sdlc-agent-4-enterprise-server 1.0.0

package/dist/modules/web/utils/GitUrlParser.js

@@ -0,0 +1,32 @@
+/**
+ * Git URL parser for GitHub/GitLab repositories.
+ * Extracts host, owner, repo, optional path and ref from URLs.
+ */
+import { WebToolError } from '../models/WebError.js';
+const SUPPORTED_HOSTS = new Set(['github.com', 'gitlab.com']);
+export function parseGitUrl(urlStr) {
+    let url;
+    try {
+        url = new URL(urlStr);
+    }
+    catch {
+        throw new WebToolError('INVALID_URL', `Cannot parse repository URL: ${urlStr}`);
+    }
+    if (!SUPPORTED_HOSTS.has(url.hostname)) {
+        throw new WebToolError('INVALID_URL', `Unsupported git host: ${url.hostname}`);
+    }
+    const parts = url.pathname.split('/').filter(Boolean);
+    if (parts.length < 2) {
+        throw new WebToolError('INVALID_URL', `Cannot parse owner/repo from: ${urlStr}`);
+    }
+    const owner = parts[0];
+    const repo = parts[1].replace(/\.git$/, '');
+    let path;
+    let ref;
+    if (parts.length > 3 && (parts[2] === 'blob' || parts[2] === 'tree')) {
+        ref = parts[3];
+        path = parts.slice(4).join('/') || undefined;
+    }
+    return { host: url.hostname, owner, repo, path, ref };
+}
+//# sourceMappingURL=GitUrlParser.js.map

package/dist/modules/web/utils/GitUrlParser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitUrlParser.js","sourceRoot":"","sources":["../../../../src/modules/web/utils/GitUrlParser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAUrD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;AAE9D,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,gCAAgC,MAAM,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,yBAAyB,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,iCAAiC,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,IAAwB,CAAC;IAC7B,IAAI,GAAuB,CAAC;IAE5B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,EAAE,CAAC;QACrE,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACf,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;IAC/C,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACxD,CAAC"}

package/dist/modules/web/utils/HtmlExtractor.d.ts

@@ -0,0 +1,9 @@
+/**
+ * HTML to text extraction utility.
+ * Strips tags, extracts text, supports CSS selector extraction.
+ */
+export declare class HtmlExtractor {
+    toText(html: string): string;
+    extractBySelector(html: string, selector: string): string;
+    private selectorToRegex;
+}

package/dist/modules/web/utils/HtmlExtractor.js

@@ -0,0 +1,46 @@
+/**
+ * HTML to text extraction utility.
+ * Strips tags, extracts text, supports CSS selector extraction.
+ */
+export class HtmlExtractor {
+    toText(html) {
+        if (!html)
+            return '';
+        let text = html;
+        text = text.replace(/<script[\s\S]*?<\/script>/gi, '');
+        text = text.replace(/<style[\s\S]*?<\/style>/gi, '');
+        text = text.replace(/<br\s*\/?>/gi, '\n');
+        text = text.replace(/<\/p>/gi, '\n');
+        text = text.replace(/<\/div>/gi, '\n');
+        text = text.replace(/<\/li>/gi, '\n');
+        text = text.replace(/<\/h[1-6]>/gi, '\n');
+        text = text.replace(/<[^>]+>/g, '');
+        text = text.replace(/&nbsp;/g, ' ');
+        text = text.replace(/&amp;/g, '&');
+        text = text.replace(/&lt;/g, '<');
+        text = text.replace(/&gt;/g, '>');
+        text = text.replace(/&quot;/g, '"');
+        text = text.replace(/&#39;/g, "'");
+        text = text.replace(/\n{3,}/g, '\n\n');
+        return text.trim();
+    }
+    extractBySelector(html, selector) {
+        const regex = this.selectorToRegex(selector);
+        const match = html.match(regex);
+        if (!match)
+            return '';
+        return this.toText(match[0]);
+    }
+    selectorToRegex(selector) {
+        if (selector.startsWith('.')) {
+            const cls = selector.slice(1);
+            return new RegExp(`<[^>]+class="[^"]*${cls}[^"]*"[^>]*>[\\s\\S]*?<\\/[^>]+>`, 'i');
+        }
+        if (selector.startsWith('#')) {
+            const id = selector.slice(1);
+            return new RegExp(`<[^>]+id="${id}"[^>]*>[\\s\\S]*?<\\/[^>]+>`, 'i');
+        }
+        return new RegExp(`<${selector}[^>]*>[\\s\\S]*?<\\/${selector}>`, 'i');
+    }
+}
+//# sourceMappingURL=HtmlExtractor.js.map

