promptspeak-mcp-server 0.1.0

package/dist/http/middleware/error-handler.js

@@ -0,0 +1,213 @@
+/**
+ * Error Handling Middleware
+ *
+ * Centralized error handling for the HTTP API.
+ * Converts various error types to appropriate HTTP responses.
+ */
+import { getConfig } from '../config.js';
+import { createSecureLogger } from '../../core/security/index.js';
+import { PromptSpeakError, ValidationError as CoreValidationError, NotFoundError as CoreNotFoundError, ConflictError as CoreConflictError, RateLimitError as CoreRateLimitError, AuthenticationError as CoreAuthenticationError, ForbiddenError as CoreForbiddenError, InternalError as CoreInternalError, } from '../../core/errors/index.js';
+// Use SecureLogger for error handling - error data may contain sensitive info
+const logger = createSecureLogger('ErrorHandler');
+// ═══════════════════════════════════════════════════════════════════════════
+// CUSTOM ERROR TYPES
+// ═══════════════════════════════════════════════════════════════════════════
+export class HttpError extends Error {
+    statusCode;
+    code;
+    details;
+    constructor(statusCode, message, code, details) {
+        super(message);
+        this.statusCode = statusCode;
+        this.code = code;
+        this.details = details;
+        this.name = 'HttpError';
+    }
+}
+export class BadRequestError extends HttpError {
+    constructor(message, details) {
+        super(400, message, 'BAD_REQUEST', details);
+        this.name = 'BadRequestError';
+    }
+}
+export class UnauthorizedError extends HttpError {
+    constructor(message = 'Authentication required') {
+        super(401, message, 'UNAUTHORIZED');
+        this.name = 'UnauthorizedError';
+    }
+}
+export class ForbiddenError extends HttpError {
+    constructor(message = 'Access denied') {
+        super(403, message, 'FORBIDDEN');
+        this.name = 'ForbiddenError';
+    }
+}
+export class NotFoundError extends HttpError {
+    constructor(resource, id) {
+        const message = id ? `${resource} '${id}' not found` : `${resource} not found`;
+        super(404, message, 'NOT_FOUND', { resource, id });
+        this.name = 'NotFoundError';
+    }
+}
+export class ConflictError extends HttpError {
+    constructor(message, details) {
+        super(409, message, 'CONFLICT', details);
+        this.name = 'ConflictError';
+    }
+}
+export class ValidationError extends HttpError {
+    constructor(message, errors) {
+        super(422, message, 'VALIDATION_ERROR', { errors });
+        this.name = 'ValidationError';
+    }
+}
+export class RateLimitError extends HttpError {
+    constructor(retryAfter) {
+        super(429, 'Rate limit exceeded', 'RATE_LIMIT', { retryAfter });
+        this.name = 'RateLimitError';
+    }
+}
+export class InternalError extends HttpError {
+    constructor(message = 'Internal server error') {
+        super(500, message, 'INTERNAL_ERROR');
+        this.name = 'InternalError';
+    }
+}
+export function errorHandler(err, req, res, next) {
+    const config = getConfig();
+    const requestId = req.headers['x-request-id'];
+    // Log the error
+    logger.error(`Request error: ${err.message}`, err, {
+        requestId,
+        method: req.method,
+        path: req.path,
+    });
+    // Determine status code and build response
+    let statusCode = 500;
+    let response = {
+        error: 'Internal Server Error',
+        message: 'An unexpected error occurred',
+        requestId,
+    };
+    if (err instanceof HttpError) {
+        statusCode = err.statusCode;
+        response = {
+            error: err.name.replace('Error', ''),
+            message: err.message,
+            code: err.code,
