@digitalpaws/starr 0.0.1

package/dist/web/routes/oidc.js

@@ -0,0 +1,203 @@
+// SPDX-License-Identifier: 0BSD
+// SPDX-FileCopyrightText: 2025 Digi <digitalpaws@proton.me>
+import { rateLimit } from "../../auth/rate-limiter.js";
+let authService = null;
+let oidcProviderService = null;
+let oidcFlow = null;
+let userService = null;
+export function initOidcRoutes(auth, oidcProviders, flow, users) {
+    authService = auth;
+    oidcProviderService = oidcProviders;
+    oidcFlow = flow;
+    userService = users;
+}
+const SESSION_COOKIE = "starr_sid";
+const COOKIE_OPTS = {
+    httpOnly: true,
+    sameSite: "strict",
+    path: "/",
+    secure: false,
+    maxAge: parseInt(process.env.STARR_SESSION_TTL_HOURS ?? "168", 10) * 3600,
+};
+const oidcRoutes = async (server) => {
+    // ── Public OIDC endpoints (no auth required) ──
+    // GET /api/oidc/providers — list enabled OIDC providers (for login page)
+    server.get("/api/oidc/providers", async (_request, reply) => {
+        if (!oidcProviderService) {
+            reply.status(500).send({ error: "OIDC service not available" });
+            return;
+        }
+        return { providers: oidcProviderService.listEnabled() };
+    });
+    // GET /api/oidc/login/:providerId — initiate OIDC login (rate-limited)
+    server.get("/api/oidc/login/:providerId", { preHandler: rateLimit(10, 1) }, async (request, reply) => {
+        if (!oidcFlow) {
+            reply.status(500).send({ error: "OIDC flow not available" });
+            return;
+        }
+        try {
+            const query = request.query;
+            const redirectTo = query?.redirect ?? "/browse";
+            const authUrl = await oidcFlow.initiateLogin(request.params.providerId, redirectTo);
+            // Redirect the browser to the OIDC provider
+            reply.redirect(authUrl, 302);
+        }
+        catch (err) {
+            reply.status(400).send({ error: err.message ?? "Failed to initiate OIDC login" });
+        }
+    });
+    // GET /api/oidc/callback/:providerId — OIDC callback (rate-limited)
+    server.get("/api/oidc/callback/:providerId", { preHandler: rateLimit(20, 1) }, async (request, reply) => {
+        if (!oidcFlow || !authService) {
+            reply.status(500).send({ error: "OIDC service not available" });
+            return;
+        }
+        const { code, state } = request.query;
+        if (!code || !state) {
+            reply.status(400).send({ error: "Missing code or state parameter" });
+            return;
+        }
+        try {
+            const { user, redirectTo } = await oidcFlow.handleCallback(request.params.providerId, code, state);
+            // Create a Starr session (JWT) for the user
+            const jwt = authService.loginOidc(user.id, user.role);
+            reply.setCookie(SESSION_COOKIE, jwt, COOKIE_OPTS);
+            // Redirect to the original target page (or /browse by default)
+            reply.redirect(redirectTo, 302);
+        }
+        catch (err) {
+            reply.status(401).send({ error: err.message ?? "OIDC login failed" });
+        }
+    });
+    /** Reusable admin-role guard for admin-only routes. */
+    function requireAdmin(request, reply) {
+        const user = request.user;
+        if (!user) {
+            reply.status(401).send({ error: "Unauthorized" });
+            return false;
+        }
+        if (user.role !== "admin") {
+            reply.status(403).send({ error: "Forbidden: admin role required" });
+            return false;
+        }
+        return true;
+    }
+    // ── Admin OIDC provider management (auth required, admin-only) ──
+    // GET /api/auth/oidc/providers — list all providers (secrets masked)
+    server.get("/api/auth/oidc/providers", async (request, reply) => {
+        if (!requireAdmin(request, reply))
+            return;
+        if (!oidcProviderService) {
+            reply.status(500).send({ error: "Service not available" });
+            return;
+        }
+        const providers = oidcProviderService.list();
+        const masked = providers.map((p) => ({
