@undefineds.co/xpod 0.1.0-local.202602081751

package/dist/api/handlers/AdminHandler.js

@@ -0,0 +1,330 @@
+"use strict";
+/**
+ * Admin API Handler
+ * Provides configuration management, restart functionality, and log streaming
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAdminRoutes = registerAdminRoutes;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const fs_2 = require("fs");
+const readline_1 = require("readline");
+const CONFIG_DIR = path_1.default.resolve(process.cwd(), 'config');
+const ENV_FILE = path_1.default.resolve(process.cwd(), '.env.local');
+/**
+ * Read .env.local file and parse it
+ */
+function readEnvFile() {
+    const config = {};
+    if (!fs_1.default.existsSync(ENV_FILE)) {
+        return config;
+    }
+    const content = fs_1.default.readFileSync(ENV_FILE, 'utf-8');
+    for (const line of content.split('\n')) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith('#'))
+            continue;
+        const eqIndex = trimmed.indexOf('=');
+        if (eqIndex === -1)
+            continue;
+        const key = trimmed.slice(0, eqIndex).trim();
+        let value = trimmed.slice(eqIndex + 1).trim();
+        // Remove quotes
+        if ((value.startsWith('"') && value.endsWith('"')) ||
+            (value.startsWith("'") && value.endsWith("'"))) {
+            value = value.slice(1, -1);
+        }
+        config[key] = value;
+    }
+    return config;
+}
+/**
+ * Write .env.local file
+ */
+function writeEnvFile(config) {
+    const lines = [];
+    for (const [key, value] of Object.entries(config)) {
+        // Quote values that contain spaces or special characters
+        const needsQuotes = /[\s"'=]/.test(value);
+        const quotedValue = needsQuotes ? `"${value}"` : value;
+        lines.push(`${key}=${quotedValue}`);
+    }
+    fs_1.default.writeFileSync(ENV_FILE, lines.join('\n') + '\n');
+}
+/**
+ * List available config files
+ */
+function listConfigFiles() {
+    const files = [];
+    const configFiles = ['local.json', 'cloud.json', 'main.json', 'xpod.base.json'];
+    for (const name of configFiles) {
+        const filePath = path_1.default.join(CONFIG_DIR, name);
+        files.push({
+            name,
+            path: filePath,
+            exists: fs_1.default.existsSync(filePath),
+        });
+    }
+    return files;
+}
+/**
+ * Send JSON response helper
+ */
+function sendJson(res, status, data) {
+    res.statusCode = status;
+    res.setHeader('Content-Type', 'application/json');
+    res.end(JSON.stringify(data));
+}
+/**
+ * Parse JSON body from request
+ */
+function parseJsonBody(req) {
+    return new Promise((resolve, reject) => {
+        let body = '';
+        req.on('data', (chunk) => {
+            body += chunk.toString();
+        });
+        req.on('end', () => {
+            try {
+                resolve(body ? JSON.parse(body) : {});
+            }
+            catch (err) {
+                reject(err);
+            }
+        });
+        req.on('error', reject);
+    });
+}
+function registerAdminRoutes(server) {
+    const logger = console;
+    // GET /api/admin/status - Get xpod status
+    const statusHandler = async (_req, res) => {
+        try {
+            const env = readEnvFile();
+            const configs = listConfigFiles();
+            sendJson(res, 200, {
+                status: 'running',
+                pid: process.pid,
+                ppid: process.ppid,
+                uptime: process.uptime(),
+                env: {
+                    CSS_BASE_URL: env.CSS_BASE_URL || process.env.CSS_BASE_URL,
+                    CSS_EDITION: env.CSS_EDITION || process.env.CSS_EDITION,
+                    CSS_PORT: env.CSS_PORT || process.env.CSS_PORT,
+                },
+                configs,
+            });
+        }
+        catch (error) {
+            logger.error('[Admin] Status error:', error);
+            sendJson(res, 500, { error: 'Failed to get status' });
+        }
+    };
+    // GET /api/admin/config - Get current configuration
+    const getConfigHandler = async (_req, res) => {
+        try {
+            const env = readEnvFile();
+            sendJson(res, 200, {
+                env,
+                configFiles: listConfigFiles(),
+            });
+        }
+        catch (error) {
+            logger.error('[Admin] Get config error:', error);