+            details: err.details,
+            requestId,
+        };
+    }
+    else if (err instanceof CoreValidationError) {
+        // Adapt core ValidationError to HTTP 422
+        statusCode = 422;
+        response = {
+            error: 'ValidationError',
+            message: err.message,
+            code: 'VALIDATION_ERROR',
+            details: err.details,
+            requestId,
+        };
+    }
+    else if (err instanceof CoreNotFoundError) {
+        // Adapt core NotFoundError to HTTP 404
+        statusCode = 404;
+        response = {
+            error: 'NotFound',
+            message: err.message,
+            code: 'NOT_FOUND',
+            details: { resourceType: err.resourceType, resourceId: err.resourceId },
+            requestId,
+        };
+    }
+    else if (err instanceof CoreConflictError) {
+        // Adapt core ConflictError to HTTP 409
+        statusCode = 409;
+        response = {
+            error: 'Conflict',
+            message: err.message,
+            code: 'CONFLICT',
+            details: err.details,
+            requestId,
+        };
+    }
+    else if (err instanceof CoreRateLimitError) {
+        // Adapt core RateLimitError to HTTP 429
+        statusCode = 429;
+        response = {
+            error: 'RateLimit',
+            message: err.message,
+            code: 'RATE_LIMIT',
+            details: { retryAfter: err.retryAfter, limit: err.limit, window: err.window },
+            requestId,
+        };
+    }
+    else if (err instanceof CoreAuthenticationError) {
+        // Adapt core AuthenticationError to HTTP 401
+        statusCode = 401;
+        response = {
+            error: 'Unauthorized',
+            message: err.message,
+            code: 'UNAUTHORIZED',
+            requestId,
+        };
+    }
+    else if (err instanceof CoreForbiddenError) {
+        // Adapt core ForbiddenError to HTTP 403
+        statusCode = 403;
+        response = {
+            error: 'Forbidden',
+            message: err.message,
+            code: 'FORBIDDEN',
+            details: err.resource ? { resource: err.resource } : undefined,
+            requestId,
+        };
+    }
+    else if (err instanceof CoreInternalError) {
+        // Adapt core InternalError to HTTP 500
+        statusCode = 500;
+        response = {
+            error: 'InternalError',
+            message: config.nodeEnv === 'production' ? 'Internal server error' : err.message,
+            code: 'INTERNAL_ERROR',
+            requestId,
+        };
+    }
+    else if (err instanceof PromptSpeakError) {
+        // Catch-all for other core errors - map by status code if available
+        statusCode = err.statusCode ?? 500;
+        response = {
+            error: err.name.replace('Error', ''),
+            message: err.message,
+            code: err.code,
+            details: err.details,
+            requestId,
+        };
+    }
+    else if (err.name === 'SyntaxError' && 'body' in err) {
+        // JSON parse error
+        statusCode = 400;
+        response = {
+            error: 'Bad Request',
+            message: 'Invalid JSON in request body',
+            code: 'INVALID_JSON',
+            requestId,
+        };
+    }
+    else if (err.message?.includes('CORS')) {
+        statusCode = 403;
+        response = {
+            error: 'Forbidden',
+            message: 'CORS policy violation',
+            code: 'CORS_ERROR',
+            requestId,
+        };
+    }
+    // Include stack trace in development
+    if (config.nodeEnv === 'development' && err.stack) {
+        response.stack = err.stack;
+    }
+    res.status(statusCode).json(response);
+}
+//# sourceMappingURL=error-handler.js.map

