promptspeak-mcp-server 0.1.0

package/dist/http/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/http/app.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAgB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAK/C;;;;;;;;;;;;GAYG;AACH,wBAAgB,SAAS,IAAI,WAAW,CAWvC"}

package/dist/http/app.js

@@ -0,0 +1,35 @@
+/**
+ * Express Application Factory
+ *
+ * Creates and configures the Express app with all middleware and routes.
+ * This file is separate from server.ts to allow testing without starting the server.
+ *
+ * Follows the modular pattern established in the MCP server refactor.
+ */
+import express from 'express';
+import { getConfig } from './config.js';
+import { configureMiddleware } from './middleware/index.js';
+import { configureRoutes } from './routes/index.js';
+/**
+ * Create and configure an Express application.
+ *
+ * @returns Configured Express application
+ *
+ * @example
+ * ```typescript
+ * const app = createApp();
+ * app.listen(3000, () => {
+ *   console.log('Server running on port 3000');
+ * });
+ * ```
+ */
+export function createApp() {
+    const app = express();
+    const config = getConfig();
+    // Configure middleware (security, rate limiting, body parsing, logging)
+    configureMiddleware(app, config);
+    // Configure routes (public, API, error handlers)
+    configureRoutes(app);
+    return app;
+}
+//# sourceMappingURL=app.js.map

package/dist/http/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/http/app.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,OAAwB,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,SAAS;IACvB,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,wEAAwE;IACxE,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAEjC,iDAAiD;IACjD,eAAe,CAAC,GAAG,CAAC,CAAC;IAErB,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/http/config.d.ts

@@ -0,0 +1,42 @@
+/**
+ * HTTP Server Configuration
+ *
+ * Environment-based configuration for the PromptSpeak REST API.
+ * Supports both API key and OAuth 2.0 authentication methods.
+ */
+export interface HttpConfig {
+    port: number;
+    host: string;
+    nodeEnv: 'development' | 'production' | 'test';
+    dbPath: string;
+    auth: {
+        apiKeyHeader: string;
+        apiKeyPrefix: string;
+        apiKeySalt: string;
+        jwtSecret: string;
+        jwtExpiry: string;
+    };
+    oauth: {
+        enabled: boolean;
+        issuer: string;
+        clientId: string;
+        clientSecret: string;
+        redirectUri: string;
+    };
+    rateLimit: {
+        windowMs: number;
+        maxRequests: number;
+    };
+    cors: {
+        origins: string[];
+        credentials: boolean;
+    };
+    logging: {
+        level: 'debug' | 'info' | 'warn' | 'error';
+        path: string;
+    };
+}
+export declare function loadConfig(): HttpConfig;
+export declare function getConfig(): HttpConfig;
+export declare function resetConfig(): void;
+//# sourceMappingURL=config.d.ts.map

package/dist/http/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/http/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,MAAM,WAAW,UAAU;IAEzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,aAAa,GAAG,YAAY,GAAG,MAAM,CAAC;IAG/C,MAAM,EAAE,MAAM,CAAC;IAGf,IAAI,EAAE;QACJ,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IAGF,KAAK,EAAE;QACL,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IAGF,SAAS,EAAE;QACT,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IAGF,IAAI,EAAE;QACJ,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC;IAGF,OAAO,EAAE;QACP,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;QAC3C,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAUD,wBAAgB,UAAU,IAAI,UAAU,CA+CvC;AAKD,wBAAgB,SAAS,IAAI,UAAU,CAKtC;AAED,wBAAgB,WAAW,IAAI,IAAI,CAElC"}

