@digitalpaws/starr 0.0.1

package/dist/web/index.js

@@ -0,0 +1,153 @@
+// SPDX-License-Identifier: 0BSD
+// SPDX-FileCopyrightText: 2025 Digi <digitalpaws@proton.me>
+import Fastify from "fastify";
+import fastifyStatic from "@fastify/static";
+import fastifyCookie from "@fastify/cookie";
+import fastifyFormbody from "@fastify/formbody";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+// ── Deferred AuthService reference ───────────────────────
+// Set by main.ts via initAuthService() after AuthService is created.
+let authService = null;
+export function initAuthService(auth) {
+    authService = auth;
+}
+// ── Deferred OIDC service references ─────────────────────
+let oidcProviderService = null;
+let oidcFlow = null;
+let userService = null;
+export function initOidcServices(oidcProviders, flow, users) {
+    oidcProviderService = oidcProviders;
+    oidcFlow = flow;
+    userService = users;
+}
+// ── Server factory ───────────────────────────────────────
+export async function createWebServer(logger) {
+    // forceCloseConnections ensures SSE and other persistent connections
+    // are forcefully torn down on close(), preventing shutdown hangs
+    // that keep the port bound (the root cause of EADDRINUSE on restart).
+    const server = Fastify({ logger: false, forceCloseConnections: true });
+    // Parse cookies (needed for session)
+    await server.register(fastifyCookie);
+    // Parse form/multipart bodies (needed for auth, config)
+    await server.register(fastifyFormbody);
+    // ---- AUTH HOOK ----
+    // All /api/* routes require a valid session, except an explicit
+    // allowlist of public endpoints (login, setup, OIDC initiation, etc.).
+    // Non-API routes (static files) are always public.
+    server.addHook("onRequest", async (request, reply) => {
+        // Non-API routes (static files) are always public
+        if (!request.url.startsWith("/api/")) {
+            return;
+        }
+        // Public paths that don't require authentication
+        const publicPaths = [
+            "/api/auth/login",
+            "/api/auth/setup",
+            "/api/auth/needs-setup",
+            "/api/auth/status",
+            "/api/auth/logout", // safe — only clears cookie
+            "/api/oidc/providers", // login page needs this before auth
+            "/api/oidc/login/", // initiates OIDC flow
+            "/api/oidc/callback/", // OIDC provider redirects here
+        ];
+        for (const pub of publicPaths) {
+            if (request.url === pub || request.url.startsWith(pub)) {
+                return; // skip auth for public paths
+            }
+        }
+        // All other /api/* routes require a valid session
+        const sid = request.cookies["starr_sid"];
+        if (!sid) {
+            reply.status(401).send({ error: "Unauthorized" });
+            return;
+        }
+        if (!authService) {
+            reply.status(500).send({ error: "auth service not available" });
+            return;
+        }
+        const result = authService.validateToken(sid);
+        if (!result) {
+            reply.status(401).send({ error: "Invalid session" });
+            return;
+        }
+        // Attach user info including role and id
+        request.user = {
+            id: result.userId,
+            username: result.userId,
+            role: result.role ?? "user",
+        };
+    });
+    // ---- REGISTER API ROUTES ----
+    // Each route module is registered as a Fastify plugin.
+    // Dynamic import with try/catch means a missing route module won't crash the server.
+    const routeModules = [
+        "./routes/auth.js",
+        "./routes/discovery.js",
+        "./routes/content-types.js",
+        "./routes/requests.js",
+        "./routes/config.js",
+        "./routes/activity.js",
+        "./routes/sse.js",
+        "./routes/oidc.js",
+        "./routes/library.js",
+        "./routes/library-management.js",
+        "./routes/library-import.js",
+    ];
+    for (const modPath of routeModules) {
+        try {
+            const mod = await import(modPath);
+            await server.register(mod.default);
+        }
+        catch (err) {
+            if (err.code === "ERR_MODULE_NOT_FOUND") {
+                logger.warn(`route module not found (skipping): ${modPath}`);
+            }
+            else {
+                logger.error(`failed to register route module: ${modPath}`, { error: String(err) });
+            }
+        }
+    }
+    // ---- INIT OIDC ROUTES ----
+    // OIDC routes need the services hooked up after registration
+    try {
+        const { initOidcRoutes } = await import("./routes/oidc.js");
+        if (authService && oidcProviderService && oidcFlow && userService) {
+            initOidcRoutes(authService, oidcProviderService, oidcFlow, userService);
+        }
+        else {
+            logger.warn("OIDC services not fully initialized — skipping OIDC route init");
+        }
+    }
+    catch (err) {
+        logger.error("failed to init OIDC routes", { error: String(err) });
+    }
+    // ---- STATIC FILE SERVING (SPA) ----
+    // In production, the Svelte build output is at ../../web-ui/dist
+    // In development, the Vite dev server proxies to the host; static files aren't served.
+    const spaDist = path.resolve(__dirname, "../../../web-ui/dist");
+    try {
+        await server.register(fastifyStatic, {
+            root: spaDist,
+            prefix: "/",
+            wildcard: false,
+        });
+        // SPA fallback: serve index.html for any non-API, non-file route
+        server.setNotFoundHandler(async (request, reply) => {
+            if (request.url.startsWith("/api/")) {
+                reply.status(404).send({ error: "not found" });
+                return;
+            }
+            // Serve index.html for client-side routing
+            await reply.sendFile("index.html");
+        });
+    }
+    catch {
+        logger.warn("SPA static files not found (web-ui/dist missing); " +
+            "run `pnpm --filter starr-web-ui build` first");
+    }
+    logger.info("web server created");
+    return server;
+}
+//# sourceMappingURL=index.js.map

