@winspan/claude-forge 8.41.0 → 8.51.0

package/dist/web/routes/stats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stats.js","sourceRoot":"","sources":["../../../src/web/routes/stats.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAgB,EAAE,GAAiB;IACrE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IAExB,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAClC,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QAC7C,MAAM,aAAa,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAEjD,mCAAmC;QACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,SAAS,GAA2B,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QACnC,CAAC;QAED,+BAA+B;QAC/B,6CAA6C;QAC7C,+BAA+B;QAC/B,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAClF,MAAM,SAAS,GAAG,OAAO,CAAC,yBAAyB,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAC7E,MAAM,gBAAgB,GAAG,OAAO,CAAC,2BAA2B,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAEtF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzE,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,UAAU,EAAE,CAAC,CAAC,KAAK;YACnB,YAAY,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;SAC1C,CAAC,CAAC,CAAC;QAEJ,yBAAyB;QACzB,MAAM,UAAU,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC;QAEtD,GAAG,CAAC,IAAI,CAAC;YACP,aAAa;YACb,WAAW;YACX,SAAS;YACT,aAAa;YACb,gBAAgB,EAAE,UAAU;SAC7B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/web/routes/status.js

@@ -19,7 +19,7 @@ export function registerStatusRoutes(app, ctx) {
             pid: process.pid,
             uptime: process.uptime(),
             memory: process.memoryUsage(),
-            eventCount: storage.countEvents({}),
+            eventCount: storage.countEvents(),
         });
     });
 }

package/dist/web/routes/status.js.map

@@ -1 +1 @@
-{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../src/web/routes/status.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAgB,EAAE,GAAiB;IACtE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IAExB,mEAAmE;IACnE,wEAAwE;IACxE,sEAAsE;IACtE,2DAA2D;IAC3D,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC/C,GAAG,CAAC,IAAI,CAAC;YACP,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,+DAA+D;SACxE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,2BAA2B;IAC3B,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACnC,GAAG,CAAC,IAAI,CAAC;YACP,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;YACxB,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE;YAC7B,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;SACpC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../src/web/routes/status.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAgB,EAAE,GAAiB;IACtE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IAExB,mEAAmE;IACnE,wEAAwE;IACxE,sEAAsE;IACtE,2DAA2D;IAC3D,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC/C,GAAG,CAAC,IAAI,CAAC;YACP,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,+DAA+D;SACxE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,2BAA2B;IAC3B,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACnC,GAAG,CAAC,IAAI,CAAC;YACP,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;YACxB,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE;YAC7B,UAAU,EAAE,OAAO,CAAC,WAAW,EAAE;SAClC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/web/routes/tasks.d.ts

@@ -0,0 +1,4 @@
+import type { Application } from 'express';
+import type { RouteContext } from './types.js';
+export declare function registerTasksRoutes(app: Application, ctx: RouteContext): void;
+//# sourceMappingURL=tasks.d.ts.map

package/dist/web/routes/tasks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tasks.d.ts","sourceRoot":"","sources":["../../../src/web/routes/tasks.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAwB/C,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,GAAG,IAAI,CAsK7E"}