package/dist/http/config.js

@@ -0,0 +1,62 @@
+/**
+ * HTTP Server Configuration
+ *
+ * Environment-based configuration for the PromptSpeak REST API.
+ * Supports both API key and OAuth 2.0 authentication methods.
+ */
+import { getEnvOptional, getEnvNumber, getEnvBoolean, getEnvList, getEnvEnum, } from '../core/config/index.js';
+// Default CORS origins include OpenAI domains
+const DEFAULT_CORS_ORIGINS = [
+    'https://chat.openai.com',
+    'https://chatgpt.com',
+    'http://localhost:3000',
+    'http://localhost:5173',
+];
+export function loadConfig() {
+    const nodeEnv = getEnvEnum('NODE_ENV', ['development', 'production', 'test'], 'development');
+    const corsOrigins = getEnvList('CORS_ORIGINS', DEFAULT_CORS_ORIGINS);
+    return {
+        port: getEnvNumber('PORT', 3000),
+        host: getEnvOptional('HOST', '0.0.0.0'),
+        nodeEnv,
+        dbPath: getEnvOptional('DB_PATH', './data/symbols/promptspeak.db'),
+        auth: {
+            apiKeyHeader: getEnvOptional('API_KEY_HEADER', 'X-API-Key'),
+            apiKeyPrefix: getEnvOptional('API_KEY_PREFIX', 'ps_'),
+            apiKeySalt: getEnvOptional('API_KEY_SALT', 'promptspeak-default-salt-change-in-production'),
+            jwtSecret: getEnvOptional('JWT_SECRET', 'promptspeak-jwt-secret-change-in-production'),
+            jwtExpiry: getEnvOptional('JWT_EXPIRY', '1h'),
+        },
+        oauth: {
+            enabled: getEnvBoolean('OAUTH_ENABLED', false),
+            issuer: getEnvOptional('OAUTH_ISSUER', ''),
+            clientId: getEnvOptional('OAUTH_CLIENT_ID', ''),
+            clientSecret: getEnvOptional('OAUTH_CLIENT_SECRET', ''),
+            redirectUri: getEnvOptional('OAUTH_REDIRECT_URI', ''),
+        },
+        rateLimit: {
+            windowMs: getEnvNumber('RATE_LIMIT_WINDOW_MS', 60000),
+            maxRequests: getEnvNumber('RATE_LIMIT_MAX_REQUESTS', 100),
+        },
+        cors: {
+            origins: corsOrigins,
+            credentials: getEnvBoolean('CORS_CREDENTIALS', true),
+        },
+        logging: {
+            level: getEnvOptional('LOG_LEVEL', 'info'),
+            path: getEnvOptional('LOG_PATH', './data/logs'),
+        },
+    };
+}
+// Singleton config instance
+let configInstance = null;
+export function getConfig() {
+    if (!configInstance) {
+        configInstance = loadConfig();
+    }
+    return configInstance;
+}
+export function resetConfig() {
+    configInstance = null;
+}
+//# sourceMappingURL=config.js.map

package/dist/http/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/http/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAEL,cAAc,EACd,YAAY,EACZ,aAAa,EACb,UAAU,EACV,UAAU,GACX,MAAM,yBAAyB,CAAC;AAgDjC,8CAA8C;AAC9C,MAAM,oBAAoB,GAAG;IAC3B,yBAAyB;IACzB,qBAAqB;IACrB,uBAAuB;IACvB,uBAAuB;CACxB,CAAC;AAEF,MAAM,UAAU,UAAU;IACxB,MAAM,OAAO,GAAG,UAAU,CACxB,UAAU,EACV,CAAC,aAAa,EAAE,YAAY,EAAE,MAAM,CAAU,EAC9C,aAAa,CACd,CAAC;IAEF,MAAM,WAAW,GAAG,UAAU,CAAC,cAAc,EAAE,oBAAoB,CAAC,CAAC;IAErE,OAAO;QACL,IAAI,EAAE,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC;QAChC,IAAI,EAAE,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC;QACvC,OAAO;QAEP,MAAM,EAAE,cAAc,CAAC,SAAS,EAAE,+BAA+B,CAAC;QAElE,IAAI,EAAE;YACJ,YAAY,EAAE,cAAc,CAAC,gBAAgB,EAAE,WAAW,CAAC;YAC3D,YAAY,EAAE,cAAc,CAAC,gBAAgB,EAAE,KAAK,CAAC;YACrD,UAAU,EAAE,cAAc,CAAC,cAAc,EAAE,+CAA+C,CAAC;YAC3F,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE,6CAA6C,CAAC;YACtF,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE,IAAI,CAAC;SAC9C;QAED,KAAK,EAAE;YACL,OAAO,EAAE,aAAa,CAAC,eAAe,EAAE,KAAK,CAAC;YAC9C,MAAM,EAAE,cAAc,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1C,QAAQ,EAAE,cAAc,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC/C,YAAY,EAAE,cAAc,CAAC,qBAAqB,EAAE,EAAE,CAAC;YACvD,WAAW,EAAE,cAAc,CAAC,oBAAoB,EAAE,EAAE,CAAC;SACtD;QAED,SAAS,EAAE;YACT,QAAQ,EAAE,YAAY,CAAC,sBAAsB,EAAE,KAAK,CAAC;YACrD,WAAW,EAAE,YAAY,CAAC,yBAAyB,EAAE,GAAG,CAAC;SAC1D;QAED,IAAI,EAAE;YACJ,OAAO,EAAE,WAAW;YACpB,WAAW,EAAE,aAAa,CAAC,kBAAkB,EAAE,IAAI,CAAC;SACrD;QAED,OAAO,EAAE;YACP,KAAK,EAAE,cAAc,CAAC,WAAW,EAAE,MAAM,CAAmC;YAC5E,IAAI,EAAE,cAAc,CAAC,UAAU,EAAE,aAAa,CAAC;SAChD;KACF,CAAC;AACJ,CAAC;AAED,4BAA4B;AAC5B,IAAI,cAAc,GAAsB,IAAI,CAAC;AAE7C,MAAM,UAAU,SAAS;IACvB,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,cAAc,GAAG,UAAU,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,cAAc,GAAG,IAAI,CAAC;AACxB,CAAC"}

