@neat.is/core 0.2.10 → 0.3.1

package/dist/chunk-G3PDTGOW.js

@@ -0,0 +1,125 @@
+import {
+  parseOtlpRequest
+} from "./chunk-4ASCXBZF.js";
+
+// src/otel-grpc.ts
+import { fileURLToPath } from "url";
+import path from "path";
+import * as grpc from "@grpc/grpc-js";
+import * as protoLoader from "@grpc/proto-loader";
+function bytesToHex(buf) {
+  if (!buf) return "";
+  return Buffer.isBuffer(buf) ? buf.toString("hex") : "";
+}
+function nanosToString(n) {
+  if (n === void 0 || n === null) return "0";
+  return typeof n === "string" ? n : String(n);
+}
+function reshapeAttributes(attrs) {
+  const out = (attrs ?? []).map((kv) => ({
+    key: kv.key ?? "",
+    value: kv.value ? {
+      stringValue: kv.value.string_value,
+      boolValue: kv.value.bool_value,
+      intValue: kv.value.int_value,
+      doubleValue: kv.value.double_value,
+      arrayValue: kv.value.array_value ? {
+        values: (kv.value.array_value.values ?? []).map((v) => ({
+          stringValue: v.string_value,
+          boolValue: v.bool_value,
+          intValue: v.int_value,
+          doubleValue: v.double_value
+        }))
+      } : void 0
+    } : void 0
+  }));
+  return out;
+}
+function reshapeGrpcRequest(req) {
+  return {
+    resourceSpans: (req.resource_spans ?? []).map((rs) => ({
+      resource: rs.resource ? { attributes: reshapeAttributes(rs.resource.attributes) } : void 0,
+      scopeSpans: (rs.scope_spans ?? []).map((ss) => ({
+        spans: (ss.spans ?? []).map((s) => ({
+          traceId: bytesToHex(s.trace_id),
+          spanId: bytesToHex(s.span_id),
+          parentSpanId: s.parent_span_id ? bytesToHex(s.parent_span_id) : void 0,
+          name: s.name,
+          kind: s.kind,
+          startTimeUnixNano: nanosToString(s.start_time_unix_nano),
+          endTimeUnixNano: nanosToString(s.end_time_unix_nano),
+          attributes: reshapeAttributes(s.attributes),
+          events: (s.events ?? []).map((e) => ({
+            name: e.name,
+            timeUnixNano: nanosToString(e.time_unix_nano),
+            attributes: reshapeAttributes(e.attributes)
+          })),
+          status: s.status ? { code: s.status.code, message: s.status.message } : void 0
+        }))
+      }))
+    }))
+  };
+}
+function resolveProtoRoot() {
+  const here = path.dirname(fileURLToPath(import.meta.url));
+  return path.resolve(here, "..", "proto");
+}
+function loadTraceService() {
+  const protoRoot = resolveProtoRoot();
+  const def = protoLoader.loadSync(
+    "opentelemetry/proto/collector/trace/v1/trace_service.proto",
+    {
+      keepCase: true,
+      longs: String,
+      enums: Number,
+      defaults: true,
+      oneofs: true,
+      includeDirs: [protoRoot]
+    }
+  );
+  const pkg = grpc.loadPackageDefinition(def);
+  return pkg.opentelemetry.proto.collector.trace.v1.TraceService.service;
+}
+async function startOtelGrpcReceiver(opts) {
+  const server = new grpc.Server();
+  const service = loadTraceService();
+  server.addService(service, {
+    Export: (call, callback) => {
+      void (async () => {
+        try {
+          const reshaped = reshapeGrpcRequest(call.request ?? {});
