sdlc-agent-4-enterprise-server 1.53.3 → 1.53.12

package/README.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/version-1.53.3-blue?style=for-the-badge" alt="Version">
+  <img src="https://img.shields.io/badge/version-1.53.4-blue?style=for-the-badge" alt="Version">
   <img src="https://img.shields.io/badge/tools-66+-teal?style=for-the-badge" alt="Tools">
   <img src="https://img.shields.io/badge/node-%3E%3D18-green?style=for-the-badge" alt="Node">
 </p>

package/dist/config/schema.d.ts

@@ -0,0 +1,192 @@
+/**
+ * Unified config schema + shared config constants (BR-18 split from index.ts).
+ * The Zod schema is the single source of truth for the backend config shape;
+ * index.ts assembles the raw object and parses it through this schema.
+ */
+import { z } from 'zod';
+export declare const DEFAULT_EXCLUDE: string[];
+export declare const DEFAULT_EXTENSIONS: string[];
+export declare const UnifiedConfigSchema: z.ZodObject<{
+    port: z.ZodDefault<z.ZodNumber>;
+    host: z.ZodDefault<z.ZodString>;
+    onnxModelPath: z.ZodDefault<z.ZodString>;
+    embeddingModelId: z.ZodDefault<z.ZodString>;
+    embeddingCacheDir: z.ZodString;
+    embeddingQuantized: z.ZodDefault<z.ZodBoolean>;
+    logLevel: z.ZodDefault<z.ZodEnum<["debug", "info", "warn", "error"]>>;
+    viewerPort: z.ZodDefault<z.ZodNumber>;
+    watchEnabled: z.ZodDefault<z.ZodBoolean>;
+    watchDebounceMs: z.ZodDefault<z.ZodNumber>;
+    ollamaUrl: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    ollamaModel: z.ZodDefault<z.ZodString>;
+    maxFileSize: z.ZodDefault<z.ZodNumber>;
+    projectId: z.ZodDefault<z.ZodString>;
+    workspace: z.ZodString;
+    indexTempDir: z.ZodString;
+    dbPath: z.ZodString;
+    configPath: z.ZodString;
+    dataDir: z.ZodString;
+    sqliteDbPath: z.ZodString;
+    orchestrationConfigPath: z.ZodString;
+    excludePatterns: z.ZodArray<z.ZodString, "many">;
+    includeExtensions: z.ZodArray<z.ZodString, "many">;
+    sandbox: z.ZodObject<{
+        defaultMode: z.ZodDefault<z.ZodEnum<["docker", "local"]>>;
+        fallbackToLocal: z.ZodDefault<z.ZodBoolean>;
+        maxSessions: z.ZodDefault<z.ZodNumber>;
+        defaultTtl: z.ZodDefault<z.ZodNumber>;
+        defaultImage: z.ZodDefault<z.ZodString>;
+        reaperIntervalMs: z.ZodDefault<z.ZodNumber>;
+        maxOutputBytes: z.ZodDefault<z.ZodNumber>;
+        commandTimeoutDefault: z.ZodDefault<z.ZodNumber>;
+        commandTimeoutMax: z.ZodDefault<z.ZodNumber>;
+        mountExcludePatterns: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        defaultResources: z.ZodDefault<z.ZodObject<{
+            memory: z.ZodDefault<z.ZodString>;
+            cpu: z.ZodDefault<z.ZodString>;
+            disk: z.ZodDefault<z.ZodString>;
+            pidsLimit: z.ZodDefault<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            memory: string;
+            cpu: string;
+            disk: string;
+            pidsLimit: number;
+        }, {
+            memory?: string | undefined;
+            cpu?: string | undefined;
+            disk?: string | undefined;
+            pidsLimit?: number | undefined;
+        }>>;
+        dockerSocket: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        defaultMode: "docker" | "local";
+        fallbackToLocal: boolean;
+        maxSessions: number;
+        defaultTtl: number;
+        defaultImage: string;
+        reaperIntervalMs: number;
+        maxOutputBytes: number;
+        commandTimeoutDefault: number;
+        commandTimeoutMax: number;
+        mountExcludePatterns: string[];
+        defaultResources: {
+            memory: string;
+            cpu: string;
+            disk: string;
+            pidsLimit: number;
+        };
+        dockerSocket?: string | undefined;
+    }, {
+        defaultMode?: "docker" | "local" | undefined;
+        fallbackToLocal?: boolean | undefined;
+        maxSessions?: number | undefined;
+        defaultTtl?: number | undefined;
+        defaultImage?: string | undefined;
+        reaperIntervalMs?: number | undefined;
+        maxOutputBytes?: number | undefined;
+        commandTimeoutDefault?: number | undefined;
+        commandTimeoutMax?: number | undefined;
+        mountExcludePatterns?: string[] | undefined;
+        defaultResources?: {
+            memory?: string | undefined;
+            cpu?: string | undefined;
+            disk?: string | undefined;
+            pidsLimit?: number | undefined;
+        } | undefined;
+        dockerSocket?: string | undefined;
+    }>;
+    entra: z.ZodType<import("./EntraConfig.js").EntraSurface, z.ZodTypeDef, unknown>;
+}, "strip", z.ZodTypeAny, {
+    entra: import("./EntraConfig.js").EntraSurface;
+    host: string;
+    port: number;
+    onnxModelPath: string;
+    embeddingModelId: string;
+    embeddingCacheDir: string;
+    embeddingQuantized: boolean;
+    logLevel: "error" | "warn" | "info" | "debug";
+    viewerPort: number;
+    watchEnabled: boolean;
+    watchDebounceMs: number;
+    ollamaUrl: string | null;
+    ollamaModel: string;
+    maxFileSize: number;
+    projectId: string;
+    workspace: string;
+    indexTempDir: string;
+    dbPath: string;
+    configPath: string;
+    dataDir: string;
+    sqliteDbPath: string;
+    orchestrationConfigPath: string;
+    excludePatterns: string[];
+    includeExtensions: string[];
+    sandbox: {
+        defaultMode: "docker" | "local";
+        fallbackToLocal: boolean;
+        maxSessions: number;
+        defaultTtl: number;
+        defaultImage: string;
+        reaperIntervalMs: number;
+        maxOutputBytes: number;
+        commandTimeoutDefault: number;
+        commandTimeoutMax: number;
+        mountExcludePatterns: string[];
+        defaultResources: {
+            memory: string;
+            cpu: string;
+            disk: string;
+            pidsLimit: number;
+        };
+        dockerSocket?: string | undefined;
+    };
+}, {
+    embeddingCacheDir: string;
+    workspace: string;
+    indexTempDir: string;
+    dbPath: string;
+    configPath: string;
+    dataDir: string;
+    sqliteDbPath: string;
+    orchestrationConfigPath: string;
+    excludePatterns: string[];
+    includeExtensions: string[];
+    sandbox: {
+        defaultMode?: "docker" | "local" | undefined;
+        fallbackToLocal?: boolean | undefined;
+        maxSessions?: number | undefined;
+        defaultTtl?: number | undefined;
+        defaultImage?: string | undefined;
+        reaperIntervalMs?: number | undefined;
+        maxOutputBytes?: number | undefined;
+        commandTimeoutDefault?: number | undefined;
+        commandTimeoutMax?: number | undefined;
+        mountExcludePatterns?: string[] | undefined;
+        defaultResources?: {
+            memory?: string | undefined;
+            cpu?: string | undefined;
+            disk?: string | undefined;
+            pidsLimit?: number | undefined;
+        } | undefined;
+        dockerSocket?: string | undefined;
+    };
+    entra?: unknown;
+    host?: string | undefined;
+    port?: number | undefined;
+    onnxModelPath?: string | undefined;
+    embeddingModelId?: string | undefined;
+    embeddingQuantized?: boolean | undefined;
+    logLevel?: "error" | "warn" | "info" | "debug" | undefined;
+    viewerPort?: number | undefined;
+    watchEnabled?: boolean | undefined;
+    watchDebounceMs?: number | undefined;
+    ollamaUrl?: string | null | undefined;
+    ollamaModel?: string | undefined;
+    maxFileSize?: number | undefined;
+    projectId?: string | undefined;
+}>;
+export type UnifiedConfig = z.infer<typeof UnifiedConfigSchema>;
+export type AppConfig = UnifiedConfig;
+export type BackendConfig = UnifiedConfig;
+export declare function envBool(key: string, fallback: boolean): boolean;
+export declare function envInt(key: string, fallback: number): number;