package/dist/http/database/index.d.ts

@@ -0,0 +1,49 @@
+/**
+ * HTTP Database Module
+ *
+ * Manages the runtime database for frontend-backend integration.
+ * Separate from the swarm database to maintain separation of concerns.
+ */
+import Database from 'better-sqlite3';
+/**
+ * Initialize the runtime database.
+ */
+export declare function initializeRuntimeDatabase(customPath?: string): Database.Database;
+/**
+ * Get the database instance.
+ */
+export declare function getRuntimeDatabase(): Database.Database;
+/**
+ * Close the database connection.
+ */
+export declare function closeRuntimeDatabase(): void;
+export type RuntimeDatabase = Database.Database;
+/**
+ * Agent runtime status values.
+ */
+export type AgentRuntimeStatus = 'online' | 'offline' | 'paused' | 'decoy' | 'burned' | 'compromised';
+/**
+ * Mission status values.
+ */
+export type MissionStatus = 'draft' | 'validated' | 'pending_deployment' | 'deploying' | 'active' | 'paused' | 'completed' | 'failed' | 'cancelled';
+/**
+ * Mission type values.
+ */
+export type MissionType = 'data_acquisition' | 'monitoring' | 'analysis' | 'reconnaissance' | 'custom';
+/**
+ * Threat type values.
+ */
+export type ThreatType = 'heartbeat_timeout' | 'heartbeat_irregular' | 'response_pattern' | 'latency_anomaly' | 'error_rate_spike' | 'symbol_drift' | 'frame_violation' | 'api_key_abuse' | 'session_anomaly' | 'compromise_threshold' | 'manual_flag';
+/**
+ * Threat severity values.
+ */
+export type ThreatSeverity = 'info' | 'warning' | 'elevated' | 'critical';
+/**
+ * Threat status values.
+ */
+export type ThreatStatus = 'active' | 'acknowledged' | 'investigating' | 'resolved' | 'false_positive';
+/**
+ * Action taken on threat.
+ */
+export type ThreatAction = 'none' | 'paused' | 'decoy' | 'burned' | 'quarantined';
+//# sourceMappingURL=index.d.ts.map

