Query REST API (local)

Thin Hono server in backend/ — loads HELIX_GRAPH_PATH once at startup.

Default base URL: http://localhost:8787

Start

HELIX_GRAPH_PATH="$(pwd)/scans/latest/reports/technical-graph.json" npm run dev:api

Auth

None for local. Do not expose this process on a public network without your own gate.

Common routes

Method	Path	Notes
POST/GET	/query/technical-graph	Full graph (inline JSON)
GET	/query/features	Feature nodes
GET	/query/unbridged	ApiEndpoints without FE bridge
POST	/query/impact	CVE / purl reachability
POST	/query/path	Shortest path
POST	/query/explain	Node + incident edges

Prefer the npm client / CLI for most agent workflows; HTTP is optional.