package/dist/config/schema.js

@@ -0,0 +1,70 @@
+/**
+ * Unified config schema + shared config constants (BR-18 split from index.ts).
+ * The Zod schema is the single source of truth for the backend config shape;
+ * index.ts assembles the raw object and parses it through this schema.
+ */
+import { z } from 'zod';
+import { SandboxConfigSchema } from './SandboxConfig.js';
+import { EntraSurfaceSchema } from './EntraConfig.js';
+export const DEFAULT_EXCLUDE = [
+    'node_modules', '.git', 'dist', 'build', '.gradle',
+    '.idea', '.vscode', '__pycache__', '.venv', 'target',
+    '.code-intel', 'coverage', '.next', '.nuxt',
+    'rules',
+    '.pega-cache',
+];
+export const DEFAULT_EXTENSIONS = [
+    '.ts', '.tsx', '.js', '.jsx', '.kt', '.java', '.py',
+    '.go', '.rs', '.c', '.cpp', '.h', '.hpp', '.cs',
+    '.rb', '.php', '.swift', '.scala', '.sql', '.sh',
+    '.yaml', '.yml', '.json', '.toml', '.gradle.kts',
+    '.cls', '.trigger',
+    // ---- SA4E-223: new Salesforce simple extensions (Gate 2) ----
+    '.apex', '.soql', '.page', '.component', '.cmp', '.app', '.evt', '.intf', '.tokens',
+    // ---- SA4E-225: un-skip PowerShell ----
+    '.ps1',
+];
+export const UnifiedConfigSchema = z.object({
+    port: z.number().min(1024).max(65535).default(48721),
+    host: z.string().default('0.0.0.0'),
+    // Legacy/deprecated — nothing loads a bare .onnx file anymore; kept for
+    // backward-compatible admin config output. See embeddingModelId below.
+    onnxModelPath: z.string().default('models/model.onnx'),
+    // SA4E-44 / AD-6 — real ONNX embeddings via transformers.js (EmbeddingService).
+    embeddingModelId: z.string().default('Xenova/paraphrase-multilingual-MiniLM-L12-v2'),
+    embeddingCacheDir: z.string(),
+    embeddingQuantized: z.boolean().default(true),
+    logLevel: z.enum(['debug', 'info', 'warn', 'error']).default('info'),
+    viewerPort: z.number().default(3202),
+    watchEnabled: z.boolean().default(true),
+    watchDebounceMs: z.number().default(500),
+    ollamaUrl: z.string().nullable().default(null),
+    ollamaModel: z.string().default('nomic-embed-text'),
+    maxFileSize: z.number().default(512_000),
+    projectId: z.string().default('default'),
+    workspace: z.string(),
+    indexTempDir: z.string(),
+    dbPath: z.string(),
+    configPath: z.string(),
+    dataDir: z.string(),
+    sqliteDbPath: z.string(),
+    orchestrationConfigPath: z.string(),
+    excludePatterns: z.array(z.string()),
+    includeExtensions: z.array(z.string()),
+    sandbox: SandboxConfigSchema,
+    entra: EntraSurfaceSchema, // SA4E-264 — Entra ID SSO surface (gate: SSO_ENABLED)
+});
+export function envBool(key, fallback) {
+    const val = process.env[key];
+    if (val === undefined)
+        return fallback;
+    return val === '1' || val.toLowerCase() === 'true';
+}
+export function envInt(key, fallback) {
+    const val = process.env[key];
+    if (val === undefined)
+        return fallback;
+    const parsed = parseInt(val, 10);
+    return isNaN(parsed) ? fallback : parsed;
+}
+//# sourceMappingURL=schema.js.map

package/dist/config/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS;IAClD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ;IACpD,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO;IAC3C,OAAO;IACP,aAAa;CACd,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK;IACnD,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK;IAC/C,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK;IAChD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa;IAChD,MAAM,EAAE,UAAU;IAClB,gEAAgE;IAChE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS;IACnF,yCAAyC;IACzC,MAAM;CACP,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACnC,wEAAwE;IACxE,uEAAuE;IACvE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACtD,gFAAgF;IAChF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC;IACpF,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7B,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACpE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACpC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACvC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACnD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE;IACnC,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACpC,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACtC,OAAO,EAAE,mBAAmB;IAC5B,KAAK,EAAE,kBAAkB,EAAE,sDAAsD;CAClF,CAAC,CAAC;AAMH,MAAM,UAAU,OAAO,CAAC,GAAW,EAAE,QAAiB;IACpD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,OAAO,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,GAAW,EAAE,QAAgB;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACjC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3C,CAAC"}

package/dist/config/unified-extensions.d.ts

@@ -2,7 +2,7 @@
  * SA4E-261 Unified extension whitelist — single source of truth.
  * Used by backend resolver and contract test.
  */
-export declare const UNIFIED_EXTENSIONS: readonly ["ts", "tsx", "js", "jsx", "kt", "java", "py", "go", "rs", "c", "cpp", "h", "hpp", "cs", "php", "rb", "scala", "swift", "cls", "trigger", "apex", "soql", "page", "component", "cmp", "app", "evt", "intf", "tokens", "pega", "html", "jsp", "xml", "sql", "properties", "yml", "yaml", "css", "ps1"];
+export declare const UNIFIED_EXTENSIONS: readonly ["ts", "tsx", "js", "jsx", "kt", "java", "py", "go", "rs", "c", "cpp", "h", "hpp", "cs", "php", "rb", "scala", "swift", "cls", "trigger", "apex", "soql", "page", "component", "cmp", "app", "evt", "intf", "tokens", "html", "jsp", "xml", "sql", "properties", "yml", "yaml", "css", "ps1"];
 export type UnifiedExtension = typeof UNIFIED_EXTENSIONS[number];
 /**
  * Extension list with leading dot for file matching.

package/dist/config/unified-extensions.js

@@ -7,7 +7,7 @@ export const UNIFIED_EXTENSIONS = [
     'kt', 'java', 'py', 'go', 'rs',
     'c', 'cpp', 'h', 'hpp',
     'cs', 'php', 'rb', 'scala', 'swift',
-    'cls', 'trigger', 'apex', 'soql', 'page', 'component', 'cmp', 'app', 'evt', 'intf', 'tokens', 'pega',
+    'cls', 'trigger', 'apex', 'soql', 'page', 'component', 'cmp', 'app', 'evt', 'intf', 'tokens',
     'html', 'jsp', 'xml', 'sql', 'properties', 'yml', 'yaml', 'css',
     'ps1'
 ];

package/dist/config/unified-extensions.js.map

@@ -1 +1 @@
-{"version":3,"file":"unified-extensions.js","sourceRoot":"","sources":["../../src/config/unified-extensions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK;IACxB,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC9B,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK;IACtB,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO;IACnC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;IACpG,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK;IAC/D,KAAK;CACG,CAAC;AAIX;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC"}
+{"version":3,"file":"unified-extensions.js","sourceRoot":"","sources":["../../src/config/unified-extensions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK;IACxB,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC9B,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK;IACtB,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO;IACnC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ;IAC5F,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK;IAC/D,KAAK;CACG,CAAC;AAIX;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC"}