package/dist/modules/web/utils/HtmlExtractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HtmlExtractor.js","sourceRoot":"","sources":["../../../../src/modules/web/utils/HtmlExtractor.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,OAAO,aAAa;IACxB,MAAM,CAAC,IAAY;QACjB,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC;QACrB,IAAI,IAAI,GAAG,IAAI,CAAC;QAChB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;QACrD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACrC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC;IAED,iBAAiB,CAAC,IAAY,EAAE,QAAgB;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IAEO,eAAe,CAAC,QAAgB;QACtC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC9B,OAAO,IAAI,MAAM,CAAC,qBAAqB,GAAG,kCAAkC,EAAE,GAAG,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7B,OAAO,IAAI,MAAM,CAAC,aAAa,EAAE,6BAA6B,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,IAAI,MAAM,CAAC,IAAI,QAAQ,uBAAuB,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAC;IACzE,CAAC;CACF"}

package/dist/modules/web/utils/UrlValidator.d.ts

@@ -0,0 +1,5 @@
+/**
+ * URL validation utility.
+ * Ensures URLs are well-formed and use allowed protocols.
+ */
+export declare function validateUrl(urlStr: string): URL;

package/dist/modules/web/utils/UrlValidator.js

@@ -0,0 +1,23 @@
+/**
+ * URL validation utility.
+ * Ensures URLs are well-formed and use allowed protocols.
+ */
+import { WebToolError } from '../models/WebError.js';
+const ALLOWED_PROTOCOLS = new Set(['http:', 'https:']);
+export function validateUrl(urlStr) {
+    if (!urlStr || typeof urlStr !== 'string') {
+        throw new WebToolError('INVALID_URL', 'URL cannot be empty');
+    }
+    let url;
+    try {
+        url = new URL(urlStr);
+    }
+    catch {
+        throw new WebToolError('INVALID_URL', `Invalid URL format: ${urlStr}`);
+    }
+    if (!ALLOWED_PROTOCOLS.has(url.protocol)) {
+        throw new WebToolError('INVALID_URL', `Protocol not allowed: ${url.protocol}`);
+    }
+    return url;
+}
+//# sourceMappingURL=UrlValidator.js.map

package/dist/modules/web/utils/UrlValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UrlValidator.js","sourceRoot":"","sources":["../../../../src/modules/web/utils/UrlValidator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEvD,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,uBAAuB,MAAM,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,yBAAyB,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/server/HttpServer.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Hono HTTP server setup with all routes and middleware.
+ * Implements: UC-2, UC-7, BR-35, BR-37
+ */
+import { Hono } from 'hono';
+import type { Logger } from 'pino';
+import type { ModuleRegistry } from '../modules/ModuleRegistry.js';
+export interface HttpServerOptions {
+    port: number;
+    host: string;
+    logger: Logger;
+    registry: ModuleRegistry;
+    version: string;
+}
+export declare class HttpServer {
+    private options;
+    private app;
+    private server;
+    private logger;
+    private port;
+    private host;
+    private _isRunning;
+    constructor(options: HttpServerOptions);
+    private createApp;
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    get isRunning(): boolean;
+    get honoApp(): Hono;
+    private registerMcpConfigRoutes;
+}