+            ...p,
+            clientSecret: p.clientSecret ? "••••••••" : "",
+        }));
+        return { providers: masked };
+    });
+    // GET /api/auth/oidc/providers/:id — get single provider
+    server.get("/api/auth/oidc/providers/:id", async (request, reply) => {
+        if (!requireAdmin(request, reply))
+            return;
+        if (!oidcProviderService) {
+            reply.status(500).send({ error: "Service not available" });
+            return;
+        }
+        const provider = oidcProviderService.get(request.params.id);
+        if (!provider) {
+            reply.status(404).send({ error: "Provider not found" });
+            return;
+        }
+        return {
+            ...provider,
+            clientSecret: provider.clientSecret ? "••••••••" : "",
+        };
+    });
+    // POST /api/auth/oidc/providers — create provider
+    server.post("/api/auth/oidc/providers", async (request, reply) => {
+        if (!requireAdmin(request, reply))
+            return;
+        if (!oidcProviderService) {
+            reply.status(500).send({ error: "Service not available" });
+            return;
+        }
+        try {
+            const provider = oidcProviderService.create(request.body);
+            reply.status(201).send({ ...provider, clientSecret: "••••••••" });
+        }
+        catch (err) {
+            reply.status(400).send({ error: err.message ?? "Failed to create provider" });
+        }
+    });
+    // PUT /api/auth/oidc/providers/:id — update provider
+    server.put("/api/auth/oidc/providers/:id", async (request, reply) => {
+        if (!requireAdmin(request, reply))
+            return;
+        if (!oidcProviderService) {
+            reply.status(500).send({ error: "Service not available" });
+            return;
+        }
+        const provider = oidcProviderService.update(request.params.id, request.body);
+        if (!provider) {
+            reply.status(404).send({ error: "Provider not found" });
+            return;
+        }
+        return { ...provider, clientSecret: "••••••••" };
+    });
+    // DELETE /api/auth/oidc/providers/:id — delete provider
+    server.delete("/api/auth/oidc/providers/:id", async (request, reply) => {
+        if (!requireAdmin(request, reply))
+            return;
+        if (!oidcProviderService) {
+            reply.status(500).send({ error: "Service not available" });
+            return;
+        }
+        const deleted = oidcProviderService.delete(request.params.id);
+        if (!deleted) {
+            reply.status(404).send({ error: "Provider not found" });
+            return;
+        }
+        return { ok: true };
+    });
+    // ── Admin user management ──
+    // GET /api/auth/users — list all users
+    server.get("/api/auth/users", async (request, reply) => {
+        if (!requireAdmin(request, reply))
+            return;
+        if (!userService) {
+            reply.status(500).send({ error: "Service not available" });
+            return;
+        }
+        return { users: userService.list() };
+    });
+    // PATCH /api/auth/users/:id/role — change user role
+    server.patch("/api/auth/users/:id/role", async (request, reply) => {
+        if (!requireAdmin(request, reply))
+            return;
+        if (!userService) {
+            reply.status(500).send({ error: "Service not available" });
+            return;
+        }
+        const { role } = request.body;
+        if (role !== "admin" && role !== "user") {
+            reply.status(400).send({ error: "Role must be 'admin' or 'user'" });
+            return;
+        }
+        try {
+            const user = userService.setRole(request.params.id, role);
+            if (!user) {
+                reply.status(404).send({ error: "User not found" });
+                return;
+            }
+            return { user };
+        }
+        catch (err) {
+            reply.status(403).send({ error: err.message ?? "Failed to change role" });
+        }
+    });
+};
+export default oidcRoutes;
+//# sourceMappingURL=oidc.js.map

