\'));', '    const costThreshold = parseFloat(process.env.GOVERNANCE_COST_THRESHOLD_PCT ?? \'5\');', '    if (Math.abs(costPct) > costThreshold && !actorRoles.includes(\'cfo\') && !actorRoles.includes(\'admin\')) {', '      await deps.audit.log(\'decisions\', correlationId, \'submit:cost_threshold_exceeded\', actor, { costImpactPct: costPct, threshold: costThreshold });', '      return c.json({', '        error: { code: \'COST_THRESHOLD_EXCEEDED\', message: `Cost impact ${costPct}% exceeds ${costThreshold}% threshold — requires CFO approval` },', '        correlationId,', '      }, 422);', '    }', '', '    // ADR-082: Validate simulation lineage at creation (not just execution)', '    const lineageResult = await validateLineage(simulationRunId, deps as unknown as { query: DbClient[\'query\'] });', '    if (!lineageResult.valid) {', '      await deps.audit.log(\'decisions\', correlationId, \'submit:lineage_failed\', actor, { simulationRunId, reason: lineageResult.reason });', '      return c.json({ error: { code: \'LINEAGE_INVALID\', message: lineageResult.reason }, correlationId }, 422);', '    }', '', '    const result = await deps.decisions.submit(simulationRunId, strategyId, recommendedAction, justification, actor);', '    await deps.audit.log(\'decisions\', result.id, \'submitted\', actor, { simulationRunId, strategyId, costImpactPct: costPct });', '    return c.json({ correlationId, status: \'created\', data: result }, 201);', '  } catch (err) {', '    console.error(JSON.stringify({ level: \'error\', correlationId, error: err instanceof Error ? err.message : String(err), path: c.req.path }));', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '', "app.post('/api/v1/decisions/:id/approve', requireRole('approver', 'admin'), async (c) => {", '  const correlationId = getCorrelationId(c);', '  const actor = getActor(c);', '  const id = c.req.param(\'id\');', '  try {', '    // ADR-070: Cross-validate simulation lineage before approval', '    const lineageResult = await validateLineage(id, deps as unknown as { query: DbClient[\'query\'] });', '    if (!lineageResult.valid) {', '      await deps.audit.log(\'decisions\', id, \'approve:lineage_failed\', actor, { reason: lineageResult.reason });', '      return c.json({ error: { code: \'LINEAGE_INVALID\', message: lineageResult.reason }, correlationId }, 422);', '    }', '    const result = await deps.decisions.approve(id, actor);', '    await deps.audit.log(\'decisions\', id, \'approved\', actor, { approvedBy: actor });', '    // ADR-075: Track approval cost via CostOps', '    callPlatformService(process.env.AGENTICS_COSTOPS_URL, \'/api/v1/track\', {', '      operation: \'decision_approved\',', '      metadata: { decisionId: id, actor },', '    }, { tier: \'should-have\', correlationId }).catch(() => {});', '    // ADR-079: Persist decision state change to Memory-Graph', '    callPlatformService(process.env.AGENTICS_MEMORY_GRAPH_URL, \'/api/v1/decisions/store\', {', '      type: \'decision_approved\', decisionId: id, actor, timestamp: new Date().toISOString(),', '    }, { tier: \'should-have\', correlationId }).catch(() => {});', '    return c.json({ correlationId, status: \'approved\', data: result }, 200);', '  } catch (err) {', '    console.error(JSON.stringify({ level: \'error\', correlationId, error: err instanceof Error ? err.message : String(err), path: c.req.path }));', '    await deps.audit.log(\'decisions\', id, \'approve:failed\', actor, { error: err instanceof Error ? err.message : String(err) });', '    const message = err instanceof Error ? err.message : \'Unknown error\';', '    const status = message.includes(\'not found\') ? 404 : message.includes(\'transition\') || message.includes(\'Self-approval\') || message.includes(\'LINEAGE\') ? 422 : 500;', '    return c.json({ error: { code: status === 404 ? \'NOT_FOUND\' : status === 422 ? \'INVALID_TRANSITION\' : \'INTERNAL_ERROR\', message }, correlationId }, status);', '  }', '});', '', "app.post('/api/v1/decisions/:id/reject', requireRole('approver', 'admin'), async (c) => {", '  const correlationId = getCorrelationId(c);', '  const actor = getActor(c);', '  const id = c.req.param(\'id\');', '  try {', '    const body = await c.req.json();', '    const reason = (body as Record<string, string>).reason;', '    if (!reason || reason.length < 10) return c.json(validationError(correlationId, [{ message: \'Rejection reason required (min 10 chars)\' }]), 400);', '    const result = await deps.decisions.reject(id, actor, reason);', '    await deps.audit.log(\'decisions\', id, \'rejected\', actor, { rejectedBy: actor, reason });', '    return c.json({ correlationId, status: \'rejected\', data: result }, 200);', '  } catch (err) {', '    console.error(JSON.stringify({ level: \'error\', correlationId, error: err instanceof Error ? err.message : String(err), path: c.req.path }));', '    const message = err instanceof Error ? err.message : \'Unknown error\';', '    return c.json(serverError(correlationId, message), message.includes(\'not found\') ? 