package/dist/web/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/web/index.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,4DAA4D;AAE5D,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAC5C,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAC5C,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAOzC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE/D,4DAA4D;AAC5D,qEAAqE;AACrE,IAAI,WAAW,GAAuB,IAAI,CAAC;AAE3C,MAAM,UAAU,eAAe,CAAC,IAAiB;IAC/C,WAAW,GAAG,IAAI,CAAC;AACrB,CAAC;AAED,4DAA4D;AAC5D,IAAI,mBAAmB,GAA+B,IAAI,CAAC;AAC3D,IAAI,QAAQ,GAAoB,IAAI,CAAC;AACrC,IAAI,WAAW,GAAuB,IAAI,CAAC;AAE3C,MAAM,UAAU,gBAAgB,CAC9B,aAAkC,EAClC,IAAc,EACd,KAAkB;IAElB,mBAAmB,GAAG,aAAa,CAAC;IACpC,QAAQ,GAAG,IAAI,CAAC;IAChB,WAAW,GAAG,KAAK,CAAC;AACtB,CAAC;AAED,4DAA4D;AAE5D,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAc;IAClD,qEAAqE;IACrE,iEAAiE;IACjE,sEAAsE;IACtE,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvE,qCAAqC;IACrC,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAErC,wDAAwD;IACxD,MAAM,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAEvC,sBAAsB;IACtB,gEAAgE;IAChE,uEAAuE;IACvE,mDAAmD;IACnD,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACnD,kDAAkD;QAClD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,OAAO;QACT,CAAC;QAED,iDAAiD;QACjD,MAAM,WAAW,GAAG;YAClB,iBAAiB;YACjB,iBAAiB;YACjB,uBAAuB;YACvB,kBAAkB;YAClB,kBAAkB,EAAW,4BAA4B;YACzD,qBAAqB,EAAQ,oCAAoC;YACjE,kBAAkB,EAAW,sBAAsB;YACnD,qBAAqB,EAAQ,+BAA+B;SAC7D,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,IAAI,OAAO,CAAC,GAAG,KAAK,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvD,OAAO,CAAE,6BAA6B;YACxC,CAAC;QACH,CAAC;QAED,kDAAkD;QAClD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,WAAW,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,yCAAyC;QACxC,OAAe,CAAC,IAAI,GAAG;YACtB,EAAE,EAAE,MAAM,CAAC,MAAM;YACjB,QAAQ,EAAE,MAAM,CAAC,MAAM;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,MAAM;SAC5B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,gCAAgC;IAChC,uDAAuD;IACvD,qFAAqF;IAErF,MAAM,YAAY,GAAG;QACnB,kBAAkB;QAClB,uBAAuB;QACvB,2BAA2B;QAC3B,sBAAsB;QACtB,oBAAoB;QACpB,sBAAsB;QACtB,iBAAiB;QACjB,kBAAkB;QAClB,qBAAqB;QACrB,gCAAgC;QAChC,4BAA4B;KAC7B,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,CAAC,sCAAsC,OAAO,EAAE,CAAC,CAAC;YAC/D,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,KAAK,CAAC,oCAAoC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,6DAA6D;IAC7D,IAAI,CAAC;QACH,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC5D,IAAI,WAAW,IAAI,mBAAmB,IAAI,QAAQ,IAAI,WAAW,EAAE,CAAC;YAClE,cAAc,CAAC,WAAW,EAAE,mBAAmB,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC1E,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,sCAAsC;IACtC,iEAAiE;IACjE,uFAAuF;IACvF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE;YACnC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,GAAG;YACX,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,iEAAiE;QACjE,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACjD,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,2CAA2C;YAC3C,MAAM,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CACT,oDAAoD;YACpD,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/web/routes/activity.d.ts