package/dist/server/HttpServer.js

@@ -0,0 +1,108 @@
+/**
+ * Hono HTTP server setup with all routes and middleware.
+ * Implements: UC-2, UC-7, BR-35, BR-37
+ */
+import { Hono } from 'hono';
+import { serve } from '@hono/node-server';
+import { ToolRouter } from '../tool-router/ToolRouter.js';
+import { createHealthRoute } from './routes/health.js';
+import { createToolsRoute } from './routes/tools.js';
+import { createApiRoute } from './routes/api.js';
+import { createAdminRoute } from './routes/admin.js';
+import { createMcpConfigRoutes } from '../modules/orchestration/McpConfigRoutes.js';
+import { McpConfigService } from '../modules/orchestration/McpConfigService.js';
+import { createRequestLogger } from './middleware/request-logger.js';
+import { createErrorHandler } from './middleware/error-handler.js';
+import { localhostOnly } from './middleware/localhost-only.js';
+import { rateLimiter } from './middleware/rate-limiter.js';
+import { getMcpServer, registerTransport } from './mcpServer.js';
+import { WebStandardStreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js';
+export class HttpServer {
+    options;
+    app;
+    server = null;
+    logger;
+    port;
+    host;
+    _isRunning = false;
+    constructor(options) {
+        this.options = options;
+        this.logger = options.logger;
+        this.port = options.port;
+        this.host = options.host;
+        this.app = this.createApp();
+    }
+    createApp() {
+        const app = new Hono();
+        const toolRouter = new ToolRouter(this.options.registry, this.logger);
+        // Global middleware
+        app.use('*', localhostOnly);
+        app.use('*', createRequestLogger(this.logger));
+        app.use('/api/admin/*', rateLimiter); // 100 req/min per IP on admin API
+        app.onError(createErrorHandler(this.logger));
+        // Routes
+        const healthRoute = createHealthRoute(this.options.registry, this.options.version);
+        const toolsRoute = createToolsRoute(toolRouter, this.logger);
+        const apiRoute = createApiRoute(this.options.registry, this.logger);
+        const adminRoute = createAdminRoute(this.logger, this.options.registry);
+        app.route('/', healthRoute);
+        app.route('/', toolsRoute);
+        app.route('/', apiRoute);
+        app.route('/', adminRoute);
+        // MCP Config REST API (Story 13 — config persistence)
+        this.registerMcpConfigRoutes(app);
+        // MCP Streamable HTTP endpoint
+        app.all('/mcp', async (c) => {
+            const transport = new WebStandardStreamableHTTPServerTransport();
+            registerTransport(transport);
+            const server = getMcpServer(this.options.registry, this.logger);
+            await server.connect(transport);
+            return transport.handleRequest(c.req.raw);
+        });
+        return app;
+    }
+    async start() {
+        return new Promise((resolve) => {
+            this.server = serve({
+                fetch: this.app.fetch,
+                port: this.port,
+                hostname: this.host,
+            }, (info) => {
+                this._isRunning = true;
+                this.logger.info({ port: info.port, host: this.host }, 'Backend server started');
+                resolve();
+            });
+        });
+    }
+    async stop() {
+        if (this.server) {
+            this.server.close();
+            this._isRunning = false;
+            this.logger.info('Backend server stopped');
+        }
+    }
+    get isRunning() {
+        return this._isRunning;
+    }
+    get honoApp() {
+        return this.app;
+    }
+    registerMcpConfigRoutes(app) {
+        const orchestration = this.options.registry.getModule('orchestration');
+        if (!orchestration) {
+            this.logger.warn('OrchestrationModule not found, skipping MCP config routes');
+            return;
+        }
+        const clientManager = orchestration.getClientManager?.();
+        if (!clientManager) {
+            this.logger.warn('McpClientManager not available, skipping MCP config routes');
+            return;
+        }
+        const cfg = { workspace: process.env.CODE_INTEL_WORKSPACE || process.cwd(), dataDir: process.env.CODE_INTEL_DATA_DIR || '.code-intel' };
+        const configService = new McpConfigService(cfg.workspace, cfg.dataDir, this.logger);
+        const mcpConfigApp = createMcpConfigRoutes(configService, clientManager, this.logger);
+        app.route('/', mcpConfigApp);
+        this.logger.info('MCP Config REST API registered at /api/mcp-servers');
+    }
+}
+//# sourceMappingURL=HttpServer.js.map