404 : 500);', '  }', '});', '', "app.post('/api/v1/decisions/:id/execute', requireRole('erp_writer', 'admin'), async (c) => {", '  const correlationId = getCorrelationId(c);', '  const actor = getActor(c);', '  const id = c.req.param(\'id\');', '  try {', '    // ADR-054: Validate simulation lineage before ERP writeback', '    const lineageResult = await validateLineage(id, deps as unknown as { query: DbClient[\'query\'] });', '    if (!lineageResult.valid) {', '      await deps.audit.log(\'decisions\', id, \'execute:lineage_failed\', actor, { reason: lineageResult.reason });', '      return c.json({ error: { code: \'LINEAGE_INVALID\', message: lineageResult.reason }, correlationId }, 422);', '    }', '    const result = await deps.decisions.execute(id, actor);', '    await deps.audit.log(\'decisions\', id, \'executed\', actor, { executedBy: actor });', '    // ADR-075: Track ERP writeback cost via CostOps', '    callPlatformService(process.env.AGENTICS_COSTOPS_URL, \'/api/v1/track\', {', '      operation: \'erp_writeback\',', '      metadata: { decisionId: id, actor },', '    }, { tier: \'should-have\', correlationId }).catch(() => {});', '    // ADR-079: Persist execution to Memory-Graph lineage', '    callPlatformService(process.env.AGENTICS_MEMORY_GRAPH_URL, \'/api/v1/decisions/store\', {', '      type: \'decision_executed\', decisionId: id, actor, timestamp: new Date().toISOString(),', '    }, { tier: \'should-have\', correlationId }).catch(() => {});', '    // ADR-081: Record ERP writeback in usage ledger', '    callPlatformService(process.env.AGENTICS_USAGE_LEDGER_URL, \'/api/v1/record\', {', '      operation: \'erp_writeback\', actor, resources: { decisionId: id },', '    }, { tier: \'operational\', correlationId }).catch(() => {});', '    return c.json({ correlationId, status: \'executed\', data: result }, 200);', '  } catch (err) {', '    console.error(JSON.stringify({ level: \'error\', correlationId, error: err instanceof Error ? err.message : String(err), path: c.req.path }));', '    await deps.audit.log(\'decisions\', id, \'execute:failed\', actor, { error: err instanceof Error ? err.message : String(err) });', '    // ADR-079: Escalate ERP writeback failure to Incident-Manager', '    callPlatformService(process.env.AGENTICS_INCIDENT_URL, \'/api/v1/escalate\', {', '      severity: \'high\', type: \'erp_writeback_failed\',', '      context: { decisionId: id, actor, error: err instanceof Error ? err.message : String(err) },', '    }, { tier: \'operational\', correlationId }).catch(() => {});', '    const message = err instanceof Error ? err.message : \'Unknown error\';', '    return c.json(serverError(correlationId, message), message.includes(\'not found\') ? 404 : 500);', '  }', '});', '', "app.get('/api/v1/decisions/:id', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = getCorrelationId(c);', '  const actor = getActor(c);', '  const id = c.req.param(\'id\');', '  try {', '    const decision = await deps.decisions.getById(id);', '    if (!decision) return c.json({ error: { code: \'NOT_FOUND\', message: `Decision ${id} not found` }, correlationId }, 404);', '    // ADR-070: Audit read access for compliance (SOX, GDPR Article 30)', '    await deps.audit.log(\'decisions\', id, \'read\', actor, { correlationId });', '    // ADR-080: Data-Vault anonymization for viewer-role access', '    const roles = getActorRoles(c);', '    if (roles.includes(\'viewer\') && !roles.includes(\'writer\') && !roles.includes(\'admin\')) {', '      const vaultResult = await callPlatformService(process.env.AGENTICS_DATAVAULT_URL, \'/api/v1/access\', {', '        data: decision, requester: { roles }, dataClassification: \'confidential\',', '      }, { tier: \'operational\', correlationId }).catch(() => null) as { data?: unknown } | null;', '      if (vaultResult?.data) return c.json({ correlationId, status: \'ok\', data: vaultResult.data }, 200);', '    }', '    return c.json({ correlationId, status: \'ok\', data: decision }, 200);', '  } catch (err) {', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '', "app.get('/api/v1/decisions', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = getCorrelationId(c);', '  const actor = getActor(c);', "  const status = c.req.query('status') as import('./dependencies.js').DecisionStatus | undefined;", '  try {', '    const decisions = status ? await deps.decisions.listByStatus(status) : await deps.decisions.listByStatus(\'submitted\');', '    // ADR-070: Audit read access for compliance', '    await deps.audit.log(\'decisions\', correlationId, \'list\', actor, { filter: status ?? \'submitted\', resultCount: decisions.length });', '    return c.json({ correlationId, status: \'ok\', data: decisions }, 200);', '  } catch (err) {', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '', "app.get('/api/v1/decisions/:id/lineage', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = getCorrelationId(c);', '  const actor = getActor(c);', '  const id = c.req.param(\'id\');', '  try {', '    const decision = await deps.decisions.getById(id);', '    if (!decision) return c.json({ error: { code: \'NOT_FOUND\', message: `Decision ${id} not found` }, correlationId }, 404);', '    const lineage = await validateLineage(id, deps as unknown as { query: DbClient[\'query\'] });', '    // ADR-070: Audit lineage read access for compliance', '    await deps.audit.log(\'decisions\', id, \'read_lineage\', actor, { correlationId, lineageValid: lineage.valid });', '    return c.json({ correlationId, status: \'ok\', data: { decision, lineage } }, 200);', '  } catch (err) {', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '');