@@ -0,0 +1,6 @@
+import type { FastifyPluginAsync } from "fastify";
+import type { Starr } from "../../host.js";
+export declare function initActivityRoutes(starr: Starr): void;
+declare const activityRoutes: FastifyPluginAsync;
+export default activityRoutes;
+//# sourceMappingURL=activity.d.ts.map

package/dist/web/routes/activity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity.d.ts","sourceRoot":"","sources":["../../../src/web/routes/activity.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAI3C,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAErD;AAED,QAAA,MAAM,cAAc,EAAE,kBA0BrB,CAAC;AAEF,eAAe,cAAc,CAAC"}

package/dist/web/routes/activity.js

@@ -0,0 +1,31 @@
+// SPDX-License-Identifier: 0BSD
+// SPDX-FileCopyrightText: 2025 Digi <digitalpaws@proton.me>
+let starrInstance = null;
+export function initActivityRoutes(starr) {
+    starrInstance = starr;
+}
+const activityRoutes = async (server) => {
+    server.get("/api/requests/:id/activity", async (request, reply) => {
+        if (!starrInstance) {
+            reply.status(500).send({ error: "host not available" });
+            return;
+        }
+        const req = starrInstance.getStateStore().getByRequestId(request.params.id);
+        if (!req) {
+            reply.status(404).send({ error: "request not found" });
+            return;
+        }
+        // Use the trace-store wrapper module (Task 020 data surface).
+        // Gracefully degrades to empty array if the wrapper isn't wired yet.
+        try {
+            const { getTraceEvents } = await import("../../state/trace-store.js");
+            const events = getTraceEvents(req.requestId);
+            return { requestId: req.requestId, events };
+        }
+        catch {
+            return { requestId: req.requestId, events: [] };
+        }
+    });
+};
+export default activityRoutes;
+//# sourceMappingURL=activity.js.map

package/dist/web/routes/activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity.js","sourceRoot":"","sources":["../../../src/web/routes/activity.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,4DAA4D;AAK5D,IAAI,aAAa,GAAiB,IAAI,CAAC;AAEvC,MAAM,UAAU,kBAAkB,CAAC,KAAY;IAC7C,aAAa,GAAG,KAAK,CAAC;AACxB,CAAC;AAED,MAAM,cAAc,GAAuB,KAAK,EAAE,MAAM,EAAE,EAAE;IAC1D,MAAM,CAAC,GAAG,CACR,4BAA4B,EAC5B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,aAAa,CAAC,aAAa,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QAED,8DAA8D;QAC9D,qEAAqE;QACrE,IAAI,CAAC;YACH,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;YACtE,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC7C,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAClD,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,cAAc,CAAC"}

package/dist/web/routes/auth.d.ts

@@ -0,0 +1,6 @@
+import type { FastifyPluginAsync } from "fastify";
+import type { AuthService } from "../../auth/auth-service.js";
+export declare function initAuthRoutes(auth: AuthService): void;
+declare const authRoutes: FastifyPluginAsync;
+export default authRoutes;
+//# sourceMappingURL=auth.d.ts.map

package/dist/web/routes/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/web/routes/auth.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAS9D,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAEtD;AAYD,QAAA,MAAM,UAAU,EAAE,kBA4IjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/web/routes/auth.js

