@pennyfarthing/core 10.4.0 → 11.0.0

package/packages/core/dist/server/api/hook-request.js

@@ -0,0 +1,278 @@
+/**
+ * Hook Request API Router
+ *
+ * Handles approval requests from Claude Code hooks via WheelHub.
+ * Per ADR-0004: All communication converges through WheelHub.
+ *
+ * Flow:
+ * 1. Hook script sends POST /api/hook-request with tool data
+ * 2. WheelHub checks allowlist/grants for auto-approval
+ * 3. If manual approval needed, broadcasts to WebSocket clients
+ * 4. Client shows approval modal, user decides
+ * 5. Client sends decision back via WebSocket
+ * 6. WheelHub returns HTTP response to hook
+ *
+ * Story: MSSCI-12409 - Hook consistency and WheelHub consolidation
+ */
+import { Router } from 'express';
+import { WebSocket } from 'ws';
+import { checkGrant, isAllowlisted, addGrant } from '../settings-store.js';
+import { isDangerousPath, getPathCategory, extractBashTargetPaths } from '../dangerous-path.js';
+// =============================================================================
+// State
+// =============================================================================
+// Pending approval requests, keyed by toolId
+const pendingApprovals = new Map();
+// WebSocket clients for hook notifications
+const hookClients = new Set();
+// Approval timeout (2 minutes)
+const APPROVAL_TIMEOUT_MS = 120000;
+// =============================================================================
+// Scope Extraction (MSSCI-14321)
+// =============================================================================
+/**
+ * Extract the scope identifier from tool input for grant matching.
+ * Modeled after getToolScope() in approval-gate.ts.
+ */
+function extractToolScope(toolName, input) {
+    switch (toolName) {
+        case 'Bash':
+            return input.command || '';
+        case 'WebFetch':
+            return input.url || '';
+        case 'Edit':
+        case 'Write':
+        case 'Read':
+            return input.file_path || '';
+        default:
+            return JSON.stringify(input);
+    }
+}
+const SAFE_TOOLS = new Set(['Read', 'Grep', 'Glob', 'WebSearch']);
+const DESTRUCTIVE_BASH_PATTERNS = [
+    /rm\s+(-[rf]+\s+)*/,
+    /git\s+(reset\s+--hard|push\s+--force|clean\s+-[fd])/,
+    /drop\s+database/i,
+    /truncate\s+table/i,
+];
+const SAFE_BASH_PATTERNS = [
+    /^(ls|cat|head|tail|grep|find|pwd|echo|which|type|file|stat|wc|diff)\b/,
+    /^git\s+(status|log|diff|show|branch|remote)\b/,
+];
+const CATEGORY_WARNINGS = {
+    secrets: 'Modifying sensitive secrets/credentials file',
+    git: 'Modifying git internals',
+    dependencies: 'Modifying dependency files',
+    system: 'Modifying system files',
+};
+/**
+ * Classify the severity of a hook request server-side.
+ * Combines tool-name classification with dangerous-path detection.
+ */
+export function classifyHookSeverity(toolName, input) {
+    // Safe tools are always safe
+    if (SAFE_TOOLS.has(toolName)) {
+        return { severity: 'safe' };
+    }
+    // Check dangerous paths for Write/Edit
+    if (toolName === 'Write' || toolName === 'Edit') {
+        const filePath = input.file_path || '';
+        if (filePath && isDangerousPath(filePath)) {
+            const category = getPathCategory(filePath);
+            return {
+                severity: 'destructive',
+                warning: category ? CATEGORY_WARNINGS[category] : 'Modifying sensitive path',
+            };
+        }
+        return { severity: 'normal' };
+    }
+    // Bash command classification
+    if (toolName === 'Bash') {
+        const command = input.command || '';
+        // Check for destructive bash patterns
+        if (DESTRUCTIVE_BASH_PATTERNS.some(p => p.test(command))) {
+            return { severity: 'destructive', warning: 'Destructive command detected' };
+        }
+        // Check for bash redirecting to dangerous paths
+        const targetPaths = extractBashTargetPaths(command);
+        for (const targetPath of targetPaths) {
+            if (isDangerousPath(targetPath)) {
+                const category = getPathCategory(targetPath);
+                return {
+                    severity: 'destructive',
+                    warning: category ? CATEGORY_WARNINGS[category] : 'Redirecting to sensitive path',
+                };
+            }
+        }
+        // Check for safe bash patterns
+        if (SAFE_BASH_PATTERNS.some(p => p.test(command))) {
+            return { severity: 'safe' };
+        }
+        return { severity: 'normal' };
+    }
+    // Default: normal
+    return { severity: 'normal' };
+}
+// =============================================================================
+// WebSocket Client Management
+// =============================================================================
+export function getHookClients() {
+    return hookClients;
+}
+export function addHookClient(ws) {
+    hookClients.add(ws);
+    ws.on('close', () => hookClients.delete(ws));
+}
+/**
+ * Broadcast hook request to all connected clients
+ */
+function broadcastHookRequest(data) {
+    const message = JSON.stringify(data);
+    for (const client of hookClients) {
+        if (client.readyState === WebSocket.OPEN) {