package/dist/web/routes/tasks.js

@@ -0,0 +1,156 @@
+import { z } from 'zod';
+import { truncateField } from './_helpers.js';
+import { getFilePath, getUserPrompt } from '../../core/event-fields.js';
+/**
+ * /api/tasks — Task execution view.
+ *
+ * Provides a complete view of a task's execution process:
+ *   - GET /api/tasks          — list + filter + paginate tasks
+ *   - GET /api/tasks/projects — distinct project paths that have tasks
+ *   - GET /api/tasks/:taskId  — full execution detail for a single task
+ */
+const TaskListQuery = z.object({
+    limit: z.coerce.number().int().min(1).default(50).transform(v => Math.min(v, 200)),
+    offset: z.coerce.number().int().min(0).default(0),
+    /** multi-value: ?project=/a&project=/b  OR  ?project=/a */
+    project: z.union([z.string(), z.array(z.string())]).optional(),
+    from: z.string().optional(),
+    to: z.string().optional(),
+    search: z.string().max(100).optional(),
+    session: z.string().optional(),
+});
+export function registerTasksRoutes(app, ctx) {
+    const { storage } = ctx;
+    // ── GET /api/tasks/projects — distinct project paths ──────────────────────
+    // Must be registered BEFORE /:taskId to avoid 'projects' being treated as an id.
+    app.get('/api/tasks/projects', (_req, res) => {
+        const projects = storage.queryTaskProjects();
+        res.json(projects);
+    });
+    // ── GET /api/tasks — paginated + filtered list ─────────────────────────────
+    app.get('/api/tasks', (req, res) => {
+        const parsed = TaskListQuery.safeParse(req.query);
+        if (!parsed.success) {
+            res.status(400).json({ error: 'Invalid query parameters', details: parsed.error.flatten() });
+            return;
+        }
+        const { limit, offset, project, from, to, search, session } = parsed.data;
+        const result = storage.queryTasksFiltered({
+            limit,
+            offset,
+            project,
+            from,
+            to,
+            search,
+            session_id: session,
+        });
+        res.json(result);
+    });
+    // ── GET /api/tasks/:taskId — full execution detail ─────────────────────────
+    app.get('/api/tasks/:taskId', (req, res) => {
+        const taskId = req.params.taskId;
+        // H1: PK direct fetch (was: queryTasks({limit:5000}).find)
+        const task = storage.getTask(taskId);
+        if (!task) {
+            res.status(404).json({ error: 'Task not found' });
+            return;
+        }
+        // H1: JOIN task_events (was: queryEvents({limit:5000}) + Set.has filter)
+        const taskEvents = storage.queryEventsByTaskId(taskId, { limit: 5000 });
+        // ── Injections ──────────────────────────────────────────────────────
+        // H1: JOIN task_events (was: queryInjections({limit:500}) + Set.has filter)
+        const allInjections = storage.queryInjectionsByTaskId(taskId);
+        const injections = allInjections
+            .map(inj => ({
+            id: inj.id,
+            timestamp: inj.timestamp,
+            source_handler: inj.source_handler,
+            injection_type: inj.injection_type,
+            content: inj.content.slice(0, 1000),
+            content_length: inj.content.length,
+            truncated: inj.content.length > 1000,
+        }));
+        // ── Timeline ────────────────────────────────────────────────────────
+        const timeline = taskEvents
+            .filter(e => e.tool_name && (e.hook_type === 'PreToolUse' || e.hook_type === 'PostToolUse'))
+            .reduce((acc, e) => {
+            // Deduplicate: only keep PreToolUse entries (PostToolUse is supplementary)
+            if (e.hook_type === 'PostToolUse') {
+                // Attach output to the matching PreToolUse entry if exists
+                const pre = acc.find(a => a.tool_name === e.tool_name && !a.output && a.timestamp <= e.timestamp);
+                if (pre) {
+                    pre.output = truncateField(e.tool_output);
+                }
+                return acc;
+            }
+            const toolInput = e.tool_input ?? null;
+            const isAgentCall = e.tool_name === 'Agent' || e.tool_name === 'Task';
+            const entry = {
+                timestamp: e.timestamp,
+                tool_name: e.tool_name,
+                hook_type: e.hook_type,
+                input: truncateField(toolInput),
+                output: truncateField(e.tool_output),
+                is_agent_call: isAgentCall,
+            };
+            if (isAgentCall && toolInput) {
+                entry.agent_detail = {
+                    subagent_type: typeof toolInput.subagent_type === 'string' ? toolInput.subagent_type : undefined,
+                    name: typeof toolInput.name === 'string' ? toolInput.name : undefined,
+                    prompt: typeof toolInput.prompt === 'string'
+                        ? toolInput.prompt
+                        : undefined,
+                };
+            }
+            acc.push(entry);
+            return acc;
+        }, []);
+        // ── Skill Invocations ───────────────────────────────────────────────
+        // H1: SQL window filter (was: querySkillInvocations({limit:200}) + JS time filter)
+        const allSkillInvocations = storage.querySkillInvocationsByTaskWindow(taskId);
+        const skillInvocations = allSkillInvocations
+            .map(si => ({
+            id: si.id,
+            skill_id: si.skill_id,
+            agent_id: si.agent_id,
+            invocation_type: si.invocation_type,
+            reason: si.reason,
+            workflow: si.workflow,
+            phase: si.phase,
+            feature_slug: si.feature_slug,
+            success: si.success === 1,
+            error: si.error,
+            timestamp: si.timestamp,
+        }));
+        // ── Artifacts ───────────────────────────────────────────────────────
+        const artifacts = [...new Set(taskEvents
+                .filter(e => (e.tool_name === 'Edit' || e.tool_name === 'Write') &&
+                getFilePath(e))
+                .map(e => getFilePath(e)))];
+        // ── User Prompts ────────────────────────────────────────────────────
+        const userPrompts = taskEvents
+            .filter(e => e.hook_type === 'UserPromptSubmit' && getUserPrompt(e))
+            .map(e => ({
+            timestamp: e.timestamp,
+            content: getUserPrompt(e),
+        }));
+        res.json({
+            task: {
+                id: task.id,
+                session_id: task.session_id,
+                title: task.title,
+                description: task.description,
+                start_time: task.start_time,
+                end_time: task.end_time,
+                status: task.status,
+                event_count: task.event_count,
+            },
+            userPrompts,
+            injections,
+            timeline,
+            skillInvocations,
+            artifacts,
+        });
+    });
+}
+//# sourceMappingURL=tasks.js.map