     routeCount += 7; // submit, approve, reject, execute, getById, list, lineage
     // ADR-052: Simulation read-only endpoints (when simulation context available)
     if (simulationContext && (simulationContext.scenarios.length > 0 || simulationContext.simulationId)) {
-        lines.push('// ============================================================================', '// Simulation Endpoints (ADR-052) — read-only access to RuVector results', '// ============================================================================', '', "app.get('/api/v1/simulation/scenarios', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = c.get(\'correlationId\') as string;', '  try {', '    const scenarios = await deps.simulation.getScenarios();', '    return c.json({ correlationId, status: \'ok\', data: scenarios, simulationId: deps.simulation.getSimulationId() }, 200);', '  } catch (err) {', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '', "app.get('/api/v1/simulation/scenarios/:id', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = c.get(\'correlationId\') as string;', '  const id = c.req.param(\'id\');', '  try {', '    const scenario = await deps.simulation.getScenarioById(id);', '    if (!scenario) return c.json({ error: { code: \'NOT_FOUND\', message: `Scenario ${id} not found` }, correlationId }, 404);', '    return c.json({ correlationId, status: \'ok\', data: scenario }, 200);', '  } catch (err) {', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '', '// ADR-083: Retrieve original simulation parameters for audit/reproducibility', "app.get('/api/v1/simulation/runs/:id/parameters', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = c.get(\'correlationId\') as string;', '  const id = c.req.param(\'id\');', '  try {', '    const rows = await (deps as any).db?.query?.(\'SELECT id, input_hash, parameters, status, created_at FROM simulation_runs WHERE id = :1\', [id]) ?? [];', '    const run = rows[0] as Record<string, unknown> | undefined;', '    if (!run) return c.json({ error: { code: \'NOT_FOUND\', message: `Simulation run ${id} not found` }, correlationId }, 404);', '    return c.json({', '      correlationId,', '      status: \'ok\',', '      data: {', '        id: String(run[\'id\']),', '        inputHash: String(run[\'input_hash\']),', '        parameters: JSON.parse(String(run[\'parameters\'] ?? \'{}\')),', '        status: String(run[\'status\']),', '        createdAt: String(run[\'created_at\']),', '      },', '    }, 200);', '  } catch (err) {', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '', "app.get('/api/v1/simulation/compare', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = c.get(\'correlationId\') as string;', "  const ids = (c.req.query('ids') ?? '').split(',').filter(Boolean);", '  try {', '    const comparison = await deps.simulation.compareScenarios(ids);', '    // ADR-080: Analytics-Hub strategic recommendation on scenario comparison', '    let recommendation: unknown = null;', '    try {', '      recommendation = await callPlatformService(process.env.AGENTICS_ANALYTICS_URL, \'/api/v1/recommend\', {', '        domain: \'scenario_comparison\',', '        dataPoints: [\'simulation_results\'],', '        data: comparison,', '      }, { tier: \'operational\', correlationId });', '    } catch { /* operational tier */ }', '    // ADR-081: Apex Platform executive summary for board-level synthesis', '    let executiveSummary: unknown = null;', '    try {', '      executiveSummary = await callPlatformService(process.env.AGENTICS_PLATFORM_URL, \'/api/v1/executive-summary\', {', '        domainResults: comparison, recommendation,', '      }, { tier: \'operational\', correlationId });', '    } catch { /* operational tier */ }', '    // ADR-081: Enterprise ROI calculation', '    let roi: unknown = null;', '    try {', '      roi = await callPlatformService(process.env.AGENTICS_ROI_ENGINE_URL, \'/api/v1/calculate\', {', '        domainResults: comparison, timeHorizon: \'3_years\',', '      }, { tier: \'operational\', correlationId });', '    } catch { /* operational tier */ }', '    return c.json({', '      correlationId, status: \'ok\', data: comparison,', '      ...(recommendation ? { recommendation } : {}),', '      ...(executiveSummary ? { executiveSummary } : {}),', '      ...(roi ? { roi } : {}),', '    }, 200);', '  } catch (err) {', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '', "app.get('/api/v1/simulation/cost-model', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = c.get(\'correlationId\') as string;', '  try {', '    const costModel = await deps.simulation.getCostModel();', '    return c.json({ correlationId, status: \'ok\', data: costModel, simulationId: deps.simulation.getSimulationId() }, 200);', '  } catch (err) {', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '');