@@ -0,0 +1,142 @@
+// SPDX-License-Identifier: 0BSD
+// SPDX-FileCopyrightText: 2025 Digi <digitalpaws@proton.me>
+import { rateLimit } from "../../auth/rate-limiter.js";
+/**
+ * This module needs access to the AuthService.
+ * We provide it via a module-level setter called from main.ts.
+ */
+let authService = null;
+export function initAuthRoutes(auth) {
+    authService = auth;
+}
+const SESSION_COOKIE = "starr_sid";
+const COOKIE_OPTS = {
+    httpOnly: true,
+    sameSite: "strict",
+    path: "/",
+    secure: false,
+    // TTL from env or default 7 days (matches AuthService default)
+    maxAge: parseInt(process.env.STARR_SESSION_TTL_HOURS ?? "168", 10) * 3600,
+};
+const authRoutes = async (server) => {
+    // GET /api/auth/needs-setup — check if admin account exists
+    server.get("/api/auth/needs-setup", async (_request, _reply) => {
+        const needsSetup = authService?.needsSetup() ?? true;
+        return { needsSetup };
+    });
+    // GET /api/auth/status — check if logged in
+    server.get("/api/auth/status", async (request, reply) => {
+        const sid = request.cookies[SESSION_COOKIE];
+        if (!sid || !authService) {
+            reply.status(401).send({ error: "Unauthorized" });
+            return;
+        }
+        const result = authService.validateToken(sid);
+        if (!result) {
+            reply.status(401).send({ error: "Invalid session" });
+            return;
+        }
+        // Return richer user info (display name, avatar, role)
+        const userInfo = authService.getUserInfo(result.userId);
+        return {
+            user: result.userId,
+            displayName: userInfo?.displayName ?? result.userId,
+            avatarUrl: userInfo?.avatarUrl ?? null,
+            role: result.role ?? "user",
+        };
+    });
+    // POST /api/auth/setup — first-run admin creation
+    server.post("/api/auth/setup", async (request, reply) => {
+        if (!authService) {
+            reply.status(500).send({ error: "auth service not available" });
+            return;
+        }
+        const { username, password } = request.body;
+        if (!username || !password) {
+            reply.status(400).send({ error: "username and password are required" });
+            return;
+        }
+        try {
+            await authService.setup(username, password);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : "Setup failed";
+            if (msg.includes("already exists")) {
+                reply.status(403).send({ error: msg });
+                return;
+            }
+            reply.status(400).send({ error: msg });
+            return;
+        }
+        // Log in immediately after setup
+        const jwt = await authService.login(username, password);
+        if (jwt) {
+            reply.setCookie(SESSION_COOKIE, jwt, COOKIE_OPTS);
+            return { ok: true };
+        }
+        reply.status(500).send({ error: "Account created but login failed" });
+    });
+    // POST /api/auth/login — rate-limited (5 attempts per minute per IP)
+    server.post("/api/auth/login", { preHandler: rateLimit(5, 1) }, async (request, reply) => {
+        if (!authService) {
+            reply.status(500).send({ error: "auth service not available" });
+            return;
+        }
+        const { username, password } = request.body;
+        if (!username || !password) {
+            reply.status(400).send({ error: "username and password are required" });
+            return;
+        }
+        const jwt = await authService.login(username, password);
+        if (!jwt) {
+            reply.status(401).send({ error: "Invalid credentials" });
+            return;
+        }
+        reply.setCookie(SESSION_COOKIE, jwt, COOKIE_OPTS);
+        return { ok: true };
+    });
+    // POST /api/auth/logout
+    server.post("/api/auth/logout", async (request, reply) => {
+        const sid = request.cookies[SESSION_COOKIE];
+        if (sid && authService) {
+            const result = authService.validateToken(sid);
+            if (result) {
+                authService.logout(result.sessionId);
+            }
+        }
+        reply.clearCookie(SESSION_COOKIE, { path: "/" });
+        return { ok: true };
+    });
+    // POST /api/auth/change-password
+    server.post("/api/auth/change-password", async (request, reply) => {
+        if (!authService) {
+            reply.status(500).send({ error: "auth service not available" });
+            return;
+        }
+        const { currentPassword, newPassword } = request.body;
+        if (!currentPassword || !newPassword) {
+            reply.status(400).send({ error: "currentPassword and newPassword are required" });
+            return;
+        }
+        const user = request.user;
+        const username = user?.username;
+        if (!username) {
+            reply.status(401).send({ error: "Unauthorized" });
+            return;
+        }
+        try {
+            await authService.changePassword(username, currentPassword, newPassword);
+            // Create a new session with the new password context
+            const newJwt = await authService.login(username, newPassword);
+            if (newJwt) {
+                reply.setCookie(SESSION_COOKIE, newJwt, COOKIE_OPTS);
+            }
+            return { ok: true };
+        }
+        catch (err) {
+            reply.status(400).send({ error: err instanceof Error ? err.message : "Password change failed" });
+        }
+    });
+};
+export default authRoutes;
+//# sourceMappingURL=auth.js.map