package/dist/engine/indexer/file-scanner/languages.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Language detection for the file scanner (extension maps + compound suffixes).
+ * Extracted from file-scanner.ts (BR-18) — no behavior change.
+ */
+export declare const EXTENSION_LANGUAGE_MAP: Record<string, string>;
+/**
+ * SA4E-223 — Single source of truth for Salesforce `*-meta.xml` compound suffixes.
+ * Used by detectLanguage() so *.xml files are routed to the `salesforce-meta` parser.
+ * (Compound-suffix files have ext === '.xml' which is NOT in includeExtensions, but
+ * processFile/async-file-scanner exempt `language === 'salesforce-meta'`.)
+ */
+export declare const SALESFORCE_META_SUFFIXES: string[];
+/** Detect language from file extension — supports compound extensions. */
+export declare function detectLanguage(filePath: string): string | null;
+export declare function getExtension(filePath: string): string;

package/dist/engine/indexer/file-scanner/languages.js

@@ -0,0 +1,74 @@
+/**
+ * Language detection for the file scanner (extension maps + compound suffixes).
+ * Extracted from file-scanner.ts (BR-18) — no behavior change.
+ */
+import * as path from 'path';
+export const EXTENSION_LANGUAGE_MAP = {
+    '.ts': 'typescript', '.tsx': 'typescript',
+    '.js': 'javascript', '.jsx': 'javascript',
+    '.kt': 'kotlin', '.kts': 'kotlin',
+    '.java': 'java',
+    '.py': 'python',
+    '.go': 'go',
+    '.rs': 'rust',
+    '.c': 'c', '.h': 'c',
+    '.cpp': 'cpp', '.hpp': 'cpp', '.cc': 'cpp', '.cxx': 'cpp',
+    '.cs': 'csharp',
+    '.rb': 'ruby',
+    '.php': 'php',
+    '.swift': 'swift',
+    '.scala': 'scala',
+    '.sql': 'sql',
+    '.sh': 'bash',
+    '.yaml': 'yaml', '.yml': 'yaml',
+    '.json': 'json',
+    '.toml': 'toml',
+    '.cls': 'apex',
+    '.trigger': 'apex',
+    // ---- SA4E-223: new Salesforce simple extensions ----
+    '.apex': 'apex',
+    '.soql': 'apex',
+    '.page': 'visualforce',
+    '.component': 'visualforce',
+    '.cmp': 'aura',
+    '.app': 'aura',
+    '.evt': 'aura',
+    '.intf': 'aura',
+    '.tokens': 'aura',
+    // ---- SA4E-... LWC HTML template support ----
+    '.html': 'lwc-html',
+    // ---- SA4E-261: Tier B extensions for unified whitelist ----
+    '.jsp': 'jsp',
+    '.xml': 'xml',
+    '.properties': 'properties',
+    '.css': 'css',
+    '.ps1': 'powershell',
+};
+/**
+ * SA4E-223 — Single source of truth for Salesforce `*-meta.xml` compound suffixes.
+ * Used by detectLanguage() so *.xml files are routed to the `salesforce-meta` parser.
+ * (Compound-suffix files have ext === '.xml' which is NOT in includeExtensions, but
+ * processFile/async-file-scanner exempt `language === 'salesforce-meta'`.)
+ */
+export const SALESFORCE_META_SUFFIXES = [
+    '.flow-meta.xml', '.object-meta.xml', '.field-meta.xml', '.js-meta.xml', '.component-meta.xml',
+    '.flexipage-meta.xml', '.permissionset-meta.xml', '.profile-meta.xml', '.labels-meta.xml',
+    '.tab-meta.xml', '.layout-meta.xml', '.report-meta.xml', '.dashboard-meta.xml',
+    '.site-meta.xml', '.resource-meta.xml', '.email-meta.xml', '.testsuite-meta.xml',
+];
+/** Detect language from file extension — supports compound extensions. */
+export function detectLanguage(filePath) {
+    // Check compound extensions first (Salesforce metadata)
+    const lowerPath = filePath.toLowerCase().replace(/\\/g, '/');
+    if (SALESFORCE_META_SUFFIXES.some(s => lowerPath.endsWith(s))) {
+        return 'salesforce-meta';
+    }
+    const ext = getExtension(filePath);
+    return EXTENSION_LANGUAGE_MAP[ext] ?? null;
+}
+export function getExtension(filePath) {
+    if (filePath.endsWith('.gradle.kts'))
+        return '.kts';
+    return path.extname(filePath).toLowerCase();
+}
+//# sourceMappingURL=languages.js.map

package/dist/engine/indexer/file-scanner/languages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"languages.js","sourceRoot":"","sources":["../../../../src/engine/indexer/file-scanner/languages.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,MAAM,CAAC,MAAM,sBAAsB,GAA2B;IAC5D,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY;IACzC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY;IACzC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ;IACjC,OAAO,EAAE,MAAM;IACf,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,IAAI;IACX,KAAK,EAAE,MAAM;IACb,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG;IACpB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK;IACzD,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,MAAM;IACb,MAAM,EAAE,KAAK;IACb,QAAQ,EAAE,OAAO;IACjB,QAAQ,EAAE,OAAO;IACjB,MAAM,EAAE,KAAK;IACb,KAAK,EAAE,MAAM;IACb,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC/B,OAAO,EAAE,MAAM;IACf,OAAO,EAAE,MAAM;IACf,MAAM,EAAE,MAAM;IACd,UAAU,EAAE,MAAM;IAClB,uDAAuD;IACvD,OAAO,EAAE,MAAM;IACf,OAAO,EAAE,MAAM;IACf,OAAO,EAAE,aAAa;IACtB,YAAY,EAAE,aAAa;IAC3B,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,MAAM;IACd,OAAO,EAAE,MAAM;IACf,SAAS,EAAE,MAAM;IACjB,+CAA+C;IAC/C,OAAO,EAAE,UAAU;IACnB,8DAA8D;IAC9D,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,KAAK;IACb,aAAa,EAAE,YAAY;IAC3B,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,YAAY;CACrB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAa;IAChD,gBAAgB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,cAAc,EAAE,qBAAqB;IAC9F,qBAAqB,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,kBAAkB;IACzF,eAAe,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,qBAAqB;IAC9E,gBAAgB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,qBAAqB;CACjF,CAAC;AAEF,0EAA0E;AAC1E,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,wDAAwD;IACxD,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC7D,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,sBAAsB,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,IAAI,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,MAAM,CAAC;IACpD,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;AAC9C,CAAC"}

package/dist/engine/indexer/project-type/resolver.js

@@ -5,6 +5,8 @@ const BASE_EXCLUDES = ['.git', '.svn', '.hg'];
 const FALLBACK_EXCLUDES = [
     'node_modules', '.git', 'dist', 'build', '.gradle',
     '.idea', '.vscode', '__pycache__', '.venv', 'target',
+    'rules',
+    '.pega-cache',
 ];
 /** Fallback extensions aligned with unified whitelist (SA4E-261) */
 export const FALLBACK_EXTENSIONS = [...UNIFIED_EXTENSIONS_WITH_DOT];