+        lines.push('// ============================================================================', '// Simulation Endpoints (ADR-052) — read-only access to RuVector results', '// ============================================================================', '', "app.get('/api/v1/simulation/scenarios', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = getCorrelationId(c);', '  try {', '    const scenarios = await deps.simulation.getScenarios();', '    return c.json({ correlationId, status: \'ok\', data: scenarios, simulationId: deps.simulation.getSimulationId() }, 200);', '  } catch (err) {', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '', "app.get('/api/v1/simulation/scenarios/:id', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = getCorrelationId(c);', '  const id = c.req.param(\'id\');', '  try {', '    const scenario = await deps.simulation.getScenarioById(id);', '    if (!scenario) return c.json({ error: { code: \'NOT_FOUND\', message: `Scenario ${id} not found` }, correlationId }, 404);', '    return c.json({ correlationId, status: \'ok\', data: scenario }, 200);', '  } catch (err) {', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '', '// ADR-083: Retrieve original simulation parameters for audit/reproducibility', "app.get('/api/v1/simulation/runs/:id/parameters', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = getCorrelationId(c);', '  const id = c.req.param(\'id\');', '  try {', '    const rows = await (deps as any).db?.query?.(\'SELECT id, input_hash, parameters, status, created_at FROM simulation_runs WHERE id = :1\', [id]) ?? [];', '    const run = rows[0] as Record<string, unknown> | undefined;', '    if (!run) return c.json({ error: { code: \'NOT_FOUND\', message: `Simulation run ${id} not found` }, correlationId }, 404);', '    return c.json({', '      correlationId,', '      status: \'ok\',', '      data: {', '        id: String(run[\'id\']),', '        inputHash: String(run[\'input_hash\']),', '        parameters: JSON.parse(String(run[\'parameters\'] ?? \'{}\')),', '        status: String(run[\'status\']),', '        createdAt: String(run[\'created_at\']),', '      },', '    }, 200);', '  } catch (err) {', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '', "app.get('/api/v1/simulation/compare', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = getCorrelationId(c);', "  const ids = (c.req.query('ids') ?? '').split(',').filter(Boolean);", '  try {', '    const comparison = await deps.simulation.compareScenarios(ids);', '    // ADR-080: Analytics-Hub strategic recommendation on scenario comparison', '    let recommendation: unknown = null;', '    try {', '      recommendation = await callPlatformService(process.env.AGENTICS_ANALYTICS_URL, \'/api/v1/recommend\', {', '        domain: \'scenario_comparison\',', '        dataPoints: [\'simulation_results\'],', '        data: comparison,', '      }, { tier: \'operational\', correlationId });', '    } catch { /* operational tier */ }', '    // ADR-081: Apex Platform executive summary for board-level synthesis', '    let executiveSummary: unknown = null;', '    try {', '      executiveSummary = await callPlatformService(process.env.AGENTICS_PLATFORM_URL, \'/api/v1/executive-summary\', {', '        domainResults: comparison, recommendation,', '      }, { tier: \'operational\', correlationId });', '    } catch { /* operational tier */ }', '    // ADR-081: Enterprise ROI calculation', '    let roi: unknown = null;', '    try {', '      roi = await callPlatformService(process.env.AGENTICS_ROI_ENGINE_URL, \'/api/v1/calculate\', {', '        domainResults: comparison, timeHorizon: \'3_years\',', '      }, { tier: \'operational\', correlationId });', '    } catch { /* operational tier */ }', '    return c.json({', '      correlationId, status: \'ok\', data: comparison,', '      ...(recommendation ? { recommendation } : {}),', '      ...(executiveSummary ? { executiveSummary } : {}),', '      ...(roi ? { roi } : {}),', '    }, 200);', '  } catch (err) {', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '', "app.get('/api/v1/simulation/cost-model', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = getCorrelationId(c);', '  try {', '    const costModel = await deps.simulation.getCostModel();', '    return c.json({ correlationId, status: \'ok\', data: costModel, simulationId: deps.simulation.getSimulationId() }, 200);', '  } catch (err) {', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '');
         routeCount += 4;
         // ADR-053: Tradeoff analysis and budget compliance endpoints
-        lines.push('// ============================================================================', '// Cost & Tradeoff Endpoints (ADR-053) — CostOps financial model', '// ============================================================================', '', "app.get('/api/v1/cost/tradeoff-matrix', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = c.get(\'correlationId\') as string;', '  try {', "    const matrixPath = require('node:path').join(__dirname, '..', 'data', 'tradeoff-matrix.json');", "    const matrix = JSON.parse(require('node:fs').readFileSync(matrixPath, 'utf-8'));", '    return c.json({ correlationId, status: \'ok\', data: matrix }, 200);', '  } catch {', '    return c.json({ correlationId, status: \'ok\', data: { dimensions: [], scenarios: [], costModel: null } }, 200);', '  }', '});', '', "app.get('/api/v1/cost/budget-compliance', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = c.get(\'correlationId\') as string;', '  try {', '    const costModel = await deps.simulation.getCostModel();', '    if (!costModel) return c.json({ correlationId, status: \'ok\', data: { compliant: true, message: \'No cost model available\' } }, 200);', '    const scenarios = await deps.simulation.getScenarios();', '    const overBudget = scenarios.filter(s => costModel.budgetThreshold > 0 && s.costDelta > costModel.budgetThreshold);', '    return c.json({', '      correlationId,', '      status: \'ok\',', '      data: {', '        compliant: overBudget.length === 0,', '        budgetThreshold: costModel.budgetThreshold,', '        roi: costModel.roi,', '        confidence: costModel.confidence,', '        scenariosOverBudget: overBudget.map(s => ({ id: s.id, name: s.name, costDelta: s.costDelta })),', '        totalScenarios: scenarios.length,', '      },', '    }, 200);', '  } catch (err) {', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '');