+            client.send(message);
+        }
+    }
+}
+// =============================================================================
+// Approval Resolution
+// =============================================================================
+/**
+ * Resolve a pending approval from client response
+ */
+export function resolveApproval(toolId, approved, data) {
+    const pending = pendingApprovals.get(toolId);
+    if (!pending) {
+        return false;
+    }
+    pending.resolve({
+        decision: approved ? 'allow' : 'deny',
+        reason: approved ? 'Approved by user' : 'Rejected by user',
+        data,
+    });
+    pendingApprovals.delete(toolId);
+    return true;
+}
+/**
+ * Handle WebSocket message from client
+ */
+export function handleHookWebSocketMessage(ws, message) {
+    try {
+        const data = JSON.parse(message);
+        if (data.type === 'hook-response') {
+            // Store grant if user approved with a grantScope (MSSCI-14321 AC8)
+            if (data.approved && data.data?.grantScope) {
+                const pending = pendingApprovals.get(data.toolId);
+                const scope = pending
+                    ? extractToolScope(pending.toolName, pending.input)
+                    : '';
+                const grant = {
+                    tool: pending?.toolName || '',
+                    scope,
+                    grant_type: data.data.grantScope,
+                    granted_at: new Date().toISOString(),
+                };
+                // Include agent from the original request if present
+                if (pending?.agent) {
+                    grant.agent = pending.agent;
+                }
+                addGrant(grant);
+            }
+            resolveApproval(data.toolId, data.approved, data.data);
+        }
+    }
+    catch (error) {
+        console.error('[HookRequest] Failed to parse WebSocket message:', error);
+    }
+}
+// =============================================================================
+// Request Handler
+// =============================================================================
+async function handleHookRequest(req, res) {
+    const { toolName, toolId, input, sessionId: _sessionId, agent, context } = req.body;
+    if (!toolName || !toolId) {
+        res.status(400).json({ error: 'Missing required fields: toolName, toolId' });
+        return;
+    }
+    // Check for auto-approval via grants (all tool types)
+    const scope = extractToolScope(toolName, input || {});
+    if (checkGrant(toolName, scope, agent)) {
+        res.json({
+            decision: 'allow',
+            reason: 'Granted by permission grant',
+        });
+        return;
+    }
+    // Check Bash allowlist for backward compatibility
+    if (toolName === 'Bash' && isAllowlisted(scope)) {
+        res.json({
+            decision: 'allow',
+            reason: 'Command matches allowlist pattern',
+        });
+        return;
+    }
+    // No clients connected - fall through to Claude Code's built-in approval
+    if (hookClients.size === 0) {
+        res.json({
+            decision: 'ask',
+            reason: 'No Cyclist clients connected, deferring to Claude Code',
+        });
+        return;
+    }
+    // Create pending approval with timeout
+    const approvalPromise = new Promise((resolve) => {
+        pendingApprovals.set(toolId, {
+            resolve,
+            toolName,
+            input: input || {},
+            agent,
+            timestamp: Date.now(),
+        });
+        // Set timeout
+        setTimeout(() => {
+            if (pendingApprovals.has(toolId)) {
+                pendingApprovals.delete(toolId);
+                resolve({
+                    decision: 'ask',
+                    reason: 'Approval timeout, deferring to Claude Code',
+                });
+            }
+        }, APPROVAL_TIMEOUT_MS);
+    });
+    // Classify severity before broadcast (MSSCI-14323)
+    const { severity, warning } = classifyHookSeverity(toolName, input || {});
+    // Broadcast to clients (include context, severity, and agent for UI display)
+    broadcastHookRequest({
+        type: 'hook-request',
+        toolId,
+        toolName,
+        input: input || {},
+        severity,
+        warning,
+        agent,
+        context,
+    });
+    // Wait for response
+    const response = await approvalPromise;
+    res.json(response);
+}
+// =============================================================================
+// Router
+// =============================================================================
+export function createHookRequestRouter() {
+    const router = Router();
+    // POST /api/hook-request - Handle hook approval requests
+    router.post('/', handleHookRequest);
+    // GET /api/hook-request/pending - List pending approvals (for debugging)
+    router.get('/pending', (_req, res) => {
+        const pending = Array.from(pendingApprovals.entries()).map(([id, p]) => ({
+            toolId: id,
+            toolName: p.toolName,
+            timestamp: p.timestamp,
+            age: Date.now() - p.timestamp,
+        }));
+        res.json({ pending });
+    });
+    return router;
+}
+//# sourceMappingURL=hook-request.js.map