package/dist/engine/indexer/project-type/resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../../../../src/engine/indexer/project-type/resolver.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AAEpF,8DAA8D;AAC9D,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AAE9C,0EAA0E;AAC1E,MAAM,iBAAiB,GAAG;IACxB,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS;IAClD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ;CACrD,CAAC;AAEF,oEAAoE;AACpE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,GAAG,2BAA2B,CAAC,CAAC;AAEpE;;;GAGG;AACH,MAAM,OAAO,wBAAwB;IAEnC,oDAAoD;IACpD,OAAO,CAAC,SAA0B;QAChC,OAAO;YACL,WAAW,EAAE,SAAS,CAAC,YAAY;YACnC,eAAe,EAAE,CAAC,GAAG,aAAa,EAAE,GAAG,SAAS,CAAC,gBAAgB,CAAC;YAClE,iBAAiB,EAAE,SAAS,CAAC,UAAU;YACvC,SAAS,EAAE,SAAS,CAAC,UAAU;YAC/B,SAAS,EAAE,cAAc;SAC1B,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,WAAW;QACT,OAAO;YACL,WAAW,EAAE,EAAE;YACf,eAAe,EAAE,iBAAiB;YAClC,iBAAiB,EAAE,mBAAmB;YACtC,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,SAAS;SACrB,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../../../../src/engine/indexer/project-type/resolver.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AAEpF,8DAA8D;AAC9D,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AAE9C,0EAA0E;AAC1E,MAAM,iBAAiB,GAAG;IACxB,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS;IAClD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ;IACpD,OAAO;IACP,aAAa;CACd,CAAC;AAEF,oEAAoE;AACpE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,GAAG,2BAA2B,CAAC,CAAC;AAEpE;;;GAGG;AACH,MAAM,OAAO,wBAAwB;IAEnC,oDAAoD;IACpD,OAAO,CAAC,SAA0B;QAChC,OAAO;YACL,WAAW,EAAE,SAAS,CAAC,YAAY;YACnC,eAAe,EAAE,CAAC,GAAG,aAAa,EAAE,GAAG,SAAS,CAAC,gBAAgB,CAAC;YAClE,iBAAiB,EAAE,SAAS,CAAC,UAAU;YACvC,SAAS,EAAE,SAAS,CAAC,UAAU;YAC/B,SAAS,EAAE,cAAc;SAC1B,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,WAAW;QACT,OAAO;YACL,WAAW,EAAE,EAAE;YACf,eAAe,EAAE,iBAAiB;YAClC,iBAAiB,EAAE,mBAAmB;YACtC,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,SAAS;SACrB,CAAC;IACJ,CAAC;CACF"}

package/dist/server/middleware/jwt-auth.js

@@ -12,6 +12,7 @@ import { createProjectContext } from '../../modules/memory/ProjectContext.js';
 import { SessionService } from '../services/SessionService.js';
 import { getEntraVerifier, isEntraToken, tryEntraVerification, validateEntraAuthConfig } from './verifiers/entra-auth.js';
 import { getJwtSecret } from '../../admin/db/jwt.js';
+import { getDbAdapter } from '../../admin/admin-db.js';
 const REQUIRE_AUTH = process.env.CODE_INTEL_REQUIRE_AUTH === 'true';
 const TOKEN_SECRET = process.env.KB_TOKEN_SECRET || '';
 /** Validate startup config. */
@@ -25,6 +26,24 @@ export function validateJwtConfig() {
 export function isJwtAuthRequired() {
     return REQUIRE_AUTH;
 }
+/** SA4E-375: Auto-upsert project in project_registry to avoid PROJECT_NOT_REGISTERED. */
+async function autoUpsertProject(projectId, workspaceRoot, userId) {
+    if (!projectId || projectId === 'default' || !projectId.trim())
+        return;
+    try {
+        const adapter = getDbAdapter();
+        const displayName = workspaceRoot ? workspaceRoot.split(/[\\/]/).pop() || projectId : projectId;
+        await adapter.runAsync(`INSERT INTO project_registry (project_id, display_name, workspace_path, created_by, last_seen)
+       VALUES (?, ?, ?, ?, current_timestamp)
+       ON CONFLICT(project_id) DO UPDATE SET
+         display_name = COALESCE(EXCLUDED.display_name, display_name),
+         workspace_path = COALESCE(EXCLUDED.workspace_path, workspace_path),
+         last_seen = current_timestamp`, [projectId, displayName, workspaceRoot, userId || '']);
+    }
+    catch {
+        // Non-fatal: ignore upsert errors, project may already exist or DB error
+    }
+}
 function decodeJwtPayload(token) {
     try {
         const parts = token.split('.');
@@ -64,11 +83,16 @@ function createJwtAuth(alwaysRequire = false) {
     return async (c, next) => {
         // X-Project-Id header is the mandatory source of project identity
         const projectId = c.req.header('X-Project-Id') || '';
+        const workspaceRoot = c.req.header('X-Workspace-Root') || '';
         const authHeader = c.req.header('Authorization');
         const mustAuth = REQUIRE_AUTH || alwaysRequire;
-        const anonymous = () => {
-            const ctx = createProjectContext(projectId, 'anonymous');
-            c.set('projectContext', ctx);
+        const commitContext = async (ctxProjectId, userId) => {
+            c.set('projectContext', createProjectContext(ctxProjectId, userId));
+            // SA4E-375: auto-upsert project on every authenticated request to ensure project_registry exists
+            await autoUpsertProject(ctxProjectId, workspaceRoot, userId);
+        };
+        const anonymous = async () => {
+            await commitContext(projectId, 'anonymous');
             return next();
         };
         const unauthorized = (code, message) => c.json({ data: null, error: { code, message } }, 401);
@@ -107,8 +131,9 @@ function createJwtAuth(alwaysRequire = false) {
                     return anonymous();
                 return unauthorized('TOKEN_INVALID', 'Invalid or expired token');
             }
-            const ctx = createProjectContext(projectId || payload.pid || '', payload.sub || 'anonymous', undefined, payload.wid || undefined);
-            c.set('projectContext', ctx);
+            const ctxProjectId = projectId || payload.pid || '';
+            const userId = payload.sub || 'anonymous';
+            await commitContext(ctxProjectId, userId);
             return next();
         }
         const userAgent = c.req.header('user-agent') || '';
@@ -125,8 +150,7 @@ function createJwtAuth(alwaysRequire = false) {
                 return anonymous();
             return unauthorized('TOKEN_INVALID', 'Invalid or expired token');
         }
-        const ctx = createProjectContext(projectId, session.userId);
-        c.set('projectContext', ctx);
+        await commitContext(projectId, session.userId);
         return next();
     };
 }

