@squadrules/mcp 4.8.6

package/dist/http/http-error-handlers.d.ts

@@ -0,0 +1,7 @@
+import express from 'express';
+/**
+ * Set up error handlers and additional routes
+ * @param app Express application instance
+ */
+export declare function setupErrorHandlers(app: express.Express): void;
+//# sourceMappingURL=http-error-handlers.d.ts.map

package/dist/http/http-error-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-error-handlers.d.ts","sourceRoot":"","sources":["../../src/http/http-error-handlers.ts"],"names":[],"mappings":"AAAA,OAAO,OAAqC,MAAM,SAAS,CAAC;AAkC5D;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,QActD"}

package/dist/http/http-error-handlers.js

@@ -0,0 +1,50 @@
+import { structuredLogger } from '../utils/structured-logger.js';
+function singleHeader(value) {
+    if (value == null)
+        return 'unknown';
+    return Array.isArray(value) ? (value[0] ?? 'unknown') : value;
+}
+const globalErrorHandler = (err, req, res, _next) => {
+    try {
+        const rid = singleHeader(req?.headers?.['x-request-id']);
+        const method = req?.method || 'UNKNOWN';
+        const url = req?.url || 'UNKNOWN';
+        structuredLogger.error('HTTP error handled by global Express handler', err, {
+            request_id: rid,
+            http_method: method,
+            http_url: url
+        });
+    }
+    catch { }
+    if (!res.headersSent) {
+        if (err?.status === 413 || err?.statusCode === 413 || err?.type === 'entity.too.large') {
+            res.status(413).json({
+                error: 'PAYLOAD_TOO_LARGE',
+                message: 'Request body exceeds the configured size limit'
+            });
+            return;
+        }
+        res.status(500).json({ error: 'Internal server error' });
+    }
+    else {
+        res.end();
+    }
+};
+/**
+ * Set up error handlers and additional routes
+ * @param app Express application instance
+ */
+export function setupErrorHandlers(app) {
+    app.use(globalErrorHandler);
+    // MCP endpoint - reject GET requests (must be POST)
+    app.get('/mcp', (req, res) => {
+        res.status(405).set('Allow', 'POST').json({
+            error: 'Method Not Allowed - use POST /mcp'
+        });
+    });
+    // Catch-all 404 handler (must be last)
+    app.use((req, res) => {
+        res.status(404).json({ error: 'Not found' });
+    });
+}
+//# sourceMappingURL=http-error-handlers.js.map

package/dist/http/http-error-handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-error-handlers.js","sourceRoot":"","sources":["../../src/http/http-error-handlers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEjE,SAAS,YAAY,CAAC,KAAoC;IACtD,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAClE,CAAC;AAED,MAAM,kBAAkB,GAAwB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;IACrE,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,GAAG,EAAE,MAAM,IAAI,SAAS,CAAC;QACxC,MAAM,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI,SAAS,CAAC;QAClC,gBAAgB,CAAC,KAAK,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACxE,UAAU,EAAE,GAAG;YACf,WAAW,EAAE,MAAM;YACnB,QAAQ,EAAE,GAAG;SAChB,CAAC,CAAC;IACP,CAAC;IAAC,MAAM,CAAC,CAAC,CAAC;IAEX,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,GAAG,EAAE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAE,UAAU,KAAK,GAAG,IAAI,GAAG,EAAE,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACrF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACjB,KAAK,EAAE,mBAAmB;gBAC1B,OAAO,EAAE,gDAAgD;aAC5D,CAAC,CAAC;YACH,OAAO;QACX,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACJ,GAAG,CAAC,GAAG,EAAE,CAAC;IACd,CAAC;AACL,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAoB;IACnD,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAE5B,oDAAoD;IACpD,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC;YACtC,KAAK,EAAE,oCAAoC;SAC9C,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,uCAAuC;IACvC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACjB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/http/http-export-artifact-download-routes.d.ts

