@krantho/api 0.0.0-stage → 1.0.1

package/dist/handlers/llm-resolve.js

@@ -0,0 +1,126 @@
+import { CLAUDE_CODE_PROVIDER, createChatAdapter, createLLMAdapter } from '@krantho/ai';
+import { claudeCodeTokenMissing, llmCredentialLeaf } from '@krantho/config';
+import { claudeCodeRefusal, readStoredKey, resolveLLMCredential, storedBaseUrlSetting, storedModelSetting, } from './llm-credential.js';
+function requireSettings(ctx) {
+    if (!ctx.siteSettingsAdapter) {
+        throw new Error('Site settings storage not available');
+    }
+    return ctx.siteSettingsAdapter;
+}
+/**
+ * The order a provider is picked in when no one chose: the products most people have a key for
+ * first. The subscription provider and a local model are never picked for a site: they are for
+ * a developer, who chooses them.
+ */
+const PICK_ORDER = ['anthropic', 'openai', 'gemini', 'openrouter'];
+/** The providers that can be on besides those in {@link PICK_ORDER} */
+const CHOSEN_ONLY = ['claude-code'];
+/** One provider's credential, or none for `claude-code` where it is refused */
+export async function providerCredential(ctx, provider) {
+    if (claudeCodeRefusal(provider))
+        return { kind: 'none', source: null };
+    const storedKey = await readStoredKey(requireSettings(ctx), provider, ctx.secrets);
+    return resolveLLMCredential(provider, ctx.config, storedKey);
+}
+/**
+ * The providers that are on: each one with a key, from the environment, the code or the key
+ * saved here, in the order one is picked, then the subscription provider with its token, and
+ * the local model when it was chosen. Having a key is what turns a provider on.
+ */
+export async function readyProviders(ctx) {
+    const settings = requireSettings(ctx);
+    const ready = [];
+    for (const provider of [...PICK_ORDER, ...CHOSEN_ONLY]) {
+        if ((await providerCredential(ctx, provider)).kind !== 'none')
+            ready.push(provider);
+    }
+    if ((await settings.getSetting('llm.provider')) === 'ollama')
+        ready.push('ollama');
+    return ready;
+}
+/**
+ * The provider in use: the one chosen, when it is on, else the first provider that is on and
+ * is picked for a site, else the one chosen (so what is missing can be named), else none.
+ */
+export async function activeProvider(ctx) {
+    const chosen = (await requireSettings(ctx).getSetting('llm.provider')) || null;
+    const ready = await readyProviders(ctx);
+    if (chosen && ready.includes(chosen))
+        return chosen;
+    return ready.find((provider) => PICK_ORDER.includes(provider)) ?? chosen;
+}
+/** The model chosen for a provider, or undefined for its default */
+async function storedModel(ctx, provider) {
+    return (await requireSettings(ctx).getSetting(storedModelSetting(provider))) || undefined;
+}
+async function storedBaseUrl(ctx, provider) {
+    return (await requireSettings(ctx).getSetting(storedBaseUrlSetting(provider))) || undefined;
+}
+/**
+ * One provider's configuration with that provider's own credential, picked at
+ * request time. Throws when `claude-code` is configured in production, or has
+ * no subscription token.
+ */
+async function resolveProviderConfig(ctx, provider, model) {
+    const refusal = claudeCodeRefusal(provider);
+    if (refusal)
+        throw new Error(refusal);
+    const credential = await providerCredential(ctx, provider);
+    if (provider === CLAUDE_CODE_PROVIDER && credential.kind === 'none') {
+        const { env } = llmCredentialLeaf(ctx.config.llm, provider) ?? { env: '' };
+        throw new Error(claudeCodeTokenMissing(env));
+    }
+    return {
+        provider: provider,
+        model,
+        apiKey: credential.apiKey,
+        authToken: credential.authToken,
+        baseUrl: await storedBaseUrl(ctx, provider),
+        profiles: ctx.config.llm.profiles,
+    };
+}
+const NOT_SET_UP = 'AI help is not set up yet. Add a key in Setup › AI provider.';
+/**
+ * A provider's model and base URL with its own credential — the one in use unless one is
+ * named. Throws when no provider is on, or when `claude-code` is chosen in production.
+ */
+export async function resolveLLMConfig(ctx, provider) {
+    const chosen = provider ?? (await activeProvider(ctx));
+    if (!chosen)
+        throw new Error(NOT_SET_UP);
+    return resolveProviderConfig(ctx, chosen, await storedModel(ctx, chosen));
+}
+/** The kind of credential a resolved configuration carries — never the credential itself */
+function credentialKind(config) {
+    if (config.authToken)
+        return 'oauth';
+    if (config.apiKey)
+        return 'api-key';
+    return 'none';
+}
+/** The completion adapter (enrichment, connection test), for the provider in use unless one is named */
+export async function resolveAdapter(ctx, provider) {
+    return createLLMAdapter(await resolveLLMConfig(ctx, provider));
+}
+/**
+ * The provider the assistant uses: the one the user picked in the dialog (`requested`), else
+ * `assistant.provider`, else the provider in use. `assistant.model` replaces the model only
+ * for the provider the site's settings gave the assistant; a provider a user picked runs its
+ * own chosen model, or its default.
+ */
+async function resolveAssistantConfig(ctx, assistant, requested) {
+    if (requested !== undefined && !(await readyProviders(ctx)).includes(requested)) {
+        throw new Error('That AI is not set up. Add its key in Setup › AI provider.');
+    }
+    const provider = requested ?? assistant.provider ?? (await activeProvider(ctx));
+    if (!provider)
+        throw new Error(NOT_SET_UP);
+    const model = requested === undefined && assistant.model ? assistant.model : await storedModel(ctx, provider);
+    return resolveProviderConfig(ctx, provider, model);
+}
+/** The assistant's chat adapter */
+export async function resolveChatAdapter(ctx, assistant, requested) {
+    const config = await resolveAssistantConfig(ctx, assistant, requested);
+    return { chat: createChatAdapter(config), credential: credentialKind(config) };
+}
+//# sourceMappingURL=llm-resolve.js.map