package/dist/server/middleware/jwt-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-auth.js","sourceRoot":"","sources":["../../../src/server/middleware/jwt-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC1H,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,MAAM,CAAC;AACpE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;AAEvD,+BAA+B;AAC/B,MAAM,UAAU,iBAAiB;IAC/B,IAAI,YAAY,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,mFAAmF;IACnF,uBAAuB,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAAa,EAAE,MAAc;IACtD,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC1C,MAAM,CAAC,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC;SAC9B,MAAM,CAAC,WAAW,CAAC,CAAC;IACvB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,SAAS,CAAC,OAA4B;IAC7C,IAAI,CAAC,OAAO,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAC/B,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,aAAa,GAAG,KAAK;IAC1C,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,kEAAkE;QAClE,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACrD,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,YAAY,IAAI,aAAa,CAAC;QAE/C,MAAM,SAAS,GAAG,GAAG,EAAE;YACrB,MAAM,GAAG,GAAG,oBAAoB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YACzD,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;YAC7B,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC,CAAC;QAEF,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE,CACrD,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAExD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,IAAI,QAAQ;gBAAE,OAAO,YAAY,CAAC,eAAe,EAAE,yBAAyB,CAAC,CAAC;YAC9E,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAElC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,IAAI,QAAQ;gBAAE,OAAO,YAAY,CAAC,eAAe,EAAE,yBAAyB,CAAC,CAAC;YAC9E,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QAED,yBAAyB;QACzB,mEAAmE;QACnE,yEAAyE;QACzE,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;QAEnD,iFAAiF;QACjF,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjE,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;QACjC,IAAI,KAAK,IAAI,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;YAC7C,OAAO,oBAAoB,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,IAAI,CAAC,QAAQ;oBAAE,OAAO,SAAS,EAAE,CAAC;gBAClC,OAAO,YAAY,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC,QAAQ;oBAAE,OAAO,SAAS,EAAE,CAAC;gBAClC,OAAO,YAAY,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,GAAG,GAAG,oBAAoB,CAC9B,SAAS,IAAI,OAAO,CAAC,GAAG,IAAI,EAAE,EAC9B,OAAO,CAAC,GAAG,IAAI,WAAW,EAC1B,SAAS,EACT,OAAO,CAAC,GAAG,IAAI,SAAS,CACzB,CAAC;YACF,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;YAC7B,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;QAC5C,IAAI,OAAO,GAAQ,IAAI,CAAC;QACxB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,iFAAiF;QACnF,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ;gBAAE,OAAO,SAAS,EAAE,CAAC;YAClC,OAAO,YAAY,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,GAAG,GAAG,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5D,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;QAC7B,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAQD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAa;IAChD,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1D,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,yBAAyB,CAAC,OAA4B;IACpE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG;QAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1E,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,MAAM,OAAO,GAAsB,aAAa,CAAC,KAAK,CAAC,CAAC;AAE/D,wEAAwE;AACxE,MAAM,CAAC,MAAM,aAAa,GAAsB,aAAa,CAAC,IAAI,CAAC,CAAC"}
+{"version":3,"file":"jwt-auth.js","sourceRoot":"","sources":["../../../src/server/middleware/jwt-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC1H,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,MAAM,CAAC;AACpE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;AAEvD,+BAA+B;AAC/B,MAAM,UAAU,iBAAiB;IAC/B,IAAI,YAAY,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,mFAAmF;IACnF,uBAAuB,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,yFAAyF;AACzF,KAAK,UAAU,iBAAiB,CAAC,SAAiB,EAAE,aAAqB,EAAE,MAAc;IACvF,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;QAAE,OAAO;IACvE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAChG,MAAM,OAAO,CAAC,QAAQ,CACpB;;;;;uCAKiC,EACjC,CAAC,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,IAAI,EAAE,CAAC,CACtD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAAa,EAAE,MAAc;IACtD,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC1C,MAAM,CAAC,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC;SAC9B,MAAM,CAAC,WAAW,CAAC,CAAC;IACvB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,SAAS,CAAC,OAA4B;IAC7C,IAAI,CAAC,OAAO,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAC/B,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,aAAa,GAAG,KAAK;IAC1C,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,kEAAkE;QAClE,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACrD,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;QAC7D,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,YAAY,IAAI,aAAa,CAAC;QAE/C,MAAM,aAAa,GAAG,KAAK,EAAE,YAAoB,EAAE,MAAc,EAAE,EAAE;YACnE,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;YACpE,iGAAiG;YACjG,MAAM,iBAAiB,CAAC,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC,CAAC;QAEF,MAAM,SAAS,GAAG,KAAK,IAAI,EAAE;YAC3B,MAAM,aAAa,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC5C,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC,CAAC;QAEF,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE,CACrD,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAExD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,IAAI,QAAQ;gBAAE,OAAO,YAAY,CAAC,eAAe,EAAE,yBAAyB,CAAC,CAAC;YAC9E,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAElC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,IAAI,QAAQ;gBAAE,OAAO,YAAY,CAAC,eAAe,EAAE,yBAAyB,CAAC,CAAC;YAC9E,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QAED,yBAAyB;QACzB,mEAAmE;QACnE,yEAAyE;QACzE,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;QAEnD,iFAAiF;QACjF,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjE,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;QACjC,IAAI,KAAK,IAAI,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;YAC7C,OAAO,oBAAoB,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,IAAI,CAAC,QAAQ;oBAAE,OAAO,SAAS,EAAE,CAAC;gBAClC,OAAO,YAAY,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC,QAAQ;oBAAE,OAAO,SAAS,EAAE,CAAC;gBAClC,OAAO,YAAY,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,YAAY,GAAG,SAAS,IAAI,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;YACpD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC;YAC1C,MAAM,aAAa,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YAC1C,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;QAC5C,IAAI,OAAO,GAAQ,IAAI,CAAC;QACxB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,iFAAiF;QACnF,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ;gBAAE,OAAO,SAAS,EAAE,CAAC;YAClC,OAAO,YAAY,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/C,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAQD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAa;IAChD,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1D,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,yBAAyB,CAAC,OAA4B;IACpE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG;QAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1E,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,MAAM,OAAO,GAAsB,aAAa,CAAC,KAAK,CAAC,CAAC;AAE/D,wEAAwE;AACxE,MAAM,CAAC,MAAM,aAAa,GAAsB,aAAa,CAAC,IAAI,CAAC,CAAC"}

package/dist/server/routes/admin/context.js

@@ -74,15 +74,23 @@ export function createAdminContext(logger, registry) {
             const row = await adapter.getAsync('SELECT project_id FROM project_registry WHERE project_id = ?', [projectId]);
             if (row)
                 return projectId;
-            return c.json({
-                __error: true,
-                error: {
-                    code: 'PROJECT_NOT_REGISTERED',
-                    message: `Project ${projectId} is not registered. Call POST /api/admin/projects/register first.`,
-                    action: 'register',
-                    projectId,
-                }
-            }, 404);
+            // SA4E-375: Server-side auto-upsert project on first access to avoid PROJECT_NOT_REGISTERED
+            const workspaceRoot = c.req.header('X-Workspace-Root') || '';
+            const displayName = workspaceRoot ? workspaceRoot.split(/[\\/]/).pop() || projectId : projectId;
+            try {
+                await adapter.runAsync(`INSERT INTO project_registry (project_id, display_name, workspace_path, created_by, last_seen)
+           VALUES (?, ?, ?, ?, current_timestamp)
+           ON CONFLICT(project_id) DO UPDATE SET
+             display_name = COALESCE(EXCLUDED.display_name, display_name),
+             workspace_path = COALESCE(EXCLUDED.workspace_path, workspace_path),
+             last_seen = current_timestamp`, [projectId, displayName, workspaceRoot, '']);
+                logger.info({ projectId, displayName, workspaceRoot }, '[ensureProjectRegistered] auto-upserted project');
+            }
+            catch (upsertErr) {
+                // Non-fatal: log and continue; subsequent requests may succeed
+                logger.warn({ err: upsertErr, projectId }, '[ensureProjectRegistered] auto-upsert failed, proceeding');
+            }
+            return projectId;
         }
         catch (err) {
             logger.error({ err }, '[ensureProjectRegistered] check failed');