@@ -0,0 +1,4 @@
+import express from 'express';
+import { MemoryQdrantStore } from '../services/memory/store.js';
+export declare function setupExportArtifactDownloadRoutes(app: express.Express, memoryStore: MemoryQdrantStore): void;
+//# sourceMappingURL=http-export-artifact-download-routes.d.ts.map

package/dist/http/http-export-artifact-download-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-export-artifact-download-routes.d.ts","sourceRoot":"","sources":["../../src/http/http-export-artifact-download-routes.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAKhE,wBAAgB,iCAAiC,CAC/C,GAAG,EAAE,OAAO,CAAC,OAAO,EACpB,WAAW,EAAE,iBAAiB,GAC7B,IAAI,CAmDN"}

package/dist/http/http-export-artifact-download-routes.js

@@ -0,0 +1,49 @@
+import { verifyExportArtifactDownloadCapability } from '../services/export-artifact-download-capability.js';
+import { structuredLogger } from '../utils/structured-logger.js';
+import { runWithSpaceContextAsync } from '../utils/tenant-context.js';
+export function setupExportArtifactDownloadRoutes(app, memoryStore) {
+    app.get('/export/artifact/:opaque', async (req, res) => {
+        const opaque = req.params['opaque'] ?? '';
+        const record = await verifyExportArtifactDownloadCapability(opaque);
+        if (!record) {
+            res.status(403).json({
+                error: 'EXPORT_ARTIFACT_DOWNLOAD_FORBIDDEN',
+                message: 'Artifact download link is invalid or expired.'
+            });
+            return;
+        }
+        try {
+            structuredLogger.info({
+                event: 'export_artifact_download_request',
+                id: record.id,
+                artifact_uuid: record.artifact_uuid
+            }, 'GET /export/artifact');
+            const memory = await runWithSpaceContextAsync(record.space_context, () => memoryStore.getMemory(record.artifact_uuid, { fresh: true }));
+            if (!memory) {
+                res.status(404).json({
+                    error: 'EXPORT_ARTIFACT_NOT_FOUND',
+                    message: 'Artifact was not found.'
+                });
+                return;
+            }
+            const body = typeof memory.text === 'string' ? memory.text : '';
+            const filename = record.filename.replace(/"/g, '');
+            res.setHeader('Content-Type', record.content_type || memory.content_type || 'text/plain');
+            res.setHeader('Content-Disposition', `attachment; filename="${filename}"`);
+            res.setHeader('X-KAIROS-Artifact-Sha256', record.sha256);
+            // Dual header for SquadRules migration: both emitted so clients reading either name work.
+            res.setHeader('X-SquadRules-Artifact-Sha256', record.sha256);
+            res.status(200).send(body);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            structuredLogger.error('artifact download failed', error);
+            if (res.headersSent) {
+                res.end();
+                return;
+            }
+            res.status(500).json({ error: 'EXPORT_ARTIFACT_DOWNLOAD_FAILED', message });
+        }
+    });
+}
+//# sourceMappingURL=http-export-artifact-download-routes.js.map

package/dist/http/http-export-artifact-download-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-export-artifact-download-routes.js","sourceRoot":"","sources":["../../src/http/http-export-artifact-download-routes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sCAAsC,EAAE,MAAM,oDAAoD,CAAC;AAC5G,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,MAAM,UAAU,iCAAiC,CAC/C,GAAoB,EACpB,WAA8B;IAE9B,GAAG,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,sCAAsC,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,oCAAoC;gBAC3C,OAAO,EAAE,+CAA+C;aACzD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,gBAAgB,CAAC,IAAI,CACnB;gBACE,KAAK,EAAE,kCAAkC;gBACzC,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,aAAa,EAAE,MAAM,CAAC,aAAa;aACpC,EACD,sBAAsB,CACvB,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,EAAE,CACvE,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAC7D,CAAC;YACF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,2BAA2B;oBAClC,OAAO,EAAE,yBAAyB;iBACnC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACnD,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,IAAI,YAAY,CAAC,CAAC;YAC1F,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,yBAAyB,QAAQ,GAAG,CAAC,CAAC;YAC3E,GAAG,CAAC,SAAS,CAAC,0BAA0B,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACzD,0FAA0F;YAC1F,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,gBAAgB,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;YAC1D,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACpB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/http/http-export-download-routes.d.ts