+          const spans = parseOtlpRequest(reshaped);
+          for (const span of spans) {
+            await opts.onSpan(span);
+          }
+          callback(null, { partial_success: {} });
+        } catch (err) {
+          callback({
+            code: grpc.status.INTERNAL,
+            message: err instanceof Error ? err.message : String(err)
+          });
+        }
+      })();
+    }
+  });
+  const host = opts.host ?? "0.0.0.0";
+  const port = opts.port ?? 4317;
+  const boundPort = await new Promise((resolve, reject) => {
+    server.bindAsync(`${host}:${port}`, grpc.ServerCredentials.createInsecure(), (err, p) => {
+      if (err) return reject(err);
+      resolve(p);
+    });
+  });
+  return {
+    address: `${host}:${boundPort}`,
+    stop: () => new Promise((resolve) => {
+      server.tryShutdown(() => resolve());
+    })
+  };
+}
+
+export {
+  reshapeGrpcRequest,
+  startOtelGrpcReceiver
+};
+//# sourceMappingURL=chunk-G3PDTGOW.js.map

package/dist/chunk-G3PDTGOW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/otel-grpc.ts"],"sourcesContent":["import { fileURLToPath } from 'node:url'\nimport path from 'node:path'\nimport * as grpc from '@grpc/grpc-js'\nimport * as protoLoader from '@grpc/proto-loader'\nimport {\n  parseOtlpRequest,\n  type OtlpTracesRequest,\n  type ParsedSpan,\n  type SpanHandler,\n} from './otel.js'\n\n// OTLP/gRPC receiver. Sits next to buildOtelReceiver (HTTP/JSON) in otel.ts;\n// shares the same parseOtlpRequest decoder so a span looks identical to the\n// downstream onSpan handler whether it came in over JSON or protobuf.\n//\n// Default OFF — opts.enabled (typically NEAT_OTLP_GRPC=true) decides whether\n// server.ts wires this up. We keep gRPC behind a flag so existing HTTP-only\n// deployments don't get a surprise port binding on upgrade.\n\nexport interface BuildOtelGrpcReceiverOptions {\n  onSpan: SpanHandler\n}\n\n// proto-loader output for the trace service has fields like resource_spans,\n// scope_spans, span_id, etc. (snake_case keys, since we leave keepCase: true\n// when loading). The HTTP path uses camelCase JSON, so we shape-shift the\n// gRPC payload onto the HTTP shape and let parseOtlpRequest do the rest.\n//\n// All `bytes` fields arrive as Buffers; the HTTP wire format encodes them as\n// hex strings, so we hex-encode for consistency.\n\ninterface GrpcAnyValue {\n  string_value?: string\n  bool_value?: boolean\n  int_value?: string | number\n  double_value?: number\n  array_value?: { values?: GrpcAnyValue[] }\n  // bytes/kvlist fields exist in the proto but the demo doesn't use them.\n}\n\ninterface GrpcKeyValue {\n  key?: string\n  value?: GrpcAnyValue\n}\n\ninterface GrpcStatus {\n  code?: number\n  message?: string\n}\n\ninterface GrpcEvent {\n  name?: string\n  time_unix_nano?: string | number\n  attributes?: GrpcKeyValue[]\n}\n\ninterface GrpcSpan {\n  trace_id?: Buffer\n  span_id?: Buffer\n  parent_span_id?: Buffer\n  name?: string\n  kind?: number\n  start_time_unix_nano?: string | number\n  end_time_unix_nano?: string | number\n  attributes?: GrpcKeyValue[]\n  events?: GrpcEvent[]\n  status?: GrpcStatus\n}\n\ninterface GrpcScopeSpans {\n  spans?: GrpcSpan[]\n}\n\ninterface GrpcResourceSpans {\n  resource?: { attributes?: GrpcKeyValue[] }\n  scope_spans?: GrpcScopeSpans[]\n}\n\ninterface GrpcExportRequest {\n  resource_spans?: GrpcResourceSpans[]\n}\n\nfunction bytesToHex(buf: Buffer | undefined): string {\n  if (!buf) return ''\n  return Buffer.isBuffer(buf) ? buf.toString('hex') : ''\n}\n\nfunction nanosToString(n: string | number | undefined): string {\n  if (n === undefined || n === null) return '0'\n  return typeof n === 'string' ? n : String(n)\n}\n\nfunction reshapeAttributes(\n  attrs: GrpcKeyValue[] | undefined,\n): OtlpTracesRequest['resourceSpans'] extends Array<infer R>\n  ? R extends { resource?: { attributes?: infer A } }\n    ? A\n    : never\n  : never {\n  // Map snake_case oneof fields to the camelCase the JSON path expects.\n  const out = (attrs ?? []).map((kv) => ({\n    key: kv.key ?? '',\n    value: kv.value\n      ? {\n          stringValue: kv.value.string_value,\n          boolValue: kv.value.bool_value,\n          intValue: kv.value.int_value,\n          doubleValue: kv.value.double_value,\n          arrayValue: kv.value.array_value\n            ? {\n                values: (kv.value.array_value.values ?? []).map((v) => ({\n                  stringValue: v.string_value,\n                  boolValue: v.bool_value,\n                  intValue: v.int_value,\n                  doubleValue: v.double_value,\n                })),\n              }\n            : undefined,\n        }\n      : undefined,\n  }))\n  return out as never\n}\n\nexport function reshapeGrpcRequest(req: GrpcExportRequest): OtlpTracesRequest {\n  return {\n    resourceSpans: (req.resource_spans ?? []).map((rs) => ({\n      resource: rs.resource ? { attributes: reshapeAttributes(rs.resource.attributes) } : undefined,\n      scopeSpans: (rs.scope_spans ?? []).map((ss) => ({\n        spans: (ss.spans ?? []).map((s) => ({\n          traceId: bytesToHex(s.trace_id),\n          spanId: bytesToHex(s.span_id),\n          parentSpanId: s.parent_span_id ? bytesToHex(s.parent_span_id) : undefined,\n          name: s.name,\n          kind: s.kind,\n          startTimeUnixNano: nanosToString(s.start_time_unix_nano),\n          endTimeUnixNano: nanosToString(s.end_time_unix_nano),\n          attributes: reshapeAttributes(s.attributes),\n          events: (s.events ?? []).map((e) => ({\n            name: e.name,\n            timeUnixNano: nanosToString(e.time_unix_nano),\n            attributes: reshapeAttributes(e.attributes),\n          })),\n          status: s.status ? { code: s.status.code, message: s.status.message } : undefined,\n        })),\n      })),\n    })),\n  }\n}\n\n// Find the bundled .proto tree at packages/core/proto/. The dev server runs\n// from the source tree (tsx); the built bundles run from dist/. tsup keeps\n// source layout, so __dirname-relative resolution works for both — we look two\n// levels up from this file.\nfunction resolveProtoRoot(): string {\n  // Built output (CJS) sets __dirname natively; ESM build is bundled by tsup\n  // and keeps a dirname injection. import.meta.url is the safe bet.