atabey-mcp 0.0.19 → 0.0.21

package/dist/atabey-mcp/src/mcp/routes/index.js

@@ -1,15 +1,18 @@
 import fs from "fs";
 import path from "path";
 import { SSEServerTransport } from "@modelcontextprotocol/sdk/server/sse.js";
-import { Storage } from "../../shared/storage.js";
-import { Audit } from "../../shared/audit.js";
-import { maskText } from "../../shared/pii.js";
 import { logger } from "../../shared/logger.js";
-function serveJson(res, statusCode, data) {
+import { handleCommonRoutes } from "./api-common.js";
+import { handleAgentsRoutes } from "./api-agents.js";
+import { handleOrchestratorRoutes } from "./api-orchestrator.js";
+import { handleGovernanceRoutes } from "./api-governance.js";
+import { handleWorkspaceRoutes } from "./api-workspace.js";
+import { handleConfigRoutes } from "./api-config.js";
+export function serveJson(res, statusCode, data) {
     res.writeHead(statusCode, { "Content-Type": "application/json" });
     res.end(JSON.stringify(data));
 }
-function serveFile(res, filePath, contentType) {
+export function serveFile(res, filePath, contentType) {
     if (fs.existsSync(filePath)) {
         try {
             const content = fs.readFileSync(filePath);
@@ -38,10 +41,9 @@ function parseUrl(url) {
     return { pathname, params };
 }
 export async function handleRequest(req, res, context) {
-    const { serverVersion, sessions, FRAMEWORK_DIR, PROJECT_ROOT, UI_DIST_PATH, server, broadcastWS, wsClients, HOST, PORT } = context;
+    const { serverVersion, sessions, UI_DIST_PATH, server, broadcastWS } = context;
     const url = req.url || "/";
     const { pathname, params } = parseUrl(url);
-    const method = req.method || "GET";
     // CORS
     res.setHeader("Access-Control-Allow-Origin", "*");
     res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
@@ -107,1440 +109,20 @@ export async function handleRequest(req, res, context) {
         return;
     }
     // ───────────── DASHBOARD API ROUTES (/api) ───────────
-    // Health
-    if (pathname === "/api/health") {
-        serveJson(res, 200, { status: "healthy", version: serverVersion, frameworkDir: FRAMEWORK_DIR });
-        return;
-    }
-    // Status
-    if (pathname === "/api/status") {
-        const statusPath = path.join(FRAMEWORK_DIR, "memory", "status.json");
-        if (fs.existsSync(statusPath)) {
-            serveFile(res, statusPath, "application/json");
+    if (isApiRoute) {
+        const method = req.method || "GET";
+        if (await handleCommonRoutes(pathname, params, method, req, res, context))
             return;
-        }
-        serveJson(res, 200, { success: true, data: { status: "initializing" } });
-        return;
-    }
-    // Memory (PROJECT_MEMORY.md)
-    if (pathname === "/api/memory") {
-        const memoryPath = path.join(FRAMEWORK_DIR, "memory", "PROJECT_MEMORY.md");
-        if (fs.existsSync(memoryPath)) {
-            serveFile(res, memoryPath, "text/markdown");
+        if (await handleAgentsRoutes(pathname, params, method, req, res, context))
             return;
-        }
-        serveJson(res, 200, { success: true, data: "No memory file yet." });
-        return;
-    }
-    // Memory Search
-    if (pathname === "/api/memory/search") {
-        try {
-            const query = params.q || "";
-            const limit = parseInt(params.limit || "10", 10);
-            if (!query) {
-                const db = Storage.getDB();
-                const rows = db.prepare("SELECT * FROM vector_memory ORDER BY created_at DESC LIMIT ?").all(limit);
-                const results = rows.map(row => {
-                    const meta = JSON.parse(row.metadata || "{}");
-                    return { id: row.id, content: maskText(row.content), type: row.category || meta.category || "memory", timestamp: meta.createdAt || row.created_at, relevance: 1.0 };
-                });
-                serveJson(res, 200, { success: true, data: results });
-                return;
-            }
-            const { CoreMemory } = await import("atabey/src/modules/memory/core.js");
-            const results = await CoreMemory.recall(query, { limit });
-            const flattened = results.map(r => ({
-                id: r.entry.id, content: maskText(r.entry.content), type: r.entry.metadata.category || "memory",
-                timestamp: r.entry.metadata.createdAt || new Date().toISOString(), relevance: r.score
-            }));
-            serveJson(res, 200, { success: true, data: flattened });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Agents
-    if (pathname === "/api/agents") {
-        try {
-            const agents = Storage.getAllAgents();
-            serveJson(res, 200, { success: true, data: agents });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // POST Create Agent
-    if (pathname === "/api/agents/create" && method === "POST") {
-        try {
-            let body = "";
-            req.on("data", chunk => { body += chunk.toString(); });
-            req.on("end", async () => {
-                try {
-                    const parsed = JSON.parse(body);
-                    const { name, description, skills } = parsed;
-                    if (!name) {
-                        serveJson(res, 400, { success: false, error: "name parameter is required" });
-                        return;
-                    }
-                    const { AtabeyStorage } = await import("../../shared/storage.js");
-                    AtabeyStorage.createAgent(name, description || "", skills || "[]");
-                    broadcastWS("agent_update", AtabeyStorage.getAllAgents());
-                    serveJson(res, 200, { success: true, message: `Agent ${name} created.` });
-                }
-                catch (err) {
-                    serveJson(res, 400, { success: false, error: err.message });
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // POST Delete Agent
-    if (pathname.startsWith("/api/agents/delete/") && method === "POST") {
-        const agentName = decodeURIComponent(pathname.replace("/api/agents/delete/", ""));
-        if (!agentName) {
-            serveJson(res, 400, { success: false, error: "Agent name required" });
+        if (await handleOrchestratorRoutes(pathname, params, method, req, res, context))
             return;
-        }
-        try {
-            const { AtabeyStorage } = await import("../../shared/storage.js");
-            const deleted = AtabeyStorage.deleteAgent(agentName);
-            if (deleted) {
-                broadcastWS("agent_update", AtabeyStorage.getAllAgents());
-                serveJson(res, 200, { success: true, message: `Agent ${agentName} deleted.` });
-            }
-            else {
-                serveJson(res, 404, { success: false, error: `Agent ${agentName} not found.` });
-            }
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // POST Update Agent Details
-    if (pathname === "/api/agents/update" && method === "POST") {
-        try {