package/dist/server/routes/admin/context.js.map

@@ -1 +1 @@
-{"version":3,"file":"context.js","sourceRoot":"","sources":["../../../../src/server/routes/admin/context.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,WAAW,GACZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAyBlD,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,QAAc;IAC/D,MAAM,eAAe,GAAG,KAAK,EAC3B,MAAc,EACd,kBAA0B,EACoC,EAAE;QAChE,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,kBAAkB,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC/C,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IAChD,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,EAAE,CAAM,EAAgB,EAAE;QAClD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QAC1D,IAAI,aAAa,IAAI,aAAa,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YACtD,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;YACrE,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,CAAC;gBAChD,IAAI,MAAM,EAAE,CAAC;oBACX,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;gBACxH,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,CAAM,EAAgB,EAAE;QACjD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,iBAAiB,GAAG,KAAK,EAC7B,CAAM,EACN,MAAc,EACd,kBAA0B,EACZ,EAAE;QAChB,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAC5E,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,GAAG,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/F,OAAO,EAAE,QAAQ,EAAE,CAAC;IACtB,CAAC,CAAC;IAEF,MAAM,mBAAmB,GAAG,CAAC,CAAM,EAAU,EAAE;QAC7C,MAAM,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACrD,IAAI,eAAe;YAAE,OAAO,eAAe,CAAC;QAC5C,MAAM,cAAc,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,cAAc;YAAE,OAAO,cAAc,CAAC;QAC1C,OAAO,UAAU,EAAE,CAAC,SAAS,CAAC;IAChC,CAAC,CAAC;IAEF;;mFAE+E;IAC/E,MAAM,uBAAuB,GAAG,KAAK,EAAE,CAAM,EAA8B,EAAE;QAC3E,MAAM,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACrD,MAAM,cAAc,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,eAAe,GAAG,UAAU,EAAE,CAAC,SAAS,CAAC;QAC/C,MAAM,SAAS,GAAG,eAAe,IAAI,cAAc,IAAI,eAAe,CAAC;QACvE,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC,CAAC,8CAA8C;QACpG,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAChC,8DAA8D,EAC9D,CAAC,SAAS,CAAC,CACZ,CAAC;YACF,IAAI,GAAG;gBAAE,OAAO,SAAS,CAAC;YAC1B,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE;oBACL,IAAI,EAAE,wBAAwB;oBAC9B,OAAO,EAAE,WAAW,SAAS,mEAAmE;oBAChG,MAAM,EAAE,UAAU;oBAClB,SAAS;iBACV;aACF,EAAE,GAAG,CAAC,CAAC;QACV,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,wCAAwC,CAAC,CAAC;YAChE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QACjG,CAAC;IACH,CAAC,CAAC;IAEF,2DAA2D;IAC3D,MAAM,EAAE,GAAG,eAAe,CAAC,aAAa,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;IAEzE,OAAO;QACL,MAAM;QACN,QAAQ;QACR,EAAE;QACF,YAAY;QACZ,WAAW;QACX,eAAe;QACf,iBAAiB;QACjB,mBAAmB;QACnB,uBAAuB;QACvB,aAAa,EAAE,EAAE;QACjB,WAAW,EAAE,EAAE;QACf,eAAe,EAAE,EAAE;QACnB,qBAAqB,EAAE;YACrB,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;YACxB,SAAS,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC;YAClC,GAAG,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC;SAC7B;QACD,OAAO,EAAE,EAAE;QACX,MAAM,EAAE,EAAE;QACV,cAAc,EAAE,EAAE;QAClB,UAAU,EAAE,IAAI,GAAG,EAAE;QACrB,iBAAiB,EAAE,IAAI,CAAC,GAAG,EAAE;KAC9B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../../../src/server/routes/admin/context.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,WAAW,GACZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAyBlD,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,QAAc;IAC/D,MAAM,eAAe,GAAG,KAAK,EAC3B,MAAc,EACd,kBAA0B,EACoC,EAAE;QAChE,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,kBAAkB,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC/C,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IAChD,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,EAAE,CAAM,EAAgB,EAAE;QAClD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QAC1D,IAAI,aAAa,IAAI,aAAa,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YACtD,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;YACrE,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,CAAC;gBAChD,IAAI,MAAM,EAAE,CAAC;oBACX,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;gBACxH,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,CAAM,EAAgB,EAAE;QACjD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,iBAAiB,GAAG,KAAK,EAC7B,CAAM,EACN,MAAc,EACd,kBAA0B,EACZ,EAAE;QAChB,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAC5E,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,GAAG,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/F,OAAO,EAAE,QAAQ,EAAE,CAAC;IACtB,CAAC,CAAC;IAEF,MAAM,mBAAmB,GAAG,CAAC,CAAM,EAAU,EAAE;QAC7C,MAAM,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACrD,IAAI,eAAe;YAAE,OAAO,eAAe,CAAC;QAC5C,MAAM,cAAc,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,cAAc;YAAE,OAAO,cAAc,CAAC;QAC1C,OAAO,UAAU,EAAE,CAAC,SAAS,CAAC;IAChC,CAAC,CAAC;IAEF;;mFAE+E;IAC/E,MAAM,uBAAuB,GAAG,KAAK,EAAE,CAAM,EAA8B,EAAE;QAC3E,MAAM,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACrD,MAAM,cAAc,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,eAAe,GAAG,UAAU,EAAE,CAAC,SAAS,CAAC;QAC/C,MAAM,SAAS,GAAG,eAAe,IAAI,cAAc,IAAI,eAAe,CAAC;QACvE,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC,CAAC,8CAA8C;QACpG,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAChC,8DAA8D,EAC9D,CAAC,SAAS,CAAC,CACZ,CAAC;YACF,IAAI,GAAG;gBAAE,OAAO,SAAS,CAAC;YAC1B,4FAA4F;YAC5F,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;YAC7D,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,QAAQ,CACpB;;;;;2CAKiC,EACjC,CAAC,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE,CAAC,CAC5C,CAAC;gBACF,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE,iDAAiD,CAAC,CAAC;YAC5G,CAAC;YAAC,OAAO,SAAc,EAAE,CAAC;gBACxB,+DAA+D;gBAC/D,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,0DAA0D,CAAC,CAAC;YACzG,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,wCAAwC,CAAC,CAAC;YAChE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QACjG,CAAC;IACH,CAAC,CAAC;IAEF,2DAA2D;IAC3D,MAAM,EAAE,GAAG,eAAe,CAAC,aAAa,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;IAEzE,OAAO;QACL,MAAM;QACN,QAAQ;QACR,EAAE;QACF,YAAY;QACZ,WAAW;QACX,eAAe;QACf,iBAAiB;QACjB,mBAAmB;QACnB,uBAAuB;QACvB,aAAa,EAAE,EAAE;QACjB,WAAW,EAAE,EAAE;QACf,eAAe,EAAE,EAAE;QACnB,qBAAqB,EAAE;YACrB,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;YACxB,SAAS,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC;YAClC,GAAG,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC;SAC7B;QACD,OAAO,EAAE,EAAE;QACX,MAAM,EAAE,EAAE;QACV,cAAc,EAAE,EAAE;QAClB,UAAU,EAAE,IAAI,GAAG,EAAE;QACrB,iBAAiB,EAAE,IAAI,CAAC,GAAG,EAAE;KAC9B,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sdlc-agent-4-enterprise-server",
-  "version": "1.53.3",
+  "version": "1.53.12",
   "description": "Code Intelligence MCP Server — multi-agent SDLC pipeline with semantic memory, code graph, and draw.io integration",
   "main": "dist/index.js",
   "bin": {

package/src/config/__tests__/salesforce-extensions.test.ts

@@ -18,7 +18,7 @@ describe('DEFAULT_EXTENSIONS (SA4E-223)', () => {
       // regression: legacy extensions preserved
       expect(cfg.includeExtensions).toContain('.cls');
       expect(cfg.includeExtensions).toContain('.trigger');
-      expect(cfg.includeExtensions).toContain('.pega');
+      expect(cfg.includeExtensions).not.toContain('.pega');
     } finally {
       fs.rmSync(ws, { recursive: true, force: true });
     }

