@qwickapps/server 1.5.0 → 1.5.2

package/src/plugins/auth/env-config.ts

@@ -403,6 +403,7 @@ export function createAuthPluginFromEnv(options?: AuthEnvPluginOptions): Plugin
     authRequired,
     debug,
     onUnauthorized: options?.onUnauthorized,
+    onAuthenticated: options?.onAuthenticated,
   };
 
   // Update status
@@ -418,6 +419,7 @@ export function createAuthPluginFromEnv(options?: AuthEnvPluginOptions): Plugin
   // Wrap to add config status routes
   return {
     ...basePlugin,
+    type: 'system' as const,  // Explicit system type (auth can handle any path)
     async onStart(pluginConfig: PluginConfig, registry: PluginRegistry): Promise<void> {
       // Call base plugin onStart
       await basePlugin.onStart?.(pluginConfig, registry);
@@ -825,6 +827,7 @@ function createDisabledPlugin(): Plugin {
     id: 'auth',
     name: 'Auth Plugin (Disabled)',
     version: '1.0.0',
+    type: 'system' as const,
 
     async onStart(_pluginConfig: PluginConfig, registry: PluginRegistry): Promise<void> {
       const logger = registry.getLogger('auth');
@@ -848,6 +851,7 @@ function createErrorPlugin(error: string): Plugin {
     id: 'auth',
     name: 'Auth Plugin (Error)',
     version: '1.0.0',
+    type: 'system' as const,
 
     async onStart(_pluginConfig: PluginConfig, registry: PluginRegistry): Promise<void> {
       const logger = registry.getLogger('auth');

package/src/plugins/auth/types.ts

@@ -182,6 +182,11 @@ export interface AuthPluginConfig {
   authRequired?: boolean;
   /** Custom unauthorized handler */
   onUnauthorized?: (req: Request, res: Response) => void;
+  /**
+   * Callback invoked after successful authentication.
+   * Use this to sync users to a local database on first login.
+   */
+  onAuthenticated?: (user: AuthenticatedUser) => Promise<void>;
   /** Enable debug logging */
   debug?: boolean;
 }
@@ -226,6 +231,11 @@ export interface AuthEnvPluginOptions {
   debug?: boolean;
   /** Custom unauthorized handler */
   onUnauthorized?: (req: Request, res: Response) => void;
+  /**
+   * Callback invoked after successful authentication.
+   * Use this to sync users to a local database on first login.
+   */
+  onAuthenticated?: (user: AuthenticatedUser) => Promise<void>;
 }
 
 /**

package/src/plugins/devices/__tests__/token-utils.test.ts

@@ -24,13 +24,15 @@ describe('Token Utilities', () => {
 
     it('should generate a 43-character secret after prefix', async () => {
       const result = await generateDeviceToken('mob');
-      const secret = result.token.split('_')[1];
+      // Use slice to get everything after 'mob_' since base64url can contain '_'
+      const secret = result.token.slice(4); // 'mob_'.length = 4
       expect(secret.length).toBe(43);
     });
 
     it('should generate base64url-safe characters', async () => {
       const result = await generateDeviceToken('test');
-      const secret = result.token.split('_')[1];
+      // Use slice to get everything after 'test_' since base64url can contain '_'
+      const secret = result.token.slice(5); // 'test_'.length = 5
       expect(secret).toMatch(/^[A-Za-z0-9_-]+$/);
     });
 

package/src/plugins/frontend-app-plugin.ts

@@ -50,6 +50,7 @@ export function createFrontendAppPlugin(config: FrontendAppPluginConfig): Plugin
     id: 'frontend-app',
     name: 'Frontend App Plugin',
     version: '1.0.0',
+    type: 'system' as const,
 
     async onStart(_pluginConfig: PluginConfig, registry: PluginRegistry): Promise<void> {
       const logger = registry.getLogger('frontend-app');
@@ -80,11 +81,25 @@ export function createFrontendAppPlugin(config: FrontendAppPluginConfig): Plugin
       // Priority 2: Serve static files
       if (config.staticPath && existsSync(config.staticPath)) {
         logger.info(`Frontend app: Serving static files from ${config.staticPath}`);
-        app.use('/', express.static(config.staticPath));
 
-        // SPA fallback
-        app.get('/', (_req, res) => {
-          res.sendFile(resolve(config.staticPath!, 'index.html'));
+        // Serve static assets first
+        app.use(express.static(config.staticPath, { index: false }));
+
+        // SPA fallback for all non-API routes
+        // This must be registered after static files but handles routes that don't match files
+        app.get('*', (req, res, next) => {
+          // Skip API routes and control panel
+          if (req.path.startsWith('/api') || req.path.startsWith(config.mountPath || '/cpanel')) {
+            return next();
+          }
+
+          // Serve index.html for all other routes (SPA routing)
+          const indexPath = resolve(config.staticPath!, 'index.html');
+          if (existsSync(indexPath)) {
+            res.sendFile(indexPath);
+          } else {
+            next();
+          }
         });
         return;
       }

package/src/plugins/index.ts

@@ -423,3 +423,18 @@ export type {
   ConnectionHealth,
   NotificationsManagerInterface,
 } from './notifications/index.js';
+
+// QwickBrain MCP plugin
+export {
+  createQwickBrainPlugin,
+  getConnectionStatus,
+  isConnected,
+} from './qwickbrain/index.js';
+export type {
+  QwickBrainPluginConfig,
+  MCPToolDefinition,
+  MCPToolCallRequest,
+  MCPToolCallResponse,
+  QwickBrainConnectionStatus,
+  MCPRateLimitConfig,
+} from './qwickbrain/index.js';

package/src/plugins/qwickbrain/index.ts

@@ -0,0 +1,33 @@
+/**
+ * QwickBrain Plugin
+ *
+ * MCP proxy plugin for exposing QwickBrain tools to external AI clients.
+ *
+ * @example
+ * ```typescript
+ * import { createControlPanel } from '@qwickapps/server';
+ * import { createQwickBrainPlugin } from '@qwickapps/server/plugins';
+ *
+ * const panel = await createControlPanel({
+ *   plugins: [
+ *     createQwickBrainPlugin({
+ *       qwickbrainUrl: 'http://macmini.tailnet-xxx.ts.net:8080',
+ *       exposedTools: '*', // or ['search_codebase', 'get_document', ...]
+ *     }),
+ *   ],
+ * });
+ * ```
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+
+export { createQwickBrainPlugin, getConnectionStatus, isConnected } from './qwickbrain-plugin.js';
+
+export type {
+  QwickBrainPluginConfig,
+  MCPToolDefinition,
+  MCPToolCallRequest,
+  MCPToolCallResponse,
+  QwickBrainConnectionStatus,
+  MCPRateLimitConfig,
+} from './types.js';