-            let body = "";
-            req.on("data", chunk => { body += chunk.toString(); });
-            req.on("end", async () => {
-                try {
-                    const parsed = JSON.parse(body);
-                    const { name, description, state, task, skills } = parsed;
-                    if (!name) {
-                        serveJson(res, 400, { success: false, error: "name parameter is required" });
-                        return;
-                    }
-                    const { AtabeyStorage } = await import("../../shared/storage.js");
-                    AtabeyStorage.updateAgentDetails(name, description || "Otonom Uzman Ajan", state || "READY", task || "Idle", typeof skills === "string" ? skills : JSON.stringify(skills || []));
-                    broadcastWS("agent_update", AtabeyStorage.getAllAgents());
-                    serveJson(res, 200, { success: true, message: `Agent ${name} updated successfully.` });
-                }
-                catch (err) {
-                    serveJson(res, 400, { success: false, error: err.message });
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Messages (Hermes queue)
-    if (pathname === "/api/messages") {
-        try {
-            const messages = Storage.getPendingMessages();
-            serveJson(res, 200, { success: true, data: messages });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Hermes Stats
-    if (pathname === "/api/hermes/stats") {
-        try {
-            const messages = Storage.getPendingMessages();
-            const totalMessages = Storage.getDB().prepare("SELECT COUNT(*) as count FROM messages").get();
-            const byCategory = {};
-            const byStatus = {};
-            messages.forEach(m => {
-                byCategory[m.category] = (byCategory[m.category] || 0) + 1;
-                byStatus[m.status] = (byStatus[m.status] || 0) + 1;
-            });
-            serveJson(res, 200, {
-                success: true, data: {
-                    total: totalMessages.count, pending: messages.length, byCategory, byStatus,
-                    lastMessage: messages.length > 0 ? messages[messages.length - 1] : null,
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Tasks
-    if (pathname === "/api/tasks") {
-        try {
-            const { asTraceID } = await import("../../shared/types.js");
-            const traceId = params.traceId ? asTraceID(params.traceId) : undefined;
-            const tasks = Storage.getTasks(traceId);
-            const maskedTasks = tasks.map(t => ({
-                ...t,
-                description: maskText(t.description),
-            }));
-            serveJson(res, 200, { success: true, data: maskedTasks });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Logs
-    if (pathname.startsWith("/api/logs")) {
-        try {
-            const logs = Storage.getLogs();
-            const agent = pathname.split("/api/logs/")[1];
-            const filteredLogs = agent ? logs.filter(l => l.agent === agent) : logs;
-            serveJson(res, 200, { success: true, data: filteredLogs });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Approvals
-    if (pathname === "/api/approvals") {
-        try {
-            const allMessages = Storage.getPendingMessages();
-            const approvals = allMessages.filter(m => m.category === "ALERT" || m.category === "ACTION")
-                .map(m => ({
-                id: String(m.id || m.traceId), traceId: m.traceId,
-                description: m.content ? (typeof m.content === "string" ? maskText(m.content) : maskText(JSON.stringify(m.content))) : "Approval required",
-                status: m.status || "PENDING", timestamp: m.timestamp || new Date().toISOString()
-            }));
-            serveJson(res, 200, { success: true, data: approvals });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Approve
-    if (pathname.startsWith("/api/approve/") && method === "POST") {
-        const traceId = pathname.replace("/api/approve/", "");
-        if (!traceId) {
-            serveJson(res, 400, { success: false, error: "Trace ID required" });
+        if (await handleGovernanceRoutes(pathname, params, method, req, res, context))
             return;
-        }
-        try {
-            const pendingMessages = Storage.getPendingMessages().filter(m => m.traceId === traceId && (m.category === "ALERT" || m.category === "ACTION"));
-            if (pendingMessages.length === 0) {
-                serveJson(res, 404, { success: false, error: "No pending approval found" });
-                return;
-            }
-            const { approveOperation } = await import("../utils/human-in-loop.js");
-            const result = approveOperation(traceId, undefined, undefined, true);
-            if (result.success) {
-                broadcastWS("approval", { traceId, status: "APPROVED" });
-                serveJson(res, 200, { success: true, message: result.message, approved: pendingMessages.length });
-            }
-            else {
-                serveJson(res, 400, { success: false, error: result.message });
-            }
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Reject
-    if (pathname.startsWith("/api/reject/") && method === "POST") {
-        const traceId = pathname.replace("/api/reject/", "");
-        if (!traceId) {
-            serveJson(res, 400, { success: false, error: "Trace ID required" });
+        if (await handleWorkspaceRoutes(pathname, params, method, req, res, context))
+            return;
+        if (await handleConfigRoutes(pathname, params, method, req, res, context))
             return;
-        }
-        try {
-            const pendingMessages = Storage.getPendingMessages().filter(m => m.traceId === traceId && (m.category === "ALERT" || m.category === "ACTION"));
-            if (pendingMessages.length === 0) {
-                serveJson(res, 404, { success: false, error: "No pending approval found" });
-                return;
-            }
-            const { rejectOperation } = await import("../utils/human-in-loop.js");
-            const result = rejectOperation(traceId, undefined, true);
-            if (result.success) {
-                broadcastWS("approval", { traceId, status: "REJECTED" });
-                serveJson(res, 200, { success: true, message: result.message, rejected: pendingMessages.length });
-            }
-            else {
-                serveJson(res, 400, { success: false, error: result.message });
-            }
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Audit (GDPR/KVKK)
-    if (pathname === "/api/audit") {
-        try {
-            Audit.initialize();
-            const stats = Audit.getStats();
-            const entries = Audit.query({ limit: 100 });
-            serveJson(res, 200, { success: true, data: { stats, entries } });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Audit Erase (GDPR/KVKK Right to Erasure)
-    if (pathname === "/api/audit/erase" && method === "POST") {