package/dist/http/database/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/http/database/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AA0BtC;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAuBhF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,QAAQ,CAAC,QAAQ,CAKtD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,IAAI,CAK3C;AA+DD,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,QAAQ,CAAC;AAEhD;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAC1B,QAAQ,GACR,SAAS,GACT,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,aAAa,CAAC;AAElB;;GAEG;AACH,MAAM,MAAM,aAAa,GACrB,OAAO,GACP,WAAW,GACX,oBAAoB,GACpB,WAAW,GACX,QAAQ,GACR,QAAQ,GACR,WAAW,GACX,QAAQ,GACR,WAAW,CAAC;AAEhB;;GAEG;AACH,MAAM,MAAM,WAAW,GACnB,kBAAkB,GAClB,YAAY,GACZ,UAAU,GACV,gBAAgB,GAChB,QAAQ,CAAC;AAEb;;GAEG;AACH,MAAM,MAAM,UAAU,GAClB,mBAAmB,GACnB,qBAAqB,GACrB,kBAAkB,GAClB,iBAAiB,GACjB,kBAAkB,GAClB,cAAc,GACd,iBAAiB,GACjB,eAAe,GACf,iBAAiB,GACjB,sBAAsB,GACtB,aAAa,CAAC;AAElB;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;AAE1E;;GAEG;AACH,MAAM,MAAM,YAAY,GACpB,QAAQ,GACR,cAAc,GACd,eAAe,GACf,UAAU,GACV,gBAAgB,CAAC;AAErB;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,aAAa,CAAC"}