+            sendJson(res, 500, { error: 'Failed to read configuration' });
+        }
+    };
+    // PUT /api/admin/config - Update configuration
+    const updateConfigHandler = async (req, res) => {
+        try {
+            // Parse body from raw request
+            const body = await parseJsonBody(req);
+            if (body.env) {
+                // Merge with existing config
+                const currentEnv = readEnvFile();
+                const newEnv = { ...currentEnv, ...body.env };
+                // Remove keys set to null or empty string
+                for (const [key, value] of Object.entries(newEnv)) {
+                    if (value === null || value === '') {
+                        delete newEnv[key];
+                    }
+                }
+                writeEnvFile(newEnv);
+                logger.log('[Admin] Configuration updated');
+            }
+            sendJson(res, 200, {
+                success: true,
+                message: 'Configuration updated. Restart required for changes to take effect.',
+            });
+        }
+        catch (error) {
+            logger.error('[Admin] Update config error:', error);
+            sendJson(res, 500, { error: 'Failed to update configuration' });
+        }
+    };
+    // POST /api/admin/restart - Trigger xpod restart
+    const restartHandler = async (_req, res) => {
+        try {
+            const ppid = process.ppid;
+            if (!ppid) {
+                sendJson(res, 500, { error: 'Cannot determine parent process' });
+                return;
+            }
+            logger.log(`[Admin] Sending SIGUSR1 to parent process (pid: ${ppid})`);
+            // Send response before triggering restart
+            sendJson(res, 200, {
+                success: true,
+                message: 'Restart signal sent. Server will restart shortly.',
+            });
+            // Give time for response to be sent, then signal parent
+            setTimeout(() => {
+                try {
+                    process.kill(ppid, 'SIGUSR1');
+                }
+                catch (err) {
+                    logger.error('[Admin] Failed to send restart signal:', err);
+                }
+            }, 100);
+        }
+        catch (error) {
+            logger.error('[Admin] Restart error:', error);
+            sendJson(res, 500, { error: 'Failed to trigger restart' });
+        }
+    };
+    // Log buffer for recent logs (in-memory)
+    const logBuffer = [];
+    const MAX_LOG_BUFFER = 1000;
+    // Capture stdout/stderr logs
+    const originalStdoutWrite = process.stdout.write.bind(process.stdout);
+    const originalStderrWrite = process.stderr.write.bind(process.stderr);
+    function addLog(level, source, message) {
+        const entry = {
+            timestamp: new Date().toISOString(),
+            level,
+            source,
+            message: message.trim(),
+        };
+        logBuffer.push(entry);
+        if (logBuffer.length > MAX_LOG_BUFFER) {
+            logBuffer.shift();
+        }
+    }
+    // Intercept stdout
+    process.stdout.write = (chunk, ...args) => {
+        const message = chunk.toString();
+        addLog('info', 'xpod', message);
+        return originalStdoutWrite(chunk, ...args);
+    };
+    // Intercept stderr
+    process.stderr.write = (chunk, ...args) => {
+        const message = chunk.toString();
+        addLog('error', 'xpod', message);
+        return originalStderrWrite(chunk, ...args);
+    };
+    // GET /api/admin/logs - Get recent logs
+    const getLogsHandler = async (req, res) => {
+        try {
+            const url = new URL(req.url || '', `http://${req.headers.host}`);
+            const limit = parseInt(url.searchParams.get('limit') || '100', 10);
+            const level = url.searchParams.get('level');
+            const source = url.searchParams.get('source');
+            let logs = [...logBuffer];
+            // Apply filters
+            if (level && level !== 'all') {
+                logs = logs.filter(log => log.level === level);
+            }
+            if (source && source !== 'all') {
+                logs = logs.filter(log => log.source === source);
+            }
+            // Return last N logs
+            logs = logs.slice(-limit);
+            sendJson(res, 200, { logs });
+        }
+        catch (error) {