package/dist/web/routes/tasks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tasks.js","sourceRoot":"","sources":["../../../src/web/routes/tasks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAExE;;;;;;;GAOG;AAEH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,KAAK,EAAI,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpF,MAAM,EAAG,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,2DAA2D;IAC3D,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9D,IAAI,EAAK,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,EAAE,EAAO,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,MAAM,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH,MAAM,UAAU,mBAAmB,CAAC,GAAgB,EAAE,GAAiB;IACrE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IAExB,6EAA6E;IAC7E,iFAAiF;IACjF,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC7C,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC7F,OAAO;QACT,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QAE1E,MAAM,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;YACxC,KAAK;YACL,MAAM;YACN,OAAO;YACP,IAAI;YACJ,EAAE;YACF,MAAM;YACN,UAAU,EAAE,OAAO;SACpB,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACzC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;QAEjC,2DAA2D;QAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,yEAAyE;QACzE,MAAM,UAAU,GAAG,OAAO,CAAC,mBAAmB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAExE,uEAAuE;QACvE,4EAA4E;QAC5E,MAAM,aAAa,GAAG,OAAO,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,aAAa;aAC7B,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACX,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;YACnC,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;YAClC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI;SACrC,CAAC,CAAC,CAAC;QAEN,uEAAuE;QACvE,MAAM,QAAQ,GAAG,UAAU;aACxB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,YAAY,IAAI,CAAC,CAAC,SAAS,KAAK,aAAa,CAAC,CAAC;aAC3F,MAAM,CAQH,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YACb,2EAA2E;YAC3E,IAAI,CAAC,CAAC,SAAS,KAAK,aAAa,EAAE,CAAC;gBAClC,2DAA2D;gBAC3D,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAClB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,CAC5E,CAAC;gBACF,IAAI,GAAG,EAAE,CAAC;oBACR,GAAG,CAAC,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;gBAC5C,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC;YAED,MAAM,SAAS,GAAG,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC;YACvC,MAAM,WAAW,GAAG,CAAC,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC;YAEtE,MAAM,KAAK,GAAyB;gBAClC,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,SAAS,EAAE,CAAC,CAAC,SAAU;gBACvB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC;gBAC/B,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;gBACpC,aAAa,EAAE,WAAW;aAC3B,CAAC;YAEF,IAAI,WAAW,IAAI,SAAS,EAAE,CAAC;gBAC7B,KAAK,CAAC,YAAY,GAAG;oBACnB,aAAa,EAAE,OAAO,SAAS,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;oBAChG,IAAI,EAAE,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;oBACrE,MAAM,EAAE,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ;wBAC1C,CAAC,CAAC,SAAS,CAAC,MAAM;wBAClB,CAAC,CAAC,SAAS;iBACd,CAAC;YACJ,CAAC;YAED,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChB,OAAO,GAAG,CAAC;QACb,CAAC,EAAE,EAAE,CAAC,CAAC;QAET,uEAAuE;QACvE,mFAAmF;QACnF,MAAM,mBAAmB,GAAG,OAAO,CAAC,iCAAiC,CAAC,MAAM,CAAC,CAAC;QAE9E,MAAM,gBAAgB,GAAG,mBAAmB;aACzC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACV,EAAE,EAAE,EAAE,CAAC,EAAE;YACT,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,eAAe,EAAE,EAAE,CAAC,eAAe;YACnC,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,YAAY,EAAE,EAAE,CAAC,YAAY;YAC7B,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC;YACzB,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,SAAS,EAAE,EAAE,CAAC,SAAS;SACxB,CAAC,CAAC,CAAC;QAEN,uEAAuE;QACvE,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAC3B,UAAU;iBACP,MAAM,CAAC,CAAC,CAAC,EAAE,CACV,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC;gBACnD,WAAW,CAAC,CAAC,CAAC,CACf;iBACA,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,CAC7B,CAAC,CAAC;QAEH,uEAAuE;QACvE,MAAM,WAAW,GAAG,UAAU;aAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,kBAAkB,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;aACnE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACT,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;SAC1B,CAAC,CAAC,CAAC;QAEN,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE;gBACJ,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B;YACD,WAAW;YACX,UAAU;YACV,QAAQ;YACR,gBAAgB;YAChB,SAAS;SACV,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/web/routes/trace.d.ts