-        try {
-            Audit.initialize();
-            let body = "";
-            req.on("data", chunk => { body += chunk.toString(); });
-            req.on("end", () => {
-                try {
-                    const parsed = JSON.parse(body);
-                    const confirmation = parsed.confirmationCode || "";
-                    const changes = Audit.clearAll(confirmation);
-                    serveJson(res, 200, { success: true, message: `${changes} records cleared under KVKK/GDPR right to erasure.` });
-                }
-                catch (err) {
-                    serveJson(res, 400, { success: false, error: err.message });
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Compliance
-    if (pathname === "/api/compliance") {
-        try {
-            const { scanProjectCompliance } = await import("atabey/src/cli/utils/compliance.js");
-            const targetPath = params.path || "src";
-            const scanPath = path.join(PROJECT_ROOT, targetPath);
-            const rawIssues = scanProjectCompliance(scanPath);
-            const violations = rawIssues.map(issue => {
-                const ruleLower = issue.rule.toLowerCase();
-                const type = ruleLower.includes("any") ? "any-type" : ruleLower.includes("console") ? "console-log" : "other";
-                return { file: path.relative(PROJECT_ROOT, issue.file), line: issue.line, type, message: issue.rule.replace(/^\[ERROR\]\s*Corporate\s*Compliance\s*Breach:\s*/i, "") };
-            });
-            const violatingFiles = new Set(violations.map(v => v.file));
-            serveJson(res, 200, {
-                success: true, data: {
-                    summary: { totalFiles: violatingFiles.size, totalViolations: violations.length, byType: { "any-type": violations.filter(v => v.type === "any-type").length, "console-log": violations.filter(v => v.type === "console-log").length } },
-                    violations
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Quality
-    if (pathname === "/api/quality") {
-        try {
-            const { analyzePathQuality } = await import("atabey/src/cli/utils/quality.js");
-            const targetPath = params.path || "src";
-            const result = analyzePathQuality(PROJECT_ROOT, targetPath);
-            serveJson(res, 200, {
-                success: true, data: {
-                    totalFiles: result.totalFiles, totalIssues: result.totalIssues,
-                    longFunctions: result.longFunctions, deepNesting: result.deepNesting,
-                    anyTypes: result.anyTypes, issues: result.issues.slice(0, 50),
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // ─── Knowledge Base API ────────────────────────────────────────
-    if (pathname === "/api/knowledge" && req.method === "GET") {
-        try {
-            const list = Storage.getKnowledgeList();
-            serveJson(res, 200, { success: true, data: list });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    if (pathname === "/api/knowledge/view" && req.method === "GET") {
-        try {
-            const file = params.file;
-            if (!file) {
-                serveJson(res, 400, { success: false, error: "Missing 'file' parameter" });
-                return;
-            }
-            const doc = Storage.getKnowledgeFile(file);
-            if (!doc) {
-                serveJson(res, 404, { success: false, error: "File not found" });
-                return;
-            }
-            serveJson(res, 200, { success: true, data: doc });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    if (pathname === "/api/knowledge/update" && req.method === "POST") {
-        try {
-            let body = "";
-            req.on("data", chunk => { body += chunk.toString(); });
-            req.on("end", async () => {
-                try {
-                    const parsed = JSON.parse(body);
-                    const file = parsed.file;
-                    const content = parsed.content;
-                    if (!file || content === undefined) {
-                        serveJson(res, 400, { success: false, error: "Missing 'file' or 'content' in request body" });
-                        return;
-                    }
-                    let safeFile = path.basename(file);
-                    if (!safeFile.endsWith(".md")) {
-                        safeFile += ".md";
-                    }
-                    Storage.saveKnowledgeFile(safeFile, content);
-                    serveJson(res, 200, { success: true, message: `Knowledge document '${safeFile}' updated successfully.` });
-                }
-                catch (err) {
-                    serveJson(res, 400, { success: false, error: err.message });
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    if (pathname === "/api/knowledge/delete" && req.method === "POST") {
-        try {
-            let body = "";
-            req.on("data", chunk => { body += chunk.toString(); });
-            req.on("end", async () => {
-                try {
-                    const parsed = JSON.parse(body);
-                    const file = parsed.file;
-                    if (!file) {
-                        serveJson(res, 400, { success: false, error: "Missing 'file' in request body" });
-                        return;
-                    }
-                    const safeFile = path.basename(file);
-                    Storage.deleteKnowledgeFile(safeFile);
-                    serveJson(res, 200, { success: true, message: `Knowledge document '${safeFile}' deleted.` });
-                }
-                catch (err) {
-                    serveJson(res, 400, { success: false, error: err.message });
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // ─── Constitution API ─────────────────────────────────────────
-    if (pathname === "/api/constitution" && req.method === "GET") {
-        try {
-            const db = Storage.getDB();
-            const sections = db.prepare("SELECT * FROM constitution ORDER BY priority DESC").all();
-            serveJson(res, 200, { success: true, data: sections });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    if (pathname === "/api/constitution/update" && req.method === "POST") {
-        try {
-            let body = "";
-            req.on("data", chunk => { body += chunk.toString(); });
-            req.on("end", async () => {
-                try {
-                    const parsed = JSON.parse(body);
-                    const { section, title, content } = parsed;
-                    if (!section || !content) {
-                        serveJson(res, 400, { success: false, error: "Missing 'section' or 'content'" });
-                        return;
-                    }
-                    const db = Storage.getDB();
-                    db.prepare(`
-                        INSERT INTO constitution (section, title, content, updated_at)
-                        VALUES (?, ?, ?, ?)