package/dist/web/routes/oidc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.js","sourceRoot":"","sources":["../../../src/web/routes/oidc.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,4DAA4D;AAO5D,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAEvD,IAAI,WAAW,GAAuB,IAAI,CAAC;AAC3C,IAAI,mBAAmB,GAA+B,IAAI,CAAC;AAC3D,IAAI,QAAQ,GAAoB,IAAI,CAAC;AACrC,IAAI,WAAW,GAAuB,IAAI,CAAC;AAE3C,MAAM,UAAU,cAAc,CAC5B,IAAiB,EACjB,aAAkC,EAClC,IAAc,EACd,KAAkB;IAElB,WAAW,GAAG,IAAI,CAAC;IACnB,mBAAmB,GAAG,aAAa,CAAC;IACpC,QAAQ,GAAG,IAAI,CAAC;IAChB,WAAW,GAAG,KAAK,CAAC;AACtB,CAAC;AAED,MAAM,cAAc,GAAG,WAAW,CAAC;AACnC,MAAM,WAAW,GAAG;IAClB,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,QAAiB;IAC3B,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI;CAC1E,CAAC;AAEF,MAAM,UAAU,GAAuB,KAAK,EAAE,MAAM,EAAE,EAAE;IACtD,iDAAiD;IAEjD,yEAAyE;IACzE,MAAM,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC1D,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,mBAAmB,CAAC,WAAW,EAAE,EAAE,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,MAAM,CAAC,GAAG,CACR,6BAA6B,EAC7B,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAChC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,OAAO,CAAC,KAA+B,CAAC;YACtD,MAAM,UAAU,GAAG,KAAK,EAAE,QAAQ,IAAI,SAAS,CAAC;YAChD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,aAAa,CAC1C,OAAO,CAAC,MAAM,CAAC,UAAU,EACzB,UAAU,CACX,CAAC;YACF,4CAA4C;YAC5C,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,+BAA+B,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC,CACF,CAAC;IAEF,oEAAoE;IACpE,MAAM,CAAC,GAAG,CAIR,gCAAgC,EAChC,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAChC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;YAC9B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;QACtC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACpB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,MAAM,QAAQ,CAAC,cAAc,CACxD,OAAO,CAAC,MAAM,CAAC,UAAU,EACzB,IAAI,EACJ,KAAK,CACN,CAAC;YAEF,4CAA4C;YAC5C,MAAM,GAAG,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACtD,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;YAElD,+DAA+D;YAC/D,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,mBAAmB,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,uDAAuD;IACvD,SAAS,YAAY,CAAC,OAAY,EAAE,KAAU;QAC5C,MAAM,IAAI,GAAI,OAAe,CAAC,IAAI,CAAC;QACnC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mEAAmE;IAEnE,qEAAqE;IACrE,MAAM,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC9D,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnC,GAAG,CAAC;YACJ,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;SAC/C,CAAC,CAAC,CAAC;QACJ,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,yDAAyD;IACzD,MAAM,CAAC,GAAG,CACR,8BAA8B,EAC9B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QACD,OAAO;YACL,GAAG,QAAQ;YACX,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;SACtD,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,kDAAkD;IAClD,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC/D,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,IAAW,CAAC,CAAC;YACjE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,2BAA2B,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,qDAAqD;IACrD,MAAM,CAAC,GAAG,CACR,8BAA8B,EAC9B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CACzC,OAAO,CAAC,MAAM,CAAC,EAAE,EACjB,OAAO,CAAC,IAAW,CACpB,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QACD,OAAO,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;IACnD,CAAC,CACF,CAAC;IAEF,wDAAwD;IACxD,MAAM,CAAC,MAAM,CACX,8BAA8B,EAC9B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC,CACF,CAAC;IAEF,8BAA8B;IAE9B,uCAAuC;IACvC,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACrD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,oDAAoD;IACpD,MAAM,CAAC,KAAK,CACV,0BAA0B,EAC1B,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;QAC9B,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACxC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,uBAAuB,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/web/routes/requests.d.ts