@@ -0,0 +1,10 @@
+/**
+ * /api/trace/:commit — Trace a git commit to its forge session(s).
+ *
+ * Reads git notes from the project directory to find associated session IDs,
+ * then queries storage for session details.
+ */
+import type { Application } from 'express';
+import type { RouteContext } from './types.js';
+export declare function registerTraceRoutes(app: Application, ctx: RouteContext): void;
+//# sourceMappingURL=trace.d.ts.map

package/dist/web/routes/trace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace.d.ts","sourceRoot":"","sources":["../../../src/web/routes/trace.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAI3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,GAAG,IAAI,CAgH7E"}

package/dist/web/routes/trace.js

@@ -0,0 +1,113 @@
+/**
+ * /api/trace/:commit — Trace a git commit to its forge session(s).
+ *
+ * Reads git notes from the project directory to find associated session IDs,
+ * then queries storage for session details.
+ */
+import { execFileSync } from 'node:child_process';
+import fs from 'node:fs';
+import path from 'node:path';
+export function registerTraceRoutes(app, ctx) {
+    const { storage } = ctx;
+    app.get('/api/trace/:commit', (req, res) => {
+        const commitRef = req.params.commit;
+        const projectPath = req.query.project;
+        if (!projectPath) {
+            res.status(400).json({ error: 'Query parameter "project" is required' });
+            return;
+        }
+        // Security: validate projectPath to prevent command injection
+        // 1. Must be an absolute path
+        if (!path.isAbsolute(projectPath)) {
+            res.status(400).json({ error: 'Project path must be absolute' });
+            return;
+        }
+        // 2. Must exist and be a directory
+        try {
+            const stats = fs.statSync(projectPath);
+            if (!stats.isDirectory()) {
+                res.status(400).json({ error: 'Project path must be a directory' });
+                return;
+            }
+        }
+        catch {
+            res.status(400).json({ error: 'Project path does not exist' });
+            return;
+        }
+        // 3. Must contain a .git directory
+        const gitDir = path.join(projectPath, '.git');
+        if (!fs.existsSync(gitDir)) {
+            res.status(400).json({ error: 'Project path is not a git repository' });
+            return;
+        }
+        // 1. Resolve commit hash
+        let commitHash;
+        let commitMessage;
+        try {
+            commitHash = execFileSync('git', ['rev-parse', commitRef], {
+                cwd: projectPath, stdio: 'pipe', timeout: 5000,
+            }).toString().trim();
+        }
+        catch {
+            res.status(404).json({ error: `Cannot resolve commit "${commitRef}"` });
+            return;
+        }
+        try {
+            commitMessage = execFileSync('git', ['log', '-1', '--format=%s', commitHash], {
+                cwd: projectPath, stdio: 'pipe', timeout: 5000,
+            }).toString().trim();
+        }
+        catch {
+            commitMessage = '';
+        }
+        // 2. Read git notes
+        let noteContent;
+        try {
+            noteContent = execFileSync('git', ['notes', 'show', commitHash], {
+                cwd: projectPath, stdio: 'pipe', timeout: 5000,
+            }).toString().trim();
+        }
+        catch {
+            res.json({ commit: commitHash, message: commitMessage, sessions: [] });
+            return;
+        }
+        // 3. Parse session IDs
+        const sessionIds = noteContent
+            .split('\n')
+            .filter(line => line.startsWith('forge-session:'))
+            .map(line => line.replace('forge-session:', '').trim());
+        if (sessionIds.length === 0) {
+            res.json({ commit: commitHash, message: commitMessage, sessions: [] });
+            return;
+        }
+        // 4. Query session details
+        // H2 Phase 3: 改用 facade 聚合方法，消除 db.prepare 直写。
+        const allSessions = storage.querySessions({ limit: 5000 });
+        const sessionDetails = sessionIds.map(sid => {
+            const session = allSessions.find(s => s.session_id === sid || s.session_id.startsWith(sid));
+            if (!session)
+                return { session_id: sid, found: false };
+            const fullId = session.session_id;
+            const start = new Date(session.start_time);
+            const end = new Date(session.end_time);
+            const durationMin = Math.round((end.getTime() - start.getTime()) / 60000);
+            const eventBreakdown = storage.aggregateHookTypeBySession(fullId);
+            const agentRows = storage.aggregateAgentTypeBySession(fullId);
+            const skillIds = storage.queryDistinctSkillIdsBySession(fullId);
+            return {
+                session_id: fullId,
+                found: true,
+                first_prompt: session.first_prompt,
+                start_time: session.start_time,
+                end_time: session.end_time,
+                duration_min: durationMin,
+                event_count: session.event_count,
+                event_breakdown: Object.fromEntries(eventBreakdown.map(r => [r.hook_type, r.count])),
+                agent_calls: agentRows.filter(r => r.agent_type).map(r => ({ type: r.agent_type, count: r.count })),
+                skills: skillIds,
+            };
+        });
+        res.json({ commit: commitHash, message: commitMessage, sessions: sessionDetails });
+    });
+}
+//# sourceMappingURL=trace.js.map