package/dist/handlers/llm-resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-resolve.js","sourceRoot":"","sources":["../../src/handlers/llm-resolve.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAEvF,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAE3E,OAAO,EACL,iBAAiB,EAGjB,aAAa,EACb,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,qBAAqB,CAAA;AAW5B,SAAS,eAAe,CAAC,GAAsB;IAC7C,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,GAAG,CAAC,mBAAmB,CAAA;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,GAAsB,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAA;AAErF,uEAAuE;AACvE,MAAM,WAAW,GAAsB,CAAC,aAAa,CAAC,CAAA;AAEtD,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAsB,EACtB,QAAgB;IAEhB,IAAI,iBAAiB,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IACtE,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;IAClF,OAAO,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAsB;IACzD,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;IACrC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,UAAU,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,MAAM,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACrF,CAAC;IACD,IAAI,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAClF,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAsB;IACzD,MAAM,MAAM,GAAG,CAAC,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,IAAI,IAAI,CAAA;IAC9E,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAA;IACvC,IAAI,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAA;IACnD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,MAAM,CAAA;AAC1E,CAAC;AAED,oEAAoE;AACpE,KAAK,UAAU,WAAW,CAAC,GAAsB,EAAE,QAAgB;IACjE,OAAO,CAAC,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,SAAS,CAAA;AAC3F,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,GAAsB,EACtB,QAAgB;IAEhB,OAAO,CAAC,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,SAAS,CAAA;AAC7F,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,qBAAqB,CAClC,GAAsB,EACtB,QAAgB,EAChB,KAAyB;IAEzB,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAA;IAC3C,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;IAErC,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAC1D,IAAI,QAAQ,KAAK,oBAAoB,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACpE,MAAM,EAAE,GAAG,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAA;QAC1E,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9C,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,QAAoB;QAC9B,KAAK;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,OAAO,EAAE,MAAM,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC;QAC3C,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ;KAClC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,GAAG,8DAA8D,CAAA;AAEjF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAsB,EACtB,QAAiB;IAEjB,MAAM,MAAM,GAAG,QAAQ,IAAI,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC,CAAA;IACtD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAA;IACxC,OAAO,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAA;AAC3E,CAAC;AAED,4FAA4F;AAC5F,SAAS,cAAc,CAAC,MAAiB;IACvC,IAAI,MAAM,CAAC,SAAS;QAAE,OAAO,OAAO,CAAA;IACpC,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IACnC,OAAO,MAAM,CAAA;AACf,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAsB,EACtB,QAAiB;IAEjB,OAAO,gBAAgB,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAA;AAChE,CAAC;AAcD;;;;;GAKG;AACH,KAAK,UAAU,sBAAsB,CACnC,GAAsB,EACtB,SAA+B,EAC/B,SAA6B;IAE7B,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;IAC/E,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,IAAI,SAAS,CAAC,QAAQ,IAAI,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC,CAAA;IAC/E,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAA;IAC1C,MAAM,KAAK,GACT,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IACjG,OAAO,qBAAqB,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAA;AACpD,CAAC;AAED,mCAAmC;AACnC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAsB,EACtB,SAA+B,EAC/B,SAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;IACtE,OAAO,EAAE,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAA;AAChF,CAAC"}