package/dist/http/database/index.js

@@ -0,0 +1,115 @@
+/**
+ * HTTP Database Module
+ *
+ * Manages the runtime database for frontend-backend integration.
+ * Separate from the swarm database to maintain separation of concerns.
+ */
+import Database from 'better-sqlite3';
+import path from 'path';
+import fs from 'fs';
+import { fileURLToPath } from 'url';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+// ═══════════════════════════════════════════════════════════════════════════════
+// DATABASE SINGLETON
+// ═══════════════════════════════════════════════════════════════════════════════
+let db = null;
+/**
+ * Get the database path from environment or use default.
+ */
+function getDatabasePath() {
+    const envPath = process.env.RUNTIME_DB_PATH;
+    if (envPath) {
+        return envPath;
+    }
+    // Default path relative to project root
+    return path.join(process.cwd(), 'data', 'runtime.db');
+}
+/**
+ * Initialize the runtime database.
+ */
+export function initializeRuntimeDatabase(customPath) {
+    if (db) {
+        return db;
+    }
+    const dbPath = customPath ?? getDatabasePath();
+    // Ensure directory exists
+    const dbDir = path.dirname(dbPath);
+    if (!fs.existsSync(dbDir)) {
+        fs.mkdirSync(dbDir, { recursive: true });
+    }
+    db = new Database(dbPath);
+    // Enable WAL mode for better concurrency
+    db.pragma('journal_mode = WAL');
+    db.pragma('foreign_keys = ON');
+    // Run migrations
+    runMigrations(db);
+    return db;
+}
+/**
+ * Get the database instance.
+ */
+export function getRuntimeDatabase() {
+    if (!db) {
+        return initializeRuntimeDatabase();
+    }
+    return db;
+}
+/**
+ * Close the database connection.
+ */
+export function closeRuntimeDatabase() {
+    if (db) {
+        db.close();
+        db = null;
+    }
+}
+// ═══════════════════════════════════════════════════════════════════════════════
+// MIGRATIONS
+// ═══════════════════════════════════════════════════════════════════════════════
+/**
+ * Run all pending migrations.
+ */
+function runMigrations(db) {
+    // Create migrations tracking table
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS _migrations (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      name TEXT UNIQUE NOT NULL,
+      applied_at TEXT NOT NULL DEFAULT (datetime('now'))
+    )
+  `);
+    // Get applied migrations
+    const applied = new Set(db.prepare('SELECT name FROM _migrations').all()
+        .map(row => row.name));
+    // Find migration files
+    const migrationsDir = path.join(__dirname, 'migrations');
+    if (!fs.existsSync(migrationsDir)) {
+        console.log('No migrations directory found');
+        return;
+    }
+    const migrationFiles = fs.readdirSync(migrationsDir)
+        .filter(f => f.endsWith('.sql'))
+        .sort();
+    // Apply pending migrations
+    for (const file of migrationFiles) {
+        if (applied.has(file)) {
+            continue;
+        }
+        console.log(`Applying migration: ${file}`);
+        const sql = fs.readFileSync(path.join(migrationsDir, file), 'utf-8');
+        // Execute migration in transaction
+        db.exec('BEGIN');
+        try {
+            db.exec(sql);
+            db.prepare('INSERT INTO _migrations (name) VALUES (?)').run(file);
+            db.exec('COMMIT');
+            console.log(`Migration applied: ${file}`);
+        }
+        catch (error) {
+            db.exec('ROLLBACK');
+            throw new Error(`Migration failed: ${file} - ${error}`);
+        }
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/http/database/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/http/database/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAE3C,kFAAkF;AAClF,qBAAqB;AACrB,kFAAkF;AAElF,IAAI,EAAE,GAA6B,IAAI,CAAC;AAExC;;GAEG;AACH,SAAS,eAAe;IACtB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC5C,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,wCAAwC;IACxC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,UAAmB;IAC3D,IAAI,EAAE,EAAE,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,IAAI,eAAe,EAAE,CAAC;IAE/C,0BAA0B;IAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE1B,yCAAyC;IACzC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAChC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAE/B,iBAAiB;IACjB,aAAa,CAAC,EAAE,CAAC,CAAC;IAElB,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,yBAAyB,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,IAAI,EAAE,EAAE,CAAC;QACP,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,EAAE,GAAG,IAAI,CAAC;IACZ,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,aAAa;AACb,kFAAkF;AAElF;;GAEG;AACH,SAAS,aAAa,CAAC,EAAqB;IAC1C,mCAAmC;IACnC,EAAE,CAAC,IAAI,CAAC;;;;;;GAMP,CAAC,CAAC;IAEH,yBAAyB;IACzB,MAAM,OAAO,GAAG,IAAI,GAAG,CACpB,EAAE,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,GAAG,EAAyB;SACrE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CACxB,CAAC;IAEF,uBAAuB;IACvB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACzD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,MAAM,cAAc,GAAG,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC;SACjD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SAC/B,IAAI,EAAE,CAAC;IAEV,2BAA2B;IAC3B,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,SAAS;QACX,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAErE,mCAAmC;QACnC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjB,IAAI,CAAC;YACH,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACb,EAAE,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/http/middleware/auth.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Authentication Middleware
+ *
+ * Supports dual authentication methods:
+ * 1. API Keys - Simple header-based auth for development/personal use
+ * 2. OAuth 2.0 - Bearer tokens for production multi-tenant deployment
+ *
+ * Design Principle: Explicit lens selection (from PERSONA_LENS_ARCHITECTURE.md)
+ */
+import { Request, Response, NextFunction } from 'express';
+import { ApiKeyInfo } from '../../auth/api-key.js';
+export interface AuthenticatedUser {
+    userId: string;
+    tenantId?: string;
+    authMethod: 'api_key' | 'oauth';
+    scopes: string[];
+    activeLens?: string;
+    rateLimitTier: 'free' | 'pro' | 'enterprise';
+    apiKeyInfo?: ApiKeyInfo;
+}
+export interface AuthenticatedRequest extends Request {
+    user: AuthenticatedUser;
+    activeLens?: string;
+}
+export declare function authMiddleware(req: Request, res: Response, next: NextFunction): Promise<void>;
+export declare function requireScopes(...requiredScopes: string[]): (req: Request, res: Response, next: NextFunction) => void;
+export declare function optionalAuthMiddleware(req: Request, res: Response, next: NextFunction): Promise<void>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/http/middleware/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/http/middleware/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAG1D,OAAO,EAAkB,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAOnE,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,SAAS,GAAG,OAAO,CAAC;IAChC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,KAAK,GAAG,YAAY,CAAC;IAC7C,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,MAAM,WAAW,oBAAqB,SAAQ,OAAO;IACnD,IAAI,EAAE,iBAAiB,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAMD,wBAAsB,cAAc,CAClC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAkDf;AAyFD,wBAAgB,aAAa,CAAC,GAAG,cAAc,EAAE,MAAM,EAAE,IAC/C,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,UAmBxD;AAMD,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAYf"}