@@ -0,0 +1,6 @@
+import type { FastifyPluginAsync } from "fastify";
+import type { Starr } from "../../host.js";
+export declare function initRequestRoutes(starr: Starr): void;
+declare const requestRoutes: FastifyPluginAsync;
+export default requestRoutes;
+//# sourceMappingURL=requests.d.ts.map

package/dist/web/routes/requests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requests.d.ts","sourceRoot":"","sources":["../../../src/web/routes/requests.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAElD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AA0F3C,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAEpD;AAED,QAAA,MAAM,aAAa,EAAE,kBAoJpB,CAAC;AAEF,eAAe,aAAa,CAAC"}

package/dist/web/routes/requests.js

@@ -0,0 +1,183 @@
+// SPDX-License-Identifier: 0BSD
+// SPDX-FileCopyrightText: 2025 Digi <digitalpaws@proton.me>
+import { requestIntake } from "../../state/request-intake.js";
+/**
+ * In-memory debounce map to prevent rapid retries.
+ * Maps requestId → timestamp of last retry.
+ */
+const retryDebounceMap = new Map();
+const RETRY_DEBOUNCE_MS = 10_000; // 10 seconds
+class RouteError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+    }
+}
+/**
+ * Retry a failed or missing content request.
+ *
+ * 1. Look up the TrackedRequest; 404 if not found.
+ * 2. Check status guards: must be 'failed' or 'downloaded'.
+ * 3. Debounce: reject if retried within 10 seconds.
+ * 4. Reset the request status and emit a fresh content.requested.
+ *
+ * Returns the updated request.
+ */
+async function retryRequest(requestId, userId, starr) {
+    const stateStore = starr.getStateStore();
+    const logger = starr.logger;
+    // 1. Look up the request
+    const req = stateStore.getByRequestId(requestId);
+    if (!req) {
+        throw new RouteError(404, "Request not found");
+    }
+    // 2. Status guard: only failed or downloaded can be retried
+    if (req.status === "searching" || req.status === "downloading" || req.status === "requested") {
+        throw new RouteError(409, `Cannot retry request in status "${req.status}". Wait for the current run to finish.`);
+    }
+    // 3. Debounce check
+    const now = Date.now();
+    const lastRetry = retryDebounceMap.get(requestId);
+    if (lastRetry && now - lastRetry < RETRY_DEBOUNCE_MS) {
+        const remaining = Math.ceil((RETRY_DEBOUNCE_MS - (now - lastRetry)) / 1000);
+        throw new RouteError(429, `Please wait ${remaining}s before retrying again.`);
+    }
+    retryDebounceMap.set(requestId, now);
+    // Cleanup stale entries from debounce map (older than 1 minute)
+    for (const [key, ts] of retryDebounceMap) {
+        if (now - ts > 60_000)
+            retryDebounceMap.delete(key);
+    }
+    logger.info("manual retry initiated", {
+        requestId,
+        previousStatus: req.status,
+        userId,
+    });
+    // 4. Reset and re-emit
+    stateStore.resetAndRetry(requestId);
+    // Re-emit content.requested to restart the pipeline
+    starr.coreBus.emit("content.requested", {
+        requestId,
+        userId: req.ownerUserId,
+        contentTypeId: req.contentTypeId,
+        item: req.item,
+        libraryId: req.libraryId,
+    });
+    return { requestId, status: "requested" };
+}
+let starrInstance = null;
+export function initRequestRoutes(starr) {
+    starrInstance = starr;
+}
+const requestRoutes = async (server) => {
+    // POST /api/requests — create a content request
+    server.post("/api/requests", async (request, reply) => {
+        if (!starrInstance) {
+            reply.status(500).send({ error: "host not available" });
+            return;
+        }
+        const item = request.body;
+        const user = request.user;
+        if (!item || !item.contentTypeId || !item.title) {
+            reply.status(400).send({ error: "invalid content item" });
+            return;
+        }
+        const stateStore = starrInstance.getStateStore();
+        const registry = starrInstance.contentTypeRegistry;
+        const libraryService = starrInstance.libraryService ?? undefined;
+        try {
+            const requestId = requestIntake({ userId: user.username, item }, stateStore, registry, starrInstance.coreBus, starrInstance.logger, libraryService);
+            // Check if this was a new request or re-attach to existing
+            const req = stateStore.getByRequestId(requestId);
+            const existing = req && req.ownerUserId !== user.username;
+            reply.status(201).send({ requestId, existing });
+        }
+        catch (err) {
+            reply.status(500).send({ error: String(err) });
+        }
+    });
+    // GET /api/requests — list tracked requests
+    server.get("/api/requests", async (request, reply) => {
+        if (!starrInstance) {
+            reply.status(500).send({ error: "host not available" });
+            return;
+        }
+        const user = request.user;
+        const stateStore = starrInstance.getStateStore();
+        if (user.role === "admin") {
+            // Admin sees all requests
+            const requests = stateStore.getAllRequests();
+            return { requests };
+        }
+        else {
+            // Regular user sees only their own + watched
+            const requests = stateStore.listByUser(user.username);
+            return { requests };
+        }
+    });
+    // GET /api/requests/:id — get single request detail
+    server.get("/api/requests/:id", async (request, reply) => {
+        if (!starrInstance) {
+            reply.status(500).send({ error: "host not available" });
+            return;
+        }
+        const req = starrInstance.getStateStore().getByRequestId(request.params.id);
+        if (!req) {
+            reply.status(404).send({ error: "request not found" });
+            return;
+        }
+        return req;
+    });
+    // POST /api/requests/:id/retry — manually retry a failed or missing request
+    server.post("/api/requests/:id/retry", async (request, reply) => {
+        if (!starrInstance) {
+            reply.status(500).send({ error: "host not available" });
+            return;
+        }
+        const requestId = request.params.id;
+        const user = request.user;
+        try {
+            const result = await retryRequest(requestId, user.username, starrInstance);
+            return result;
+        }
+        catch (err) {
+            if (err.status && err.message) {
+                reply.status(err.status).send({ error: err.message });
+            }
+            else {
+                reply.status(500).send({ error: String(err) });
+            }
+        }
+    });
+    // DELETE /api/requests/:id — permanently remove a request
+    server.delete("/api/requests/:id", async (request, reply) => {
+        if (!starrInstance) {
+            reply.status(500).send({ error: "host not available" });
+            return;
+        }
+        const requestId = request.params.id;
+        const user = request.user;
+        const stateStore = starrInstance.getStateStore();
+        const req = stateStore.getByRequestId(requestId);
+        if (!req) {
+            reply.status(404).send({ error: "Request not found" });
+            return;
+        }
+        const previousStatus = req.status;
+        stateStore.deleteRequest(requestId);
+        // Notify plugins so they can clean up storage and cancel in-flight operations
+        starrInstance.coreBus.emit("request.deleted", {
+            requestId,
+            previousStatus,
+        });
+        starrInstance.logger.info("request deleted via API", {
+            requestId,
+            userId: user.username,
+            previousStatus,
+        });
+        return { deleted: true, requestId };
+    });
+};
+export default requestRoutes;
+//# sourceMappingURL=requests.js.map