-                        ON CONFLICT(section) DO UPDATE SET
-                            title = excluded.title,
-                            content = excluded.content,
-                            updated_at = excluded.updated_at
-                    `).run(section, title || "", content, new Date().toISOString());
-                    serveJson(res, 200, { success: true, message: `Section '${section}' updated.` });
-                }
-                catch (err) {
-                    serveJson(res, 400, { success: false, error: err.message });
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // ─── CLI Commands API ─────────────────────────────────────────
-    if (pathname === "/api/cli-commands" && req.method === "GET") {
-        try {
-            const db = Storage.getDB();
-            const commands = db.prepare("SELECT * FROM cli_commands ORDER BY command").all();
-            serveJson(res, 200, { success: true, data: commands });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // ─── Prompts API ──────────────────────────────────────────────
-    if (pathname === "/api/prompts" && req.method === "GET") {
-        try {
-            const db = Storage.getDB();
-            const prompts = db.prepare("SELECT * FROM prompts ORDER BY category, name").all();
-            serveJson(res, 200, { success: true, data: prompts });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    if (pathname === "/api/prompts/update" && req.method === "POST") {
-        try {
-            let body = "";
-            req.on("data", chunk => { body += chunk.toString(); });
-            req.on("end", async () => {
-                try {
-                    const parsed = JSON.parse(body);
-                    const { name, category, content } = parsed;
-                    if (!name || !content) {
-                        serveJson(res, 400, { success: false, error: "Missing 'name' or 'content'" });
-                        return;
-                    }
-                    const db = Storage.getDB();
-                    db.prepare(`
-                        INSERT INTO prompts (name, category, content, updated_at)
-                        VALUES (?, ?, ?, ?)
-                        ON CONFLICT(name) DO UPDATE SET
-                            category = excluded.category,
-                            content = excluded.content,
-                            updated_at = excluded.updated_at
-                    `).run(name, category || "general", content, new Date().toISOString());
-                    serveJson(res, 200, { success: true, message: `Prompt '${name}' updated.` });
-                }
-                catch (err) {
-                    serveJson(res, 400, { success: false, error: err.message });
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // ─── Rules API ────────────────────────────────────────────────
-    if (pathname === "/api/rules" && req.method === "GET") {
-        try {
-            const db = Storage.getDB();
-            const rules = db.prepare("SELECT * FROM rules ORDER BY name").all();
-            serveJson(res, 200, { success: true, data: rules });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    if (pathname === "/api/rules/update" && req.method === "POST") {
-        try {
-            let body = "";
-            req.on("data", chunk => { body += chunk.toString(); });
-            req.on("end", async () => {
-                try {
-                    const parsed = JSON.parse(body);
-                    const { name, content, enabled } = parsed;
-                    if (!name) {
-                        serveJson(res, 400, { success: false, error: "Missing 'name'" });
-                        return;
-                    }
-                    const db = Storage.getDB();
-                    db.prepare(`
-                        INSERT INTO rules (name, content, enabled, updated_at)
-                        VALUES (?, ?, ?, ?)
-                        ON CONFLICT(name) DO UPDATE SET
-                            content = excluded.content,
-                            enabled = excluded.enabled,
-                            updated_at = excluded.updated_at
-                    `).run(name, content || "", enabled !== undefined ? (enabled ? 1 : 0) : 1, new Date().toISOString());
-                    serveJson(res, 200, { success: true, message: `Rule '${name}' updated.` });
-                }
-                catch (err) {
-                    serveJson(res, 400, { success: false, error: err.message });
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // ─── Registry API ─────────────────────────────────────────────
-    if (pathname === "/api/registry" && req.method === "GET") {
-        try {
-            const db = Storage.getDB();
-            const items = db.prepare("SELECT * FROM registry ORDER BY type, name").all();
-            serveJson(res, 200, { success: true, data: items });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    if (pathname === "/api/registry/update" && req.method === "POST") {
-        try {
-            let body = "";
-            req.on("data", chunk => { body += chunk.toString(); });
-            req.on("end", async () => {
-                try {
-                    const parsed = JSON.parse(body);
-                    const { name, type, data } = parsed;
-                    if (!name) {
-                        serveJson(res, 400, { success: false, error: "Missing 'name'" });
-                        return;
-                    }
-                    const db = Storage.getDB();
-                    db.prepare(`
-                        INSERT INTO registry (name, type, data, updated_at)
-                        VALUES (?, ?, ?, ?)