+            logger.error('[Admin] Get logs error:', error);
+            sendJson(res, 500, { error: 'Failed to get logs' });
+        }
+    };
+    // GET /api/admin/logs/stream - Stream logs via SSE
+    const streamLogsHandler = async (_req, res) => {
+        res.writeHead(200, {
+            'Content-Type': 'text/event-stream',
+            'Cache-Control': 'no-cache',
+            'Connection': 'keep-alive',
+        });
+        // Send initial logs
+        const lastIndex = logBuffer.length;
+        res.write(`data: ${JSON.stringify({ type: 'init', logs: logBuffer.slice(-100) })}\n\n`);
+        // Send new logs every second
+        let currentIndex = lastIndex;
+        const interval = setInterval(() => {
+            if (logBuffer.length > currentIndex) {
+                const newLogs = logBuffer.slice(currentIndex);
+                res.write(`data: ${JSON.stringify({ type: 'update', logs: newLogs })}\n\n`);
+                currentIndex = logBuffer.length;
+            }
+        }, 1000);
+        // Clean up on close
+        res.on('close', () => {
+            clearInterval(interval);
+        });
+    };
+    // GET /api/admin/logs/file - Read log file from disk
+    const getLogFileHandler = async (req, res) => {
+        try {
+            const url = new URL(req.url || '', `http://${req.headers.host}`);
+            const lines = parseInt(url.searchParams.get('lines') || '100', 10);
+            // Try common log file locations
+            const logPaths = [
+                path_1.default.resolve(process.cwd(), 'logs', 'combined.log'),
+                path_1.default.resolve(process.cwd(), 'logs', 'error.log'),
+                path_1.default.resolve(process.cwd(), 'xpod.log'),
+                path_1.default.resolve(process.cwd(), 'combined.log'),
+            ];
+            let logPath = null;
+            for (const p of logPaths) {
+                if (fs_1.default.existsSync(p)) {
+                    logPath = p;
+                    break;
+                }
+            }
+            if (!logPath) {
+                sendJson(res, 404, { error: 'No log file found' });
+                return;
+            }
+            // Read last N lines
+            const fileLogs = [];
+            const stats = (0, fs_2.statSync)(logPath);
+            const stream = (0, fs_2.createReadStream)(logPath, {
+                start: Math.max(0, stats.size - 1024 * 100), // Last 100KB
+                end: stats.size,
+            });
+            const rl = (0, readline_1.createInterface)({ input: stream });
+            for await (const line of rl) {
+                fileLogs.push(line);
+            }
+            const lastLines = fileLogs.slice(-lines);
+            sendJson(res, 200, {
+                file: logPath,
+                lines: lastLines,
+            });
+        }
+        catch (error) {
+            logger.error('[Admin] Get log file error:', error);
+            sendJson(res, 500, { error: 'Failed to read log file' });
+        }
+    };
+    // Register routes - public for now (TODO: add auth for production)
+    server.get('/api/admin/status', statusHandler, { public: true });
+    server.get('/api/admin/config', getConfigHandler, { public: true });
+    server.put('/api/admin/config', updateConfigHandler, { public: true });
+    server.post('/api/admin/restart', restartHandler, { public: true });
+    server.get('/api/admin/logs', getLogsHandler, { public: true });
+    server.get('/api/admin/logs/stream', streamLogsHandler, { public: true });
+    server.get('/api/admin/logs/file', getLogFileHandler, { public: true });
+    logger.log('[Admin] Admin API routes registered');
+}
+//# sourceMappingURL=AdminHandler.js.map