package/packages/core/dist/server/api/hook-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-request.js","sourceRoot":"","sources":["../../../src/server/api/hook-request.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAuB,MAAM,sBAAsB,CAAC;AAChG,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAiChG,gFAAgF;AAChF,QAAQ;AACR,gFAAgF;AAEhF,6CAA6C;AAC7C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA2B,CAAC;AAE5D,2CAA2C;AAC3C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAa,CAAC;AAEzC,+BAA+B;AAC/B,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC,gFAAgF;AAChF,iCAAiC;AACjC,gFAAgF;AAEhF;;;GAGG;AACH,SAAS,gBAAgB,CAAC,QAAgB,EAAE,KAA8B;IACxE,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,OAAQ,KAAK,CAAC,OAAkB,IAAI,EAAE,CAAC;QACzC,KAAK,UAAU;YACb,OAAQ,KAAK,CAAC,GAAc,IAAI,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO,CAAC;QACb,KAAK,MAAM;YACT,OAAQ,KAAK,CAAC,SAAoB,IAAI,EAAE,CAAC;QAC3C;YACE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAaD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AAElE,MAAM,yBAAyB,GAAG;IAChC,mBAAmB;IACnB,qDAAqD;IACrD,kBAAkB;IAClB,mBAAmB;CACpB,CAAC;AAEF,MAAM,kBAAkB,GAAG;IACzB,uEAAuE;IACvE,+CAA+C;CAChD,CAAC;AAEF,MAAM,iBAAiB,GAA2B;IAChD,OAAO,EAAE,8CAA8C;IACvD,GAAG,EAAE,yBAAyB;IAC9B,YAAY,EAAE,4BAA4B;IAC1C,MAAM,EAAE,wBAAwB;CACjC,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,KAA8B;IAE9B,6BAA6B;IAC7B,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAED,uCAAuC;IACvC,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAI,KAAK,CAAC,SAAoB,IAAI,EAAE,CAAC;QACnD,IAAI,QAAQ,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC3C,OAAO;gBACL,QAAQ,EAAE,aAAa;gBACvB,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,0BAA0B;aAC7E,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAChC,CAAC;IAED,8BAA8B;IAC9B,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,OAAO,GAAI,KAAK,CAAC,OAAkB,IAAI,EAAE,CAAC;QAEhD,sCAAsC;QACtC,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACzD,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;QAC9E,CAAC;QAED,gDAAgD;QAChD,MAAM,WAAW,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACpD,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,IAAI,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChC,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;gBAC7C,OAAO;oBACL,QAAQ,EAAE,aAAa;oBACvB,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,+BAA+B;iBAClF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,+BAA+B;QAC/B,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QAC9B,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAChC,CAAC;IAED,kBAAkB;IAClB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF,MAAM,UAAU,cAAc;IAC5B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAa;IACzC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpB,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,IAa7B;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;QACjC,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAc,EACd,QAAiB,EACjB,IAA8B;IAE9B,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,CAAC,OAAO,CAAC;QACd,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;QACrC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAkB;QAC1D,IAAI;KACL,CAAC,CAAC;IAEH,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CAAC,EAAa,EAAE,OAAe;IACvE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEjC,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAClC,mEAAmE;YACnE,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC;gBAC3C,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAClD,MAAM,KAAK,GAAG,OAAO;oBACnB,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC;oBACnD,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,KAAK,GAAmC;oBAC5C,IAAI,EAAE,OAAO,EAAE,QAAQ,IAAI,EAAE;oBAC7B,KAAK;oBACL,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAA4B;oBAClD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACrC,CAAC;gBACF,qDAAqD;gBACrD,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;oBACnB,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;gBAC9B,CAAC;gBACD,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC;YAED,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,kDAAkD,EAAE,KAAK,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,KAAK,UAAU,iBAAiB,CAAC,GAAY,EAAE,GAAa;IAC1D,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAmB,CAAC;IAEnG,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC,CAAC;QAC7E,OAAO;IACT,CAAC;IAED,sDAAsD;IACtD,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC;YACP,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,6BAA6B;SACtC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,kDAAkD;IAClD,IAAI,QAAQ,KAAK,MAAM,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,IAAI,CAAC;YACP,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,mCAAmC;SAC5C,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,yEAAyE;IACzE,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC;YACP,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,wDAAwD;SACjE,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,uCAAuC;IACvC,MAAM,eAAe,GAAG,IAAI,OAAO,CAAe,CAAC,OAAO,EAAE,EAAE;QAC5D,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE;YAC3B,OAAO;YACP,QAAQ;YACR,KAAK,EAAE,KAAK,IAAI,EAAE;YAClB,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QAEH,cAAc;QACd,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAChC,OAAO,CAAC;oBACN,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,4CAA4C;iBACrD,CAAC,CAAC;YACL,CAAC;QACH,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,mDAAmD;IACnD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,oBAAoB,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAE1E,6EAA6E;IAC7E,oBAAoB,CAAC;QACnB,IAAI,EAAE,cAAc;QACpB,MAAM;QACN,QAAQ;QACR,KAAK,EAAE,KAAK,IAAI,EAAE;QAClB,QAAQ;QACR,OAAO;QACP,KAAK;QACL,OAAO;KACR,CAAC,CAAC;IAEH,oBAAoB;IACpB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC;IACvC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACrB,CAAC;AAED,gFAAgF;AAChF,SAAS;AACT,gFAAgF;AAEhF,MAAM,UAAU,uBAAuB;IACrC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,yDAAyD;IACzD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAEpC,yEAAyE;IACzE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACtD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvE,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,SAAS;SAC9B,CAAC,CAAC,CAAC;QACJ,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/packages/core/dist/server/api/hotspots.d.ts