\n  const here = path.dirname(fileURLToPath(import.meta.url))\n  // src/ → packages/core/proto/, dist/ → packages/core/proto/.\n  return path.resolve(here, '..', 'proto')\n}\n\nfunction loadTraceService(): grpc.ServiceDefinition {\n  const protoRoot = resolveProtoRoot()\n  const def = protoLoader.loadSync(\n    'opentelemetry/proto/collector/trace/v1/trace_service.proto',\n    {\n      keepCase: true,\n      longs: String,\n      enums: Number,\n      defaults: true,\n      oneofs: true,\n      includeDirs: [protoRoot],\n    },\n  )\n  const pkg = grpc.loadPackageDefinition(def) as unknown as {\n    opentelemetry: {\n      proto: {\n        collector: {\n          trace: {\n            v1: {\n              TraceService: { service: grpc.ServiceDefinition }\n            }\n          }\n        }\n      }\n    }\n  }\n  return pkg.opentelemetry.proto.collector.trace.v1.TraceService.service\n}\n\nexport interface OtelGrpcReceiver {\n  // Bound address (host:port) once .start() has resolved. Useful for tests.\n  address: string\n  // Stop accepting new requests, shut down the server.\n  stop: () => Promise<void>\n}\n\nexport async function startOtelGrpcReceiver(\n  opts: BuildOtelGrpcReceiverOptions & { host?: string; port?: number },\n): Promise<OtelGrpcReceiver> {\n  const server = new grpc.Server()\n  const service = loadTraceService()\n\n  server.addService(service, {\n    Export: (\n      call: grpc.ServerUnaryCall<GrpcExportRequest, unknown>,\n      callback: grpc.sendUnaryData<{ partial_success: object }>,\n    ) => {\n      void (async () => {\n        try {\n          const reshaped = reshapeGrpcRequest(call.request ?? {})\n          const spans: ParsedSpan[] = parseOtlpRequest(reshaped)\n          for (const span of spans) {\n            await opts.onSpan(span)\n          }\n          callback(null, { partial_success: {} })\n        } catch (err) {\n          callback({\n            code: grpc.status.INTERNAL,\n            message: err instanceof Error ? err.message : String(err),\n          })\n        }\n      })()\n    },\n  })\n\n  const host = opts.host ?? '0.0.0.0'\n  const port = opts.port ?? 4317\n\n  const boundPort = await new Promise<number>((resolve, reject) => {\n    server.bindAsync(`${host}:${port}`, grpc.ServerCredentials.createInsecure(), (err, p) => {\n      if (err) return reject(err)\n      resolve(p)\n    })\n  })\n\n  return {\n    address: `${host}:${boundPort}`,\n    stop: () =>\n      new Promise<void>((resolve) => {\n        server.tryShutdown(() => resolve())\n      }),\n  }\n}\n"],"mappings":";;;;;AAAA,SAAS,qBAAqB;AAC9B,OAAO,UAAU;AACjB,YAAY,UAAU;AACtB,YAAY,iBAAiB;AA+E7B,SAAS,WAAW,KAAiC;AACnD,MAAI,CAAC,IAAK,QAAO;AACjB,SAAO,OAAO,SAAS,GAAG,IAAI,IAAI,SAAS,KAAK,IAAI;AACtD;AAEA,SAAS,cAAc,GAAwC;AAC7D,MAAI,MAAM,UAAa,MAAM,KAAM,QAAO;AAC1C,SAAO,OAAO,MAAM,WAAW,IAAI,OAAO,CAAC;AAC7C;AAEA,SAAS,kBACP,OAKQ;AAER,QAAM,OAAO,SAAS,CAAC,GAAG,IAAI,CAAC,QAAQ;AAAA,IACrC,KAAK,GAAG,OAAO;AAAA,IACf,OAAO,GAAG,QACN;AAAA,MACE,aAAa,GAAG,MAAM;AAAA,MACtB,WAAW,GAAG,MAAM;AAAA,MACpB,UAAU,GAAG,MAAM;AAAA,MACnB,aAAa,GAAG,MAAM;AAAA,MACtB,YAAY,GAAG,MAAM,cACjB;AAAA,QACE,SAAS,GAAG,MAAM,YAAY,UAAU,CAAC,GAAG,IAAI,CAAC,OAAO;AAAA,UACtD,aAAa,EAAE;AAAA,UACf,WAAW,EAAE;AAAA,UACb,UAAU,EAAE