package/src/config/schema.ts

@@ -0,0 +1,77 @@
+/**
+ * Unified config schema + shared config constants (BR-18 split from index.ts).
+ * The Zod schema is the single source of truth for the backend config shape;
+ * index.ts assembles the raw object and parses it through this schema.
+ */
+
+import { z } from 'zod';
+import { SandboxConfigSchema } from './SandboxConfig.js';
+import { EntraSurfaceSchema } from './EntraConfig.js';
+
+export const DEFAULT_EXCLUDE = [
+  'node_modules', '.git', 'dist', 'build', '.gradle',
+  '.idea', '.vscode', '__pycache__', '.venv', 'target',
+  '.code-intel', 'coverage', '.next', '.nuxt',
+  'rules',
+  '.pega-cache',
+];
+
+export const DEFAULT_EXTENSIONS = [
+  '.ts', '.tsx', '.js', '.jsx', '.kt', '.java', '.py',
+  '.go', '.rs', '.c', '.cpp', '.h', '.hpp', '.cs',
+  '.rb', '.php', '.swift', '.scala', '.sql', '.sh',
+  '.yaml', '.yml', '.json', '.toml', '.gradle.kts',
+  '.cls', '.trigger',
+  // ---- SA4E-223: new Salesforce simple extensions (Gate 2) ----
+  '.apex', '.soql', '.page', '.component', '.cmp', '.app', '.evt', '.intf', '.tokens',
+  // ---- SA4E-225: un-skip PowerShell ----
+  '.ps1',
+];
+
+export const UnifiedConfigSchema = z.object({
+  port: z.number().min(1024).max(65535).default(48721),
+  host: z.string().default('0.0.0.0'),
+  // Legacy/deprecated — nothing loads a bare .onnx file anymore; kept for
+  // backward-compatible admin config output. See embeddingModelId below.
+  onnxModelPath: z.string().default('models/model.onnx'),
+  // SA4E-44 / AD-6 — real ONNX embeddings via transformers.js (EmbeddingService).
+  embeddingModelId: z.string().default('Xenova/paraphrase-multilingual-MiniLM-L12-v2'),
+  embeddingCacheDir: z.string(),
+  embeddingQuantized: z.boolean().default(true),
+  logLevel: z.enum(['debug', 'info', 'warn', 'error']).default('info'),
+  viewerPort: z.number().default(3202),
+  watchEnabled: z.boolean().default(true),
+  watchDebounceMs: z.number().default(500),
+  ollamaUrl: z.string().nullable().default(null),
+  ollamaModel: z.string().default('nomic-embed-text'),
+  maxFileSize: z.number().default(512_000),
+  projectId: z.string().default('default'),
+  workspace: z.string(),
+  indexTempDir: z.string(),
+  dbPath: z.string(),
+  configPath: z.string(),
+  dataDir: z.string(),
+  sqliteDbPath: z.string(),
+  orchestrationConfigPath: z.string(),
+  excludePatterns: z.array(z.string()),
+  includeExtensions: z.array(z.string()),
+  sandbox: SandboxConfigSchema,
+  entra: EntraSurfaceSchema, // SA4E-264 — Entra ID SSO surface (gate: SSO_ENABLED)
+});
+
+export type UnifiedConfig = z.infer<typeof UnifiedConfigSchema>;
+export type AppConfig = UnifiedConfig;
+export type BackendConfig = UnifiedConfig;
+
+export function envBool(key: string, fallback: boolean): boolean {
+  const val = process.env[key];
+  if (val === undefined) return fallback;
+  return val === '1' || val.toLowerCase() === 'true';
+}
+
+export function envInt(key: string, fallback: number): number {
+  const val = process.env[key];
+  if (val === undefined) return fallback;
+  const parsed = parseInt(val, 10);
+  return isNaN(parsed) ? fallback : parsed;
+}

package/src/config/unified-extensions.ts

@@ -7,7 +7,7 @@ export const UNIFIED_EXTENSIONS = [
   'kt', 'java', 'py', 'go', 'rs',
   'c', 'cpp', 'h', 'hpp',
   'cs', 'php', 'rb', 'scala', 'swift',
-  'cls', 'trigger', 'apex', 'soql', 'page', 'component', 'cmp', 'app', 'evt', 'intf', 'tokens', 'pega',
+  'cls', 'trigger', 'apex', 'soql', 'page', 'component', 'cmp', 'app', 'evt', 'intf', 'tokens',
   'html', 'jsp', 'xml', 'sql', 'properties', 'yml', 'yaml', 'css',
   'ps1'
 ] as const;

package/src/engine/indexer/__tests__/file-scanner.test.ts

@@ -113,10 +113,10 @@ describe('detectLanguage', () => {
   });
 
   // ---- SA4E-223: regression — .cls/.trigger/.pega unchanged (TC-05) ----
-  it('keeps legacy apex/pega mappings', () => {
+  it('keeps legacy apex mappings, pega removed for SRP', () => {
     expect(detectLanguage('/a/C.cls')).toBe('apex');
     expect(detectLanguage('/a/T.trigger')).toBe('apex');
-    expect(detectLanguage('/a/R.pega')).toBe('pega');
+    expect(detectLanguage('/a/R.pega')).toBeNull();
   });
 
   // ---- SA4E-223: unknown still null (TC-06) ----

package/src/engine/indexer/file-scanner/languages.ts

@@ -0,0 +1,78 @@
+/**
+ * Language detection for the file scanner (extension maps + compound suffixes).
+ * Extracted from file-scanner.ts (BR-18) — no behavior change.
+ */
+
+import * as path from 'path';
+
+export const EXTENSION_LANGUAGE_MAP: Record<string, string> = {
+  '.ts': 'typescript', '.tsx': 'typescript',
+  '.js': 'javascript', '.jsx': 'javascript',
+  '.kt': 'kotlin', '.kts': 'kotlin',
+  '.java': 'java',
+  '.py': 'python',
+  '.go': 'go',
+  '.rs': 'rust',
+  '.c': 'c', '.h': 'c',
+  '.cpp': 'cpp', '.hpp': 'cpp', '.cc': 'cpp', '.cxx': 'cpp',
+  '.cs': 'csharp',
+  '.rb': 'ruby',
+  '.php': 'php',
+  '.swift': 'swift',
+  '.scala': 'scala',
+  '.sql': 'sql',
+  '.sh': 'bash',
+  '.yaml': 'yaml', '.yml': 'yaml',
+  '.json': 'json',
+  '.toml': 'toml',
+  '.cls': 'apex',
+  '.trigger': 'apex',
+  // ---- SA4E-223: new Salesforce simple extensions ----
+  '.apex': 'apex',
+  '.soql': 'apex',
+  '.page': 'visualforce',
+  '.component': 'visualforce',
+  '.cmp': 'aura',
+  '.app': 'aura',
+  '.evt': 'aura',
+  '.intf': 'aura',
+  '.tokens': 'aura',
+  // ---- SA4E-... LWC HTML template support ----
+  '.html': 'lwc-html',
+  // ---- SA4E-261: Tier B extensions for unified whitelist ----
+  '.jsp': 'jsp',
+  '.xml': 'xml',
+  '.properties': 'properties',
+  '.css': 'css',
+  '.ps1': 'powershell',
+};
+
+/**
+ * SA4E-223 — Single source of truth for Salesforce `*-meta.xml` compound suffixes.
+ * Used by detectLanguage() so *.xml files are routed to the `salesforce-meta` parser.
+ * (Compound-suffix files have ext === '.xml' which is NOT in includeExtensions, but
+ * processFile/async-file-scanner exempt `language === 'salesforce-meta'`.)
+ */
+export const SALESFORCE_META_SUFFIXES: string[] = [
+  '.flow-meta.xml', '.object-meta.xml', '.field-meta.xml', '.js-meta.xml', '.component-meta.xml',
+  '.flexipage-meta.xml', '.permissionset-meta.xml', '.profile-meta.xml', '.labels-meta.xml',
+  '.tab-meta.xml', '.layout-meta.xml', '.report-meta.xml', '.dashboard-meta.xml',
+  '.site-meta.xml', '.resource-meta.xml', '.email-meta.xml', '.testsuite-meta.xml',
+];
+
+/** Detect language from file extension — supports compound extensions. */
+export function detectLanguage(filePath: string): string | null {
+  // Check compound extensions first (Salesforce metadata)
+  const lowerPath = filePath.toLowerCase().replace(/\\/g, '/');
+  if (SALESFORCE_META_SUFFIXES.some(s => lowerPath.endsWith(s))) {
+    return 'salesforce-meta';
+  }
+
+  const ext = getExtension(filePath);
+  return EXTENSION_LANGUAGE_MAP[ext] ?? null;
+}
+
+export function getExtension(filePath: string): string {
+  if (filePath.endsWith('.gradle.kts')) return '.kts';
+  return path.extname(filePath).toLowerCase();
+}

