feat(serve): codemap serve — HTTP API exposing every MCP tool over POST /tool/{name}#44

Merged

SutuSebastian merged 9 commits into

mainfrom

feat/codemap-serve

May 2, 2026

Commits on May 2, 2026

refactor(mcp): extract pure tool-handlers.ts (Tracer 1 of 7 — codemap serve prereq)
SutuSebastian
committed
feat(serve): cmd-serve.ts parser + http-server.ts skeleton (Tracer 2 of 7)
SutuSebastian
committed
feat(serve): POST /tool/query end-to-end (Tracer 3 of 7)
SutuSebastian
committed
feat(serve): wire remaining 10 tools (audit, context, validate, show, snippet, query_recipe, query_batch, baseline trio) (Tracer 4 of 7)
SutuSebastian
committed
test(serve): lock --token Bearer auth (Tracer 5 of 7)
SutuSebastian
committed
feat(serve): GET /resources/{uri} mirroring MCP resources (Tracer 6 of 7)
SutuSebastian
committed
docs: sync architecture / glossary / README / agents (Rule 10) + delete plan + changeset (Tracer 7 of 7)
SutuSebastian
committed
fix(serve): CSRF + DNS-rebinding guard on every request (security audit)
SutuSebastian
committed
fix(serve): Zod validation + 404/500 status + IPv6 host + 7 doc nits (CodeRabbit on #44)
SutuSebastian
committed