@@ -0,0 +1,3 @@
+import { Router } from 'express';
+export declare function createHotspotsRouter(getProjectDir: () => string): Router;
+//# sourceMappingURL=hotspots.d.ts.map

package/packages/core/dist/server/api/hotspots.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hotspots.d.ts","sourceRoot":"","sources":["../../../src/server/api/hotspots.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAKjC,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,MAAM,MAAM,GAAG,MAAM,CA8DxE"}

package/packages/core/dist/server/api/hotspots.js

@@ -0,0 +1,62 @@
+import { Router } from 'express';
+import { execFile } from 'child_process';
+import { join } from 'path';
+// Create hotspots API router
+export function createHotspotsRouter(getProjectDir) {
+    const router = Router();
+    // GET /api/hotspots?days=90&repo=pennyfarthing&skip_type=orchestrator
+    router.get('/', (req, res) => {
+        const projectDir = getProjectDir();
+        const days = String(req.query.days || '90');
+        const repo = req.query.repo;
+        const skipType = req.query.skip_type;
+        const args = [
+            '-m', 'pennyfarthing_scripts.hotspots',
+            'analyze',
+            '--format', 'json',
+            '--days', days,
+        ];
+        if (repo) {
+            args.push('--repo', repo);
+        }
+        else {
+            args.push('--path', projectDir);
+        }
+        // Forward skip_type values to CLI
+        if (skipType) {
+            const types = Array.isArray(skipType) ? skipType : [skipType];
+            for (const t of types) {
+                args.push('--skip-type', String(t));
+            }
+        }
+        // Find python in the project's pennyfarthing dir
+        const pythonPath = join(projectDir, 'pennyfarthing');
+        execFile('python3', args, {
+            cwd: pythonPath,
+            env: { ...process.env, PYTHONPATH: pythonPath },
+            timeout: 30000,
+        }, (err, stdout, stderr) => {
+            if (err) {
+                console.error('[Hotspots] Analysis failed:', stderr || err.message);
+                res.status(500).json({
+                    success: false,
+                    error: stderr || err.message,
+                });
+                return;
+            }
+            try {
+                const data = JSON.parse(stdout);
+                res.json(data);
+            }
+            catch (parseErr) {
+                console.error('[Hotspots] JSON parse failed:', parseErr);
+                res.status(500).json({
+                    success: false,
+                    error: 'Failed to parse hotspot analysis output',
+                });
+            }
+        });
+    });
+    return router;
+}
+//# sourceMappingURL=hotspots.js.map

package/packages/core/dist/server/api/hotspots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hotspots.js","sourceRoot":"","sources":["../../../src/server/api/hotspots.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,6BAA6B;AAC7B,MAAM,UAAU,oBAAoB,CAAC,aAA2B;IAC9D,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,sEAAsE;IACtE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAA0B,CAAC;QAClD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;QAErC,MAAM,IAAI,GAAG;YACX,IAAI,EAAE,gCAAgC;YACtC,SAAS;YACT,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,IAAI;SACf,CAAC;QAEF,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAClC,CAAC;QAED,kCAAkC;QAClC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC9D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,iDAAiD;QACjD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QAErD,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE;YACxB,GAAG,EAAE,UAAU;YACf,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE;YAC/C,OAAO,EAAE,KAAK;SACf,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACzB,IAAI,GAAG,EAAE,CAAC;gBACR,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;gBACpE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,MAAM,IAAI,GAAG,CAAC,OAAO;iBAC7B,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAChC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;YAAC,OAAO,QAAQ,EAAE,CAAC;gBAClB,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,QAAQ,CAAC,CAAC;gBACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,yCAAyC;iBACjD,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/packages/core/dist/server/api/identity.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Identity API - Get user identity information from CLI tools
+ * MSSCI-12469: Stats strip redesign with identity context
+ *
+ * Returns Jira email and GitHub username from respective CLI configs.
+ */
+import { Router } from 'express';
+export interface IdentityInfo {
+    jiraEmail: string | null;
+    githubUsername: string | null;
+    avatarUrl: string | null;
+}
+/**
+ * Create identity API router
+ */
+export declare function createIdentityRouter(): Router;
+//# sourceMappingURL=identity.d.ts.map

package/packages/core/dist/server/api/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../../src/server/api/identity.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAgED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAU7C"}