package/dist/web/routes/trace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace.js","sourceRoot":"","sources":["../../../src/web/routes/trace.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,MAAM,UAAU,mBAAmB,CAAC,GAAgB,EAAE,GAAiB;IACrE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IAExB,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACzC,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;QACpC,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,OAA6B,CAAC;QAE5D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,8DAA8D;QAC9D,8BAA8B;QAC9B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACjE,OAAO;QACT,CAAC;QAED,mCAAmC;QACnC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QAED,mCAAmC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;YACxE,OAAO;QACT,CAAC;QAED,yBAAyB;QACzB,IAAI,UAAkB,CAAC;QACvB,IAAI,aAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE;gBACzD,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI;aAC/C,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,SAAS,GAAG,EAAE,CAAC,CAAC;YACxE,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,aAAa,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,CAAC,EAAE;gBAC5E,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI;aAC/C,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,aAAa,GAAG,EAAE,CAAC;QACrB,CAAC;QAED,oBAAoB;QACpB,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,WAAW,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE;gBAC/D,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI;aAC/C,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QAED,uBAAuB;QACvB,MAAM,UAAU,GAAG,WAAW;aAC3B,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;aACjD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAE1D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QAED,2BAA2B;QAC3B,+CAA+C;QAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;YAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,GAAG,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5F,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAEvD,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;YAClC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACvC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC;YAE1E,MAAM,cAAc,GAAG,OAAO,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;YAClE,MAAM,SAAS,GAAG,OAAO,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC;YAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;YAEhE,OAAO;gBACL,UAAU,EAAE,MAAM;gBAClB,KAAK,EAAE,IAAI;gBACX,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,YAAY,EAAE,WAAW;gBACzB,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,eAAe,EAAE,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;gBACpF,WAAW,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACnG,MAAM,EAAE,QAAQ;aACjB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/web/routes/types.d.ts

@@ -1,34 +1,21 @@
 /**
  * Shared types & helpers for route modules.
- *
- * Each route module exports a `register(app, ctx)` function that attaches its
- * endpoints onto the Express app. The context carries all the service
- * dependencies the routes need — this keeps the modules decoupled from the
- * WebServer class while preserving behaviour.
  */
 import type { SQLiteStorage } from '../../core/storage/sqlite.js';
-import type { RuleEngine } from '../../engine/rule-engine.js';
-import type { AgentRouter } from '../../engine/agent-router.js';
-import type { AgentRegistry } from '../../agents/registry.js';
 import type { SkillRegistry } from '../../skills/registry.js';
 export interface RouteContext {
     storage: SQLiteStorage;
-    ruleEngine: RuleEngine;
-    router?: AgentRouter;
-    agents?: AgentRegistry;
     skillRegistry?: SkillRegistry;
 }
 /**
  * Resolve the concrete on-disk path + backup dir for a patchable target.
- * Shared by /api/patch/* and AI optimization flows.
  */
 export declare function resolvePatchTarget(targetType: string, targetName: string): {
     filePath: string;
     backupDir: string;
 };
 /**
- * Locate the static assets directory. Supports both dist/ and src/ layouts so
- * dev & prod builds both work without configuration.
+ * Locate the static assets directory.
  */
 export declare function resolveStaticDir(moduleUrl: string): string | null;
 //# sourceMappingURL=types.d.ts.map

package/dist/web/routes/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/web/routes/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE9D,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,aAAa,CAAC;IACvB,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAoBzC;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASjE"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/web/routes/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAG9D,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,aAAa,CAAC;IACvB,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAmBzC;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASjE"}