+        lines.push('// ============================================================================', '// Cost & Tradeoff Endpoints (ADR-053) — CostOps financial model', '// ============================================================================', '', "app.get('/api/v1/cost/tradeoff-matrix', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = getCorrelationId(c);', '  try {', "    const matrixPath = require('node:path').join(__dirname, '..', 'data', 'tradeoff-matrix.json');", "    const matrix = JSON.parse(require('node:fs').readFileSync(matrixPath, 'utf-8'));", '    return c.json({ correlationId, status: \'ok\', data: matrix }, 200);', '  } catch {', '    return c.json({ correlationId, status: \'ok\', data: { dimensions: [], scenarios: [], costModel: null } }, 200);', '  }', '});', '', "app.get('/api/v1/cost/budget-compliance', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = getCorrelationId(c);', '  try {', '    const costModel = await deps.simulation.getCostModel();', '    if (!costModel) return c.json({ correlationId, status: \'ok\', data: { compliant: true, message: \'No cost model available\' } }, 200);', '    const scenarios = await deps.simulation.getScenarios();', '    const overBudget = scenarios.filter(s => costModel.budgetThreshold > 0 && s.costDelta > costModel.budgetThreshold);', '    return c.json({', '      correlationId,', '      status: \'ok\',', '      data: {', '        compliant: overBudget.length === 0,', '        budgetThreshold: costModel.budgetThreshold,', '        roi: costModel.roi,', '        confidence: costModel.confidence,', '        scenariosOverBudget: overBudget.map(s => ({ id: s.id, name: s.name, costDelta: s.costDelta })),', '        totalScenarios: scenarios.length,', '      },', '    }, 200);', '  } catch (err) {', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '');
         routeCount += 2;
     }
     // ERP sync status endpoint (reusable across all ERP types)
-    lines.push('// ============================================================================', '// GET /api/v1/erp/sync-status — ERP sync queue and circuit breaker', '// ============================================================================', '', 'app.get(\'/api/v1/erp/sync-status\', async (c) => {', '  const correlationId = c.get(\'correlationId\') as string;', '  const startTime = Date.now();', '  try {', '    const status = erpClientInstance.getSyncStatus();', '    return c.json({', '      correlationId,', '      status: \'ok\',', '      data: status,', '      metadata: { response_time_ms: Date.now() - startTime },', '    }, 200);', '  } catch (err) {', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '', '', '// ============================================================================', '// GET /metrics — Prometheus-compatible metrics (ADR-051)', '// ============================================================================', '', 'app.get(\'/metrics\', (c) => {', '  const m = (deps as Record<string, unknown>)[\'_telemetry\'] as { metrics?: { requestCount: number; errorCount: number; latencySumMs: number; spanCount: number; byOperation: Record<string, { count: number; errors: number; totalMs: number }> } } | undefined;', '  const metrics = m?.metrics ?? { requestCount: 0, errorCount: 0, latencySumMs: 0, spanCount: 0, byOperation: {} };', '  const lines: string[] = [];', '  lines.push(\'# HELP http_requests_total Total HTTP requests processed\');', '  lines.push(\'# TYPE http_requests_total counter\');', '  lines.push(`http_requests_total ${metrics.requestCount}`);', '  lines.push(\'# HELP http_errors_total Total HTTP errors\');', '  lines.push(\'# TYPE http_errors_total counter\');', '  lines.push(`http_errors_total ${metrics.errorCount}`);', '  lines.push(\'# HELP http_spans_total Total telemetry spans\');', '  lines.push(\'# TYPE http_spans_total counter\');', '  lines.push(`http_spans_total ${metrics.spanCount}`);', '  lines.push(\'# HELP http_latency_sum_ms Sum of all span latencies in ms\');', '  lines.push(\'# TYPE http_latency_sum_ms counter\');', '  lines.push(`http_latency_sum_ms ${metrics.latencySumMs}`);', '  for (const [op, data] of Object.entries(metrics.byOperation)) {', '    lines.push(`http_operation_count{operation="${op}"} ${data.count}`);', '    lines.push(`http_operation_errors{operation="${op}"} ${data.errors}`);', '    lines.push(`http_operation_latency_ms{operation="${op}"} ${data.totalMs}`);', '  }', '  // ADR-085: Prometheus content type', '  return c.text(lines.join(\'\\n\'), 200, { \'Content-Type\': \'text/plain; version=0.0.4\' });', '});', '', '// ============================================================================', '// ADR-088: Async simulation job queue + poll endpoint', '// ============================================================================', '', '// In-memory