26debf2fe0
registerApi : login rate-limité → JWT, puis Bearer obligatoire sur /api/chat, /api/review (+approve/refuse), /api/state. CORS restreint + rate-limit. Réutilise ChatService + ReviewService. API activée seulement si auth configurée (apiAuth). 65 tests (5 via inject), 0 vuln. Palier de risque : privilégié (surface exposée) — montée seulement si auth présente ; non exposée tant que .env non renseigné. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
35 lines
832 B
JSON
35 lines
832 B
JSON
{
|
|
"name": "chlova-orchestrator",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"type": "module",
|
|
"description": "CHLOVA — cerveau LLM en boucle tool-calling (Phase 1 : lecture seule)",
|
|
"engines": {
|
|
"node": ">=24"
|
|
},
|
|
"scripts": {
|
|
"build": "tsc -p tsconfig.build.json",
|
|
"dev": "tsx watch src/index.ts",
|
|
"start": "node dist/index.js",
|
|
"typecheck": "tsc -p tsconfig.json",
|
|
"test": "vitest run",
|
|
"test:watch": "vitest"
|
|
},
|
|
"dependencies": {
|
|
"@fastify/cors": "11.2.0",
|
|
"@fastify/rate-limit": "11.0.0",
|
|
"@modelcontextprotocol/sdk": "1.29.0",
|
|
"fastify": "5.8.5",
|
|
"jose": "6.2.3",
|
|
"otplib": "13.4.1",
|
|
"pino": "10.3.1",
|
|
"zod": "3.24.1"
|
|
},
|
|
"devDependencies": {
|
|
"@types/node": "24.13.2",
|
|
"tsx": "4.22.4",
|
|
"typescript": "5.7.3",
|
|
"vitest": "4.1.9"
|
|
}
|
|
}
|