package/dist/web/routes/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/web/routes/auth.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,4DAA4D;AAI5D,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAEvD;;;GAGG;AACH,IAAI,WAAW,GAAuB,IAAI,CAAC;AAE3C,MAAM,UAAU,cAAc,CAAC,IAAiB;IAC9C,WAAW,GAAG,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,cAAc,GAAG,WAAW,CAAC;AACnC,MAAM,WAAW,GAAG;IAClB,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,QAAiB;IAC3B,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,KAAK;IACb,+DAA+D;IAC/D,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI;CAC1E,CAAC;AAEF,MAAM,UAAU,GAAuB,KAAK,EAAE,MAAM,EAAE,EAAE;IACtD,4DAA4D;IAC5D,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC7D,MAAM,UAAU,GAAG,WAAW,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC;QACrD,OAAO,EAAE,UAAU,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,4CAA4C;IAC5C,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACtD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACzB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,uDAAuD;QACvD,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxD,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,MAAM;YACnB,WAAW,EAAE,QAAQ,EAAE,WAAW,IAAI,MAAM,CAAC,MAAM;YACnD,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,IAAI;YACtC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,MAAM;SAC5B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,kDAAkD;IAClD,MAAM,CAAC,IAAI,CACT,iBAAiB,EACjB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;QAC5C,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACxE,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;YAChE,IAAI,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACnC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QAED,iCAAiC;QACjC,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACxD,IAAI,GAAG,EAAE,CAAC;YACR,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;YAClD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAC;IACxE,CAAC,CACF,CAAC;IAEF,qEAAqE;IACrE,MAAM,CAAC,IAAI,CACT,iBAAiB,EACjB,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAC/B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;QAC5C,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACxE,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC,CACF,CAAC;IAEF,wBAAwB;IACxB,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC5C,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,WAAW,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAC9C,IAAI,MAAM,EAAE,CAAC;gBACX,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACjD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,iCAAiC;IACjC,MAAM,CAAC,IAAI,CACT,2BAA2B,EAC3B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;QACtD,IAAI,CAAC,eAAe,IAAI,CAAC,WAAW,EAAE,CAAC;YACrC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAI,OAAe,CAAC,IAAI,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,CAAC;QAEhC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,cAAc,CAAC,QAAQ,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;YACzE,qDAAqD;YACrD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YAC9D,IAAI,MAAM,EAAE,CAAC;gBACX,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;YACvD,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/web/routes/config.d.ts

@@ -0,0 +1,7 @@
+import type { FastifyPluginAsync } from "fastify";
+import type { ConfigService } from "../../config/config-service.js";
+import type { PluginRuntime } from "../../host.js";
+export declare function initConfigRoutes(cs: ConfigService, runtimeGetter: () => readonly PluginRuntime[]): void;
+declare const configRoutes: FastifyPluginAsync;
+export default configRoutes;
+//# sourceMappingURL=config.d.ts.map

package/dist/web/routes/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/web/routes/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAGpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAKnD,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,aAAa,EACjB,aAAa,EAAE,MAAM,SAAS,aAAa,EAAE,GAC5C,IAAI,CAGN;AAWD,QAAA,MAAM,YAAY,EAAE,kBA0PnB,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/dist/web/routes/config.js