package/dist/http/middleware/error-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-handler.js","sourceRoot":"","sources":["../../../src/http/middleware/error-handler.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EACL,gBAAgB,EAChB,eAAe,IAAI,mBAAmB,EACtC,aAAa,IAAI,iBAAiB,EAClC,aAAa,IAAI,iBAAiB,EAClC,cAAc,IAAI,kBAAkB,EACpC,mBAAmB,IAAI,uBAAuB,EAC9C,cAAc,IAAI,kBAAkB,EACpC,aAAa,IAAI,iBAAiB,GACnC,MAAM,4BAA4B,CAAC;AAEpC,8EAA8E;AAC9E,MAAM,MAAM,GAAG,kBAAkB,CAAC,cAAc,CAAC,CAAC;AAElD,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,MAAM,OAAO,SAAU,SAAQ,KAAK;IAEzB;IAEA;IACA;IAJT,YACS,UAAkB,EACzB,OAAe,EACR,IAAa,EACb,OAAiC;QAExC,KAAK,CAAC,OAAO,CAAC,CAAC;QALR,eAAU,GAAV,UAAU,CAAQ;QAElB,SAAI,GAAJ,IAAI,CAAS;QACb,YAAO,GAAP,OAAO,CAA0B;QAGxC,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,OAAO,eAAgB,SAAQ,SAAS;IAC5C,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,SAAS;IAC9C,YAAY,UAAkB,yBAAyB;QACrD,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,SAAS;IAC3C,YAAY,UAAkB,eAAe;QAC3C,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,SAAS;IAC1C,YAAY,QAAgB,EAAE,EAAW;QACvC,MAAM,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,QAAQ,YAAY,CAAC;QAC/E,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,SAAS;IAC1C,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,OAAO,eAAgB,SAAQ,SAAS;IAC5C,YAAY,OAAe,EAAE,MAAiC;QAC5D,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,SAAS;IAC3C,YAAY,UAAkB;QAC5B,KAAK,CAAC,GAAG,EAAE,qBAAqB,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,SAAS;IAC1C,YAAY,UAAkB,uBAAuB;QACnD,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAeD,MAAM,UAAU,YAAY,CAC1B,GAAU,EACV,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAW,CAAC;IAExD,gBAAgB;IAChB,MAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE;QACjD,SAAS;QACT,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI;KACf,CAAC,CAAC;IAEH,2CAA2C;IAC3C,IAAI,UAAU,GAAG,GAAG,CAAC;IACrB,IAAI,QAAQ,GAAkB;QAC5B,KAAK,EAAE,uBAAuB;QAC9B,OAAO,EAAE,8BAA8B;QACvC,SAAS;KACV,CAAC;IAEF,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;QAC7B,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QAC5B,QAAQ,GAAG;YACT,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACpC,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS;SACV,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,YAAY,mBAAmB,EAAE,CAAC;QAC9C,yCAAyC;QACzC,UAAU,GAAG,GAAG,CAAC;QACjB,QAAQ,GAAG;YACT,KAAK,EAAE,iBAAiB;YACxB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS;SACV,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;QAC5C,uCAAuC;QACvC,UAAU,GAAG,GAAG,CAAC;QACjB,QAAQ,GAAG;YACT,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE;YACvE,SAAS;SACV,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;QAC5C,uCAAuC;QACvC,UAAU,GAAG,GAAG,CAAC;QACjB,QAAQ,GAAG;YACT,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS;SACV,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;QAC7C,wCAAwC;QACxC,UAAU,GAAG,GAAG,CAAC;QACjB,QAAQ,GAAG;YACT,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;YAC7E,SAAS;SACV,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,YAAY,uBAAuB,EAAE,CAAC;QAClD,6CAA6C;QAC7C,UAAU,GAAG,GAAG,CAAC;QACjB,QAAQ,GAAG;YACT,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,cAAc;YACpB,SAAS;SACV,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;QAC7C,wCAAwC;QACxC,UAAU,GAAG,GAAG,CAAC;QACjB,QAAQ,GAAG;YACT,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;YAC9D,SAAS;SACV,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;QAC5C,uCAAuC;QACvC,UAAU,GAAG,GAAG,CAAC;QACjB,QAAQ,GAAG;YACT,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO;YAChF,IAAI,EAAE,gBAAgB;YACtB,SAAS;SACV,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;QAC3C,oEAAoE;QACpE,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC;QACnC,QAAQ,GAAG;YACT,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACpC,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS;SACV,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QACvD,mBAAmB;QACnB,UAAU,GAAG,GAAG,CAAC;QACjB,QAAQ,GAAG;YACT,KAAK,EAAE,aAAa;YACpB,OAAO,EAAE,8BAA8B;YACvC,IAAI,EAAE,cAAc;YACpB,SAAS;SACV,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,UAAU,GAAG,GAAG,CAAC;QACjB,QAAQ,GAAG;YACT,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,uBAAuB;YAChC,IAAI,EAAE,YAAY;YAClB,SAAS;SACV,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,IAAI,MAAM,CAAC,OAAO,KAAK,aAAa,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAClD,QAAQ,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IAC7B,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACxC,CAAC"}