-                        ON CONFLICT(name) DO UPDATE SET
-                            type = excluded.type,
-                            data = excluded.data,
-                            updated_at = excluded.updated_at
-                    `).run(name, type || "agent", data || "{}", new Date().toISOString());
-                    serveJson(res, 200, { success: true, message: `Registry '${name}' updated.` });
-                }
-                catch (err) {
-                    serveJson(res, 400, { success: false, error: err.message });
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // ─── Settings API (from config.json / metadata) ──────────────
-    if (pathname === "/api/settings" && req.method === "GET") {
-        try {
-            const projectPath = Storage.getMetadata("projectPath") || "";
-            const activeProvider = Storage.getMetadata("activeProvider") || "gemini";
-            serveJson(res, 200, { success: true, data: { projectPath, activeProvider } });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    if (pathname === "/api/settings" && req.method === "POST") {
-        try {
-            let body = "";
-            req.on("data", chunk => { body += chunk.toString(); });
-            req.on("end", async () => {
-                try {
-                    const parsed = JSON.parse(body);
-                    if (parsed.projectPath !== undefined)
-                        Storage.setMetadata("projectPath", parsed.projectPath);
-                    if (parsed.activeProvider !== undefined)
-                        Storage.setMetadata("activeProvider", parsed.activeProvider);
-                    serveJson(res, 200, { success: true, message: "Settings saved." });
-                }
-                catch (err) {
-                    serveJson(res, 400, { success: false, error: err.message });
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // ─── Config (project config from .atabey/config.json) ──────
-    if (pathname === "/api/config" && req.method === "GET") {
-        try {
-            const db = Storage.getDB();
-            const configs = db.prepare("SELECT * FROM metadata WHERE key LIKE 'config.%'").all();
-            const config = {};
-            for (const c of configs) {
-                config[c.key.replace("config.", "")] = c.value;
-            }
-            serveJson(res, 200, { success: true, data: config });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Adapter Skills
-    if (pathname === "/api/adapters/skills") {
-        try {
-            const { ADAPTER_SKILLS } = await import("atabey/src/modules/skills/adapter-skills.js");
-            const summary = Object.entries(ADAPTER_SKILLS).map(([id, config]) => ({
-                id, skillCount: Object.keys(config.enabledSkills).length,
-                toolsCount: config.toolMapping ? Object.keys(config.toolMapping).length : 0,
-                skills: Object.entries(config.enabledSkills).map(([skId, skVal]) => ({
-                    id: skId,
-                    name: skVal.name,
-                    disabled: !!skVal.disabled
-                })),
-            }));
-            serveJson(res, 200, { success: true, data: summary });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // POST User Login
-    if (pathname === "/api/auth/login" && req.method === "POST") {
-        try {
-            let body = "";
-            req.on("data", chunk => { body += chunk.toString(); });
-            req.on("end", async () => {
-                try {
-                    const parsed = JSON.parse(body);
-                    const { username, token } = parsed;
-                    if (!username || !token) {
-                        serveJson(res, 400, { success: false, error: "Username and token are required" });
-                        return;
-                    }
-                    const maskedToken = token.length > 8 ? `${token.slice(0, 4)}...${token.slice(-4)}` : "***";
-                    logger.info(`[LOGIN ATTEMPT] username="${username}", token="${maskedToken}"`);
-                    const { authenticateToken } = await import("../utils/auth.js");
-                    const result = authenticateToken(token);
-                    logger.info(`[LOGIN RESULT] authenticated=${result.authenticated}, user="${result.user}"`);
-                    if (result.authenticated && (result.user === username || (result.user === "admin" && username === "admin"))) {
-                        serveJson(res, 200, { success: true, user: { name: username, role: result.user === "admin" ? "admin" : "user" } });
-                    }
-                    else {
-                        serveJson(res, 401, { success: false, error: "Invalid username or token" });
-                    }
-                }
-                catch (err) {
-                    logger.error(`[LOGIN ERROR] ${err.message}`);
-                    serveJson(res, 400, { success: false, error: err.message });
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // GET Configured Admin Users
-    if (pathname === "/api/admin/users" && req.method === "GET") {
-        try {
-            const users = Storage.getUsers();
-            serveJson(res, 200, { success: true, data: users });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // POST Create/Update Admin User
-    if (pathname === "/api/admin/users/create" && req.method === "POST") {
-        try {
-            let body = "";
-            req.on("data", chunk => { body += chunk.toString(); });
-            req.on("end", async () => {
-                try {
-                    const parsed = JSON.parse(body);
-                    const { name, token, role } = parsed;
-                    if (!name || !token) {
-                        serveJson(res, 400, { success: false, error: "Username and token are required" });
-                        return;
-                    }
-                    Storage.createUser(name.trim(), token.trim(), role || "user");
-                    serveJson(res, 200, { success: true, message: `User ${name} created/updated successfully.` });
-                }
-                catch (err) {
-                    serveJson(res, 400, { success: false, error: err.message });
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // POST Delete Admin User
-    if (pathname === "/api/admin/users/delete" && req.method === "POST") {
-        try {
-            let body = "";
-            req.on("data", chunk => { body += chunk.toString(); });
-            req.on("end", async () => {
-                try {
-                    const parsed = JSON.parse(body);
-                    const { name } = parsed;
-                    if (!name) {
-                        serveJson(res, 400, { success: false, error: "Username is required" });
-                        return;
-                    }
-                    Storage.deleteUser(name);
-                    serveJson(res, 200, { success: true, message: `User ${name} deleted.` });
-                }
-                catch (err) {
-                    serveJson(res, 400, { success: false, error: err.message });
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    if (pathname === "/api/adapters/skills/toggle" && method === "POST") {
-        try {
-            let body = "";
-            req.on("data", chunk => { body += chunk.toString(); });
-            req.on("end", async () => {
-                try {
-                    const parsed = JSON.parse(body);
-                    const { adapterId, skillId } = parsed;
-                    if (!adapterId || !skillId) {
-                        serveJson(res, 400, { success: false, error: "Missing adapterId or skillId" });
-                        return;
-                    }
-                    const { ADAPTER_SKILLS } = await import("atabey/src/modules/skills/adapter-skills.js");
-                    const adapter = ADAPTER_SKILLS[adapterId];