@@ -0,0 +1,204 @@
+// SPDX-License-Identifier: 0BSD
+// SPDX-FileCopyrightText: 2025 Digi <digitalpaws@proton.me>
+import { SECRET_UNCHANGED_SENTINEL } from "../../config/config-service.js";
+let configService = null;
+let getRuntimes = null;
+export function initConfigRoutes(cs, runtimeGetter) {
+    configService = cs;
+    getRuntimes = runtimeGetter;
+}
+function requireAdmin(request, reply) {
+    const user = request.user;
+    if (!user || user.role !== "admin") {
+        reply.status(403).send({ error: "Forbidden: admin role required" });
+        return false;
+    }
+    return true;
+}
+const configRoutes = async (server) => {
+    // GET /api/config — list all plugin config summaries
+    server.get("/api/config", async (request, reply) => {
+        if (!requireAdmin(request, reply))
+            return;
+        if (!configService) {
+            return { plugins: [] };
+        }
+        return { plugins: configService.list() };
+    });
+    // GET /api/config/:pluginId — get single plugin config (or instance if ?instanceId=)
+    server.get("/api/config/:pluginId", async (request, reply) => {
+        if (!requireAdmin(request, reply))
+            return;
+        if (!configService) {
+            reply.status(500).send({ error: "config service not available" });
+            return;
+        }
+        const instanceId = request.query.instanceId ?? "default";
+        const entry = configService.get(request.params.pluginId, instanceId);
+        if (!entry) {
+            reply.status(404).send({ error: "plugin/instance not found" });
+            return;
+        }
+        // Find runtime for this instance
+        const fullId = instanceId === "default"
+            ? request.params.pluginId
+            : `${request.params.pluginId}::${instanceId}`;
+        const runtime = getRuntimes?.().find((r) => r.meta.id === fullId);
+        return {
+            ...entry,
+            instanceId,
+            supportsTest: !!runtime?.lifecycle.testConnection,
+        };
+    });
+    // PUT /api/config/:pluginId — update config (optional ?instanceId=)
+    server.put("/api/config/:pluginId", async (request, reply) => {
+        if (!requireAdmin(request, reply))
+            return;
+        if (!configService) {
+            reply.status(500).send({ error: "config service not available" });
+            return;
+        }
+        const instanceId = request.query.instanceId ?? "default";
+        const entry = configService.get(request.params.pluginId, instanceId);
+        if (!entry) {
+            reply.status(404).send({ error: "plugin/instance not found" });
+            return;
+        }
+        const result = configService.update(request.params.pluginId, entry.schema, request.body, instanceId);
+        if (!result.valid) {
+            reply.status(400).send({ errors: result.errors });
+            return;
+        }
+        return { ok: true };
+    });
+    // GET /api/config/:pluginId/instances — list all instances for a plugin
+    server.get("/api/config/:pluginId/instances", async (request, reply) => {
+        if (!requireAdmin(request, reply))
+            return;
+        if (!configService) {
+            reply.status(500).send({ error: "config service not available" });
+            return;
+        }
+        const instances = configService.listInstances(request.params.pluginId);
+        return { instances };
+    });
+    // POST /api/config/:pluginId/instances — create a new instance
+    server.post("/api/config/:pluginId/instances", async (request, reply) => {
+        if (!requireAdmin(request, reply))
+            return;
+        if (!configService) {
+            reply.status(500).send({ error: "config service not available" });
+            return;
+        }
+        const { pluginId } = request.params;
+        const { instanceId, values } = request.body;
+        if (!instanceId || typeof instanceId !== "string") {
+            reply.status(400).send({ error: "instanceId is required" });
+            return;
+        }
+        // Get the schema from the default instance (or any existing instance)
+        const defaultEntry = configService.get(pluginId, "default");
+        if (!defaultEntry) {
+            reply.status(404).send({ error: "plugin not found; configure the default instance first" });
+            return;
+        }
+        const result = configService.createInstance(pluginId, instanceId, defaultEntry.schema, values);
+        if (!result.valid) {
+            reply.status(400).send({ errors: result.errors });
+            return;
+        }
+        reply.status(201).send({
+            pluginId,
+            instanceId,
+            values: result.values,
+        });
+    });
+    // DELETE /api/config/:pluginId/instances/:instanceId — delete an instance
+    server.delete("/api/config/:pluginId/instances/:instanceId", async (request, reply) => {
+        if (!requireAdmin(request, reply))
+            return;
+        if (!configService) {
+            reply.status(500).send({ error: "config service not available" });
+            return;
+        }
+        const { pluginId, instanceId } = request.params;
+        try {
+            // If not force, check if instance has libraryId set (downloader connection)
+            if (request.query.force !== "true") {
+                const entry = configService.get(pluginId, instanceId);
+                if (entry?.values?.libraryId) {
+                    reply.status(400).send({
+                        error: `Instance "${instanceId}" is connected to library "${entry.values.libraryId}". Use ?force=true to disconnect and delete, or clear the libraryId first.`,
+                    });
+                    return;
+                }
+            }
+            configService.deleteInstance(pluginId, instanceId);
+            return { deleted: true };
+        }
+        catch (err) {
+            reply.status(400).send({ error: err.message });
+        }
+    });
+    // POST /api/config/:pluginId/test — test connection without saving (optional ?instanceId=)
+    server.post("/api/config/:pluginId/test", async (request, reply) => {
+        if (!requireAdmin(request, reply))
+            return;
+        if (!configService) {
+            reply.status(500).send({ error: "config service not available" });
+            return;
+        }
+        const instanceId = request.query.instanceId ?? "default";
+        const entry = configService.get(request.params.pluginId, instanceId);
+        if (!entry) {
+            reply.status(404).send({ error: "plugin/instance not found" });
+            return;
+        }
+        // Resolve secret sentinels without validating the body
+        const decrypted = configService.getDecryptedValues(request.params.pluginId, instanceId);
+        const testValues = { ...request.body };
+        for (const [key, rawField] of Object.entries(entry.schema)) {
+            const field = rawField;
+            if (field.type === "secret" && testValues[key] === SECRET_UNCHANGED_SENTINEL) {
+                if (!decrypted || decrypted[key] === undefined) {
+                    reply.status(400).send({
+                        error: `Secret field "${key}" is required to run the test`,
+                    });
+                    return;
+                }
+                testValues[key] = decrypted[key];
+            }
+        }
+        // Find the plugin runtime for this instance
+        const fullId = instanceId === "default"
+            ? request.params.pluginId
+            : `${request.params.pluginId}::${instanceId}`;
+        const runtime = getRuntimes?.().find((r) => r.meta.id === fullId);
+        if (!runtime?.lifecycle.testConnection) {
+            reply.status(400).send({
+                error: "Plugin does not support connection tests",
+            });
+            return;
+        }
+        try {
+            const result = await runtime.lifecycle.testConnection(testValues);
+            return result;
+        }
+        catch (err) {
+            // Sanitize: mask any secret values in the error message
+            let sanitizedError = err instanceof Error ? err.message : String(err);
+            for (const val of Object.values(testValues)) {
+                if (typeof val === "string" && val.length > 0) {
+                    sanitizedError = sanitizedError.replaceAll(val, "***");
+                }
+            }
+            reply.status(500).send({
+                ok: false,
+                message: sanitizedError,
+            });
+            return;
+        }
+    });
+};
+export default configRoutes;
+//# sourceMappingURL=config.js.map