package/dist/http/middleware/index.d.ts

@@ -0,0 +1,38 @@
+/**
+ * HTTP Middleware Module
+ *
+ * Consolidates all middleware configuration for the Express app.
+ * This follows the same pattern as the MCP server's modular architecture.
+ */
+import { Application } from 'express';
+import { HttpConfig } from '../config.js';
+export { authMiddleware, optionalAuthMiddleware, requireScopes } from './auth.js';
+export type { AuthenticatedRequest, AuthenticatedUser } from './auth.js';
+export { errorHandler, HttpError, BadRequestError, UnauthorizedError, ForbiddenError, NotFoundError, ConflictError, ValidationError, RateLimitError, InternalError } from './error-handler.js';
+export { requestLogger } from './request-logger.js';
+/**
+ * Configure security middleware (helmet, cors).
+ */
+export declare function configureSecurityMiddleware(app: Application, config: HttpConfig): void;
+/**
+ * Configure rate limiting middleware.
+ */
+export declare function configureRateLimiting(app: Application, config: HttpConfig): void;
+/**
+ * Configure body parsing middleware.
+ */
+export declare function configureBodyParsing(app: Application): void;
+/**
+ * Configure request logging middleware.
+ */
+export declare function configureRequestLogging(app: Application): void;
+/**
+ * Configure 404 handler.
+ */
+export declare function configure404Handler(app: Application): void;
+/**
+ * Configure all middleware for the Express app.
+ * This is the main entry point for middleware configuration.
+ */
+export declare function configureMiddleware(app: Application, config: HttpConfig): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/http/middleware/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/http/middleware/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAmC,MAAM,SAAS,CAAC;AAKvE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAI1C,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAClF,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,iBAAiB,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC/L,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CAqCtF;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CAyBhF;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAG3D;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAE9D;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAQ1D;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CAY9E"}

package/dist/http/middleware/index.js

@@ -0,0 +1,124 @@
+/**
+ * HTTP Middleware Module
+ *
+ * Consolidates all middleware configuration for the Express app.
+ * This follows the same pattern as the MCP server's modular architecture.
+ */
+import express from 'express';
+import helmet from 'helmet';
+import cors from 'cors';
+import rateLimit from 'express-rate-limit';
+import { requestLogger } from './request-logger.js';
+// Re-export middleware for direct use
+export { authMiddleware, optionalAuthMiddleware, requireScopes } from './auth.js';
+export { errorHandler, HttpError, BadRequestError, UnauthorizedError, ForbiddenError, NotFoundError, ConflictError, ValidationError, RateLimitError, InternalError } from './error-handler.js';
+export { requestLogger } from './request-logger.js';
+/**
+ * Configure security middleware (helmet, cors).
+ */
+export function configureSecurityMiddleware(app, config) {
+    // Helmet for security headers
+    app.use(helmet({
+        contentSecurityPolicy: {
+            directives: {
+                defaultSrc: ["'self'"],
+                styleSrc: ["'self'", "'unsafe-inline'"],
+                scriptSrc: ["'self'"],
+                imgSrc: ["'self'", "data:"],
+            },
+        },
+        crossOriginEmbedderPolicy: false, // Required for some API clients
+    }));
+    // CORS configuration for CustomGPT and other clients
+    app.use(cors({
+        origin: (origin, callback) => {
+            // Allow requests with no origin (like mobile apps or curl)
+            if (!origin) {
+                callback(null, true);
+                return;
+            }
+            if (config.cors.origins.includes(origin) || config.cors.origins.includes('*')) {
+                callback(null, true);
+            }
+            else if (config.nodeEnv === 'development') {
+                // In development, allow any origin
+                callback(null, true);
+            }
+            else {
+                callback(new Error('Not allowed by CORS'));
+            }
+        },
+        credentials: config.cors.credentials,
+        methods: ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'OPTIONS'],
+        allowedHeaders: ['Content-Type', 'Authorization', config.auth.apiKeyHeader, 'X-Lens'],
+        exposedHeaders: ['X-Request-Id', 'X-Rate-Limit-Remaining'],
+    }));
+}
+/**
+ * Configure rate limiting middleware.
+ */
+export function configureRateLimiting(app, config) {
+    const limiter = rateLimit({
+        windowMs: config.rateLimit.windowMs,
+        max: config.rateLimit.maxRequests,
+        standardHeaders: true,
+        legacyHeaders: false,
+        message: {
+            error: 'Too many requests',
+            message: 'Rate limit exceeded. Please try again later.',
+            retryAfter: Math.ceil(config.rateLimit.windowMs / 1000),
+        },
+        keyGenerator: (req) => {
+            // Use API key if present, otherwise IP
+            const apiKey = req.headers[config.auth.apiKeyHeader.toLowerCase()];
+            if (apiKey) {
+                return `key:${apiKey.substring(0, 16)}`;
+            }
+            // Use x-forwarded-for or direct IP, normalized for IPv6
+            const ip = req.headers['x-forwarded-for']?.toString().split(',')[0].trim() || req.ip || 'unknown';
+            return `ip:${ip}`;
+        },
+        validate: { xForwardedForHeader: false }, // Disable IPv6 validation warning
+    });
+    app.use('/api/', limiter);
+}
+/**
+ * Configure body parsing middleware.
+ */
+export function configureBodyParsing(app) {
+    app.use(express.json({ limit: '10mb' }));
+    app.use(express.urlencoded({ extended: true, limit: '10mb' }));
+}
+/**
+ * Configure request logging middleware.
+ */
+export function configureRequestLogging(app) {
+    app.use(requestLogger);
+}
+/**
+ * Configure 404 handler.
+ */
+export function configure404Handler(app) {
+    app.use((req, res) => {
+        res.status(404).json({
+            error: 'Not Found',
+            message: `Route ${req.method} ${req.path} not found`,
+            path: req.path,
+        });
+    });
+}
+/**
+ * Configure all middleware for the Express app.
+ * This is the main entry point for middleware configuration.
+ */
+export function configureMiddleware(app, config) {
+    // Security first
+    configureSecurityMiddleware(app, config);
+    // Rate limiting on API routes
+    configureRateLimiting(app, config);
+    // Body parsing
+    configureBodyParsing(app);
+    // Request logging
+    configureRequestLogging(app);
+}
+//# sourceMappingURL=index.js.map