package/dist/http/middleware/auth.js

@@ -0,0 +1,157 @@
+/**
+ * Authentication Middleware
+ *
+ * Supports dual authentication methods:
+ * 1. API Keys - Simple header-based auth for development/personal use
+ * 2. OAuth 2.0 - Bearer tokens for production multi-tenant deployment
+ *
+ * Design Principle: Explicit lens selection (from PERSONA_LENS_ARCHITECTURE.md)
+ */
+import { getConfig } from '../config.js';
+import { UnauthorizedError, ForbiddenError } from './error-handler.js';
+import { validateApiKey } from '../../auth/api-key.js';
+import { getOAuthValidator, initializeOAuthValidator } from '../../auth/oauth.js';
+// ═══════════════════════════════════════════════════════════════════════════
+// AUTH MIDDLEWARE
+// ═══════════════════════════════════════════════════════════════════════════
+export async function authMiddleware(req, res, next) {
+    const config = getConfig();
+    try {
+        // Check for API key in header
+        const apiKeyHeader = config.auth.apiKeyHeader.toLowerCase();
+        const apiKey = req.headers[apiKeyHeader];
+        // Check for Bearer token
+        const authHeader = req.headers.authorization;
+        const bearerToken = authHeader?.startsWith('Bearer ')
+            ? authHeader.slice(7)
+            : null;
+        if (!apiKey && !bearerToken) {
+            throw new UnauthorizedError(`Authentication required. Provide ${config.auth.apiKeyHeader} header or Bearer token.`);
+        }
+        let user;
+        if (apiKey) {
+            // API Key authentication
+            user = await authenticateApiKey(apiKey);
+        }
+        else if (bearerToken) {
+            // OAuth Bearer token authentication
+            user = await authenticateBearerToken(bearerToken);
+        }
+        else {
+            throw new UnauthorizedError('No valid authentication method provided');
+        }
+        // Extract lens from X-Lens header (explicit selection)
+        const lensHeader = req.headers['x-lens'];
+        if (lensHeader) {
+            user.activeLens = lensHeader;
+        }
+        // Attach user to request
+        req.user = user;
+        req.activeLens = user.activeLens;
+        next();
+    }
+    catch (error) {
+        if (error instanceof UnauthorizedError || error instanceof ForbiddenError) {
+            next(error);
+        }
+        else {
+            next(new UnauthorizedError('Authentication failed'));
+        }
+    }
+}
+// ═══════════════════════════════════════════════════════════════════════════
+// API KEY AUTHENTICATION
+// ═══════════════════════════════════════════════════════════════════════════
+async function authenticateApiKey(apiKey) {
+    const config = getConfig();
+    // Validate key format
+    if (!apiKey.startsWith(config.auth.apiKeyPrefix)) {
+        throw new UnauthorizedError(`Invalid API key format. Keys must start with '${config.auth.apiKeyPrefix}'`);
+    }
+    // Validate against database
+    const keyInfo = await validateApiKey(apiKey);
+    if (!keyInfo) {
+        throw new UnauthorizedError('Invalid or expired API key');
+    }
+    if (keyInfo.revoked) {
+        throw new UnauthorizedError('API key has been revoked');
+    }
+    if (keyInfo.expiresAt && new Date(keyInfo.expiresAt) < new Date()) {
+        throw new UnauthorizedError('API key has expired');
+    }
+    return {
+        userId: keyInfo.userId,
+        authMethod: 'api_key',
+        scopes: keyInfo.scopes,
+        rateLimitTier: keyInfo.rateLimitTier,
+        apiKeyInfo: keyInfo,
+    };
+}
+// ═══════════════════════════════════════════════════════════════════════════
+// OAUTH BEARER TOKEN AUTHENTICATION
+// ═══════════════════════════════════════════════════════════════════════════
+async function authenticateBearerToken(token) {
+    const config = getConfig();
+    if (!config.oauth.enabled) {
+        throw new UnauthorizedError('OAuth authentication is not enabled');
+    }
+    // Initialize OAuth validator if needed
+    const oauthConfig = {
+        enabled: config.oauth.enabled,
+        issuer: config.oauth.issuer,
+        audience: config.oauth.clientId, // Use clientId as audience
+        jwtSecret: config.auth.jwtSecret,
+        jwtExpiry: config.auth.jwtExpiry,
+        useExternalProvider: !!config.oauth.issuer && config.oauth.issuer.startsWith('http'),
+    };
+    try {
+        initializeOAuthValidator(oauthConfig);
+    }
+    catch {
+        // Already initialized, get existing
+    }
+    const validator = getOAuthValidator();
+    const result = await validator.validate(token);
+    if (!result.success) {
+        throw new UnauthorizedError(result.error.message);
+    }
+    const validatedToken = result.data;
+    return {
+        userId: validatedToken.userId,
+        tenantId: validatedToken.tenantId,
+        authMethod: 'oauth',
+        scopes: validatedToken.scopes,
+        rateLimitTier: 'pro', // OAuth users default to pro tier
+    };
+}
+// ═══════════════════════════════════════════════════════════════════════════
+// SCOPE CHECKING
+// ═══════════════════════════════════════════════════════════════════════════
+export function requireScopes(...requiredScopes) {
+    return (req, res, next) => {
+        const user = req.user;
+        if (!user) {
+            return next(new UnauthorizedError('Authentication required'));
+        }
+        const hasAllScopes = requiredScopes.every(scope => user.scopes.includes(scope) || user.scopes.includes('admin'));
+        if (!hasAllScopes) {
+            return next(new ForbiddenError(`Insufficient permissions. Required scopes: ${requiredScopes.join(', ')}`));
+        }
+        next();
+    };
+}
+// ═══════════════════════════════════════════════════════════════════════════
+// OPTIONAL AUTH (for endpoints that work with or without auth)
+// ═══════════════════════════════════════════════════════════════════════════
+export async function optionalAuthMiddleware(req, res, next) {
+    const config = getConfig();
+    const apiKeyHeader = config.auth.apiKeyHeader.toLowerCase();
+    const apiKey = req.headers[apiKeyHeader];
+    if (apiKey) {
+        // If API key is provided, validate it
+        return authMiddleware(req, res, next);
+    }
+    // No auth provided, continue without user
+    next();
+}
+//# sourceMappingURL=auth.js.map