package/dist/handlers/llm-settings.d.ts

@@ -0,0 +1,19 @@
+import type { ApiHandler } from '../types.js';
+/** Where a provider's key comes from, in words a person uses — never the key */
+export type KeySource = 'environment' | 'configuration' | 'saved';
+/** GET /api/settings/llm — which providers are on and which one is in use (never returns a key or token) */
+export declare const getLLMSettings: ApiHandler;
+/**
+ * PUT /api/settings/llm — save one provider's key, model and base URL (`{ provider, apiKey?,
+ * model?, baseUrl?, use? }`). The first provider with a key becomes the one in use; a later one
+ * is used only when `use` is true, and what was in use stays. Nothing else is touched.
+ */
+export declare const updateLLMSettings: ApiHandler;
+/**
+ * DELETE /api/settings/llm?provider=… — remove what was saved here for one provider: its key,
+ * model and base URL. A key from the environment or the code stays, as it is not stored here.
+ */
+export declare const deleteLLMSettings: ApiHandler;
+/** POST /api/settings/llm/test — test a provider (`{ provider? }`, default the one in use) with a minimal request */
+export declare const testLLMConnection: ApiHandler;
+//# sourceMappingURL=llm-settings.d.ts.map

package/dist/handlers/llm-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-settings.d.ts","sourceRoot":"","sources":["../../src/handlers/llm-settings.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAc,UAAU,EAAe,MAAM,aAAa,CAAA;AA0DtE,gFAAgF;AAChF,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,eAAe,GAAG,OAAO,CAAA;AAmEjE,4GAA4G;AAC5G,eAAO,MAAM,cAAc,EAAE,UAK5B,CAAA;AAkBD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,UA+C/B,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,UAuB/B,CAAA;AAED,qHAAqH;AACrH,eAAO,MAAM,iBAAiB,EAAE,UAyC/B,CAAA"}