package/dist/web/routes/types.js

@@ -1,51 +1,43 @@
 /**
  * Shared types & helpers for route modules.
- *
- * Each route module exports a `register(app, ctx)` function that attaches its
- * endpoints onto the Express app. The context carries all the service
- * dependencies the routes need — this keeps the modules decoupled from the
- * WebServer class while preserving behaviour.
  */
 import path from 'path';
 import fs from 'fs';
 import { fileURLToPath } from 'url';
 import { homedir } from 'os';
+import { FORGE_PATHS } from '../../core/constants.js';
 /**
  * Resolve the concrete on-disk path + backup dir for a patchable target.
- * Shared by /api/patch/* and AI optimization flows.
  */
 export function resolvePatchTarget(targetType, targetName) {
-    if (targetType === 'agent') {
-        return {
-            filePath: path.join(homedir(), '.claude', 'agents', `${targetName}.md`),
-            backupDir: path.join(homedir(), '.claude-forge', 'backups', 'agents'),
-        };
+    // Security: prevent path traversal attacks
+    if (!targetName || targetName.includes('/') || targetName.includes('\\') || targetName.includes('..')) {
+        throw new Error('Invalid target name: path traversal detected');
     }
     if (targetType === 'skill') {
         return {
             filePath: path.join(homedir(), '.claude', 'skills', `${targetName}.md`),
-            backupDir: path.join(homedir(), '.claude-forge', 'backups', 'skills'),
+            backupDir: FORGE_PATHS.backups('skills'),
         };
     }
     if (targetType === 'routing_rule') {
         return {
-            filePath: path.join(homedir(), '.claude-forge', 'routing.yaml'),
-            backupDir: path.join(homedir(), '.claude-forge', 'backups', 'routing'),
+            filePath: FORGE_PATHS.routingYaml(),
+            backupDir: FORGE_PATHS.backups('routing'),
         };
     }
     throw new Error(`Unsupported targetType: ${targetType}`);
 }
 /**
- * Locate the static assets directory. Supports both dist/ and src/ layouts so
- * dev & prod builds both work without configuration.
+ * Locate the static assets directory.
  */
 export function resolveStaticDir(moduleUrl) {
     const dir = path.dirname(fileURLToPath(moduleUrl));
     const candidates = [
-        path.join(dir, '..', 'static'), // dist/web/static (from dist/web/routes/*.js)
-        path.join(dir, '../../../src/web/static'), // dev: src/web/static (from dist/web/routes/*.js)
-        path.join(dir, '../static'), // legacy: dist/web/static (from dist/web/*.js)
-        path.join(dir, '../../src/web/static'), // legacy dev
+        path.join(dir, '..', 'static'),
+        path.join(dir, '../../../src/web/static'),
+        path.join(dir, '../static'),
+        path.join(dir, '../../src/web/static'),
     ];
     return candidates.find(d => fs.existsSync(d)) ?? null;
 }

package/dist/web/routes/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/web/routes/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAe7B;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAAkB,EAClB,UAAkB;IAElB,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,UAAU,KAAK,CAAC;YACvE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC;SACtE,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,UAAU,KAAK,CAAC;YACvE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC;SACtE,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,KAAK,cAAc,EAAE,CAAC;QAClC,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,cAAc,CAAC;YAC/D,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,CAAC;SACvE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAe,8CAA8C;QAC3F,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,yBAAyB,CAAC,EAAI,kDAAkD;QAC/F,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAkB,+CAA+C;QAC5F,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,EAAO,aAAa;KAC3D,CAAC;IACF,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACxD,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/web/routes/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAG7B,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAOtD;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAAkB,EAClB,UAAkB;IAElB,2CAA2C;IAC3C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtG,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,UAAU,KAAK,CAAC;YACvE,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC;SACzC,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,KAAK,cAAc,EAAE,CAAC;QAClC,OAAO;YACL,QAAQ,EAAE,WAAW,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,yBAAyB,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC;KACvC,CAAC;IACF,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACxD,CAAC"}

package/dist/web/server.d.ts

@@ -2,22 +2,14 @@
  * Web API server — Express entry for the Forge dashboard.
  *
  * server.ts is intentionally thin: it wires middleware, composes the route
- * modules under src/web/routes/, and owns lifecycle (start/stop). Each route
- * module is responsible for its own domain; see src/web/routes/types.ts for
- * the shared RouteContext.
+ * modules under src/web/routes/, and owns lifecycle (start/stop).
  */
 import type { SQLiteStorage } from '../core/storage/sqlite.js';
-import type { RuleEngine } from '../engine/rule-engine.js';
-import type { AgentRouter } from '../engine/agent-router.js';
-import type { AgentRegistry } from '../agents/registry.js';
 import type { SkillRegistry } from '../skills/registry.js';
 import type { InvocationGuard } from '../skills/invocation-guard.js';
 export interface WebServerOptions {
     port: number;
     storage: SQLiteStorage;
-    ruleEngine: RuleEngine;
-    router?: AgentRouter;
-    agents?: AgentRegistry;
     skillRegistry?: SkillRegistry;
     invocationGuard?: InvocationGuard;
 }