job store (per-instance — adequate for Cloud Run pilot)', 'const simulationJobs = new Map<string, { status: \'pending\' | \'running\' | \'completed\' | \'failed\'; result?: unknown; error?: string; createdAt: string }>();', '', "app.get('/api/v1/simulate/:jobId/status', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = getCorrelationId(c);', '  const jobId = c.req.param(\'jobId\');', '  const job = simulationJobs.get(jobId);', '  if (!job) return c.json({ error: { code: \'NOT_FOUND\', message: `Job ${jobId} not found` }, correlationId }, 404);', '  return c.json({ correlationId, status: job.status, data: job.result ?? null, error: job.error ?? null, createdAt: job.createdAt }, 200);', '});', '', 'export { app, erpClientInstance, simulationJobs };', '');
+    lines.push('// ============================================================================', '// GET /api/v1/erp/sync-status — ERP sync queue and circuit breaker', '// ============================================================================', '', 'app.get(\'/api/v1/erp/sync-status\', async (c) => {', '  const correlationId = getCorrelationId(c);', '  const startTime = Date.now();', '  try {', '    const status = erpClientInstance.getSyncStatus();', '    return c.json({', '      correlationId,', '      status: \'ok\',', '      data: status,', '      metadata: { response_time_ms: Date.now() - startTime },', '    }, 200);', '  } catch (err) {', '    const message = process.env.NODE_ENV === \'production\' ? \'Internal server error\' : (err instanceof Error ? err.message : \'Unknown error\');', '    return c.json(serverError(correlationId, message), 500);', '  }', '});', '', '', '// ============================================================================', '// GET /metrics — Prometheus-compatible metrics (ADR-051)', '// ============================================================================', '', 'app.get(\'/metrics\', (c) => {', '  const m = (deps as Record<string, unknown>)[\'_telemetry\'] as { metrics?: { requestCount: number; errorCount: number; latencySumMs: number; spanCount: number; byOperation: Record<string, { count: number; errors: number; totalMs: number }> } } | undefined;', '  const metrics = m?.metrics ?? { requestCount: 0, errorCount: 0, latencySumMs: 0, spanCount: 0, byOperation: {} };', '  const lines: string[] = [];', '  lines.push(\'# HELP http_requests_total Total HTTP requests processed\');', '  lines.push(\'# TYPE http_requests_total counter\');', '  lines.push(`http_requests_total ${metrics.requestCount}`);', '  lines.push(\'# HELP http_errors_total Total HTTP errors\');', '  lines.push(\'# TYPE http_errors_total counter\');', '  lines.push(`http_errors_total ${metrics.errorCount}`);', '  lines.push(\'# HELP http_spans_total Total telemetry spans\');', '  lines.push(\'# TYPE http_spans_total counter\');', '  lines.push(`http_spans_total ${metrics.spanCount}`);', '  lines.push(\'# HELP http_latency_sum_ms Sum of all span latencies in ms\');', '  lines.push(\'# TYPE http_latency_sum_ms counter\');', '  lines.push(`http_latency_sum_ms ${metrics.latencySumMs}`);', '  for (const [op, data] of Object.entries(metrics.byOperation)) {', '    lines.push(`http_operation_count{operation="${op}"} ${data.count}`);', '    lines.push(`http_operation_errors{operation="${op}"} ${data.errors}`);', '    lines.push(`http_operation_latency_ms{operation="${op}"} ${data.totalMs}`);', '  }', '  // ADR-085: Prometheus content type', '  return c.text(lines.join(\'\\n\'), 200, { \'Content-Type\': \'text/plain; version=0.0.4\' });', '});', '', '// ============================================================================', '// ADR-088: Async simulation job queue + poll endpoint', '// ============================================================================', '', '// In-memory job store (per-instance — adequate for Cloud Run pilot)', 'const simulationJobs = new Map<string, { status: \'pending\' | \'running\' | \'completed\' | \'failed\'; result?: unknown; error?: string; createdAt: string }>();', '', "app.get('/api/v1/simulate/:jobId/status', requireRole('viewer', 'writer', 'admin'), async (c) => {", '  const correlationId = getCorrelationId(c);', '  const jobId = c.req.param(\'jobId\');', '  const job = simulationJobs.get(jobId);', '  if (!job) return c.json({ error: { code: \'NOT_FOUND\', message: `Job ${jobId} not found` }, correlationId }, 404);', '  return c.json({ correlationId, status: job.status, data: job.result ?? null, error: job.error ?? null, createdAt: job.createdAt }, 200);', '});', '', 'export { app, erpClientInstance, simulationJobs };', '');
     routeCount += 3; // sync-status + metrics + job status
     return { content: lines.join('\n'), routeCount };
 }
@@ -1489,11 +1490,53 @@ function tsDomainEvents(contexts) {
     lines.push('');
     return lines.join('\n');
 }
-function tsMiddleware() {
+/**
+ * ADR-PIPELINE-064: Server-wide typed Hono context variables.
+ *
+ * Emits `src/server/types.ts` exporting the `ContextVariables` interface,
+ * `IamClaims` interface, and the `AppEnv` type alias. These are consumed
+ * by routes.ts (`new Hono<AppEnv>()`), middleware.ts (`createMiddleware<AppEnv>()`),
+ * and health.ts — eliminating `c.get('correlationId') as string` casts and
+ * `Record<string, unknown>` on iamClaims.
