investigation export.

src/fgai/dashboard.py

@@ -3,8 +3,10 @@ from __future__ import annotations
 import json
 from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
 from pathlib import Path
+from urllib.parse import parse_qs, urlparse
 
 from .config import ConfigStore
+from .exports import investigation_report, investigation_report_markdown
 from .graylog_mcp import GraylogMcpClient
 from .metrics import prometheus_metrics
 from .feedback import FeedbackStore
@@ -388,6 +390,21 @@ def serve_dashboard(host: str, port: int, status_file: str, *, image_dir: str |
                     body = json.dumps({"summary": {}, "anomalies": [], "block_candidates": []}).encode("utf-8")
                 self._send(200, "application/json", body)
                 return
+            if self.path.startswith("/api/export/incidents"):
+                parsed = urlparse(self.path)
+                params = parse_qs(parsed.query)
+                fmt = params.get("format", ["markdown"])[0]
+                incident_id = params.get("incident_id", [""])[0] or None
+                try:
+                    status = json.loads(status_path.read_text(encoding="utf-8")) if status_path.exists() else {}
+                except json.JSONDecodeError:
+                    status = {}
+                report = investigation_report(status, incident_id=incident_id)
+                if fmt == "json":
+                    self._send(200, "application/json", json.dumps(report, indent=2, sort_keys=True).encode("utf-8"))
+                else:
+                    self._send(200, "text/markdown; charset=utf-8", investigation_report_markdown(report).encode("utf-8"))
+                return
             if self.path == "/metrics":
                 try:
                     status = json.loads(status_path.read_text(encoding="utf-8")) if status_path.exists() else {}