package/packages/core/dist/server/api/identity.js

@@ -0,0 +1,79 @@
+/**
+ * Identity API - Get user identity information from CLI tools
+ * MSSCI-12469: Stats strip redesign with identity context
+ *
+ * Returns Jira email and GitHub username from respective CLI configs.
+ */
+import { Router } from 'express';
+import { execSync } from 'child_process';
+/**
+ * Get Jira email from jira CLI config
+ * Runs: jira me --raw | grep email
+ */
+function getJiraEmail() {
+    try {
+        // jira me returns JSON with email field
+        const output = execSync('jira me --raw 2>/dev/null', {
+            encoding: 'utf-8',
+            timeout: 5000,
+        });
+        const data = JSON.parse(output);
+        return data.emailAddress || null;
+    }
+    catch {
+        // jira CLI not configured or not installed
+        return null;
+    }
+}
+/**
+ * Get GitHub username from gh CLI config
+ * Runs: gh api user
+ */
+function getGithubUsername() {
+    try {
+        const output = execSync('gh api user 2>/dev/null', {
+            encoding: 'utf-8',
+            timeout: 5000,
+        });
+        const data = JSON.parse(output);
+        return data.login || null;
+    }
+    catch {
+        // gh CLI not configured or not installed
+        return null;
+    }
+}
+// Cache identity info (refresh every 5 minutes)
+let cachedIdentity = null;
+let lastFetch = 0;
+const CACHE_TTL = 5 * 60 * 1000; // 5 minutes
+/**
+ * Get identity info with caching
+ */
+function getIdentity() {
+    const now = Date.now();
+    if (cachedIdentity && now - lastFetch < CACHE_TTL) {
+        return cachedIdentity;
+    }
+    const githubUsername = getGithubUsername();
+    cachedIdentity = {
+        jiraEmail: getJiraEmail(),
+        githubUsername,
+        avatarUrl: githubUsername ? `https://avatars.githubusercontent.com/${githubUsername}` : null,
+    };
+    lastFetch = now;
+    return cachedIdentity;
+}
+/**
+ * Create identity API router
+ */
+export function createIdentityRouter() {
+    const router = Router();
+    // GET /api/identity - Get current user identity
+    router.get('/', (_req, res) => {
+        const identity = getIdentity();
+        res.json(identity);
+    });
+    return router;
+}
+//# sourceMappingURL=identity.js.map

package/packages/core/dist/server/api/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../src/server/api/identity.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAQzC;;;GAGG;AACH,SAAS,YAAY;IACnB,IAAI,CAAC;QACH,wCAAwC;QACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,2BAA2B,EAAE;YACnD,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB;IACxB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,yBAAyB,EAAE;YACjD,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,yCAAyC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,gDAAgD;AAChD,IAAI,cAAc,GAAwB,IAAI,CAAC;AAC/C,IAAI,SAAS,GAAG,CAAC,CAAC;AAClB,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AAE7C;;GAEG;AACH,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,cAAc,IAAI,GAAG,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;QAClD,