Function createExpressApp

src/index.ts:112–167

(enableDashboard: boolean = false)

function createExpressApp(
  enableDashboard: boolean = false,
  mcpHttpAuthToken?: string
): express.Application {
  const app = express();

  if (mcpHttpAuthToken) {
    app.all('/mcp', createMcpHttpAuthMiddleware(mcpHttpAuthToken));
  }

  app.use(express.json());

  const env = getEnvironment();
  const normalizeHostForHeader = (host: string): string => {
    const trimmedHost = host.trim();
    if (trimmedHost.startsWith('[') && trimmedHost.endsWith(']')) {
      return trimmedHost;
    }
    return isIP(trimmedHost) === 6 ? `[${trimmedHost}]` : trimmedHost;
  };
  const loopbackHosts = ['localhost', '127.0.0.1', '[::1]'];
  const normalizedHost = normalizeHostForHeader(env.MCP_HOST);
  const allowList = loopbackHosts.includes(normalizedHost) ? loopbackHosts : [normalizedHost];
  if (env.MCP_HOST !== '0.0.0.0' && env.MCP_HOST !== '::') {
    app.use(hostHeaderValidation(allowList));
  }

  // Health check endpoint
  app.get('/health', async (req, res) => {
    try {
      // Perform health check
      const healthCheckResult = await healthCheck(client);

      // Check if Document Engine API is operational
      const isHealthy = !healthCheckResult.markdown.includes('❌ Error');

      // Return appropriate status code based on health check result
      if (isHealthy) {
        res.status(200).json({
          status: 'operational',
          message: 'All systems operational',
        });
      } else {
        res.status(503).json({
          status: 'degraded',
          message: 'Document Engine API connection error',
        });
      }
    } catch (error) {
      logger.error(null, 'Health check endpoint error', { error });
      res.status(500).json({
        status: 'error',
        message: error instanceof Error ? error.message : 'Unknown error',
      });
    }
  });

  // Mount dashboard routes only if enabled
  if (enableDashboard) {