;AAAA,UACZ,aAAa,EAAE;AAAA,QACjB,EAAE;AAAA,MACJ,IACA;AAAA,IACN,IACA;AAAA,EACN,EAAE;AACF,SAAO;AACT;AAEO,SAAS,mBAAmB,KAA2C;AAC5E,SAAO;AAAA,IACL,gBAAgB,IAAI,kBAAkB,CAAC,GAAG,IAAI,CAAC,QAAQ;AAAA,MACrD,UAAU,GAAG,WAAW,EAAE,YAAY,kBAAkB,GAAG,SAAS,UAAU,EAAE,IAAI;AAAA,MACpF,aAAa,GAAG,eAAe,CAAC,GAAG,IAAI,CAAC,QAAQ;AAAA,QAC9C,QAAQ,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO;AAAA,UAClC,SAAS,WAAW,EAAE,QAAQ;AAAA,UAC9B,QAAQ,WAAW,EAAE,OAAO;AAAA,UAC5B,cAAc,EAAE,iBAAiB,WAAW,EAAE,cAAc,IAAI;AAAA,UAChE,MAAM,EAAE;AAAA,UACR,MAAM,EAAE;AAAA,UACR,mBAAmB,cAAc,EAAE,oBAAoB;AAAA,UACvD,iBAAiB,cAAc,EAAE,kBAAkB;AAAA,UACnD,YAAY,kBAAkB,EAAE,UAAU;AAAA,UAC1C,SAAS,EAAE,UAAU,CAAC,GAAG,IAAI,CAAC,OAAO;AAAA,YACnC,MAAM,EAAE;AAAA,YACR,cAAc,cAAc,EAAE,cAAc;AAAA,YAC5C,YAAY,kBAAkB,EAAE,UAAU;AAAA,UAC5C,EAAE;AAAA,UACF,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,MAAM,SAAS,EAAE,OAAO,QAAQ,IAAI;AAAA,QAC1E,EAAE;AAAA,MACJ,EAAE;AAAA,IACJ,EAAE;AAAA,EACJ;AACF;AAMA,SAAS,mBAA2B;AAGlC,QAAM,OAAO,KAAK,QAAQ,cAAc,YAAY,GAAG,CAAC;AAExD,SAAO,KAAK,QAAQ,MAAM,MAAM,OAAO;AACzC;AAEA,SAAS,mBAA2C;AAClD,QAAM,YAAY,iBAAiB;AACnC,QAAM,MAAkB;AAAA,IACtB;AAAA,IACA;AAAA,MACE,UAAU;AAAA,MACV,OAAO;AAAA,MACP,OAAO;AAAA,MACP,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,aAAa,CAAC,SAAS;AAAA,IACzB;AAAA,EACF;AACA,QAAM,MAAW,2BAAsB,GAAG;AAa1C,SAAO,IAAI,cAAc,MAAM,UAAU,MAAM,GAAG,aAAa;AACjE;AASA,eAAsB,sBACpB,MAC2B;AAC3B,QAAM,SAAS,IAAS,YAAO;AAC/B,QAAM,UAAU,iBAAiB;AAEjC,SAAO,WAAW,SAAS;AAAA,IACzB,QAAQ,CACN,MACA,aACG;AACH,YAAM,YAAY;AAChB,YAAI;AACF,gBAAM,WAAW,mBAAmB,KAAK,WAAW,CAAC,CAAC;AACtD,gBAAM,QAAsB,iBAAiB,QAAQ;AACrD,qBAAW,QAAQ,OAAO;AACxB,kBAAM,KAAK,OAAO,IAAI;AAAA,UACxB;AACA,mBAAS,MAAM,EAAE,iBAAiB,CAAC,EAAE,CAAC;AAAA,QACxC,SAAS,KAAK;AACZ,mBAAS;AAAA,YACP,MAAW,YAAO;AAAA,YAClB,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,UAC1D,CAAC;AAAA,QACH;AAAA,MACF,GAAG;AAAA,IACL;AAAA,EACF,CAAC;AAED,QAAM,OAAO,KAAK,QAAQ;AAC1B,QAAM,OAAO,KAAK,QAAQ;AAE1B,QAAM,YAAY,MAAM,IAAI,QAAgB,CAAC,SAAS,WAAW;AAC/D,WAAO,UAAU,GAAG,IAAI,IAAI,IAAI,IAAS,uBAAkB,eAAe,GAAG,CAAC,KAAK,MAAM;AACvF,UAAI,IAAK,QAAO,OAAO,GAAG;AAC1B,cAAQ,CAAC;AAAA,IACX,CAAC;AAAA,EACH,CAAC;AAED,SAAO;AAAA,IACL,SAAS,GAAG,IAAI,IAAI,SAAS;AAAA,IAC7B,MAAM,MACJ,IAAI,QAAc,CAAC,YAAY;AAC7B,aAAO,YAAY,MAAM,QAAQ,CAAC;AAAA,IACpC,CAAC;AAAA,EACL;AACF;","names":[]}

package/dist/cli.cjs

@@ -4406,6 +4406,10 @@ async function addProject(opts) {
     return entry2;
   });
 }
+async function getProject(name) {
+  const reg = await readRegistry();
+  return reg.projects.find((p) => p.name === name);
+}
 async function listProjects() {
   const reg = await readRegistry();
   return reg.projects;
@@ -4542,9 +4546,15 @@ function registerRoutes(scope, ctx) {
   scope.get("/health", async (req, reply) => {
     const proj = resolveProject(registry, req, reply);
     if (!proj) return;
+    const uptimeMs = Date.now() - startedAt;
     return {
-      uptime: Math.floor((Date.now() - startedAt) / 1e3),
+      ok: true,
       project: proj.name,
+      uptimeMs,
+      // Legacy fields kept additively. The web shell's StatusBar reads
+      // nodeCount / edgeCount; ADR-061's HealthResponseSchema validates
+      // the canonical triple and lets the extras pass through.