package/dist/handlers/llm-settings.js

@@ -0,0 +1,209 @@
+import { CLAUDE_CODE_MODEL, CLAUDE_CODE_PROVIDER, claudeCodeModelError, PROVIDER_PRESETS, } from '@krantho/ai';
+import { LLM_PROVIDERS, llmCredentialLeaf } from '@krantho/config';
+import { requireRole } from '../permissions.js';
+import { validateRequestBody } from '../validators.js';
+import { claudeCodeRefusal, storedBaseUrlSetting, storedKeySetting, storedModelSetting, takesStoredKey, } from './llm-credential.js';
+import { activeProvider, providerCredential, readyProviders, resolveAdapter, } from './llm-resolve.js';
+/** Return a 501 response if siteSettingsAdapter is not available, null otherwise. */
+function requireSiteSettings(ctx) {
+    if (!ctx.siteSettingsAdapter) {
+        return { error: { status: 501, body: { error: 'Site settings storage not available' } } };
+    }
+    return { adapter: ctx.siteSettingsAdapter };
+}
+/** The provider that runs on the person's own computer: on once chosen, with no key */
+const LOCAL_MODEL = 'ollama';
+/** Why a pasted key is refused: nothing to encrypt it with */
+const NO_VAULT = "This site cannot store a key: no secrets key is configured. Set secrets.local.key (KRANTHO_SECRETS_LOCAL_KEY) or auth.jwtSecret (KRANTHO_JWT_SECRET), at least 32 characters, or set the provider's key as an environment variable.";
+/** The model a provider runs: `claude-code` always the pinned one, others the chosen one or the preset's */
+function reportedModel(provider, chosen) {
+    if (provider === CLAUDE_CODE_PROVIDER)
+        return CLAUDE_CODE_MODEL;
+    return chosen ?? PROVIDER_PRESETS[provider]?.defaultModel ?? null;
+}
+/** A 400 for settings the provider cannot run: refused in production, or not its pinned model */
+function claudeCodeViolation(provider, model) {
+    const refusal = claudeCodeRefusal(provider);
+    if (refusal)
+        return { status: 400, body: { error: refusal } };
+    const modelError = provider === CLAUDE_CODE_PROVIDER && typeof model === 'string' && model !== ''
+        ? claudeCodeModelError(model)
+        : null;
+    if (modelError)
+        return { status: 400, body: { error: modelError } };
+    return null;
+}
+function isKnownProvider(provider) {
+    return typeof provider === 'string' && LLM_PROVIDERS.includes(provider);
+}
+const KEY_SOURCE = {
+    env: 'environment',
+    code: 'configuration',
+    database: 'saved',
+};
+async function providerStatus(ctx, adapter, provider, ready, active) {
+    const credential = await providerCredential(ctx, provider);
+    return {
+        provider,
+        ready: ready.includes(provider),
+        active: provider === active,
+        keySource: credential.source ? KEY_SOURCE[credential.source] : null,
+        env: llmCredentialLeaf(ctx.config.llm, provider)?.env ?? '',
+        model: (await adapter.getSetting(storedModelSetting(provider))) || null,
+        baseUrl: (await adapter.getSetting(storedBaseUrlSetting(provider))) || null,
+    };
+}
+/**
+ * What `GET`, `PUT` and `DELETE` report: every provider with whether it is on, the one in use,
+ * and the provider `assistant.provider` gives the assistant — never a key or a token.
+ */
+async function describeSettings(ctx, adapter) {
+    const ready = await readyProviders(ctx);
+    const active = await activeProvider(ctx);
+    const providers = await Promise.all(LLM_PROVIDERS.map((name) => providerStatus(ctx, adapter, name, ready, active)));
+    const inUse = providers.find((entry) => entry.active);
+    return {
+        configured: inUse?.ready === true,
+        provider: inUse?.ready === true ? inUse.provider : null,
+        model: inUse?.ready === true ? reportedModel(inUse.provider, inUse.model) : null,
+        providers,
+        assistantProvider: ctx.config.assistant.provider ?? null,
+    };
+}
+/** GET /api/settings/llm — which providers are on and which one is in use (never returns a key or token) */
+export const getLLMSettings = async (_req, ctx) => {
+    const settings = requireSiteSettings(ctx);
+    if (settings.error)
+        return settings.error;
+    return { status: 200, body: await describeSettings(ctx, settings.adapter) };
+};
+/** Save one provider's key, model and base URL; an empty model or base URL clears it */
+async function saveProvider(ctx, adapter, provider, payload) {
+    const { apiKey, model, baseUrl } = payload;
+    if (typeof apiKey === 'string' && apiKey.length > 0 && ctx.secrets) {
+        const name = storedKeySetting(provider);
+        await adapter.setSetting(name, await ctx.secrets.seal(name, apiKey));
+    }
+    if (typeof model === 'string')
+        await adapter.setSetting(storedModelSetting(provider), model);
+    if (typeof baseUrl === 'string')
+        await adapter.setSetting(storedBaseUrlSetting(provider), baseUrl);
+}
+/**
+ * PUT /api/settings/llm — save one provider's key, model and base URL (`{ provider, apiKey?,
+ * model?, baseUrl?, use? }`). The first provider with a key becomes the one in use; a later one
+ * is used only when `use` is true, and what was in use stays. Nothing else is touched.
+ */
+export const updateLLMSettings = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'admin');
+    if (denied)
+        return denied;
+    const settings = requireSiteSettings(ctx);
+    if (settings.error)
+        return settings.error;
+    const bodyCheck = validateRequestBody(req.body);
+    if (!bodyCheck.isValid)
+        return bodyCheck.response;
+    const payload = bodyCheck.body;
+    const { provider, model, apiKey } = payload;
+    if (!isKnownProvider(provider)) {
+        return {
+            status: 400,
+            body: { error: `Invalid provider. Must be one of: ${LLM_PROVIDERS.join(', ')}` },
+        };
+    }
+    const violation = claudeCodeViolation(provider, model);
+    if (violation)
+        return violation;
+    const keyGiven = typeof apiKey === 'string' && apiKey.length > 0 && takesStoredKey(ctx.config, provider);
+    if (keyGiven && !ctx.secrets)
+        return { status: 400, body: { error: NO_VAULT } };
+    const readyBefore = await readyProviders(ctx);
+    const inUse = await activeProvider(ctx);
+    // What is in use stays in use: a later key must not change the provider by sorting first. This
+    // makes an implicit pick (the first provider with a key) an explicit choice, on purpose.
+    if (inUse && readyBefore.includes(inUse))
+        await settings.adapter.setSetting('llm.provider', inUse);
+    await saveProvider(ctx, settings.adapter, provider, {
+        ...payload,
+        apiKey: keyGiven ? apiKey : '',
+    });
+    if (payload['use'] === true || readyBefore.length === 0) {
+        // A provider with no key cannot be used; a local model has none and is on once chosen
+        const hasKey = (await providerCredential(ctx, provider)).kind !== 'none';
+        if (payload['use'] === true && !hasKey && provider !== LOCAL_MODEL) {
+            return { status: 400, body: { error: 'That AI has no key yet. Add its key first.' } };
+        }
+        await settings.adapter.setSetting('llm.provider', provider);
+    }
+    return { status: 200, body: await describeSettings(ctx, settings.adapter) };
+};
+/**
+ * DELETE /api/settings/llm?provider=… — remove what was saved here for one provider: its key,
+ * model and base URL. A key from the environment or the code stays, as it is not stored here.
+ */
+export const deleteLLMSettings = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'admin');
+    if (denied)
+        return denied;
+    const settings = requireSiteSettings(ctx);
+    if (settings.error)
+        return settings.error;
+    const provider = req.query['provider'];
+    if (!isKnownProvider(provider)) {
+        return {
+            status: 400,
+            body: { error: `Name the provider to remove: one of ${LLM_PROVIDERS.join(', ')}` },
+        };
+    }
+    await settings.adapter.setSetting(storedKeySetting(provider), '');
+    await settings.adapter.setSetting(storedModelSetting(provider), '');
+    await settings.adapter.setSetting(storedBaseUrlSetting(provider), '');
+    if ((await settings.adapter.getSetting('llm.provider')) === provider) {
+        await settings.adapter.setSetting('llm.provider', '');
+    }
+    return { status: 200, body: await describeSettings(ctx, settings.adapter) };
+};
+/** POST /api/settings/llm/test — test a provider (`{ provider? }`, default the one in use) with a minimal request */
+export const testLLMConnection = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'admin');
+    if (denied)
+        return denied;
+    const settings = requireSiteSettings(ctx);
+    if (settings.error)
+        return settings.error;
+    const named = req.body?.provider;
+    if (named !== undefined && !isKnownProvider(named)) {
+        return { status: 400, body: { error: 'Unknown provider' } };
+    }
+    const provider = named ?? (await activeProvider(ctx));
+    if (!provider) {
+        return { status: 400, body: { error: 'No AI provider is set up' } };
+    }
+    try {
+        const adapter = await resolveAdapter(ctx, provider);
+        const result = await adapter.complete('Reply with exactly: OK', {
+            maxTokens: 256,
+        });
+        return {
+            status: 200,
+            body: {
+                success: true,
+                provider,
+                model: result.model,
+                usage: result.usage,
+            },
+        };
+    }
+    catch (err) {
+        return {
+            status: 200,
+            body: {
+                success: false,
+                provider,
+                error: err instanceof Error ? err.message : 'Connection failed',
+            },
+        };
+    }
+};
+//# sourceMappingURL=llm-settings.js.map