package/dist/server/HttpServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HttpServer.js","sourceRoot":"","sources":["../../src/server/HttpServer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAM1C,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,8CAA8C,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACjE,OAAO,EAAE,wCAAwC,EAAE,MAAM,+DAA+D,CAAC;AAUzH,MAAM,OAAO,UAAU;IAQD;IAPZ,GAAG,CAAO;IACV,MAAM,GAAoC,IAAI,CAAC;IAC/C,MAAM,CAAS;IACf,IAAI,CAAS;IACb,IAAI,CAAS;IACb,UAAU,GAAG,KAAK,CAAC;IAE3B,YAAoB,OAA0B;QAA1B,YAAO,GAAP,OAAO,CAAmB;QAC5C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAC9B,CAAC;IAEO,SAAS;QACf,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAEtE,oBAAoB;QACpB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAC5B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/C,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,kCAAkC;QACxE,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAE7C,SAAS;QACT,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACnF,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAExE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC5B,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC3B,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACzB,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAE3B,sDAAsD;QACtD,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC;QAElC,+BAA+B;QAC/B,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC1B,MAAM,SAAS,GAAG,IAAI,wCAAwC,EAAE,CAAC;YACjE,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAE7B,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAChE,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAEhC,OAAO,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;gBAClB,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;aACpB,EAAE,CAAC,IAAI,EAAE,EAAE;gBACV,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;gBACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,wBAAwB,CAAC,CAAC;gBACjF,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAEO,uBAAuB,CAAC,GAAS;QACvC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,eAAe,CAAQ,CAAC;QAC9E,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,MAAM,aAAa,GAAG,aAAa,CAAC,gBAAgB,EAAE,EAAE,CAAC;QACzD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,aAAa,EAAE,CAAC;QACxI,MAAM,aAAa,GAAG,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACpF,MAAM,YAAY,GAAG,qBAAqB,CAAC,aAAa,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACtF,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IACzE,CAAC;CACF"}

package/dist/server/mcpServer.d.ts

@@ -0,0 +1,6 @@
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import type { ModuleRegistry } from '../modules/ModuleRegistry.js';
+import type { Logger } from 'pino';
+export declare function getMcpServer(registry: ModuleRegistry, logger: Logger): Server;
+export declare function broadcastNotification(method: string, params?: any): void;
+export declare function registerTransport(transport: any): void;

package/dist/server/mcpServer.js

@@ -0,0 +1,83 @@
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { CallToolRequestSchema, ListToolsRequestSchema } from '@modelcontextprotocol/sdk/types.js';
+const connectedTransports = new Set();
+export function getMcpServer(registry, logger) {
+    const server = new Server({
+        name: 'kiro-backend-mcp',
+        version: '1.0.0',
+    }, {
+        capabilities: {
+            tools: {}
+        }
+    });
+    // Register tools from the registry
+    const tools = registry.getAllToolDefinitions();
+    const handlers = registry.getToolHandlers();
+    server.setRequestHandler(ListToolsRequestSchema, async () => {
+        return {
+            tools: tools.map(tool => ({
+                name: tool.name,
+                description: tool.description || '',
+                inputSchema: tool.inputSchema || { type: 'object', properties: {} }
+            }))
+        };
+    });
+    server.setRequestHandler(CallToolRequestSchema, async (request) => {
+        const { name, arguments: args } = request.params;
+        const handler = handlers.get(name);
+        if (!handler) {
+            return {
+                content: [{ type: 'text', text: `Error: Unknown tool ${name}` }],
+                isError: true,
+            };
+        }
+        try {
+            const result = await handler(args || {});
+            // Auto-emit notifications for KB changes
+            if (!result.isError) {
+                if (name.includes('ingest') || name.includes('create')) {
+                    broadcastNotification('kb_entry_added', { tool: name });
+                }
+                else if (name.includes('update') || name.includes('modify')) {
+                    broadcastNotification('kb_entry_updated', { tool: name });
+                }
+                else if (name.includes('delete') || name.includes('remove')) {
+                    broadcastNotification('kb_entry_deleted', { tool: name });
+                }
+                else if (name.includes('tag')) {
+                    broadcastNotification('tag_created', { tool: name });
+                }
+            }
+            return result;
+        }
+        catch (err) {
+            logger.error({ err, tool: name }, 'Error executing MCP tool');
+            return {
+                content: [{ type: 'text', text: `Error: ${err.message}` }],
+                isError: true,
+            };
+        }
+    });
+    return server;
+}
+export function broadcastNotification(method, params) {
+    for (const transport of connectedTransports) {
+        try {
+            transport.send({
+                jsonrpc: '2.0',
+                method: `notifications/${method}`,
+                params,
+            });
+        }
+        catch (err) {
+            // ignore
+        }
+    }
+}
+export function registerTransport(transport) {
+    connectedTransports.add(transport);
+    transport.onclose = () => {
+        connectedTransports.delete(transport);
+    };
+}
+//# sourceMappingURL=mcpServer.js.map