-                    if (!adapter || !adapter.enabledSkills[skillId]) {
-                        serveJson(res, 404, { success: false, error: "Adapter or skill not found" });
-                        return;
-                    }
-                    const skill = adapter.enabledSkills[skillId];
-                    skill.disabled = !skill.disabled;
-                    serveJson(res, 200, { success: true, disabled: !!skill.disabled });
-                }
-                catch (err) {
-                    serveJson(res, 400, { success: false, error: err.message });
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // ─── Workspace API ────────────────────────────────────────────
-    if (pathname === "/api/workspace" && method === "GET") {
-        try {
-            const { WorkspaceManager } = await import("../utils/workspace.js");
-            WorkspaceManager.initialize(PROJECT_ROOT);
-            const workspaces = WorkspaceManager.listWorkspaces();
-            const stats = WorkspaceManager.getStats();
-            serveJson(res, 200, { success: true, data: { workspaces, stats } });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    if (pathname === "/api/workspace/setup" && method === "POST") {
-        try {
-            let body = "";
-            req.on("data", chunk => { body += chunk.toString(); });
-            req.on("end", async () => {
-                try {
-                    const parsed = JSON.parse(body);
-                    const { userName } = parsed;
-                    if (!userName) {
-                        serveJson(res, 400, { success: false, error: "userName required" });
-                        return;
-                    }
-                    const { WorkspaceManager } = await import("../utils/workspace.js");
-                    const { ClientConfigGenerator } = await import("../utils/client-config.js");
-                    WorkspaceManager.initialize(PROJECT_ROOT);
-                    const workspace = await WorkspaceManager.getOrCreateWorkspace(userName);
-                    const userToken = process.env[`MCP_TOKEN_${workspace.developerId.toUpperCase()}`] ||
-                        `atabey_${workspace.developerId}_${Date.now().toString(36)}`;
-                    const guide = ClientConfigGenerator.generateSetupGuide(PROJECT_ROOT, userName, userToken, HOST, PORT);
-                    serveJson(res, 200, {
-                        success: true,
-                        data: {
-                            workspace,
-                            userToken,
-                            setupGuide: guide,
-                            configs: ClientConfigGenerator.generateAll(PROJECT_ROOT, userName, userToken, HOST, PORT)
-                                .map(c => ({ clientType: c.clientType, configPath: c.configPath }))
-                        }
-                    });
-                }
-                catch (err) {
-                    serveJson(res, 400, { success: false, error: err.message });
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // MCP Sessions (with user identity)
-    if (pathname === "/api/mcp/sessions") {
-        const sessionList = Array.from(sessions.entries()).map(([id, session]) => ({
-            id,
-            user: session.user,
-            clientName: session.clientName,
-            connectedAt: session.connectedAt,
-            lastActivity: session.lastActivity,
-            toolCalls: session.toolCalls,
-        }));
-        serveJson(res, 200, { success: true, data: { total: sessions.size, sessions: sessionList } });
-        return;
-    }
-    // Discipline Stats
-    if (pathname === "/api/discipline") {
-        try {
-            const { getAllDisciplineStats } = await import("../utils/discipline.js");
-            const stats = getAllDisciplineStats();
-            serveJson(res, 200, { success: true, data: stats });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Token Economy / Metrics
-    if (pathname === "/api/metrics") {
-        try {
-            const metricsPath = path.join(FRAMEWORK_DIR, "observability/metrics.json");
-            let entries = [];
-            if (fs.existsSync(metricsPath)) {
-                entries = JSON.parse(fs.readFileSync(metricsPath, "utf8"));
-            }
-            const byAgent = {};
-            const byAction = {};
-            let totalTokens = 0;
-            for (const entry of entries) {
-                const agent = entry.agent || "unknown";
-                const action = entry.action || "unknown";
-                const tokens = entry.estimatedTokens || 0;
-                if (!byAgent[agent])
-                    byAgent[agent] = { calls: 0, tokens: 0, cost: 0 };
-                byAgent[agent].calls++;
-                byAgent[agent].tokens += tokens;
-                byAgent[agent].cost = +(byAgent[agent].tokens / 1000 * 0.003).toFixed(4);
-                if (!byAction[action])
-                    byAction[action] = { calls: 0, tokens: 0 };
-                byAction[action].calls++;
-                byAction[action].tokens += tokens;
-                totalTokens += tokens;
-            }
-            serveJson(res, 200, {
-                success: true, data: {
-                    totalToolCalls: entries.length, totalEstimatedTokens: totalTokens,
-                    totalEstimatedCost: +(totalTokens / 1000 * 0.003).toFixed(4),
-                    mcpSessions: sessions.size, byAgent, byAction, recentEntries: entries.slice(-100),
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Telemetry Status
-    if (pathname === "/api/telemetry") {
-        try {
-            const { telemetryStreamer, TelemetryConfig } = await import("../utils/telemetry-streamer.js");
-            const status = telemetryStreamer.getStatus();
-            serveJson(res, 200, { success: true, data: { ...status, config: { ...TelemetryConfig, AUTH_TOKEN: TelemetryConfig.AUTH_TOKEN ? "***" : "" } } });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Loop Detection Stats
-    if (pathname === "/api/loop-detector") {
-        try {
-            const { getAllLoopStats } = await import("../utils/loop-detector.js");
-            const agent = params.agent;
-            const stats = agent
-                ? (await import("../utils/loop-detector.js")).getLoopStats(agent)
-                : getAllLoopStats();
-            serveJson(res, 200, { success: true, data: stats });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Clear Loop Cooldown
-    if (pathname.startsWith("/api/loop-detector/clear/") && method === "POST") {
-        const agent = decodeURIComponent(pathname.replace("/api/loop-detector/clear/", ""));
-        try {
-            const { clearCooldown } = await import("../utils/loop-detector.js");
-            const cleared = clearCooldown(agent);
-            serveJson(res, 200, { success: true, data: { agent, cleared } });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // GET Settings
-    if (pathname === "/api/settings" && method === "GET") {
-        try {
-            const { loadWebConfig } = await import("../utils/web-config.js");
-            const config = loadWebConfig();
-            const safeConfig = {
-                projectPath: config.projectPath,
-                activeProvider: config.activeProvider,
-                geminiApiKey: config.geminiApiKey ? "********" : "",
-                anthropicApiKey: config.anthropicApiKey ? "********" : "",
-                openaiApiKey: config.openaiApiKey ? "********" : "",
-            };
-            serveJson(res, 200, { success: true, data: safeConfig });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // POST Settings
-    if (pathname === "/api/settings" && method === "POST") {
-        try {
-            let body = "";
-            req.on("data", chunk => { body += chunk.toString(); });
-            req.on("end", async () => {
-                try {