package/dist/web/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/web/server.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAuBrE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,aAAa,CAAC;IACvB,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,qBAAa,SAAS;IAIR,OAAO,CAAC,OAAO;IAH3B,OAAO,CAAC,GAAG,CAAsB;IACjC,OAAO,CAAC,MAAM,CAA0D;gBAEpD,OAAO,EAAE,gBAAgB;IAM7C,OAAO,CAAC,WAAW;IAuDb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgBtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAO5B"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/web/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AA0BrE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,aAAa,CAAC;IACvB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,qBAAa,SAAS;IAIR,OAAO,CAAC,OAAO;IAH3B,OAAO,CAAC,GAAG,CAAsB;IACjC,OAAO,CAAC,MAAM,CAA0D;gBAEpD,OAAO,EAAE,gBAAgB;IAU7C,OAAO,CAAC,WAAW;IAqDb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgBtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAO5B"}

package/dist/web/server.js

@@ -2,30 +2,31 @@
  * Web API server — Express entry for the Forge dashboard.
  *
  * server.ts is intentionally thin: it wires middleware, composes the route
- * modules under src/web/routes/, and owns lifecycle (start/stop). Each route
- * module is responsible for its own domain; see src/web/routes/types.ts for
- * the shared RouteContext.
+ * modules under src/web/routes/, and owns lifecycle (start/stop).
  */
 import express from 'express';
 import { logger } from '../core/utils/logger.js';
 import { ErrorHandler } from '../core/utils/error-handler.js';
 import { requireAuth } from './auth-middleware.js';
 import { mountMcpServer } from '../mcp/server.js';
+import { errorHandler, notFoundHandler } from './routes/error-handler.js';
 import { registerAuthRoutes } from './routes/auth.js';
 import { registerStaticAssets, registerStaticFallback } from './routes/static.js';
 import { registerStatusRoutes } from './routes/status.js';
 import { registerEventsRoutes } from './routes/events.js';
 import { registerSessionsRoutes } from './routes/sessions.js';
-import { registerRulesRoutes } from './routes/rules.js';
-import { registerRoutingRoutes } from './routes/routing.js';
-import { registerExperimentsRoutes } from './routes/experiments.js';
 import { registerTokenUsageRoutes } from './routes/token-usage.js';
-import { registerExecutionTraceRoutes } from './routes/execution-trace.js';
 import { registerAIRoutes } from './routes/ai.js';
 import { registerPatchRoutes } from './routes/patch.js';
-import { registerAgentsRoutes } from './routes/agents.js';
 import { registerSkillsRoutes } from './routes/skills.js';
-import { registerWorkflowsRoutes } from './routes/workflows.js';
+import { registerTasksRoutes } from './routes/tasks.js';
+import { registerStatsRoutes } from './routes/stats.js';
+import { registerSkillStatsRoutes } from './routes/skill-stats.js';
+import { registerRulesRoutes } from './routes/rules.js';
+import { registerDriftRoutes } from './routes/drift.js';
+import { registerTraceRoutes } from './routes/trace.js';
+import { registerReportsRoutes } from './routes/reports.js';
+import { registerInsightsRoutes } from './routes/insights.js';
 export class WebServer {
     options;
     app;
@@ -33,12 +34,12 @@ export class WebServer {
     constructor(options) {
         this.options = options;
         this.app = express();
-        this.app.use(express.json());
+        // Security: limit request body size to prevent DoS attacks
+        this.app.use(express.json({ limit: '10mb' }));
+        this.app.use(express.urlencoded({ extended: true, limit: '10mb' }));
         this.setupRoutes();
     }
     setupRoutes() {
-        // Auth gate: write operations (non-GET) always require Bearer token.
-        // GET read endpoints stay open for polling & read-only dashboards.
         this.app.use('/api', (req, res, next) => {
             if (req.method === 'GET')
                 return next();
@@ -46,33 +47,29 @@ export class WebServer {
         });
         const ctx = {
             storage: this.options.storage,
-            ruleEngine: this.options.ruleEngine,
-            router: this.options.router,
-            agents: this.options.agents,
             skillRegistry: this.options.skillRegistry,
         };
-        // 1. Auth bootstrap (must be available before everything else)
+        // 1. Auth bootstrap
         registerAuthRoutes(this.app, ctx);
         // 2. Static assets (serves UI; fallback registered last)
         registerStaticAssets(this.app, ctx);
-        // 3. API routes, grouped by domain. Order within /api doesn't matter
-        //    because Express matches exact paths — but execution-trace preserves
-        //    the original (buggy) definition order intentionally.
+        // 3. API routes
         registerStatusRoutes(this.app, ctx);
         registerEventsRoutes(this.app, ctx);
         registerSessionsRoutes(this.app, ctx);
-        registerRulesRoutes(this.app, ctx);
-        registerRoutingRoutes(this.app, ctx);
-        registerExperimentsRoutes(this.app, ctx);
         registerTokenUsageRoutes(this.app, ctx);
-        registerExecutionTraceRoutes(this.app, ctx);
         registerAIRoutes(this.app, ctx);
         registerPatchRoutes(this.app, ctx);
-        registerAgentsRoutes(this.app, ctx);
         registerSkillsRoutes(this.app, ctx);
-        registerWorkflowsRoutes(this.app, ctx);
-        // 3b. MCP server — mounted on /mcp (Streamable HTTP). Exposes
-        //     skill_invoke / skill_list to Claude Code. Auth-gated via daemon token.
+        registerTasksRoutes(this.app, ctx);
+        registerStatsRoutes(this.app, ctx);
+        registerSkillStatsRoutes(this.app, ctx);
+        registerRulesRoutes(this.app, ctx);
+        registerDriftRoutes(this.app, ctx);
+        registerTraceRoutes(this.app, ctx);
+        registerReportsRoutes(this.app, ctx);
+        registerInsightsRoutes(this.app, ctx);
+        // 4. MCP server — mounted on /mcp (Streamable HTTP)
         if (this.options.skillRegistry) {
             mountMcpServer(this.app, {
                 skillRegistry: this.options.skillRegistry,
@@ -83,8 +80,11 @@ export class WebServer {
         else {
             logger.warn('[MCP] Skipped mounting: skillRegistry not provided');
         }
-        // 4. SPA catch-all — must be LAST so it can't shadow any API route.
+        // 5. SPA catch-all — must be LAST
         registerStaticFallback(this.app, ctx);
+        // 6. Error handlers — must be AFTER all routes
+        this.app.use(notFoundHandler);
+        this.app.use(errorHandler);
     }
     async start() {
         return new Promise((resolve, reject) => {