@@ -0,0 +1,5 @@
+import express from 'express';
+import { MemoryQdrantStore } from '../services/memory/store.js';
+import type { QdrantService } from '../services/qdrant/service.js';
+export declare function setupExportDownloadRoutes(app: express.Express, memoryStore: MemoryQdrantStore, qdrantService: QdrantService): void;
+//# sourceMappingURL=http-export-download-routes.d.ts.map

package/dist/http/http-export-download-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-export-download-routes.d.ts","sourceRoot":"","sources":["../../src/http/http-export-download-routes.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAMnE,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,OAAO,CAAC,OAAO,EACpB,WAAW,EAAE,iBAAiB,EAC9B,aAAa,EAAE,aAAa,GAC3B,IAAI,CAkCN"}

package/dist/http/http-export-download-routes.js

@@ -0,0 +1,35 @@
+import { verifyExportDownloadCapability } from '../services/export-download-capability.js';
+import { streamSkillZipHttpResponse } from './export-skill-zip-http.js';
+import { structuredLogger } from '../utils/structured-logger.js';
+import { runWithSpaceContextAsync } from '../utils/tenant-context.js';
+export function setupExportDownloadRoutes(app, memoryStore, qdrantService) {
+    app.get('/export/skill-zip/:opaque', async (req, res) => {
+        const opaque = req.params['opaque'] ?? '';
+        const record = await verifyExportDownloadCapability(opaque);
+        if (!record) {
+            res.status(403).json({
+                error: 'EXPORT_DOWNLOAD_FORBIDDEN',
+                message: 'Export download link is invalid or expired.'
+            });
+            return;
+        }
+        try {
+            structuredLogger.info({
+                event: 'export_download_request',
+                id: record.id,
+                adapter_count: record.adapter_uris.length
+            }, 'GET /export/skill-zip');
+            await runWithSpaceContextAsync(record.space_context, () => streamSkillZipHttpResponse(res, memoryStore, qdrantService, record.adapter_uris));
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            structuredLogger.error('export download failed', error);
+            if (res.headersSent) {
+                res.end();
+                return;
+            }
+            res.status(500).json({ error: 'EXPORT_DOWNLOAD_FAILED', message });
+        }
+    });
+}
+//# sourceMappingURL=http-export-download-routes.js.map

package/dist/http/http-export-download-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-export-download-routes.js","sourceRoot":"","sources":["../../src/http/http-export-download-routes.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,MAAM,UAAU,yBAAyB,CACvC,GAAoB,EACpB,WAA8B,EAC9B,aAA4B;IAE5B,GAAG,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,2BAA2B;gBAClC,OAAO,EAAE,6CAA6C;aACvD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,gBAAgB,CAAC,IAAI,CACnB;gBACE,KAAK,EAAE,yBAAyB;gBAChC,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM;aAC1C,EACD,uBAAuB,CACxB,CAAC;YACF,MAAM,wBAAwB,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,EAAE,CACxD,0BAA0B,CAAC,GAAG,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC,CACjF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,gBAAgB,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;YACxD,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACpB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,OAAO,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/http/http-health-routes.d.ts

@@ -0,0 +1,9 @@
+import express from 'express';
+import { MemoryQdrantStore } from '../services/memory/store.js';
+/**
+ * Set up health check and basic info routes
+ * @param app Express application instance
+ * @param memoryStore Memory store instance for health checks
+ */
+export declare function setupHealthRoutes(app: express.Express, memoryStore: MemoryQdrantStore): void;
+//# sourceMappingURL=http-health-routes.d.ts.map

package/dist/http/http-health-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-health-routes.d.ts","sourceRoot":"","sources":["../../src/http/http-health-routes.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAMhE;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,iBAAiB,QAsGrF"}