package/dist/http/middleware/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/http/middleware/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,cAAc,EAAc,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAoB,MAAM,qBAAqB,CAAC;AAqBpG,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,IAAI,CAAC;QACH,8BAA8B;QAC9B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAW,CAAC;QAEnD,yBAAyB;QACzB,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QAC7C,MAAM,WAAW,GAAG,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC;YACnD,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;YACrB,CAAC,CAAC,IAAI,CAAC;QAET,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,IAAI,iBAAiB,CACzB,oCAAoC,MAAM,CAAC,IAAI,CAAC,YAAY,0BAA0B,CACvF,CAAC;QACJ,CAAC;QAED,IAAI,IAAuB,CAAC;QAE5B,IAAI,MAAM,EAAE,CAAC;YACX,yBAAyB;YACzB,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;aAAM,IAAI,WAAW,EAAE,CAAC;YACvB,oCAAoC;YACpC,IAAI,GAAG,MAAM,uBAAuB,CAAC,WAAW,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,iBAAiB,CAAC,yCAAyC,CAAC,CAAC;QACzE,CAAC;QAED,uDAAuD;QACvD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAW,CAAC;QACnD,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC/B,CAAC;QAED,yBAAyB;QACxB,GAA4B,CAAC,IAAI,GAAG,IAAI,CAAC;QACzC,GAA4B,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAE3D,IAAI,EAAE,CAAC;IACT,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iBAAiB,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YAC1E,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,iBAAiB,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E,KAAK,UAAU,kBAAkB,CAAC,MAAc;IAC9C,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,sBAAsB;IACtB,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,iBAAiB,CACzB,iDAAiD,MAAM,CAAC,IAAI,CAAC,YAAY,GAAG,CAC7E,CAAC;IACJ,CAAC;IAED,4BAA4B;IAC5B,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAE7C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,iBAAiB,CAAC,4BAA4B,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,iBAAiB,CAAC,0BAA0B,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;QAClE,MAAM,IAAI,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;IACrD,CAAC;IAED,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,UAAU,EAAE,OAAO;KACpB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E,KAAK,UAAU,uBAAuB,CAAC,KAAa;IAClD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,iBAAiB,CAAC,qCAAqC,CAAC,CAAC;IACrE,CAAC;IAED,uCAAuC;IACvC,MAAM,WAAW,GAAgB;QAC/B,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;QAC7B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;QAC3B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,2BAA2B;QAC5D,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;QAChC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;QAChC,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;KACrF,CAAC;IAEF,IAAI,CAAC;QACH,wBAAwB,CAAC,WAAW,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;IAED,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC;IAEnC,OAAO;QACL,MAAM,EAAE,cAAc,CAAC,MAAM;QAC7B,QAAQ,EAAE,cAAc,CAAC,QAAQ;QACjC,UAAU,EAAE,OAAO;QACnB,MAAM,EAAE,cAAc,CAAC,MAAM;QAC7B,aAAa,EAAE,KAAK,EAAE,kCAAkC;KACzD,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,UAAU,aAAa,CAAC,GAAG,cAAwB;IACvD,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,MAAM,IAAI,GAAI,GAA4B,CAAC,IAAI,CAAC;QAEhD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,IAAI,iBAAiB,CAAC,yBAAyB,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAChD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC7D,CAAC;QAEF,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,IAAI,cAAc,CAC5B,8CAA8C,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1E,CAAC,CAAC;QACL,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,+DAA+D;AAC/D,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;IAC5D,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAW,CAAC;IAEnD,IAAI,MAAM,EAAE,CAAC;QACX,sCAAsC;QACtC,OAAO,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,0CAA0C;IAC1C,IAAI,EAAE,CAAC;AACT,CAAC"}