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;IAC3C,cAAc,GAAG;QACf,SAAS,EAAE,YAAY,EAAE;QACzB,cAAc;QACd,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,yCAAyC,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI;KAC7F,CAAC;IACF,SAAS,GAAG,GAAG,CAAC;IAEhB,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,gDAAgD;IAChD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC5B,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/packages/core/dist/server/api/index.d.ts

@@ -0,0 +1,36 @@
+export { createStatsRouter, broadcastStats, getCurrentStats, getStatsClients, updatePwd } from './stats.js';
+export { createPortraitRouter, getCurrentPortrait } from './portrait.js';
+export { createPersonaRouter, broadcastPersona, getPersonaClients, getStreamingState, setStreamingState } from './persona.js';
+export { createGitRouter, getGitInfo, getAllReposGitInfo, getGitInfoAsync, getAllReposGitInfoAsync, resetFetchCooldown, GIT_FETCH_COOLDOWN_MS } from './git.js';
+export type { GitInfo } from './git.js';
+export { createOTLPRouter } from './otlp.js';
+export { createStoryRouter } from './story.js';
+export { createHotspotsRouter } from './hotspots.js';
+export { createFileBrowserRouter } from './file-browser.js';
+export { createTokenStatsRouter, broadcastTokenStats, getTokenStatsClients, initTokenStatsBroadcast } from './token-stats.js';
+export { createContextRouter, getContextUsage } from './context.js';
+export type { ContextInfo } from './context.js';
+export { createThemeAgentsRouter, getThemeAgents } from './theme-agents.js';
+export type { AgentCharacterMap } from './theme-agents.js';
+export { createModeRouter, getModeInfo } from './mode.js';
+export type { ModeInfo } from './mode.js';
+export { createTelemetryRouter } from './telemetry.js';
+export { createEvaluationRouter } from './evaluation.js';
+export { createSettingsRouter, getSettingsForWebSocket } from './settings.js';
+export { createBackgroundTasksRouter, getBackgroundTaskClients, broadcastBackgroundTaskEvent, initBackgroundTaskBroadcast } from './background-tasks.js';
+export { createSpansRouter } from './spans.js';
+export { getBellClients, broadcastBellConsumed } from './bell.js';
+export { getWelcomeClients, broadcastWelcome } from './welcome.js';
+export { createHookRequestRouter, getHookClients, addHookClient, resolveApproval, handleHookWebSocketMessage } from './hook-request.js';
+export { createIdentityRouter } from './identity.js';
+export type { IdentityInfo } from './identity.js';
+export { createTodosRouter, setWebModeTodos, getWebModeTodos } from './todos.js';
+export { createAuditLogRouter } from './audit-log.js';
+export { createPermissionsRouter } from './permissions.js';
+export { createAgentLoadRouter } from './agent-load.js';
+export { createCodeMarkersRouter } from './code-markers.js';
+export { createDeadCodeRouter } from './dead-code.js';
+export { createComplexityRouter } from './complexity.js';
+export { createDependenciesRouter } from './dependencies.js';
+export { createHealthScoreRouter } from './health-score.js';
+//# sourceMappingURL=index.d.ts.map