package/dist/http/http-health-routes.js

@@ -0,0 +1,106 @@
+import { embeddingService } from '../services/embedding/service.js';
+import { keyValueStore } from '../services/key-value-store-factory.js';
+import { getBuildVersion } from '../utils/build-version.js';
+import { AUTH_ENABLED, REDIS_URL } from '../config.js';
+/**
+ * Set up health check and basic info routes
+ * @param app Express application instance
+ * @param memoryStore Memory store instance for health checks
+ */
+export function setupHealthRoutes(app, memoryStore) {
+    // Health check endpoint (non-MCP)
+    app.get('/health', async (req, res) => {
+        // Configured dependencies are critical for readiness. If the process declares a backend,
+        // /health must fail when that backend is unreachable or unauthenticated.
+        const qdrantHealthy = await memoryStore.checkHealth().catch(() => false);
+        const redisConfigured = REDIS_URL.length > 0;
+        const redisHealthy = keyValueStore.isConnected();
+        let teiHealth = { healthy: false, message: 'Embedding provider not configured' };
+        // Run embedding health check but bound it with a short timeout so /health is responsive
+        try {
+            const teiCheck = (async () => {
+                if (typeof embeddingService.teiHealthCheck === 'function') {
+                    return await embeddingService.teiHealthCheck().catch(() => ({ healthy: false, message: 'TEI check failed' }));
+                }
+                else {
+                    return await embeddingService.healthCheck().catch(() => ({ healthy: false, message: 'Embedding health check failed' }));
+                }
+            })();
+            // Timeout after 2000ms to avoid blocking during test setup
+            let timeoutId;
+            const timeout = new Promise(resolve => {
+                timeoutId = setTimeout(() => resolve({ healthy: false, message: 'Embedding health check timed out' }), 2000);
+            });
+            teiHealth = (await Promise.race([teiCheck, timeout]));
+            if (timeoutId) {
+                clearTimeout(timeoutId);
+            }
+        }
+        catch {
+            teiHealth = { healthy: false, message: 'Embedding health check failed' };
+        }
+        const teiHealthy = !!teiHealth.healthy;
+        const embeddingCfg = embeddingService.getConfig ? embeddingService.getConfig() : { provider: 'unknown' };
+        const embeddingConfigured = embeddingCfg.provider && embeddingCfg.provider !== 'none';
+        const criticalHealthy = qdrantHealthy &&
+            (!redisConfigured || redisHealthy) &&
+            (!embeddingConfigured || teiHealthy);
+        const healthStatus = criticalHealthy ? 'healthy' : 'unhealthy';
+        const statusCode = criticalHealthy ? 200 : 503;
+        const buildVersion = getBuildVersion();
+        const uptime = Math.floor(process.uptime());
+        const dependencies = {
+            qdrant: qdrantHealthy ? 'healthy' : 'unhealthy',
+            embedding: embeddingConfigured
+                ? (teiHealthy ? 'healthy' : 'unhealthy')
+                : 'disabled'
+        };
+        if (redisConfigured) {
+            dependencies['redis'] = redisHealthy ? 'healthy' : 'unhealthy';
+        }
+        else {
+            dependencies['cache'] = 'healthy (memory)';
+        }
+        const details = {
+            cacheBackend: redisConfigured ? 'redis' : 'memory'
+        };
+        if (req.auth?.sub) {
+            details['embedding'] = teiHealth.message;
+            details['provider'] = embeddingCfg.provider || 'auto';
+            details['providerPref'] = embeddingCfg.providerPref || 'auto';
+        }
+        res.status(statusCode).json({
+            status: healthStatus,
+            service: 'squadrules-mcp',
+            version: buildVersion,
+            transport: 'http',
+            uptime: uptime,
+            dependencies,
+            details
+        });
+    });
+    // GET / is handled by setupUiStatic: redirect to /ui
+    // API root (when AUTH_ENABLED, only reached when authenticated)
+    app.get('/api', (req, res) => {
+        const body = {
+            service: 'SquadRules API',
+            version: getBuildVersion(),
+            endpoints: {
+                activate: 'POST /api/activate',
+                forward: 'POST /api/forward',
+                reward: 'POST /api/reward',
+                train: 'POST /api/train (JSON) or POST /api/train/raw (markdown body)',
+                tune: 'POST /api/tune',
+                delete: 'POST /api/delete',
+                export: 'POST /api/export',
+                spaces: 'POST /api/spaces'
+            }
+        };
+        if (AUTH_ENABLED) {
+            body['auth_required'] = true;
+            body['note'] = 'These endpoints require a valid session or Bearer token. Unauthenticated requests receive 401 with login_url.';
+        }
+        res.json(body);
+    });
+}
+//# sourceMappingURL=http-health-routes.js.map