+ */
+// Exported for unit tests (ADR-PIPELINE-064 verification)
+export function tsServerTypes() {
+    return [
+        GENERATED_HEADER_TS,
+        '// ADR-PIPELINE-064: Typed Hono context variables eliminate unsafe type assertions.',
+        '// Every middleware that calls c.set() MUST add its key to ContextVariables.',
+        '// Route handlers use getCorrelationId(c), getActor(c), getActorRoles(c) helpers',
+        '// (declared in routes.ts) rather than reading context directly.',
+        '',
+        '/** Claims extracted from a verified IAM JWT token. */',
+        'export interface IamClaims {',
+        '  sub?: string;',
+        '  roles?: string[];',
+        '  iss?: string;',
+        '  aud?: string | string[];',
+        '  exp?: number;',
+        '  iat?: number;',
+        '  [claim: string]: unknown;',
+        '}',
+        '',
+        '/** Hono context variables set by middleware and read by route handlers. */',
+        'export interface ContextVariables {',
+        '  correlationId: string;',
+        '  iamClaims?: IamClaims;',
+        '}',
+        '',
+        '/** Hono environment type — use as `new Hono<AppEnv>()` and `createMiddleware<AppEnv>()`. */',
+        'export type AppEnv = { Variables: ContextVariables };',
+        '',
+    ].join('\n');
+}
+// Exported for unit tests (ADR-PIPELINE-064 verification)
+export function tsMiddleware() {
     return [
         GENERATED_HEADER_TS,
         `import type { MiddlewareHandler } from 'hono';`,
         `import { createMiddleware } from 'hono/factory';`,
+        `import type { AppEnv, IamClaims } from './types.js';`,
         `import * as crypto from 'node:crypto';`,
         `import * as jwt from 'jsonwebtoken';`,
         `import jwksClient from 'jwks-rsa';`,
@@ -1502,7 +1545,7 @@ function tsMiddleware() {
         '// Correlation ID middleware',
         '// ---------------------------------------------------------------------------',
         '',
-        'export const correlationMiddleware: MiddlewareHandler = createMiddleware(async (c, next) => {',
+        'export const correlationMiddleware: MiddlewareHandler = createMiddleware<AppEnv>(async (c, next) => {',
         '  const correlationId = c.req.header(\'X-Correlation-ID\') ?? crypto.randomUUID();',
         '  c.set(\'correlationId\', correlationId);',
         '  c.header(\'X-Correlation-ID\', correlationId);',
@@ -1534,7 +1577,7 @@ function tsMiddleware() {
         '  });',
         '}',
         '',
-        'export const iamMiddleware: MiddlewareHandler = createMiddleware(async (c, next) => {',
+        'export const iamMiddleware: MiddlewareHandler = createMiddleware<AppEnv>(async (c, next) => {',
         '  const path = new URL(c.req.url).pathname;',
         '  if (path === \'/health/healthz\' || path === \'/health/readyz\' || path === \'/metrics\') {',
         '    await next();',
@@ -1542,7 +1585,7 @@ function tsMiddleware() {
         '  }',
         '',
         '  // ADR-051: Auth errors include correlationId for traceability',
-        '  const correlationId = c.get(\'correlationId\') as string ?? \'unknown\';',
+        '  const correlationId = getCorrelationId(c);',
         '  const authHeader = c.req.header(\'Authorization\');',
         '  if (!authHeader?.startsWith(\'Bearer \')) {',
         '    return c.json({ error: { code: \'UNAUTHORIZED\', message: \'Missing Bearer token\' }, correlationId }, 401);',
@@ -1572,7 +1615,11 @@ function tsMiddleware() {
         '    }',
         '',
         '    const payload = jwt.verify(token, signingKey, verifyOptions);',
-        '    c.set(\'iamClaims\', payload);',
+        '    if (typeof payload === \'string\') {',
+        '      return c.json({ error: { code: \'UNAUTHORIZED\', message: \'Invalid token: string payload\' }, correlationId }, 401);',
+        '    }',
+        '    // ADR-PIPELINE-064: typed context variables — payload is narrowed to an object here',
+        '    c.set(\'iamClaims\', payload as IamClaims);',
         '  } catch (err) {',
         '    const message = err instanceof Error ? err.message : \'Token verification failed\';',
         '    console.warn(JSON.stringify({ level: \'warn\', type: \'AUTH_FAILURE\', correlationId, error: message, path: c.req.path }));',
@@ -1586,9 +1633,9 @@ function tsMiddleware() {
         '// Structured JSON request/response logging middleware',
         '// ---------------------------------------------------------------------------',
         '',
-        'export const loggingMiddleware: MiddlewareHandler = createMiddleware(async (c, next) => {',
+        'export const loggingMiddleware: MiddlewareHandler = createMiddleware<AppEnv>(async (c, next) => {',
         '  const startTime = Date.now();',
-        '  const correlationId = c.get(\'correlationId\') as string | undefined;',
+        '  const correlationId = c.get(\'correlationId\');',