+      uptime: Math.floor(uptimeMs / 1e3),
       nodeCount: proj.graph.order,
       edgeCount: proj.graph.size,
       lastUpdated: (/* @__PURE__ */ new Date()).toISOString()
@@ -4564,7 +4574,7 @@ function registerRoutes(scope, ctx) {
       if (!proj.graph.hasNode(id)) {
         return reply.code(404).send({ error: "node not found", id });
       }
-      return proj.graph.getNodeAttributes(id);
+      return { node: proj.graph.getNodeAttributes(id) };
     }
   );
   scope.get(
@@ -4581,12 +4591,12 @@ function registerRoutes(scope, ctx) {
       return { inbound, outbound };
     }
   );
-  scope.get("/graph/node/:id/dependencies", async (req, reply) => {
+  scope.get("/graph/dependencies/:nodeId", async (req, reply) => {
     const proj = resolveProject(registry, req, reply);
     if (!proj) return;
-    const { id } = req.params;
-    if (!proj.graph.hasNode(id)) {
-      return reply.code(404).send({ error: "node not found", id });
+    const { nodeId } = req.params;
+    if (!proj.graph.hasNode(nodeId)) {
+      return reply.code(404).send({ error: "node not found", id: nodeId });
     }
     const depth = req.query.depth ? Number(req.query.depth) : TRANSITIVE_DEPENDENCIES_DEFAULT_DEPTH;
     if (!Number.isFinite(depth) || depth < 1 || depth > TRANSITIVE_DEPENDENCIES_MAX_DEPTH) {
@@ -4594,7 +4604,7 @@ function registerRoutes(scope, ctx) {
         error: `depth must be an integer in [1, ${TRANSITIVE_DEPENDENCIES_MAX_DEPTH}]`
       });
     }
-    return getTransitiveDependencies(proj.graph, id, depth);
+    return getTransitiveDependencies(proj.graph, nodeId, depth);
   });
   scope.get("/graph/divergences", async (req, reply) => {
     const proj = resolveProject(registry, req, reply);
@@ -4635,19 +4645,26 @@ function registerRoutes(scope, ctx) {
     const proj = resolveProject(registry, req, reply);
     if (!proj) return;
     const epath = errorsPathFor(proj);
-    if (!epath) return [];
-    return readErrorEvents(epath);
+    if (!epath) return { count: 0, total: 0, events: [] };
+    const events = await readErrorEvents(epath);
+    const total = events.length;
+    const limit = req.query.limit ? Number(req.query.limit) : 50;
+    const safeLimit = Number.isFinite(limit) && limit > 0 ? Math.min(limit, 200) : 50;
+    const sliced = events.slice(0, safeLimit);
+    return { count: sliced.length, total, events: sliced };
   });
-  scope.get("/incidents/stale", async (req, reply) => {
+  scope.get("/stale-events", async (req, reply) => {
     const proj = resolveProject(registry, req, reply);
     if (!proj) return;
     const spath = staleEventsPathFor(proj);
-    if (!spath) return [];
+    if (!spath) return { count: 0, total: 0, events: [] };
     const events = await readStaleEvents(spath);
     const filtered = req.query.edgeType ? events.filter((e) => e.edgeType === req.query.edgeType) : events;
     const ordered = [...filtered].reverse();
+    const total = ordered.length;
     const limit = req.query.limit ? Number(req.query.limit) : 50;
-    return ordered.slice(0, Number.isFinite(limit) && limit > 0 ? limit : 50);
+    const sliced = ordered.slice(0, Number.isFinite(limit) && limit > 0 ? limit : 50);
+    return { count: sliced.length, total, events: sliced };
   });
   scope.get(
     "/incidents/:nodeId",
@@ -4659,14 +4676,15 @@ function registerRoutes(scope, ctx) {
         return reply.code(404).send({ error: "node not found", id: nodeId });
       }
       const epath = errorsPathFor(proj);
-      if (!epath) return [];
+      if (!epath) return { count: 0, total: 0, events: [] };
       const events = await readErrorEvents(epath);
-      return events.filter(
+      const filtered = events.filter(
         (e) => e.affectedNode === nodeId || e.service === nodeId.replace(/^service:/, "")
       );
+      return { count: filtered.length, total: filtered.length, events: filtered };
     }
   );
-  scope.get("/traverse/root-cause/:nodeId", async (req, reply) => {
+  scope.get("/graph/root-cause/:nodeId", async (req, reply) => {
     const proj = resolveProject(registry, req, reply);
     if (!proj) return;
     const { nodeId } = req.params;
@@ -4686,7 +4704,7 @@ function registerRoutes(scope, ctx) {
     if (!result) return reply.code(404).send({ error: "no root cause found", id: nodeId });
     return result;
   });
-  scope.get("/traverse/blast-radius/:nodeId", async (req, reply) => {
+  scope.get("/graph/blast-radius/:nodeId", async (req, reply) => {