package/dist/http/http-health-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-health-routes.js","sourceRoot":"","sources":["../../src/http/http-health-routes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEvD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAoB,EAAE,WAA8B;IAClF,kCAAkC;IAClC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClC,yFAAyF;QACzF,yEAAyE;QACzE,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACzE,MAAM,eAAe,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QAC7C,MAAM,YAAY,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;QACjD,IAAI,SAAS,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mCAA6C,EAAE,CAAC;QAE3F,wFAAwF;QACxF,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;gBACzB,IAAI,OAAQ,gBAAwB,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;oBACjE,OAAO,MAAO,gBAAwB,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;gBAC3H,CAAC;qBAAM,CAAC;oBACJ,OAAO,MAAM,gBAAgB,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC,CAAC;gBAC5H,CAAC;YACL,CAAC,CAAC,EAAE,CAAC;YAEL,2DAA2D;YAC3D,IAAI,SAAqC,CAAC;YAC1C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;gBAClC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;YACjH,CAAC,CAAC,CAAC;YACH,SAAS,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAA0C,CAAC;YAC/F,IAAI,SAAS,EAAE,CAAC;gBACZ,YAAY,CAAC,SAAS,CAAC,CAAC;YAC5B,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,SAAS,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;QAC7E,CAAC;QAED,MAAM,UAAU,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC;QACvC,MAAM,YAAY,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC,CAAE,EAAE,QAAQ,EAAE,SAAS,EAAU,CAAC;QAClH,MAAM,mBAAmB,GAAG,YAAY,CAAC,QAAQ,IAAI,YAAY,CAAC,QAAQ,KAAK,MAAM,CAAC;QACtF,MAAM,eAAe,GACjB,aAAa;YACb,CAAC,CAAC,eAAe,IAAI,YAAY,CAAC;YAClC,CAAC,CAAC,mBAAmB,IAAI,UAAU,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;QAC/D,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAE/C,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAE5C,MAAM,YAAY,GAA2B;YACzC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;YAC/C,SAAS,EAAE,mBAAmB;gBAC1B,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;gBACxC,CAAC,CAAC,UAAU;SACnB,CAAC;QACF,IAAI,eAAe,EAAE,CAAC;YAClB,YAAY,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;QACnE,CAAC;aAAM,CAAC;YACJ,YAAY,CAAC,OAAO,CAAC,GAAG,kBAAkB,CAAC;QAC/C,CAAC;QAED,MAAM,OAAO,GAA2B;YACpC,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;SACrD,CAAC;QACF,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;YAChB,OAAO,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACzC,OAAO,CAAC,UAAU,CAAC,GAAG,YAAY,CAAC,QAAQ,IAAI,MAAM,CAAC;YACtD,OAAO,CAAC,cAAc,CAAC,GAAI,YAAoB,CAAC,YAAY,IAAI,MAAM,CAAC;QAC3E,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;YACxB,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,gBAAgB;YACzB,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE,MAAM;YACjB,MAAM,EAAE,MAAM;YACd,YAAY;YACZ,OAAO;SACV,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,qDAAqD;IAErD,gEAAgE;IAChE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACzB,MAAM,IAAI,GAA4B;YAClC,OAAO,EAAE,gBAAgB;YACzB,OAAO,EAAE,eAAe,EAAE;YAC1B,SAAS,EAAE;gBACP,QAAQ,EAAE,oBAAoB;gBAC9B,OAAO,EAAE,mBAAmB;gBAC5B,MAAM,EAAE,kBAAkB;gBAC1B,KAAK,EAAE,+DAA+D;gBACtE,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,kBAAkB;gBAC1B,MAAM,EAAE,kBAAkB;gBAC1B,MAAM,EAAE,kBAAkB;aAC7B;SACJ,CAAC;QACF,IAAI,YAAY,EAAE,CAAC;YACf,IAAI,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,+GAA+G,CAAC;QACnI,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/http/http-mcp-cors.d.ts