package/packages/core/dist/server/api/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/api/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5G,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAC9H,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,kBAAkB,EAAE,eAAe,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAChK,YAAY,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC9H,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC5E,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC1D,YAAY,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAE9E,OAAO,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAEzJ,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAElE,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEnE,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAExI,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAE7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC"}

package/packages/core/dist/server/api/index.js

@@ -0,0 +1,47 @@
+// API module exports
+export { createStatsRouter, broadcastStats, getCurrentStats, getStatsClients, updatePwd } from './stats.js';
+export { createPortraitRouter, getCurrentPortrait } from './portrait.js';
+export { createPersonaRouter, broadcastPersona, getPersonaClients, getStreamingState, setStreamingState } from './persona.js';
+export { createGitRouter, getGitInfo, getAllReposGitInfo, getGitInfoAsync, getAllReposGitInfoAsync, resetFetchCooldown, GIT_FETCH_COOLDOWN_MS } from './git.js';
+export { createOTLPRouter } from './otlp.js';
+export { createStoryRouter } from './story.js';
+export { createHotspotsRouter } from './hotspots.js';
+export { createFileBrowserRouter } from './file-browser.js';
+export { createTokenStatsRouter, broadcastTokenStats, getTokenStatsClients, initTokenStatsBroadcast } from './token-stats.js';
+export { createContextRouter, getContextUsage } from './context.js';
+export { createThemeAgentsRouter, getThemeAgents } from './theme-agents.js';
+export { createModeRouter, getModeInfo } from './mode.js';
+export { createTelemetryRouter } from './telemetry.js';
+export { createEvaluationRouter } from './evaluation.js';
+// 35-1: Settings API for contextual settings
+export { createSettingsRouter, getSettingsForWebSocket } from './settings.js';
+// 35-16: Background tasks API
+export { createBackgroundTasksRouter, getBackgroundTaskClients, broadcastBackgroundTaskEvent, initBackgroundTaskBroadcast } from './background-tasks.js';
+// MSSCI-11734: Enriched spans API
+export { createSpansRouter } from './spans.js';
+// Bell mode WebSocket broadcast
+export { getBellClients, broadcastBellConsumed } from './bell.js';
+// Welcome message WebSocket broadcast
+export { getWelcomeClients, broadcastWelcome } from './welcome.js';
+// MSSCI-12409: Hook request API (WheelHub consolidation)
+export { createHookRequestRouter, getHookClients, addHookClient, resolveApproval, handleHookWebSocketMessage } from './hook-request.js';
+// MSSCI-12469: Identity API for stats strip
+export { createIdentityRouter } from './identity.js';
+// Todos API for web mode fallback
+export { createTodosRouter, setWebModeTodos, getWebModeTodos } from './todos.js';
+// Audit log API
+export { createAuditLogRouter } from './audit-log.js';
+// MSSCI-14325: Permissions API (grant management)
+export { createPermissionsRouter } from './permissions.js';
+// MSSCI-14461: Agent Load Analyzer API
+export { createAgentLoadRouter } from './agent-load.js';
+// MSSCI-14456: Code Markers API
+export { createCodeMarkersRouter } from './code-markers.js';
+// MSSCI-14460: Dead Code API
+export { createDeadCodeRouter } from './dead-code.js';
+// MSSCI-14468: Complexity + Dependencies APIs
+export { createComplexityRouter } from './complexity.js';
+export { createDependenciesRouter } from './dependencies.js';
+// MSSCI-14471: Health Score API
+export { createHealthScoreRouter } from './health-score.js';
+//# sourceMappingURL=index.js.map