package/dist/web/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/web/server.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,OAAO,MAAM,SAAS,CAAC;AAO9B,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGlD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAYhE,MAAM,OAAO,SAAS;IAIA;IAHZ,GAAG,CAAsB;IACzB,MAAM,GAAqD,IAAI,CAAC;IAExE,YAAoB,OAAyB;QAAzB,YAAO,GAAP,OAAO,CAAkB;QAC3C,IAAI,CAAC,GAAG,GAAG,OAAO,EAAE,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAEO,WAAW;QACjB,qEAAqE;QACrE,mEAAmE;QACnE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACtC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;gBAAE,OAAO,IAAI,EAAE,CAAC;YACxC,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,MAAM,GAAG,GAAiB;YACxB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;YAC7B,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;YACnC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;SAC1C,CAAC;QAEF,+DAA+D;QAC/D,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAElC,yDAAyD;QACzD,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAEpC,qEAAqE;QACrE,yEAAyE;QACzE,0DAA0D;QAC1D,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,qBAAqB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACrC,yBAAyB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACzC,wBAAwB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxC,4BAA4B,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5C,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,uBAAuB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAEvC,8DAA8D;QAC9D,6EAA6E;QAC7E,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAC/B,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;gBACzC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;gBAC7B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;aACpC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACpE,CAAC;QAED,oEAAoE;QACpE,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE;gBACpD,MAAM,CAAC,IAAI,CAAC,gCAAgC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;gBACjE,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,KAAU,EAAE,EAAE;gBACtC,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAChC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;gBAC3C,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;gBAC3B,IAAI,CAAC,MAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/web/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,OAAO,MAAM,SAAS,CAAC;AAI9B,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAG1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAS9D,MAAM,OAAO,SAAS;IAIA;IAHZ,GAAG,CAAsB;IACzB,MAAM,GAAqD,IAAI,CAAC;IAExE,YAAoB,OAAyB;QAAzB,YAAO,GAAP,OAAO,CAAkB;QAC3C,IAAI,CAAC,GAAG,GAAG,OAAO,EAAE,CAAC;QAErB,2DAA2D;QAC3D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAEpE,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACtC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;gBAAE,OAAO,IAAI,EAAE,CAAC;YACxC,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,MAAM,GAAG,GAAiB;YACxB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;YAC7B,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;SAC1C,CAAC;QAEF,oBAAoB;QACpB,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAElC,yDAAyD;QACzD,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAEpC,gBAAgB;QAChB,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtC,wBAAwB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxC,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,wBAAwB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,qBAAqB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACrC,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAEtC,oDAAoD;QACpD,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAC/B,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvB,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;gBACzC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;gBAC7B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;aACpC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACpE,CAAC;QAED,kCAAkC;QAClC,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAEtC,+CAA+C;QAC/C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE;gBACpD,MAAM,CAAC,IAAI,CAAC,gCAAgC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;gBACjE,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,KAAU,EAAE,EAAE;gBACtC,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAChC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;gBAC3C,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;gBAC3B,IAAI,CAAC,MAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}