package/dist/server/mcpServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpServer.js","sourceRoot":"","sources":["../../src/server/mcpServer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAInG,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAO,CAAC;AAE3C,MAAM,UAAU,YAAY,CAAC,QAAwB,EAAE,MAAc;IACnE,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC;QACxB,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,OAAO;KACjB,EAAE;QACD,YAAY,EAAE;YACZ,KAAK,EAAE,EAAE;SACV;KACF,CAAC,CAAC;IAEH,mCAAmC;IACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,EAAE,CAAC;IAE5C,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QAC1D,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACxB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;gBACnC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;aACpE,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QACjD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEnC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,IAAI,EAAE,EAAE,CAAC;gBAChE,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YAEzC,yCAAyC;YACzC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACvD,qBAAqB,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1D,CAAC;qBAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC9D,qBAAqB,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5D,CAAC;qBAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC9D,qBAAqB,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5D,CAAC;qBAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBAChC,qBAAqB,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;YAED,OAAO,MAAa,CAAC;QACvB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,0BAA0B,CAAC,CAAC;YAC9D,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC1D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,MAAY;IAChE,KAAK,MAAM,SAAS,IAAI,mBAAmB,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,iBAAiB,MAAM,EAAE;gBACjC,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS;QACX,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAAc;IAC9C,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACnC,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;QACvB,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/middleware/error-handler.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Global error boundary middleware.
+ * Catches unhandled errors and returns structured error responses.
+ */
+import type { ErrorHandler } from 'hono';
+import type { Logger } from 'pino';
+export declare function createErrorHandler(logger: Logger): ErrorHandler;

package/dist/server/middleware/error-handler.js

@@ -0,0 +1,16 @@
+/**
+ * Global error boundary middleware.
+ * Catches unhandled errors and returns structured error responses.
+ */
+export function createErrorHandler(logger) {
+    return (err, c) => {
+        logger.error({ err, path: c.req.path, method: c.req.method }, 'Unhandled error');
+        return c.json({
+            error: {
+                code: 'INTERNAL_ERROR',
+                message: `Internal server error: ${err.message}`,
+            },
+        }, 500);
+    };
+}
+//# sourceMappingURL=error-handler.js.map

package/dist/server/middleware/error-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-handler.js","sourceRoot":"","sources":["../../../src/server/middleware/error-handler.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QAChB,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAEjF,OAAO,CAAC,CAAC,IAAI,CACX;YACE,KAAK,EAAE;gBACL,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,0BAA0B,GAAG,CAAC,OAAO,EAAE;aACjD;SACF,EACD,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/middleware/localhost-only.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Middleware to reject non-localhost requests.
+ * Security: Backend only serves 127.0.0.1 connections (BR-35, BR-37).
+ */
+import type { MiddlewareHandler } from 'hono';
+export declare const localhostOnly: MiddlewareHandler;

package/dist/server/middleware/localhost-only.js

@@ -0,0 +1,15 @@
+/**
+ * Middleware to reject non-localhost requests.
+ * Security: Backend only serves 127.0.0.1 connections (BR-35, BR-37).
+ */
+export const localhostOnly = async (c, next) => {
+    const host = c.req.header('host') || '';
+    const isLocalhost = host.startsWith('127.0.0.1') ||
+        host.startsWith('localhost') ||
+        host.startsWith('[::1]');
+    if (!isLocalhost && host !== '') {
+        return c.json({ error: { code: 'FORBIDDEN', message: 'Only localhost connections allowed' } }, 403);
+    }
+    await next();
+};
+//# sourceMappingURL=localhost-only.js.map

package/dist/server/middleware/localhost-only.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localhost-only.js","sourceRoot":"","sources":["../../../src/server/middleware/localhost-only.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,CAAC,MAAM,aAAa,GAAsB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;IAChE,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAC9C,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAE3B,IAAI,CAAC,WAAW,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,oCAAoC,EAAE,EAAE,EAC/E,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,EAAE,CAAC;AACf,CAAC,CAAC"}

package/dist/server/middleware/rate-limiter.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Simple in-memory rate limiter middleware for admin API.
+ * Sliding window: max 100 requests per minute per IP.
+ * Lightweight — no external dependencies.
+ */
+import type { Context, Next } from 'hono';
+/**
+ * Rate limiting middleware — 100 requests/minute per IP.
+ * Applied to /api/admin/* endpoints.
+ */
+export declare function rateLimiter(c: Context, next: Next): Promise<Response | void>;