package/dist/api/handlers/AdminHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AdminHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/AdminHandler.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;AA8GH,kDA2RC;AApYD,4CAAoB;AACpB,gDAAwB;AACxB,2BAAgD;AAChD,uCAA2C;AAE3C,MAAM,UAAU,GAAG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;AACzD,MAAM,QAAQ,GAAG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC;AAY3D;;GAEG;AACH,SAAS,WAAW;IAClB,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,OAAO,GAAG,YAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,SAAS;QAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,gBAAgB;QAChB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACnD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,MAAiB;IACrC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,yDAAyD;QACzD,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,YAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,SAAS,eAAe;IACtB,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,WAAW,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;IAEhF,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC;YACT,IAAI;YACJ,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAClE,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;IACxB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,GAAyB;IAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,mBAAmB,CAAC,MAAiB;IACnD,MAAM,MAAM,GAAG,OAAO,CAAC;IAEvB,0CAA0C;IAC1C,MAAM,aAAa,GAAiB,KAAK,EACvC,IAA0B,EAC1B,GAAmB,EACnB,EAAE;QACF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;YAElC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACjB,MAAM,EAAE,SAAS;gBACjB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;gBACxB,GAAG,EAAE;oBACH,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;oBAC1D,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;oBACvD,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ;iBAC/C;gBACD,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;YAC7C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC;IAEF,oDAAoD;IACpD,MAAM,gBAAgB,GAAiB,KAAK,EAC1C,IAA0B,EAC1B,GAAmB,EACnB,EAAE;QACF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;YAC1B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACjB,GAAG;gBACH,WAAW,EAAE,eAAe,EAAE;aAC/B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;YACjD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC;IAEF,+CAA+C;IAC/C,MAAM,mBAAmB,GAAiB,KAAK,EAC7C,GAAyB,EACzB,GAAmB,EACnB,EAAE;QACF,IAAI,CAAC;YACH,8BAA8B;YAC9B,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;YAEtC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBACb,6BAA6B;gBAC7B,MAAM,UAAU,GAAG,WAAW,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,EAAE,GAAG,UAAU,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAE9C,0CAA0C;gBAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;wBACnC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;oBACrB,CAAC;gBACH,CAAC;gBAED,YAAY,CAAC,MAAM,CAAC,CAAC;gBACrB,MAAM,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YAC9C,CAAC;YAED,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACjB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,qEAAqE;aAC/E,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;YACpD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC,CAAC;IAEF,iDAAiD;IACjD,MAAM,cAAc,GAAiB,KAAK,EACxC,IAA0B,EAC1B,GAAmB,EACnB,EAAE;QACF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YAE1B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,CAAC;gBACjE,OAAO;YACT,CAAC;YAED,MAAM,CAAC,GAAG,CAAC,mDAAmD,IAAI,GAAG,CAAC,CAAC;YAEvE,0CAA0C;YAC1C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACjB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,mDAAmD;aAC7D,CAAC,CAAC;YAEH,wDAAwD;YACxD,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBAChC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;YAC9C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC,CAAC;IAEF,yCAAyC;IACzC,MAAM,SAAS,GAKV,EAAE,CAAC;IACR,MAAM,cAAc,GAAG,IAAI,CAAC;IAE5B,6BAA6B;IAC7B,MAAM,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtE,MAAM,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAEtE,SAAS,MAAM,CAAC,KAAa,EAAE,MAAc,EAAE,OAAe;QAC5D,MAAM,KAAK,GAAG;YACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK;YACL,MAAM;YACN,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;SACxB,CAAC;QACF,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,SAAS,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YACtC,SAAS,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,KAAU,EAAE,GAAG,IAAW,EAAW,EAAE;QAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,mBAAmB,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEF,mBAAmB;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,KAAU,EAAE,GAAG,IAAW,EAAW,EAAE;QAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,OAAO,mBAAmB,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEF,wCAAwC;IACxC,MAAM,cAAc,GAAiB,KAAK,EACxC,GAAyB,EACzB,GAAmB,EACnB,EAAE;QACF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACjE,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC,CAAC;YACnE,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAE9C,IAAI,IAAI,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC;YAE1B,gBAAgB;YAChB,IAAI,KAAK,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC7B,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;YACjD,CAAC;YACD,IAAI,MAAM,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC/B,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;YACnD,CAAC;YAED,qBAAqB;YACrB,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;YAE1B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;YAC/C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC;IAEF,mDAAmD;IACnD,MAAM,iBAAiB,GAAiB,KAAK,EAC3C,IAA0B,EAC1B,GAAmB,EACnB,EAAE;QACF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,UAAU;YAC3B,YAAY,EAAE,YAAY;SAC3B,CAAC,CAAC;QAEH,oBAAoB;QACpB,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC;QACnC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QAExF,6BAA6B;QAC7B,IAAI,YAAY,GAAG,SAAS,CAAC;QAC7B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;YAChC,IAAI,SAAS,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBAC9C,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;gBAC5E,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC;YAClC,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,CAAC;QAET,oBAAoB;QACpB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACnB,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,qDAAqD;IACrD,MAAM,iBAAiB,GAAiB,KAAK,EAC3C,GAAyB,EACzB,GAAmB,EACnB,EAAE;QACF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACjE,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC,CAAC;YAEnE,gCAAgC;YAChC,MAAM,QAAQ,GAAG;gBACf,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,cAAc,CAAC;gBACnD,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC;gBAChD,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC;gBACvC,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC;aAC5C,CAAC;YAEF,IAAI,OAAO,GAAkB,IAAI,CAAC;YAClC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,IAAI,YAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrB,OAAO,GAAG,CAAC,CAAC;oBACZ,MAAM;gBACR,CAAC;YACH,CAAC;YAED,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YAED,oBAAoB;YACpB,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAA,aAAQ,EAAC,OAAO,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,IAAA,qBAAgB,EAAC,OAAO,EAAE;gBACvC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,GAAG,IAAI,GAAG,GAAG,CAAC,EAAE,aAAa;gBAC1D,GAAG,EAAE,KAAK,CAAC,IAAI;aAChB,CAAC,CAAC;YAEH,MAAM,EAAE,GAAG,IAAA,0BAAe,EAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9C,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;YAED,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;YACzC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACjB,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,SAAS;aACjB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;YACnD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC;IAEF,mEAAmE;IACnE,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,CAAC,GAAG,CAAC,wBAAwB,EAAE,iBAAiB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,iBAAiB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAExE,MAAM,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;AACpD,CAAC","sourcesContent":["/**\n * Admin API Handler\n * Provides configuration management, restart functionality, and log streaming\n */\n\nimport type { ServerResponse } from 'node:http';\nimport type { ApiServer, RouteHandler } from '../ApiServer';\nimport type { AuthenticatedRequest } from '../middleware/AuthMiddleware';\nimport fs from 'fs';\nimport path from 'path';\nimport { createReadStream, statSync } from 'fs';\nimport { createInterface } from 'readline';\n\nconst CONFIG_DIR = path.resolve(process.cwd(), 'config');\nconst ENV_FILE = path.resolve(process.cwd(), '.env.local');\n\ninterface ConfigFile {\n  name: string;\n  path: string;\n  exists: boolean;\n}\n\ninterface EnvConfig {\n  [key: string]: string;\n}\n\n/**\n * Read .env.local file and parse it\n */\nfunction readEnvFile(): EnvConfig {\n  const config: EnvConfig = {};\n  if (!fs.existsSync(ENV_FILE)) {\n    return config;\n  }\n  const content = fs.readFileSync(ENV_FILE, 'utf-8');\n  for (const line of content.split('\\n')) {\n    const trimmed = line.trim();\n    if (!trimmed || trimmed.startsWith('#')) continue;\n    const eqIndex = trimmed.indexOf('=');\n    