package/dist/web/routes/requests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requests.js","sourceRoot":"","sources":["../../../src/web/routes/requests.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,4DAA4D;AAK5D,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAE9D;;;GAGG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;AACnD,MAAM,iBAAiB,GAAG,MAAM,CAAC,CAAC,aAAa;AAE/C,MAAM,UAAW,SAAQ,KAAK;IAC5B,MAAM,CAAS;IACf,YAAY,MAAc,EAAE,OAAe;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,YAAY,CACzB,SAAiB,EACjB,MAAc,EACd,KAAY;IAEZ,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAE5B,yBAAyB;IACzB,MAAM,GAAG,GAAG,UAAU,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,UAAU,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACjD,CAAC;IAED,4DAA4D;IAC5D,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,aAAa,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAC7F,MAAM,IAAI,UAAU,CAClB,GAAG,EACH,mCAAmC,GAAG,CAAC,MAAM,wCAAwC,CACtF,CAAC;IACJ,CAAC;IAED,oBAAoB;IACpB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,SAAS,IAAI,GAAG,GAAG,SAAS,GAAG,iBAAiB,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,iBAAiB,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5E,MAAM,IAAI,UAAU,CAClB,GAAG,EACH,eAAe,SAAS,0BAA0B,CACnD,CAAC;IACJ,CAAC;IACD,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAErC,gEAAgE;IAChE,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,gBAAgB,EAAE,CAAC;QACzC,IAAI,GAAG,GAAG,EAAE,GAAG,MAAM;YAAE,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;QACpC,SAAS;QACT,cAAc,EAAE,GAAG,CAAC,MAAM;QAC1B,MAAM;KACP,CAAC,CAAC;IAEH,uBAAuB;IACvB,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAEpC,oDAAoD;IACpD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE;QACtC,SAAS;QACT,MAAM,EAAE,GAAG,CAAC,WAAW;QACvB,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC,CAAC;IAEH,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAC5C,CAAC;AAED,IAAI,aAAa,GAAiB,IAAI,CAAC;AAEvC,MAAM,UAAU,iBAAiB,CAAC,KAAY;IAC5C,aAAa,GAAG,KAAK,CAAC;AACxB,CAAC;AAED,MAAM,aAAa,GAAuB,KAAK,EAAE,MAAM,EAAE,EAAE;IACzD,gDAAgD;IAChD,MAAM,CAAC,IAAI,CACT,eAAe,EACf,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,MAAM,IAAI,GAAI,OAAe,CAAC,IAAI,CAAC;QAEnC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,aAAa,CAAC,mBAAmB,CAAC;QACnD,MAAM,cAAc,GAAG,aAAa,CAAC,cAAc,IAAI,SAAS,CAAC;QAEjE,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,aAAa,CAC7B,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,EAC/B,UAAU,EACV,QAAQ,EACR,aAAa,CAAC,OAAO,EACrB,aAAa,CAAC,MAAM,EACpB,cAAc,CACf,CAAC;YAEF,2DAA2D;YAC3D,MAAM,GAAG,GAAG,UAAU,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACjD,MAAM,QAAQ,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,QAAQ,CAAC;YAE1D,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CACF,CAAC;IAEF,4CAA4C;IAC5C,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACnD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAI,OAAe,CAAC,IAAI,CAAC;QACnC,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,EAAE,CAAC;QAEjD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1B,0BAA0B;YAC1B,MAAM,QAAQ,GAAG,UAAU,CAAC,cAAc,EAAE,CAAC;YAC7C,OAAO,EAAE,QAAQ,EAAE,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,6CAA6C;YAC7C,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtD,OAAO,EAAE,QAAQ,EAAE,CAAC;QACtB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,oDAAoD;IACpD,MAAM,CAAC,GAAG,CACR,mBAAmB,EACnB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,aAAa,CAAC,aAAa,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CACF,CAAC;IAEF,4EAA4E;IAC5E,MAAM,CAAC,IAAI,CACT,yBAAyB,EACzB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,GAAI,OAAe,CAAC,IAAI,CAAC;QAEnC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,SAAS,EACT,IAAI,CAAC,QAAQ,EACb,aAAa,CACd,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBAC9B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACxD,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC,CACF,CAAC;IAEF,0DAA0D;IAC1D,MAAM,CAAC,MAAM,CACX,mBAAmB,EACnB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,GAAI,OAAe,CAAC,IAAI,CAAC;QACnC,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,EAAE,CAAC;QAEjD,MAAM,GAAG,GAAG,UAAU,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC;QAClC,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAEpC,8EAA8E;QAC9E,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE;YAC5C,SAAS;YACT,cAAc;SACf,CAAC,CAAC;QAEH,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;YACnD,SAAS;YACT,MAAM,EAAE,IAAI,CAAC,QAAQ;YACrB,cAAc;SACf,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACtC,CAAC,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,aAAa,CAAC"}