package/dist/web/routes/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/web/routes/config.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,4DAA4D;AAK5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAG3E,IAAI,aAAa,GAAyB,IAAI,CAAC;AAC/C,IAAI,WAAW,GAA4C,IAAI,CAAC;AAEhE,MAAM,UAAU,gBAAgB,CAC9B,EAAiB,EACjB,aAA6C;IAE7C,aAAa,GAAG,EAAE,CAAC;IACnB,WAAW,GAAG,aAAa,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,OAAY,EAAE,KAAU;IAC5C,MAAM,IAAI,GAAI,OAAe,CAAC,IAAI,CAAC;IACnC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACnC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,YAAY,GAAuB,KAAK,EAAE,MAAM,EAAE,EAAE;IACxD,qDAAqD;IACrD,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACjD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACzB,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,qFAAqF;IACrF,MAAM,CAAC,GAAG,CACR,uBAAuB,EACvB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC;QACzD,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACrE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QAED,iCAAiC;QACjC,MAAM,MAAM,GAAG,UAAU,KAAK,SAAS;YACrC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ;YACzB,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,WAAW,EAAE,EAAE,CAAC,IAAI,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAC5B,CAAC;QAEF,OAAO;YACL,GAAG,KAAK;YACR,UAAU;YACV,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,cAAc;SAClD,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,oEAAoE;IACpE,MAAM,CAAC,GAAG,CAKR,uBAAuB,EACvB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC;QACzD,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACrE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CACjC,OAAO,CAAC,MAAM,CAAC,QAAQ,EACvB,KAAK,CAAC,MAAM,EACZ,OAAO,CAAC,IAAI,EACZ,UAAU,CACX,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC,CACF,CAAC;IAEF,wEAAwE;IACxE,MAAM,CAAC,GAAG,CACR,iCAAiC,EACjC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvE,OAAO,EAAE,SAAS,EAAE,CAAC;IACvB,CAAC,CACF,CAAC;IAEF,+DAA+D;IAC/D,MAAM,CAAC,IAAI,CAIT,iCAAiC,EACjC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QACpC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;QAE5C,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAClD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,sEAAsE;QACtE,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wDAAwD,EAAE,CAAC,CAAC;YAC5F,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,CAAC,cAAc,CACzC,QAAQ,EACR,UAAU,EACV,YAAY,CAAC,MAAM,EACnB,MAAM,CACP,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACrB,QAAQ;YACR,UAAU;YACV,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,0EAA0E;IAC1E,MAAM,CAAC,MAAM,CAIX,6CAA6C,EAC7C,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAEhD,IAAI,CAAC;YACH,4EAA4E;YAC5E,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBACtD,IAAI,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;oBAC7B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACrB,KAAK,EAAE,aAAa,UAAU,8BAA8B,KAAK,CAAC,MAAM,CAAC,SAAS,4EAA4E;qBAC/J,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;YACH,CAAC;YAED,aAAa,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CACF,CAAC;IAEF,2FAA2F;IAC3F,MAAM,CAAC,IAAI,CAKT,4BAA4B,EAC5B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC;QACzD,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACrE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QAED,uDAAuD;QACvD,MAAM,SAAS,GAAG,aAAa,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACxF,MAAM,UAAU,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3D,MAAM,KAAK,GAAG,QAAuB,CAAC;YACtC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,yBAAyB,EAAE,CAAC;gBAC7E,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;oBAC/C,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACrB,KAAK,EAAE,iBAAiB,GAAG,+BAA+B;qBAC3D,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,UAAU,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,MAAM,MAAM,GAAG,UAAU,KAAK,SAAS;YACrC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ;YACzB,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,WAAW,EAAE,EAAE,CAAC,IAAI,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAC5B,CAAC;QAEF,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,cAAc,EAAE,CAAC;YACvC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACrB,KAAK,EAAE,0CAA0C;aAClD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YAClE,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wDAAwD;YACxD,IAAI,cAAc,GAChB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACnD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9C,cAAc,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACrB,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,cAAc;aACxB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/dist/web/routes/content-types.d.ts