     const proj = resolveProject(registry, req, reply);
     if (!proj) return;
     const { nodeId } = req.params;
@@ -4796,7 +4814,7 @@ function registerRoutes(scope, ctx) {
     if (req.query.policyId) {
       violations = violations.filter((v) => v.policyId === req.query.policyId);
     }
-    return violations;
+    return { violations };
   });
   scope.post("/policies/check", async (req, reply) => {
     const proj = resolveProject(registry, req, reply);
@@ -4875,6 +4893,20 @@ async function buildApi(opts) {
       });
     }
   });
+  app.get("/projects/:project", async (req, reply) => {
+    try {
+      const entry2 = await getProject(req.params.project);
+      if (!entry2) {
+        return reply.code(404).send({ error: "project not found", project: req.params.project });
+      }
+      return { project: entry2 };
+    } catch (err) {
+      return reply.code(500).send({
+        error: "failed to read project registry",
+        details: err.message
+      });
+    }
+  });
   registerRoutes(app, routeCtx);
   await app.register(
     async (scope) => {
@@ -5962,7 +5994,7 @@ async function runRootCause(client, input) {
   const qs = input.errorId ? `?errorId=${encodeURIComponent(input.errorId)}` : "";
   const path38 = projectPath(
     input.project,
-    `/traverse/root-cause/${encodeURIComponent(input.errorNode)}${qs}`
+    `/graph/root-cause/${encodeURIComponent(input.errorNode)}${qs}`
   );
   try {
     const result = await client.get(path38);
@@ -5993,7 +6025,7 @@ async function runBlastRadius(client, input) {
   const qs = input.depth !== void 0 ? `?depth=${input.depth}` : "";
   const path38 = projectPath(
     input.project,
-    `/traverse/blast-radius/${encodeURIComponent(input.nodeId)}${qs}`
+    `/graph/blast-radius/${encodeURIComponent(input.nodeId)}${qs}`
   );
   try {
     const result = await client.get(path38);
@@ -6032,7 +6064,7 @@ async function runDependencies(client, input) {
   const depth = input.depth ?? 3;
   const path38 = projectPath(
     input.project,
-    `/graph/node/${encodeURIComponent(input.nodeId)}/dependencies?depth=${depth}`
+    `/graph/dependencies/${encodeURIComponent(input.nodeId)}?depth=${depth}`
   );
   try {
     const result = await client.get(path38);
@@ -6118,7 +6150,8 @@ function formatDuration(ms) {
 async function runIncidents(client, input) {
   const path38 = input.nodeId ? projectPath(input.project, `/incidents/${encodeURIComponent(input.nodeId)}`) : projectPath(input.project, "/incidents");
   try {
-    const events = await client.get(path38);
+    const body = await client.get(path38);
+    const events = body.events;
     if (events.length === 0) {
       return {
         summary: input.nodeId ? `No incidents recorded against ${input.nodeId}.` : "No incidents recorded."
@@ -6132,7 +6165,7 @@ async function runIncidents(client, input) {
     }
     const target = input.nodeId ?? "the project";
     return {
-      summary: `${target} has ${events.length} recorded incident${events.length === 1 ? "" : "s"}; showing the ${ordered.length} most recent.`,
+      summary: `${target} has ${body.total} recorded incident${body.total === 1 ? "" : "s"}; showing the ${ordered.length} most recent.`,
       block: blockLines.join("\n"),
       provenance: import_types22.Provenance.OBSERVED
     };
@@ -6228,9 +6261,10 @@ async function runStaleEdges(client, input) {
   if (input.limit !== void 0) params.set("limit", String(input.limit));
   if (input.edgeType) params.set("edgeType", input.edgeType);
   const qs = params.size > 0 ? `?${params.toString()}` : "";
-  const events = await client.get(
-    projectPath(input.project, `/incidents/stale${qs}`)
+  const body = await client.get(
+    projectPath(input.project, `/stale-events${qs}`)
   );
+  const events = body.events;
   if (events.length === 0) {
     return {
       summary: input.edgeType ? `No stale ${input.edgeType} edges recorded.` : "No stale-edge transitions recorded yet."
@@ -6264,9 +6298,10 @@ async function runPolicies(client, input) {
     const params = new URLSearchParams();
     if (input.policyId) params.set("policyId", input.policyId);
     const qs = params.size > 0 ? `?${params.toString()}` : "";
-    violations = await client.get(
+    const body = await client.get(
       projectPath(input.project, `/policies/violations${qs}`)
     );
+    violations = body.violations;
     allowed = violations.every((v) => v.onViolation !== "block");
   }
   if (input.nodeId) {