package/dist/web/routes/sse.d.ts

@@ -0,0 +1,6 @@
+import type { FastifyPluginAsync } from "fastify";
+import type { EventBus } from "../../types/plugin.js";
+export declare function initSseRoutes(bus: EventBus): void;
+declare const sseRoutes: FastifyPluginAsync;
+export default sseRoutes;
+//# sourceMappingURL=sse.d.ts.map

package/dist/web/routes/sse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../../../src/web/routes/sse.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,KAAK,EAAE,QAAQ,EAAe,MAAM,uBAAuB,CAAC;AAInE,wBAAgB,aAAa,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAEjD;AAED,QAAA,MAAM,SAAS,EAAE,kBA6EhB,CAAC;AAEF,eAAe,SAAS,CAAC"}

package/dist/web/routes/sse.js

@@ -0,0 +1,54 @@
+// SPDX-License-Identifier: 0BSD
+// SPDX-FileCopyrightText: 2025 Digi <digitalpaws@proton.me>
+let eventBus = null;
+export function initSseRoutes(bus) {
+    eventBus = bus;
+}
+const sseRoutes = async (server) => {
+    server.get("/api/events", async (request, reply) => {
+        if (!eventBus) {
+            reply.status(500).send({ error: "event bus not available" });
+            return;
+        }
+        // Set SSE headers
+        reply.raw.writeHead(200, {
+            "Content-Type": "text/event-stream",
+            "Cache-Control": "no-cache",
+            Connection: "keep-alive",
+            "X-Accel-Buffering": "no", // disable nginx buffering
+        });
+        // Send an initial comment to establish the connection
+        reply.raw.write(": connected\n\n");
+        // Subscribe to item.updated events
+        const unsubItemUpdated = eventBus.on("item.updated", (event) => {
+            const payload = event.payload;
+            const data = JSON.stringify(payload);
+            reply.raw.write(`event: item.updated\ndata: ${data}\n\n`);
+        });
+        // Subscribe to library.file_added events
+        const unsubLibraryFileAdded = eventBus.on("library.file_added", (event) => {
+            const payload = event.payload;
+            const data = JSON.stringify(payload);
+            reply.raw.write(`event: library.file_added\ndata: ${data}\n\n`);
+        });
+        // Subscribe to library.scan.progress events
+        const unsubScanProgress = eventBus.on("library.scan.progress", (event) => {
+            const payload = event.payload;
+            const data = JSON.stringify(payload);
+            reply.raw.write(`event: library.scan.progress\ndata: ${data}\n\n`);
+        });
+        // Keep alive: send a comment every 30 seconds
+        const keepAlive = setInterval(() => {
+            reply.raw.write(": keepalive\n\n");
+        }, 30_000);
+        // Clean up on connection close
+        request.raw.on("close", () => {
+            unsubItemUpdated();
+            unsubLibraryFileAdded();
+            unsubScanProgress();
+            clearInterval(keepAlive);
+        });
+    });
+};
+export default sseRoutes;
+//# sourceMappingURL=sse.js.map