package/dist/handlers/llm-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-settings.js","sourceRoot":"","sources":["../../src/handlers/llm-settings.ts"],"names":[],"mappings":"AACA,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAElE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAEtD,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,GACf,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,cAAc,GACf,MAAM,kBAAkB,CAAA;AAEzB,qFAAqF;AACrF,SAAS,mBAAmB,CAC1B,GAAe;IAIf,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE,EAAE,EAAE,CAAA;IAC3F,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,mBAAmB,EAAE,CAAA;AAC7C,CAAC;AAED,uFAAuF;AACvF,MAAM,WAAW,GAAG,QAAQ,CAAA;AAE5B,8DAA8D;AAC9D,MAAM,QAAQ,GACZ,qOAAqO,CAAA;AAEvO,4GAA4G;AAC5G,SAAS,aAAa,CAAC,QAAgB,EAAE,MAAqB;IAC5D,IAAI,QAAQ,KAAK,oBAAoB;QAAE,OAAO,iBAAiB,CAAA;IAC/D,OAAO,MAAM,IAAI,gBAAgB,CAAC,QAAoB,CAAC,EAAE,YAAY,IAAI,IAAI,CAAA;AAC/E,CAAC;AAED,iGAAiG;AACjG,SAAS,mBAAmB,CAAC,QAAgB,EAAE,KAAc;IAC3D,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAA;IAC3C,IAAI,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAA;IAC7D,MAAM,UAAU,GACd,QAAQ,KAAK,oBAAoB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE;QAC5E,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC;QAC7B,CAAC,CAAC,IAAI,CAAA;IACV,IAAI,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAA;IACnE,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,eAAe,CAAC,QAAiB;IACxC,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAK,aAAmC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AAChG,CAAC;AAKD,MAAM,UAAU,GAA2C;IACzD,GAAG,EAAE,aAAa;IAClB,IAAI,EAAE,eAAe;IACrB,QAAQ,EAAE,OAAO;CAClB,CAAA;AAmBD,KAAK,UAAU,cAAc,CAC3B,GAAe,EACf,OAA6B,EAC7B,QAAgB,EAChB,KAAwB,EACxB,MAAqB;IAErB,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAC1D,OAAO;QACL,QAAQ;QACR,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC/B,MAAM,EAAE,QAAQ,KAAK,MAAM;QAC3B,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;QACnE,GAAG,EAAE,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,GAAG,IAAI,EAAE;QAC3D,KAAK,EAAE,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;QACvE,OAAO,EAAE,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;KAC5E,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,gBAAgB,CAC7B,GAAe,EACf,OAA6B;IAE7B,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAA;IACxC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAC/E,CAAA;IACD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACrD,OAAO;QACL,UAAU,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI;QACjC,QAAQ,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;QACvD,KAAK,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;QAChF,SAAS;QACT,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,IAAI,IAAI;KACzD,CAAA;AACH,CAAC;AAED,4GAA4G;AAC5G,MAAM,CAAC,MAAM,cAAc,GAAe,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;IAC5D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;IACzC,IAAI,QAAQ,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAA;IAEzC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAA;AAC7E,CAAC,CAAA;AAED,wFAAwF;AACxF,KAAK,UAAU,YAAY,CACzB,GAAe,EACf,OAA6B,EAC7B,QAAgB,EAChB,OAAgC;IAEhC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;IAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAA;QACvC,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IACtE,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAA;IAC5F,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,MAAM,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAA;AACpG,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC9D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC7C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;IACzC,IAAI,QAAQ,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAA;IAEzC,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC/C,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC,QAAQ,CAAA;IAEjD,MAAM,OAAO,GAAG,SAAS,CAAC,IAA+B,CAAA;IACzD,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IAE3C,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,KAAK,EAAE,qCAAqC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;SACjF,CAAA;IACH,CAAC;IAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IACtD,IAAI,SAAS;QAAE,OAAO,SAAS,CAAA;IAE/B,MAAM,QAAQ,GACZ,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACzF,IAAI,QAAQ,IAAI,CAAC,GAAG,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAA;IAE/E,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAA;IAC7C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAA;IACvC,+FAA+F;IAC/F,yFAAyF;IACzF,IAAI,KAAK,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IAElG,MAAM,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE;QAClD,GAAG,OAAO;QACV,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;KAC/B,CAAC,CAAA;IACF,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,sFAAsF;QACtF,MAAM,MAAM,GAAG,CAAC,MAAM,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAA;QACxE,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YACnE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,4CAA4C,EAAE,EAAE,CAAA;QACvF,CAAC;QACD,MAAM,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAA;IAC7D,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAA;AAC7E,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC9D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC7C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;IACzC,IAAI,QAAQ,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAA;IAEzC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACtC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,KAAK,EAAE,uCAAuC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;SACnF,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAA;IACjE,MAAM,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAA;IACnE,MAAM,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAA;IACrE,IAAI,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACrE,MAAM,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;IACvD,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAA;AAC7E,CAAC,CAAA;AAED,qHAAqH;AACrH,MAAM,CAAC,MAAM,iBAAiB,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC9D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC7C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;IACzC,IAAI,QAAQ,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAA;IAEzC,MAAM,KAAK,GAAI,GAAG,CAAC,IAA2C,EAAE,QAAQ,CAAA;IACxE,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,CAAA;IAC7D,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,IAAI,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC,CAAA;IACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,CAAA;IACrE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;QACnD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,wBAAwB,EAAE;YAC9D,SAAS,EAAE,GAAG;SACf,CAAC,CAAA;QAEF,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,OAAO,EAAE,IAAI;gBACb,QAAQ;gBACR,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB;SACF,CAAA;IACH,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,OAAO,EAAE,KAAK;gBACd,QAAQ;gBACR,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB;aAChE;SACF,CAAA;IACH,CAAC;AACH,CAAC,CAAA"}