@@ -0,0 +1,6 @@
+import type { FastifyPluginAsync } from "fastify";
+import type { ContentTypeDescriptor } from "@digitalpaws/starr-types-core";
+export declare function initContentTypeRoutes(listFn: () => ContentTypeDescriptor[], getFn: (id: string) => ContentTypeDescriptor | undefined): void;
+declare const contentTypeRoutes: FastifyPluginAsync;
+export default contentTypeRoutes;
+//# sourceMappingURL=content-types.d.ts.map

package/dist/web/routes/content-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-types.d.ts","sourceRoot":"","sources":["../../../src/web/routes/content-types.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAS3E,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,qBAAqB,EAAE,EACrC,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,qBAAqB,GAAG,SAAS,GACvD,IAAI,CAGN;AAED,QAAA,MAAM,iBAAiB,EAAE,kBAkBxB,CAAC;AAEF,eAAe,iBAAiB,CAAC"}

package/dist/web/routes/content-types.js

@@ -0,0 +1,29 @@
+// SPDX-License-Identifier: 0BSD
+// SPDX-FileCopyrightText: 2025 Digi <digitalpaws@proton.me>
+/**
+ * This module needs access to the host's content-type registry.
+ * We provide it via module-level setters called from main.ts.
+ */
+let getDescriptors = () => [];
+let getDescriptor = () => undefined;
+export function initContentTypeRoutes(listFn, getFn) {
+    getDescriptors = listFn;
+    getDescriptor = getFn;
+}
+const contentTypeRoutes = async (server) => {
+    // GET /api/content-types
+    server.get("/api/content-types", async (_request, _reply) => {
+        return { types: getDescriptors() };
+    });
+    // GET /api/content-types/:id
+    server.get("/api/content-types/:id", async (request, reply) => {
+        const desc = getDescriptor(request.params.id);
+        if (!desc) {
+            reply.status(404).send({ error: "content type not found" });
+            return;
+        }
+        return desc;
+    });
+};
+export default contentTypeRoutes;
+//# sourceMappingURL=content-types.js.map