package/dist/http/middleware/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/http/middleware/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,SAAS,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,sCAAsC;AACtC,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAElF,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,iBAAiB,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC/L,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD;;GAEG;AACH,MAAM,UAAU,2BAA2B,CAAC,GAAgB,EAAE,MAAkB;IAC9E,8BAA8B;IAC9B,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;QACb,qBAAqB,EAAE;YACrB,UAAU,EAAE;gBACV,UAAU,EAAE,CAAC,QAAQ,CAAC;gBACtB,QAAQ,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC;gBACvC,SAAS,EAAE,CAAC,QAAQ,CAAC;gBACrB,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;aAC5B;SACF;QACD,yBAAyB,EAAE,KAAK,EAAE,gCAAgC;KACnE,CAAC,CAAC,CAAC;IAEJ,qDAAqD;IACrD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;QACX,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;YAC3B,2DAA2D;YAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9E,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACvB,CAAC;iBAAM,IAAI,MAAM,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;gBAC5C,mCAAmC;gBACnC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;QACpC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC7D,cAAc,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC;QACrF,cAAc,EAAE,CAAC,cAAc,EAAE,wBAAwB,CAAC;KAC3D,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAgB,EAAE,MAAkB;IACxE,MAAM,OAAO,GAAG,SAAS,CAAC;QACxB,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ;QACnC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW;QACjC,eAAe,EAAE,IAAI;QACrB,aAAa,EAAE,KAAK;QACpB,OAAO,EAAE;YACP,KAAK,EAAE,mBAAmB;YAC1B,OAAO,EAAE,8CAA8C;YACvD,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,GAAG,IAAI,CAAC;SACxD;QACD,YAAY,EAAE,CAAC,GAAY,EAAE,EAAE;YAC7B,uCAAuC;YACvC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAW,CAAC;YAC7E,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YAC1C,CAAC;YACD,wDAAwD;YACxD,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,SAAS,CAAC;YAClG,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QACD,QAAQ,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,kCAAkC;KAC7E,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAgB;IACnD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAgB;IACtD,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAgB;IAClD,GAAG,CAAC,GAAG,CAAC,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACtC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,SAAS,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,YAAY;YACpD,IAAI,EAAE,GAAG,CAAC,IAAI;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAgB,EAAE,MAAkB;IACtE,iBAAiB;IACjB,2BAA2B,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAEzC,8BAA8B;IAC9B,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAEnC,eAAe;IACf,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAE1B,kBAAkB;IAClB,uBAAuB,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC"}

package/dist/http/middleware/request-logger.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Request Logging Middleware
+ *
+ * Logs incoming requests and outgoing responses with timing information.
+ */
+import { Request, Response, NextFunction } from 'express';
+export declare function requestLogger(req: Request, res: Response, next: NextFunction): void;
+//# sourceMappingURL=request-logger.d.ts.map