package/dist/handlers/media-bulk-delete.d.ts

@@ -0,0 +1,4 @@
+import type { ApiHandler } from '../types.js';
+/** DELETE /api/media/bulk — bulk delete media items */
+export declare const mediaBulkDelete: ApiHandler;
+//# sourceMappingURL=media-bulk-delete.d.ts.map

package/dist/handlers/media-bulk-delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-bulk-delete.d.ts","sourceRoot":"","sources":["../../src/handlers/media-bulk-delete.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C,uDAAuD;AACvD,eAAO,MAAM,eAAe,EAAE,UAiB7B,CAAA"}

package/dist/handlers/media-bulk-delete.js

@@ -0,0 +1,19 @@
+import { announceChanges } from '../content-change.js';
+import { requireRole } from '../permissions.js';
+import { hasMediaStorage, MEDIA_NOT_CONFIGURED } from '../validators.js';
+/** DELETE /api/media/bulk — bulk delete media items */
+export const mediaBulkDelete = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'admin');
+    if (denied)
+        return denied;
+    if (!hasMediaStorage(ctx))
+        return MEDIA_NOT_CONFIGURED;
+    const body = req.body;
+    if (!body?.ids || !Array.isArray(body.ids) || body.ids.length === 0) {
+        return { status: 400, body: { error: 'ids array is required' } };
+    }
+    const result = await ctx.mediaStorage.bulkDelete(body.ids);
+    await announceChanges(ctx, result.deleted.map((id) => ({ kind: 'media', id })));
+    return { status: 200, body: result };
+};
+//# sourceMappingURL=media-bulk-delete.js.map