package/dist/http/middleware/error-handler.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Error Handling Middleware
+ *
+ * Centralized error handling for the HTTP API.
+ * Converts various error types to appropriate HTTP responses.
+ */
+import { Request, Response, NextFunction } from 'express';
+export declare class HttpError extends Error {
+    statusCode: number;
+    code?: string | undefined;
+    details?: Record<string, unknown> | undefined;
+    constructor(statusCode: number, message: string, code?: string | undefined, details?: Record<string, unknown> | undefined);
+}
+export declare class BadRequestError extends HttpError {
+    constructor(message: string, details?: Record<string, unknown>);
+}
+export declare class UnauthorizedError extends HttpError {
+    constructor(message?: string);
+}
+export declare class ForbiddenError extends HttpError {
+    constructor(message?: string);
+}
+export declare class NotFoundError extends HttpError {
+    constructor(resource: string, id?: string);
+}
+export declare class ConflictError extends HttpError {
+    constructor(message: string, details?: Record<string, unknown>);
+}
+export declare class ValidationError extends HttpError {
+    constructor(message: string, errors?: Record<string, string[]>);
+}
+export declare class RateLimitError extends HttpError {
+    constructor(retryAfter: number);
+}
+export declare class InternalError extends HttpError {
+    constructor(message?: string);
+}
+export interface ErrorResponse {
+    error: string;
+    message: string;
+    code?: string;
+    details?: Record<string, unknown>;
+    stack?: string;
+    requestId?: string;
+}
+export declare function errorHandler(err: Error, req: Request, res: Response, next: NextFunction): void;
+//# sourceMappingURL=error-handler.d.ts.map

package/dist/http/middleware/error-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-handler.d.ts","sourceRoot":"","sources":["../../../src/http/middleware/error-handler.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAqB1D,qBAAa,SAAU,SAAQ,KAAK;IAEzB,UAAU,EAAE,MAAM;IAElB,IAAI,CAAC,EAAE,MAAM;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAHjC,UAAU,EAAE,MAAM,EACzB,OAAO,EAAE,MAAM,EACR,IAAI,CAAC,EAAE,MAAM,YAAA,EACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAK3C;AAED,qBAAa,eAAgB,SAAQ,SAAS;gBAChC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED,qBAAa,iBAAkB,SAAQ,SAAS;gBAClC,OAAO,GAAE,MAAkC;CAIxD;AAED,qBAAa,cAAe,SAAQ,SAAS;gBAC/B,OAAO,GAAE,MAAwB;CAI9C;AAED,qBAAa,aAAc,SAAQ,SAAS;gBAC9B,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM;CAK1C;AAED,qBAAa,aAAc,SAAQ,SAAS;gBAC9B,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED,qBAAa,eAAgB,SAAQ,SAAS;gBAChC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;CAI/D;AAED,qBAAa,cAAe,SAAQ,SAAS;gBAC/B,UAAU,EAAE,MAAM;CAI/B;AAED,qBAAa,aAAc,SAAQ,SAAS;gBAC9B,OAAO,GAAE,MAAgC;CAItD;AAMD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,YAAY,CAC1B,GAAG,EAAE,KAAK,EACV,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,IAAI,CAmIN"}