package/dist/http/middleware/request-logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-logger.d.ts","sourceRoot":"","sources":["../../../src/http/middleware/request-logger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAQ1D,wBAAgB,aAAa,CAC3B,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,IAAI,CAmDN"}

package/dist/http/middleware/request-logger.js

@@ -0,0 +1,58 @@
+/**
+ * Request Logging Middleware
+ *
+ * Logs incoming requests and outgoing responses with timing information.
+ */
+import { v4 as uuidv4 } from 'uuid';
+import { getConfig } from '../config.js';
+import { createSecureLogger } from '../../core/security/index.js';
+// Use SecureLogger for HTTP requests - protects query params and headers
+const logger = createSecureLogger('RequestLogger');
+export function requestLogger(req, res, next) {
+    const config = getConfig();
+    const startTime = Date.now();
+    // Generate or use existing request ID
+    const requestId = req.headers['x-request-id'] || uuidv4();
+    req.headers['x-request-id'] = requestId;
+    res.setHeader('X-Request-Id', requestId);
+    // Log request
+    if (config.logging.level === 'debug') {
+        logger.debug(`--> ${req.method} ${req.path}`, {
+            requestId,
+            query: req.query,
+            headers: {
+                'content-type': req.headers['content-type'],
+                'x-api-key': req.headers['x-api-key'] ? '[REDACTED]' : undefined,
+                'x-lens': req.headers['x-lens'],
+            },
+        });
+    }
+    // Capture response
+    const originalSend = res.send;
+    res.send = function (body) {
+        const duration = Date.now() - startTime;
+        // Log response
+        const logLevel = res.statusCode >= 500 ? 'error' :
+            res.statusCode >= 400 ? 'warn' : 'info';
+        if (config.logging.level === 'debug' || logLevel !== 'info') {
+            const logData = {
+                requestId,
+                statusCode: res.statusCode,
+                duration,
+            };
+            const message = `<-- ${req.method} ${req.path} ${res.statusCode} ${duration}ms`;
+            if (logLevel === 'error') {
+                logger.error(message, undefined, logData);
+            }
+            else if (logLevel === 'warn') {
+                logger.warn(message, logData);
+            }
+            else {
+                logger.info(message, logData);
+            }
+        }
+        return originalSend.call(this, body);
+    };
+    next();
+}
+//# sourceMappingURL=request-logger.js.map

package/dist/http/middleware/request-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-logger.js","sourceRoot":"","sources":["../../../src/http/middleware/request-logger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAElE,yEAAyE;AACzE,MAAM,MAAM,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAC;AAEnD,MAAM,UAAU,aAAa,CAC3B,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,sCAAsC;IACtC,MAAM,SAAS,GAAI,GAAG,CAAC,OAAO,CAAC,cAAc,CAAY,IAAI,MAAM,EAAE,CAAC;IACtE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC;IACxC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IAEzC,cAAc;IACd,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE;YAC5C,SAAS;YACT,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,OAAO,EAAE;gBACP,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC;gBAC3C,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;gBAChE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;aAChC;SACF,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB;IACnB,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC;IAC9B,GAAG,CAAC,IAAI,GAAG,UAAU,IAAI;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,eAAe;QACf,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACjC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAEzD,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC5D,MAAM,OAAO,GAAG;gBACd,SAAS;gBACT,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,QAAQ;aACT,CAAC;YACF,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,UAAU,IAAI,QAAQ,IAAI,CAAC;YAChF,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACzB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YAC5C,CAAC;iBAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,IAAI,EAAE,CAAC;AACT,CAAC"}

package/dist/http/routes/agent-runtime.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Agent Runtime Routes
+ *
+ * REST endpoints for agent management, heartbeats, and status updates.
+ * Powers the ops-center UI.
+ */
+declare const router: import("express-serve-static-core").Router;
+export default router;
+//# sourceMappingURL=agent-runtime.d.ts.map

package/dist/http/routes/agent-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-runtime.d.ts","sourceRoot":"","sources":["../../../src/http/routes/agent-runtime.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,QAAA,MAAM,MAAM,4CAAW,CAAC;AA+bxB,eAAe,MAAM,CAAC"}