package/dist/server/middleware/rate-limiter.js

@@ -0,0 +1,44 @@
+/**
+ * Simple in-memory rate limiter middleware for admin API.
+ * Sliding window: max 100 requests per minute per IP.
+ * Lightweight — no external dependencies.
+ */
+const store = new Map();
+// Cleanup stale entries every 5 minutes
+setInterval(() => {
+    const cutoff = Date.now() - 60000;
+    for (const [ip, entry] of store) {
+        entry.timestamps = entry.timestamps.filter(t => t > cutoff);
+        if (entry.timestamps.length === 0)
+            store.delete(ip);
+    }
+}, 300000).unref();
+const MAX_REQUESTS = process.env.NODE_ENV === 'production' ? 100 : 10000;
+const WINDOW_MS = 60000; // 1 minute
+/**
+ * Rate limiting middleware — 100 requests/minute per IP.
+ * Applied to /api/admin/* endpoints.
+ */
+export async function rateLimiter(c, next) {
+    const ip = c.req.header('x-forwarded-for') || c.req.header('x-real-ip') || '127.0.0.1';
+    const now = Date.now();
+    const cutoff = now - WINDOW_MS;
+    let entry = store.get(ip);
+    if (!entry) {
+        entry = { timestamps: [] };
+        store.set(ip, entry);
+    }
+    // Remove timestamps outside the window
+    entry.timestamps = entry.timestamps.filter(t => t > cutoff);
+    if (entry.timestamps.length >= MAX_REQUESTS) {
+        const retryAfter = Math.ceil((entry.timestamps[0] + WINDOW_MS - now) / 1000);
+        return c.json({ error: 'Too many requests', retryAfter }, { status: 429, headers: { 'Retry-After': String(retryAfter) } });
+    }
+    entry.timestamps.push(now);
+    // Set rate limit headers
+    c.header('X-RateLimit-Limit', String(MAX_REQUESTS));
+    c.header('X-RateLimit-Remaining', String(MAX_REQUESTS - entry.timestamps.length));
+    c.header('X-RateLimit-Reset', String(Math.ceil((cutoff + WINDOW_MS) / 1000)));
+    await next();
+}
+//# sourceMappingURL=rate-limiter.js.map

package/dist/server/middleware/rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../../src/server/middleware/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAQH,MAAM,KAAK,GAAgC,IAAI,GAAG,EAAE,CAAC;AAErD,wCAAwC;AACxC,WAAW,CAAC,GAAG,EAAE;IACf,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IAClC,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;QAChC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QAC5D,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;AAEnB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;AACzE,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,WAAW;AAEpC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,CAAU,EAAE,IAAU;IACtD,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC;IACvF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC;IAE/B,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAC3B,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACvB,CAAC;IAED,uCAAuC;IACvC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;IAE5D,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QAC7E,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,EAC1C,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,CAChE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE3B,yBAAyB;IACzB,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAClF,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAE9E,MAAM,IAAI,EAAE,CAAC;AACf,CAAC"}

package/dist/server/middleware/request-logger.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Request logging middleware using pino.
+ * Logs request method, path, status, and duration.
+ */
+import type { MiddlewareHandler } from 'hono';
+import type { Logger } from 'pino';
+export declare function createRequestLogger(logger: Logger): MiddlewareHandler;

package/dist/server/middleware/request-logger.js

@@ -0,0 +1,21 @@
+/**
+ * Request logging middleware using pino.
+ * Logs request method, path, status, and duration.
+ */
+export function createRequestLogger(logger) {
+    return async (c, next) => {
+        const start = Date.now();
+        const method = c.req.method;
+        const path = c.req.path;
+        await next();
+        const duration = Date.now() - start;
+        const status = c.res.status;
+        if (path === '/health') {
+            logger.debug({ method, path, status, duration_ms: duration }, 'request');
+        }
+        else {
+            logger.info({ method, path, status, duration_ms: duration }, 'request');
+        }
+    };
+}
+//# sourceMappingURL=request-logger.js.map

package/dist/server/middleware/request-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-logger.js","sourceRoot":"","sources":["../../../src/server/middleware/request-logger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QAC5B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAExB,MAAM,IAAI,EAAE,CAAC;QAEb,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACpC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QAE5B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC;QAC3E,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/routes/__tests__/admin.test.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Integration tests for Admin Portal routes (Hono)
+ * Tests: /admin SPA serving + /api/admin/* API endpoints
+ *
+ * Uses real SQLite DB (admin.db) and real auth flow.
+ * Default user: admin/admin (seeded on init).
+ */
+export {};