package/packages/core/dist/server/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/api/index.ts"],"names":[],"mappings":"AAAA,qBAAqB;AACrB,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5G,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAC9H,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,kBAAkB,EAAE,eAAe,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAEhK,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC9H,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpE,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAE5E,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,6CAA6C;AAC7C,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAC9E,8BAA8B;AAC9B,OAAO,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AACzJ,kCAAkC;AAClC,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,gCAAgC;AAChC,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAClE,sCAAsC;AACtC,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACnE,yDAAyD;AACzD,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AACxI,4CAA4C;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,kCAAkC;AAClC,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACjF,gBAAgB;AAChB,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,kDAAkD;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,uCAAuC;AACvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,gCAAgC;AAChC,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,6BAA6B;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,8CAA8C;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,gCAAgC;AAChC,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC"}

package/packages/core/dist/server/api/mode.d.ts

@@ -0,0 +1,24 @@
+import { Router } from 'express';
+/**
+ * Runtime mode information for Cyclist
+ */
+export interface ModeInfo {
+    mode: 'electron' | 'web' | 'unknown';
+    isBikeRack: boolean;
+    version: string;
+    nodeVersion: string;
+    platform: string;
+    arch: string;
+    pid: number;
+    uptime: number;
+    startTime: string;
+}
+/**
+ * Get current runtime mode information
+ */
+export declare function getModeInfo(): ModeInfo;
+/**
+ * Create mode API router
+ */
+export declare function createModeRouter(): Router;
+//# sourceMappingURL=mode.d.ts.map

package/packages/core/dist/server/api/mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mode.d.ts","sourceRoot":"","sources":["../../../src/server/api/mode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,UAAU,GAAG,KAAK,GAAG,SAAS,CAAC;IACrC,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAYD;;GAEG;AACH,wBAAgB,WAAW,IAAI,QAAQ,CActC;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAUzC"}

package/packages/core/dist/server/api/mode.js

@@ -0,0 +1,40 @@
+import { Router } from 'express';
+import { isBikeRackMode } from '../env.js';
+// Track when the server started
+const startTime = new Date().toISOString();
+// Detect if running in Electron
+let electronVersion = null;
+const versions = process.versions;
+if (versions.electron) {
+    electronVersion = versions.electron;
+}
+/**
+ * Get current runtime mode information
+ */
+export function getModeInfo() {
+    const mode = electronVersion ? 'electron' : 'web';
+    return {
+        mode,
+        isBikeRack: isBikeRackMode(),
+        version: electronVersion || 'N/A',
+        nodeVersion: process.version,
+        platform: process.platform,
+        arch: process.arch,
+        pid: process.pid,
+        uptime: process.uptime(),
+        startTime,
+    };
+}
+/**
+ * Create mode API router
+ */
+export function createModeRouter() {
+    const router = Router();
+    // GET /api/mode - return runtime mode info
+    router.get('/', (_req, res) => {
+        const info = getModeInfo();
+        res.json(info);
+    });
+    return router;
+}
+//# sourceMappingURL=mode.js.map

package/packages/core/dist/server/api/mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mode.js","sourceRoot":"","sources":["../../../src/server/api/mode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAiB3C,gCAAgC;AAChC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAE3C,gCAAgC;AAChC,IAAI,eAAe,GAAkB,IAAI,CAAC;AAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAkC,CAAC;AAC5D,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;IACtB,eAAe,GAAG,QAAQ,CAAC,QAAQ,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;IAElD,OAAO;QACL,IAAI;QACJ,UAAU,EAAE,cAAc,EAAE;QAC5B,OAAO,EAAE,eAAe,IAAI,KAAK;QACjC,WAAW,EAAE,OAAO,CAAC,OAAO;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;QACxB,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,2CAA2C;IAC3C,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC5B,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/packages/core/dist/server/api/otlp.d.ts

@@ -0,0 +1,3 @@
+import { Router } from 'express';
+export declare function createOTLPRouter(): Router;
+//# sourceMappingURL=otlp.d.ts.map