package/dist/handlers/media-bulk-delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-bulk-delete.js","sourceRoot":"","sources":["../../src/handlers/media-bulk-delete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAExE,uDAAuD;AACvD,MAAM,CAAC,MAAM,eAAe,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC5D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC7C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;QAAE,OAAO,oBAAoB,CAAA;IAEtD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAsC,CAAA;IACvD,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,CAAA;IAClE,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC1D,MAAM,eAAe,CACnB,GAAG,EACH,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAU,CAAC,CAC7D,CAAA;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AACtC,CAAC,CAAA"}

package/dist/handlers/media-bulk-update.d.ts

@@ -0,0 +1,4 @@
+import type { ApiHandler } from '../types.js';
+/** PUT /api/media/bulk — bulk update alt text */
+export declare const mediaBulkUpdate: ApiHandler;
+//# sourceMappingURL=media-bulk-update.d.ts.map

package/dist/handlers/media-bulk-update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-bulk-update.d.ts","sourceRoot":"","sources":["../../src/handlers/media-bulk-update.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C,iDAAiD;AACjD,eAAO,MAAM,eAAe,EAAE,UAuB7B,CAAA"}

package/dist/handlers/media-bulk-update.js

@@ -0,0 +1,25 @@
+import { announceChanges } from '../content-change.js';
+import { requireRole } from '../permissions.js';
+import { hasMediaStorage, MEDIA_NOT_CONFIGURED } from '../validators.js';
+/** PUT /api/media/bulk — bulk update alt text */
+export const mediaBulkUpdate = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'editor');
+    if (denied)
+        return denied;
+    if (!hasMediaStorage(ctx))
+        return MEDIA_NOT_CONFIGURED;
+    const body = req.body;
+    if (!body?.ids || !Array.isArray(body.ids) || body.ids.length === 0) {
+        return { status: 400, body: { error: 'ids array is required' } };
+    }
+    if (typeof body.altText !== 'string') {
+        return { status: 400, body: { error: 'altText string is required' } };
+    }
+    const updated = await ctx.mediaStorage.bulkUpdateAltText(body.ids, body.altText);
+    // The storage reports only a count, so every requested asset is announced
+    if (updated > 0) {
+        await announceChanges(ctx, body.ids.map((id) => ({ kind: 'media', id })));
+    }
+    return { status: 200, body: { updated } };
+};
+//# sourceMappingURL=media-bulk-update.js.map

package/dist/handlers/media-bulk-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-bulk-update.js","sourceRoot":"","sources":["../../src/handlers/media-bulk-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAExE,iDAAiD;AACjD,MAAM,CAAC,MAAM,eAAe,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC5D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;QAAE,OAAO,oBAAoB,CAAA;IAEtD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAwD,CAAA;IACzE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,CAAA;IAClE,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,CAAA;IACvE,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IAChF,0EAA0E;IAC1E,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,MAAM,eAAe,CACnB,GAAG,EACH,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAU,CAAC,CACvD,CAAA;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAA;AAC3C,CAAC,CAAA"}

package/dist/handlers/media-delete.d.ts

@@ -0,0 +1,4 @@
+import type { ApiHandler } from '../types.js';
+/** DELETE /api/media/:id — delete a media item (warns if referenced) */
+export declare const mediaDelete: ApiHandler;
+//# sourceMappingURL=media-delete.d.ts.map

package/dist/handlers/media-delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-delete.d.ts","sourceRoot":"","sources":["../../src/handlers/media-delete.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C,wEAAwE;AACxE,eAAO,MAAM,WAAW,EAAE,UAuBzB,CAAA"}

package/dist/handlers/media-delete.js

@@ -0,0 +1,27 @@
+import { announceChange } from '../content-change.js';
+import { mediaReferences } from '../media-references.js';
+import { requireRole } from '../permissions.js';
+import { hasMediaStorage, MEDIA_NOT_CONFIGURED, requireParam } from '../validators.js';
+/** DELETE /api/media/:id — delete a media item (warns if referenced) */
+export const mediaDelete = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'editor');
+    if (denied)
+        return denied;
+    if (!hasMediaStorage(ctx))
+        return MEDIA_NOT_CONFIGURED;
+    const idResult = requireParam(req.params, 'id');
+    if (!idResult.isValid)
+        return idResult.response;
+    const id = idResult.value;
+    // Report where the file was used: those documents now point at a file that is gone
+    const references = (await mediaReferences(ctx, [id])).get(id) ?? [];
+    await ctx.mediaStorage.delete(id);
+    await announceChange(ctx, { kind: 'media', id });
+    const result = { message: 'Deleted' };
+    if (references.length > 0) {
+        result['warning'] = 'Media was referenced by content items';
+        result['references'] = references;
+    }
+    return { status: 200, body: result };
+};
+//# sourceMappingURL=media-delete.js.map