package/dist/web/routes/sse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.js","sourceRoot":"","sources":["../../../src/web/routes/sse.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,4DAA4D;AAK5D,IAAI,QAAQ,GAAoB,IAAI,CAAC;AAErC,MAAM,UAAU,aAAa,CAAC,GAAa;IACzC,QAAQ,GAAG,GAAG,CAAC;AACjB,CAAC;AAED,MAAM,SAAS,GAAuB,KAAK,EAAE,MAAM,EAAE,EAAE;IACrD,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,kBAAkB;QAClB,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACvB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,UAAU;YAC3B,UAAU,EAAE,YAAY;YACxB,mBAAmB,EAAE,IAAI,EAAE,0BAA0B;SACtD,CAAC,CAAC;QAEH,sDAAsD;QACtD,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAEnC,mCAAmC;QACnC,MAAM,gBAAgB,GAAgB,QAAQ,CAAC,EAAE,CAC/C,cAAc,EACd,CAAC,KAAK,EAAE,EAAE;YACR,MAAM,OAAO,GAAG,KAAK,CAAC,OAIrB,CAAC;YAEF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACrC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,8BAA8B,IAAI,MAAM,CAAC,CAAC;QAC5D,CAAC,CACF,CAAC;QAEF,yCAAyC;QACzC,MAAM,qBAAqB,GAAgB,QAAQ,CAAC,EAAE,CACpD,oBAAoB,EACpB,CAAC,KAAK,EAAE,EAAE;YACR,MAAM,OAAO,GAAG,KAAK,CAAC,OAKrB,CAAC;YAEF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACrC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,oCAAoC,IAAI,MAAM,CAAC,CAAC;QAClE,CAAC,CACF,CAAC;QAEF,4CAA4C;QAC5C,MAAM,iBAAiB,GAAgB,QAAQ,CAAC,EAAE,CAChD,uBAAuB,EACvB,CAAC,KAAK,EAAE,EAAE;YACR,MAAM,OAAO,GAAG,KAAK,CAAC,OAIrB,CAAC;YAEF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACrC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,uCAAuC,IAAI,MAAM,CAAC,CAAC;QACrE,CAAC,CACF,CAAC;QAEF,8CAA8C;QAC9C,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;YACjC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC,EAAE,MAAM,CAAC,CAAC;QAEX,+BAA+B;QAC/B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAC3B,gBAAgB,EAAE,CAAC;YACnB,qBAAqB,EAAE,CAAC;YACxB,iBAAiB,EAAE,CAAC;YACpB,aAAa,CAAC,SAAS,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,SAAS,CAAC"}

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "@digitalpaws/starr",
+  "version": "0.0.1",
+  "type": "module",
+  "main": "./dist/main.js",
+  "types": "./dist/main.d.ts",
+  "dependencies": {
+    "@fastify/cookie": "^11.1.1",
+    "@fastify/formbody": "^8.0.2",
+    "@fastify/static": "^10.1.0",
+    "argon2": "^0.44.0",
+    "better-sqlite3": "^12.11.1",
+    "fastify": "^5.10.0",
+    "openid-client": "^6.8.4",
+    "semver": "^7.6.0",
+    "@digitalpaws/starr-types-core": "0.0.1"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/node": "^20.12.0",
+    "@types/semver": "^7.5.8",
+    "tsx": "^4.7.0",
+    "typescript": "^5.4.0",
+    "vitest": "^1.5.0",
+    "@digitalpaws/starr-types-video": "0.0.1"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsx watch src/main.ts",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  }
+}

package/package.json.license

@@ -0,0 +1,2 @@
+SPDX-License-Identifier: 0BSD
+SPDX-FileCopyrightText: 2025 Digi <digitalpaws@proton.me>