@@ -0,0 +1,3 @@
+import type { Express } from 'express';
+export declare function setupMcpCorsRoutes(app: Express): void;
+//# sourceMappingURL=http-mcp-cors.d.ts.map

package/dist/http/http-mcp-cors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-mcp-cors.d.ts","sourceRoot":"","sources":["../../src/http/http-mcp-cors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAyBrD"}

package/dist/http/http-mcp-cors.js

@@ -0,0 +1,27 @@
+export function setupMcpCorsRoutes(app) {
+    app.use('/mcp', (req, res, next) => {
+        const origin = req.headers.origin;
+        if (origin) {
+            res.set('Access-Control-Allow-Origin', origin);
+            res.set('Vary', 'Origin');
+            res.set('Access-Control-Expose-Headers', 'WWW-Authenticate');
+        }
+        next();
+    });
+    app.options('/mcp', (req, res) => {
+        const origin = req.headers.origin;
+        if (origin) {
+            res.set('Access-Control-Allow-Origin', origin);
+            res.set('Vary', 'Origin');
+            res.set('Access-Control-Expose-Headers', 'WWW-Authenticate');
+        }
+        else {
+            res.set('Access-Control-Allow-Origin', '*');
+        }
+        res.set('Access-Control-Allow-Methods', 'POST, OPTIONS');
+        res.set('Access-Control-Allow-Headers', 'Content-Type, Authorization, MCP-Protocol-Version');
+        res.set('Access-Control-Max-Age', '86400');
+        res.status(204).end();
+    });
+}
+//# sourceMappingURL=http-mcp-cors.js.map

package/dist/http/http-mcp-cors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-mcp-cors.js","sourceRoot":"","sources":["../../src/http/http-mcp-cors.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACjC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;YAC/C,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC1B,GAAG,CAAC,GAAG,CAAC,+BAA+B,EAAE,kBAAkB,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;YAC/C,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC1B,GAAG,CAAC,GAAG,CAAC,+BAA+B,EAAE,kBAAkB,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,8BAA8B,EAAE,eAAe,CAAC,CAAC;QACzD,GAAG,CAAC,GAAG,CAAC,8BAA8B,EAAE,mDAAmD,CAAC,CAAC;QAC7F,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;QAC3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/http/http-mcp-handler.d.ts

@@ -0,0 +1,19 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+import express from 'express';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import type { MemoryQdrantStore } from '../services/memory/store.js';
+export interface McpRequestContext {
+    req: express.Request;
+    transport: StreamableHTTPServerTransport;
+}
+export declare const mcpRequestStore: AsyncLocalStorage<McpRequestContext>;
+/**
+ * Set up MCP endpoint handling.
+ * Uses a new MCP server instance per request so many requests can be handled
+ * concurrently on each node (no single-transport limit).
+ *
+ * @param app Express application instance
+ * @param memoryStore Store used to create per-request MCP servers
+ */
+export declare function setupMcpRoutes(app: express.Express, memoryStore: MemoryQdrantStore): void;
+//# sourceMappingURL=http-mcp-handler.d.ts.map

package/dist/http/http-mcp-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-mcp-handler.d.ts","sourceRoot":"","sources":["../../src/http/http-mcp-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAenG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAMrE,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC;IACrB,SAAS,EAAE,6BAA6B,CAAC;CAC1C;AAED,eAAO,MAAM,eAAe,sCAA6C,CAAC;AA8E1E;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,iBAAiB,QAyOlF"}