package/src/engine/indexer/project-type/__tests__/resolver.test.ts

@@ -40,8 +40,9 @@ describe('IndexingStrategyResolver', () => {
 
   it('SA4E-223: getFallback includes new Salesforce extensions', () => {
     const exts = resolver.getFallback().includeExtensions;
-    for (const e of ['.apex', '.soql', '.page', '.component', '.cmp', '.app', '.evt', '.intf', '.tokens', '.cls', '.trigger', '.pega']) {
+    for (const e of ['.apex', '.soql', '.page', '.component', '.cmp', '.app', '.evt', '.intf', '.tokens', '.cls', '.trigger']) {
       expect(exts).toContain(e);
     }
+    expect(exts).not.toContain('.pega');
   });
 });

package/src/engine/indexer/project-type/resolver.ts

@@ -12,6 +12,8 @@ const BASE_EXCLUDES = ['.git', '.svn', '.hg'];
 const FALLBACK_EXCLUDES = [
   'node_modules', '.git', 'dist', 'build', '.gradle',
   '.idea', '.vscode', '__pycache__', '.venv', 'target',
+  'rules',
+  '.pega-cache',
 ];
 
 /** Fallback extensions aligned with unified whitelist (SA4E-261) */

package/src/server/middleware/jwt-auth.ts

@@ -14,6 +14,7 @@ import { createProjectContext } from '../../modules/memory/ProjectContext.js';
 import { SessionService } from '../services/SessionService.js';
 import { getEntraVerifier, isEntraToken, tryEntraVerification, validateEntraAuthConfig } from './verifiers/entra-auth.js';
 import { getJwtSecret } from '../../admin/db/jwt.js';
+import { getDbAdapter } from '../../admin/admin-db.js';
 
 const REQUIRE_AUTH = process.env.CODE_INTEL_REQUIRE_AUTH === 'true';
 const TOKEN_SECRET = process.env.KB_TOKEN_SECRET || '';
@@ -31,6 +32,26 @@ export function isJwtAuthRequired(): boolean {
   return REQUIRE_AUTH;
 }
 
+/** SA4E-375: Auto-upsert project in project_registry to avoid PROJECT_NOT_REGISTERED. */
+async function autoUpsertProject(projectId: string, workspaceRoot: string, userId: string) {
+  if (!projectId || projectId === 'default' || !projectId.trim()) return;
+  try {
+    const adapter = getDbAdapter();
+    const displayName = workspaceRoot ? workspaceRoot.split(/[\\/]/).pop() || projectId : projectId;
+    await adapter.runAsync(
+      `INSERT INTO project_registry (project_id, display_name, workspace_path, created_by, last_seen)
+       VALUES (?, ?, ?, ?, current_timestamp)
+       ON CONFLICT(project_id) DO UPDATE SET
+         display_name = COALESCE(EXCLUDED.display_name, display_name),
+         workspace_path = COALESCE(EXCLUDED.workspace_path, workspace_path),
+         last_seen = current_timestamp`,
+      [projectId, displayName, workspaceRoot, userId || '']
+    );
+  } catch {
+    // Non-fatal: ignore upsert errors, project may already exist or DB error
+  }
+}
+
 function decodeJwtPayload(token: string): Record<string, any> | null {
   try {
     const parts = token.split('.');
@@ -69,12 +90,18 @@ function createJwtAuth(alwaysRequire = false): MiddlewareHandler {
   return async (c, next) => {
     // X-Project-Id header is the mandatory source of project identity
     const projectId = c.req.header('X-Project-Id') || '';
+    const workspaceRoot = c.req.header('X-Workspace-Root') || '';
     const authHeader = c.req.header('Authorization');
     const mustAuth = REQUIRE_AUTH || alwaysRequire;
 
-    const anonymous = () => {
-      const ctx = createProjectContext(projectId, 'anonymous');
-      c.set('projectContext', ctx);
+    const commitContext = async (ctxProjectId: string, userId: string) => {
+      c.set('projectContext', createProjectContext(ctxProjectId, userId));
+      // SA4E-375: auto-upsert project on every authenticated request to ensure project_registry exists
+      await autoUpsertProject(ctxProjectId, workspaceRoot, userId);
+    };
+
+    const anonymous = async () => {
+      await commitContext(projectId, 'anonymous');
       return next();
     };
 
@@ -117,13 +144,9 @@ function createJwtAuth(alwaysRequire = false): MiddlewareHandler {
         if (!mustAuth) return anonymous();
         return unauthorized('TOKEN_INVALID', 'Invalid or expired token');
       }
-      const ctx = createProjectContext(
-        projectId || payload.pid || '',
-        payload.sub || 'anonymous',
-        undefined,
-        payload.wid || undefined,
-      );
-      c.set('projectContext', ctx);
+      const ctxProjectId = projectId || payload.pid || '';
+      const userId = payload.sub || 'anonymous';
+      await commitContext(ctxProjectId, userId);
       return next();
     }
 
@@ -139,8 +162,7 @@ function createJwtAuth(alwaysRequire = false): MiddlewareHandler {
       if (!mustAuth) return anonymous();
       return unauthorized('TOKEN_INVALID', 'Invalid or expired token');
     }
-    const ctx = createProjectContext(projectId, session.userId);
-    c.set('projectContext', ctx);
+    await commitContext(projectId, session.userId);
     return next();
   };
 }

package/src/server/routes/admin/context.ts

@@ -111,15 +111,25 @@ export function createAdminContext(logger: Logger, registry?: any): AdminContext
         [projectId]
       );
       if (row) return projectId;
-      return c.json({
-        __error: true,
-        error: {
-          code: 'PROJECT_NOT_REGISTERED',
-          message: `Project ${projectId} is not registered. Call POST /api/admin/projects/register first.`,
-          action: 'register',
-          projectId,
-        }
-      }, 404);
+      // SA4E-375: Server-side auto-upsert project on first access to avoid PROJECT_NOT_REGISTERED
+      const workspaceRoot = c.req.header('X-Workspace-Root') || '';
+      const displayName = workspaceRoot ? workspaceRoot.split(/[\\/]/).pop() || projectId : projectId;
+      try {
+        await adapter.runAsync(
+          `INSERT INTO project_registry (project_id, display_name, workspace_path, created_by, last_seen)
+           VALUES (?, ?, ?, ?, current_timestamp)
+           ON CONFLICT(project_id) DO UPDATE SET
+             display_name = COALESCE(EXCLUDED.display_name, display_name),
+             workspace_path = COALESCE(EXCLUDED.workspace_path, workspace_path),
+             last_seen = current_timestamp`,
+          [projectId, displayName, workspaceRoot, '']
+        );
+        logger.info({ projectId, displayName, workspaceRoot }, '[ensureProjectRegistered] auto-upserted project');
+      } catch (upsertErr: any) {
+        // Non-fatal: log and continue; subsequent requests may succeed
+        logger.warn({ err: upsertErr, projectId }, '[ensureProjectRegistered] auto-upsert failed, proceeding');
+      }
+      return projectId;
     } catch (err: any) {
       logger.error({ err }, '[ensureProjectRegistered] check failed');
       return c.json({ __error: true, error: { code: 'INTERNAL_ERROR', message: err.message } }, 500);