-                    const parsed = JSON.parse(body);
-                    const { saveWebConfig } = await import("../utils/web-config.js");
-                    const configToSave = {};
-                    if (parsed.projectPath)
-                        configToSave.projectPath = parsed.projectPath;
-                    if (parsed.activeProvider)
-                        configToSave.activeProvider = parsed.activeProvider;
-                    if (parsed.geminiApiKey && parsed.geminiApiKey !== "********")
-                        configToSave.geminiApiKey = parsed.geminiApiKey;
-                    if (parsed.anthropicApiKey && parsed.anthropicApiKey !== "********")
-                        configToSave.anthropicApiKey = parsed.anthropicApiKey;
-                    if (parsed.openaiApiKey && parsed.openaiApiKey !== "********")
-                        configToSave.openaiApiKey = parsed.openaiApiKey;
-                    const saved = saveWebConfig(configToSave);
-                    serveJson(res, 200, { success: true, message: "Settings saved successfully", projectPath: saved.projectPath });
-                }
-                catch (err) {
-                    serveJson(res, 400, { success: false, error: err.message });
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // POST Dispatch Task (Chat & Agent Selection)
-    if (pathname === "/api/chat/dispatch" && method === "POST") {
-        try {
-            let body = "";
-            req.on("data", chunk => { body += chunk.toString(); });
-            req.on("end", async () => {
-                try {
-                    const parsed = JSON.parse(body);
-                    const { projectPath, agent, message } = parsed;
-                    if (!projectPath || !agent || !message) {
-                        serveJson(res, 400, { success: false, error: "projectPath, agent, and message are required." });
-                        return;
-                    }
-                    const { saveWebConfig, startOrchestratorLoop } = await import("../utils/web-config.js");
-                    saveWebConfig({ projectPath });
-                    const { asAgentID, asTraceID } = await import("../../shared/types.js");
-                    const traceId = "T-" + Date.now().toString().slice(-6);
-                    Storage.setMetadata("traceId", traceId);
-                    Storage.setMetadata("phase", "PHASE_0");
-                    const hermesMsg = {
-                        timestamp: new Date().toISOString(),
-                        from: asAgentID("web-user"),
-                        to: asAgentID(agent),
-                        category: "DELEGATION",
-                        content: message,
-                        traceId: asTraceID(traceId),
-                        status: "PENDING",
-                        priority: "HIGH",
-                        requiresApproval: false
-                    };
-                    Storage.saveMessage(hermesMsg);
-                    broadcastWS("message", hermesMsg);
-                    broadcastWS("log", {
-                        timestamp: new Date().toISOString(),
-                        agent: "web-user",
-                        action: "DISPATCH",
-                        trace_id: traceId,
-                        status: "SUCCESS",
-                        summary: `Dispatched task to ${agent}: ${message.substring(0, 50)}...`
-                    });
-                    const runResult = startOrchestratorLoop();
-                    serveJson(res, 200, {
-                        success: true,
-                        traceId,
-                        message: `Task dispatched to ${agent}. ${runResult.message}`
-                    });
-                }
-                catch (err) {
-                    serveJson(res, 400, { success: false, error: err.message });
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // GET Browse Directories for Folder Selection
-    if (pathname === "/api/project/browse-dirs" && method === "GET") {
-        try {
-            const fs = await import("fs");
-            const path = await import("path");
-            const os = await import("os");
-            let target = params.path ? String(params.path) : "";
-            if (!target) {
-                const { loadWebConfig } = await import("../utils/web-config.js");
-                target = loadWebConfig().projectPath || os.homedir();
-            }
-            target = path.resolve(target);
-            if (!fs.existsSync(target)) {
-                serveJson(res, 404, { success: false, error: "Path not found" });
-                return;
-            }
-            const stats = fs.statSync(target);
-            if (!stats.isDirectory()) {
-                serveJson(res, 400, { success: false, error: "Not a directory" });
-                return;
-            }
-            const files = fs.readdirSync(target);
-            const dirs = [];
-            for (const file of files) {
-                if (file.startsWith("."))
-                    continue;
-                try {
-                    const fullPath = path.join(target, file);
-                    const isDir = fs.statSync(fullPath).isDirectory();
-                    if (isDir) {
-                        dirs.push({ name: file, path: fullPath });
-                    }
-                }
-                catch {
-                    // ignore
-                }
-            }
-            serveJson(res, 200, {
-                success: true,
-                currentPath: target,
-                parentPath: path.dirname(target) !== target ? path.dirname(target) : null,
-                dirs: dirs.sort((a, b) => a.name.localeCompare(b.name))
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // GET Files List for Workspace Viewer
-    if (pathname === "/api/project/files" && method === "GET") {
-        try {
-            const fs = await import("fs");
-            const path = await import("path");
-            const { loadWebConfig } = await import("../utils/web-config.js");
-            const config = loadWebConfig();
-            const projectDir = config.projectPath;
-            const subDir = params.path ? String(params.path) : "";
-            let targetDir = projectDir;
-            if (subDir) {
-                targetDir = path.resolve(projectDir, subDir);
-                if (!targetDir.startsWith(projectDir)) {
-                    serveJson(res, 403, { success: false, error: "Access denied" });
-                    return;
-                }
-            }
-            if (!fs.existsSync(targetDir)) {
-                serveJson(res, 404, { success: false, error: "Project path not found" });
-                return;
-            }
-            const files = fs.readdirSync(targetDir);
-            const items = [];
-            for (const file of files) {
-                if (file === "node_modules" || file === ".git" || file === ".DS_Store")
-                    continue;
-                try {
-                    const fullPath = path.join(targetDir, file);
-                    const stat = fs.statSync(fullPath);
-                    items.push({
-                        name: file,
-                        isDir: stat.isDirectory(),
-                        relativePath: path.relative(projectDir, fullPath)
-                    });
-                }
-                catch {
-                    // ignore
-                }
-            }
-            serveJson(res, 200, {
-                success: true,
-                currentPath: projectDir,
-                relativePath: path.relative(projectDir, targetDir),
-                items: items.sort((a, b) => {
-                    if (a.isDir && !b.isDir)
-                        return -1;
-                    if (!a.isDir && b.isDir)
-                        return 1;
-                    return a.name.localeCompare(b.name);