         '',
         '  process.stdout.write(',
         '    JSON.stringify({',
@@ -1625,17 +1672,21 @@ function tsMiddleware() {
         '',
     ].join('\n');
 }
-function tsHealth() {
+// Exported for unit tests (ADR-PIPELINE-064 verification)
+export function tsHealth() {
     return [
         GENERATED_HEADER_TS,
         `import { Hono } from 'hono';`,
+        `import type { AppEnv } from './types.js';`,
         '',
         '// ADR-050: Real health checks that verify downstream dependencies',
+        '// ADR-PIPELINE-064: healthRouter is typed with AppEnv so it can be mounted',
+        '// on the main app (also typed with AppEnv) without variance errors.',
         'export function createHealthRouter(deps: {',
         '  db?: { query(sql: string, params: unknown[]): Promise<unknown[]> };',
         '  erp?: { getSyncStatus(): { circuit_breaker_state: string } };',
-        '}): Hono {',
-        '  const healthRouter = new Hono();',
+        '}): Hono<AppEnv> {',
+        '  const healthRouter = new Hono<AppEnv>();',
         '',
         '  // Liveness — is the process running?',
         '  healthRouter.get(\'/healthz\', (c) => {',
@@ -2298,6 +2349,14 @@ ${formatSimulationForPrompt(ctx.simulationContext)}
 ## Instructions
 Generate a routes.ts file that:
 1. Imports: Hono, createMiddleware from hono/factory, z from zod, correlationMiddleware/iamMiddleware/loggingMiddleware from middleware, createDependencies/validateLineage/hashSimulationInputs from dependencies, schemas from schemas, healthRouter from health
+   **ADR-PIPELINE-064: ALSO import \`import type { AppEnv } from './types.js';\`**
+   **The Hono app MUST be typed as \`new Hono<AppEnv>()\` — NEVER \`new Hono()\` without the generic.**
+   **Type-safe context accessors MUST be defined at the top of routes.ts:**
+     - \`function getCorrelationId(c: { get: (key: string) => unknown }): string\` — returns c.get('correlationId') as string with 'unknown' fallback
+     - \`function getIamClaims(c: { get: (key: string) => unknown }): Record<string, unknown>\` — returns c.get('iamClaims') as Record with {} fallback
+     - \`function getActor(c: { get: (key: string) => unknown }): string\` — returns getIamClaims(c).sub with 'unknown' fallback
+     - \`function getActorRoles(c: { get: (key: string) => unknown }): string[]\`
+   **All route handlers MUST use these helpers. NEVER emit \`c.get('correlationId') as string\` or \`c.get('iamClaims') as Record<string, unknown>\` in route handler bodies — those patterns are rejected by the post-generation validator (PGV-001).**
 ${ctx.techStack.hasRustOptimizer ? '2. Imports runOptimizer from ../services/optimizer-bridge' : ''}
 3. Defines RBAC middleware: requireRole(...roles) that checks JWT claims
    - Role matrix: viewer=GET only, writer=POST commands, approver=approve/reject, erp_writer=ERP execute, admin=all
@@ -2408,8 +2467,9 @@ Every route handler MUST have ALL of the following — no exceptions:
   * POST (run simulations): requireRole('writer', 'admin')
   * POST (ERP writeback): requireRole('erp_writer', 'admin')
   * POST (approve/reject): requireRole('approver', 'admin')
-- correlationId extraction: const correlationId = c.get('correlationId') as string
-- Actor identity: const actor = (c.get('iamClaims') as Record<string, unknown>)?.sub as string ?? 'anonymous'
+- correlationId extraction: const correlationId = getCorrelationId(c)  // ADR-PIPELINE-064 helper; do NOT use 'as string' casts
+- Actor identity: const actor = getActor(c)  // ADR-PIPELINE-064 helper; do NOT use '(c.get(\\'iamClaims\\') as Record<string, unknown>)?.sub' patterns
+- Actor roles: const roles = getActorRoles(c)  // ADR-PIPELINE-064 helper
 - Audit logging via deps.audit.log() for ALL state-changing operations (POST/PUT/DELETE), on both success AND failure
 - Structured error logging with correlationId in every catch block
 - Error responses that include correlationId
@@ -2954,6 +3014,13 @@ export function generateHttpServer(context) {
                     serverFiles.push({ relativePath: 'project/src/data/tradeoff-matrix.json', content: JSON.stringify(tradeoffMatrix, null, 2), kind: 'server' });
                 }
             }
+            // types.ts — ADR-PIPELINE-064: typed Hono context variables (must be written
+            // BEFORE routes.ts/middleware.ts/health.ts because they import from it)
+            const typesContent = tsServerTypes();
+            const typesPath = join(serverDir, 'types.ts');
+            writeServerFile(typesPath, typesContent);
+            serverFiles.push({ relativePath: 'project/src/server/types.ts', content: typesContent, kind: 'server' });
+            writtenPaths.push(typesPath);
             // routes.ts — ADR-067: LLM-first, template fallback
             const routesLLM = generateCodeViaLLM({
                 label: 'routes.ts',