package/dist/handlers/media-delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-delete.js","sourceRoot":"","sources":["../../src/handlers/media-delete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAEtF,wEAAwE;AACxE,MAAM,CAAC,MAAM,WAAW,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACxD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;QAAE,OAAO,oBAAoB,CAAA;IAEtD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC/C,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC,QAAQ,CAAA;IAC/C,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAA;IAEzB,mFAAmF;IACnF,MAAM,UAAU,GAAG,CAAC,MAAM,eAAe,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAA;IAEnE,MAAM,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACjC,MAAM,cAAc,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;IAEhD,MAAM,MAAM,GAA4B,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;IAC9D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,SAAS,CAAC,GAAG,uCAAuC,CAAA;QAC3D,MAAM,CAAC,YAAY,CAAC,GAAG,UAAU,CAAA;IACnC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AACtC,CAAC,CAAA"}

package/dist/handlers/media-duplicate.d.ts

@@ -0,0 +1,4 @@
+import type { ApiHandler } from '../types.js';
+/** POST /api/media/:id/duplicate — create a copy with new ID */
+export declare const mediaDuplicate: ApiHandler;
+//# sourceMappingURL=media-duplicate.d.ts.map

package/dist/handlers/media-duplicate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-duplicate.d.ts","sourceRoot":"","sources":["../../src/handlers/media-duplicate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C,gEAAgE;AAChE,eAAO,MAAM,cAAc,EAAE,UAgB5B,CAAA"}

package/dist/handlers/media-duplicate.js

@@ -0,0 +1,20 @@
+import { requireRole } from '../permissions.js';
+import { hasMediaStorage, MEDIA_NOT_CONFIGURED, requireParam } from '../validators.js';
+/** POST /api/media/:id/duplicate — create a copy with new ID */
+export const mediaDuplicate = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'editor');
+    if (denied)
+        return denied;
+    if (!hasMediaStorage(ctx))
+        return MEDIA_NOT_CONFIGURED;
+    const idResult = requireParam(req.params, 'id');
+    if (!idResult.isValid)
+        return idResult.response;
+    const id = idResult.value;
+    const item = await ctx.mediaStorage.duplicate(id);
+    if (!item) {
+        return { status: 404, body: { error: 'Media item not found' } };
+    }
+    return { status: 201, body: item };
+};
+//# sourceMappingURL=media-duplicate.js.map

package/dist/handlers/media-duplicate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-duplicate.js","sourceRoot":"","sources":["../../src/handlers/media-duplicate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAEtF,gEAAgE;AAChE,MAAM,CAAC,MAAM,cAAc,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC3D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;QAAE,OAAO,oBAAoB,CAAA;IAEtD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC/C,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC,QAAQ,CAAA;IAC/C,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAA;IAEzB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IACjD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,CAAA;IACjE,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACpC,CAAC,CAAA"}

package/dist/handlers/media-folders.d.ts

@@ -0,0 +1,12 @@
+import type { ApiHandler } from '../types.js';
+/** GET /api/media/folders — list folder tree */
+export declare const mediaFolders: ApiHandler;
+/** POST /api/media/folders — create folder */
+export declare const mediaFolderCreate: ApiHandler;
+/** PUT /api/media/folders/:id — rename folder */
+export declare const mediaFolderRename: ApiHandler;
+/** DELETE /api/media/folders/:id — delete empty folder */
+export declare const mediaFolderDelete: ApiHandler;
+/** PUT /api/media/:id/move — move media item to a folder */
+export declare const mediaMove: ApiHandler;
+//# sourceMappingURL=media-folders.d.ts.map

package/dist/handlers/media-folders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-folders.d.ts","sourceRoot":"","sources":["../../src/handlers/media-folders.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAe,MAAM,aAAa,CAAA;AAa1D,gDAAgD;AAChD,eAAO,MAAM,YAAY,EAAE,UAK1B,CAAA;AAED,8CAA8C;AAC9C,eAAO,MAAM,iBAAiB,EAAE,UA0B/B,CAAA;AAED,iDAAiD;AACjD,eAAO,MAAM,iBAAiB,EAAE,UAyB/B,CAAA;AAED,0DAA0D;AAC1D,eAAO,MAAM,iBAAiB,EAAE,UAoB/B,CAAA;AAED,4DAA4D;AAC5D,eAAO,MAAM,SAAS,EAAE,UA+BvB,CAAA"}