-                })
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // GET File Content
-    if (pathname === "/api/project/file-content" && method === "GET") {
-        try {
-            const fs = await import("fs");
-            const path = await import("path");
-            const { loadWebConfig } = await import("../utils/web-config.js");
-            const config = loadWebConfig();
-            const projectDir = config.projectPath;
-            const filePath = params.path ? String(params.path) : "";
-            if (!filePath) {
-                serveJson(res, 400, { success: false, error: "path parameter is required" });
-                return;
-            }
-            const absoluteFilePath = path.resolve(projectDir, filePath);
-            if (!absoluteFilePath.startsWith(projectDir)) {
-                serveJson(res, 403, { success: false, error: "Access denied" });
-                return;
-            }
-            if (!fs.existsSync(absoluteFilePath) || fs.statSync(absoluteFilePath).isDirectory()) {
-                serveJson(res, 404, { success: false, error: "File not found" });
-                return;
-            }
-            const size = fs.statSync(absoluteFilePath).size;
-            if (size > 2 * 1024 * 1024) {
-                serveJson(res, 400, { success: false, error: "File is too large (max 2MB)" });
-                return;
-            }
-            const content = fs.readFileSync(absoluteFilePath, "utf8");
-            serveJson(res, 200, {
-                success: true,
-                path: filePath,
-                content
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Orchestrator Status
-    if (pathname === "/api/orchestrator/status" && method === "GET") {
-        try {
-            const { getOrchestratorState } = await import("../utils/web-config.js");
-            serveJson(res, 200, { success: true, data: getOrchestratorState() });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Orchestrator Start
-    if (pathname === "/api/orchestrator/start" && method === "POST") {
-        try {
-            const { startOrchestratorLoop } = await import("../utils/web-config.js");
-            const result = startOrchestratorLoop();
-            if (result.success) {
-                broadcastWS("orchestrator_state", { running: true });
-                serveJson(res, 200, { success: true, message: result.message });
-            }
-            else {
-                serveJson(res, 400, { success: false, error: result.message });
-            }
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Orchestrator Stop
-    if (pathname === "/api/orchestrator/stop" && method === "POST") {
-        try {
-            const { stopOrchestratorLoop } = await import("../utils/web-config.js");
-            const result = stopOrchestratorLoop();
-            if (result.success) {
-                broadcastWS("orchestrator_state", { running: false });
-                serveJson(res, 200, { success: true, message: result.message });
-            }
-            else {
-                serveJson(res, 400, { success: false, error: result.message });
-            }
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // GET Token Budget Config
-    if (pathname === "/api/token-budget/config" && method === "GET") {
-        try {
-            const { getTokenBudgetConfig } = await import("../utils/context-optimizer.js");
-            const config = getTokenBudgetConfig();
-            serveJson(res, 200, { success: true, data: config });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // UPDATE Token Budget Config
-    if (pathname === "/api/token-budget/config/update" && method === "POST") {
-        try {
-            let body = "";
-            req.on("data", chunk => { body += chunk.toString(); });
-            req.on("end", async () => {
-                try {
-                    const parsed = JSON.parse(body);
-                    const { updateTokenBudgetConfig } = await import("../utils/context-optimizer.js");
-                    updateTokenBudgetConfig(parsed);
-                    serveJson(res, 200, { success: true, message: "Token budget configuration updated successfully." });
-                }
-                catch (err) {
-                    serveJson(res, 400, { success: false, error: err.message });
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // RESET Agent Token Budgets
-    if (pathname === "/api/token-budget/reset" && method === "POST") {
-        try {
-            const { resetTokenBudgets } = await import("../utils/context-optimizer.js");
-            resetTokenBudgets();
-            serveJson(res, 200, { success: true, message: "All agent token budgets reset successfully." });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Budget / FinOps Status
-    if (pathname === "/api/finops") {
-        try {
-            const { budgetManager } = await import("../utils/finops.js");
-            const state = budgetManager.getState();
-            serveJson(res, 200, { success: true, data: state });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Budget Check for an agent
-    if (pathname === "/api/finops/check") {
-        try {
-            const agent = params.agent || "default";
-            const { budgetManager } = await import("../utils/finops.js");
-            const result = budgetManager.checkBudget(agent);
-            serveJson(res, 200, { success: true, data: result });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Budget Reset
-    if (pathname === "/api/finops/reset" && method === "POST") {
-        try {
-            const { budgetManager } = await import("../utils/finops.js");
-            budgetManager.resetPeriod();
-            serveJson(res, 200, { success: true, message: "Budget period reset." });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // License Scanner
-    if (pathname === "/api/license") {
-        try {
-            const { scanForLicenses, getLicenseSeveritySummary, LicenseScannerConfig } = await import("../utils/license-scanner.js");
-            const filePath = params.path || "";
-            const content = params.content || "";
-            const matches = filePath && content ? scanForLicenses(filePath, content) : [];
-            const summary = matches.length > 0 ? getLicenseSeveritySummary(matches) : null;
-            serveJson(res, 200, {
-                success: true, data: {
-                    matches,
-                    summary,
-                    config: LicenseScannerConfig,
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // Auto-Rollback Stats
-    if (pathname === "/api/rollback") {
-        try {
-            const { AutoRollbackEngine } = await import("../utils/auto-rollback.js");
-            const stats = AutoRollbackEngine.getSnapshotStats();
-            serveJson(res, 200, { success: true, data: stats });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
-    }
-    // All Governance Stats (combined endpoint)
-    if (pathname === "/api/governance") {
-        try {
-            const { getAllLoopStats } = await import("../utils/loop-detector.js");
-            const { AutoRollbackEngine } = await import("../utils/auto-rollback.js");
-            const { budgetManager } = await import("../utils/finops.js");
-            serveJson(res, 200, {
-                success: true, data: {
-                    loopDetection: getAllLoopStats(),
-                    rollback: AutoRollbackEngine.getSnapshotStats(),
-                    budget: budgetManager.getState(),
-                    telemetry: (await import("../utils/telemetry-streamer.js")).telemetryStreamer.getStatus(),
-                }
-            });
-        }
-        catch (e) {
-            serveJson(res, 500, { success: false, error: e.message });
-        }
-        return;
     }
     // SSE (legacy support)
     if (pathname === "/api/events") {