if (eqIndex === -1) continue;\n    const key = trimmed.slice(0, eqIndex).trim();\n    let value = trimmed.slice(eqIndex + 1).trim();\n    // Remove quotes\n    if ((value.startsWith('\"') && value.endsWith('\"')) ||\n        (value.startsWith(\"'\") && value.endsWith(\"'\"))) {\n      value = value.slice(1, -1);\n    }\n    config[key] = value;\n  }\n  return config;\n}\n\n/**\n * Write .env.local file\n */\nfunction writeEnvFile(config: EnvConfig): void {\n  const lines: string[] = [];\n  for (const [key, value] of Object.entries(config)) {\n    // Quote values that contain spaces or special characters\n    const needsQuotes = /[\\s\"'=]/.test(value);\n    const quotedValue = needsQuotes ? `\"${value}\"` : value;\n    lines.push(`${key}=${quotedValue}`);\n  }\n  fs.writeFileSync(ENV_FILE, lines.join('\\n') + '\\n');\n}\n\n/**\n * List available config files\n */\nfunction listConfigFiles(): ConfigFile[] {\n  const files: ConfigFile[] = [];\n  const configFiles = ['local.json', 'cloud.json', 'main.json', 'xpod.base.json'];\n\n  for (const name of configFiles) {\n    const filePath = path.join(CONFIG_DIR, name);\n    files.push({\n      name,\n      path: filePath,\n      exists: fs.existsSync(filePath),\n    });\n  }\n  return files;\n}\n\n/**\n * Send JSON response helper\n */\nfunction sendJson(res: ServerResponse, status: number, data: unknown): void {\n  res.statusCode = status;\n  res.setHeader('Content-Type', 'application/json');\n  res.end(JSON.stringify(data));\n}\n\n/**\n * Parse JSON body from request\n */\nfunction parseJsonBody(req: AuthenticatedRequest): Promise<{ env?: EnvConfig }> {\n  return new Promise((resolve, reject) => {\n    let body = '';\n    req.on('data', (chunk: Buffer) => {\n      body += chunk.toString();\n    });\n    req.on('end', () => {\n      try {\n        resolve(body ? JSON.parse(body) : {});\n      } catch (err) {\n        reject(err);\n      }\n    });\n    req.on('error', reject);\n  });\n}\n\nexport function registerAdminRoutes(server: ApiServer): void {\n  const logger = console;\n\n  // GET /api/admin/status - Get xpod status\n  const statusHandler: RouteHandler = async (\n    _req: AuthenticatedRequest,\n    res: ServerResponse,\n  ) => {\n    try {\n      const env = readEnvFile();\n      const configs = listConfigFiles();\n\n      sendJson(res, 200, {\n        status: 'running',\n        pid: process.pid,\n        ppid: process.ppid,\n        uptime: process.uptime(),\n        env: {\n          CSS_BASE_URL: env.CSS_BASE_URL || process.env.CSS_BASE_URL,\n          CSS_EDITION: env.CSS_EDITION || process.env.CSS_EDITION,\n          CSS_PORT: env.CSS_PORT || process.env.CSS_PORT,\n        },\n        configs,\n      });\n    } catch (error) {\n      logger.error('[Admin] Status error:', error);\n      sendJson(res, 500, { error: 'Failed to get status' });\n    }\n  };\n\n  // GET /api/admin/config - Get current configuration\n  const getConfigHandler: RouteHandler = async (\n    _req: AuthenticatedRequest,\n    res: ServerResponse,\n  ) => {\n    try {\n      const env = readEnvFile();\n      sendJson(res, 200, {\n        env,\n        configFiles: listConfigFiles(),\n      });\n    } catch (error) {\n      logger.error('[Admin] Get config error:', error);\n      sendJson(res, 500, { error: 'Failed to read configuration' });\n    }\n  };\n\n  // PUT /api/admin/config - Update configuration\n  const updateConfigHandler: RouteHandler = async (\n    req: AuthenticatedRequest,\n    res: ServerResponse,\n  ) => {\n    try {\n      // Parse body from raw request\n      const body = await parseJsonBody(req);\n\n      if (body.env) {\n        // Merge with existing config\n        const currentEnv = readEnvFile();\n        const newEnv = { ...currentEnv, ...body.env };\n\n        // Remove keys set to null or empty string\n        for (const [key, value] of Object.entries(newEnv)) {\n          if (value === null || value === '') {\n            delete newEnv[key];\n          }\n        }\n\n        writeEnvFile(newEnv);\n        logger.log('[Admin] Configuration updated');\n      }\n\n      sendJson(res, 200, {\n        success: true,\n        message: 'Configuration updated. Restart required for changes to take effect.',\n      });\n    } catch (error) {\n      logger.error('[Admin] Update config error:', error);\n      sendJson(res, 500, { error: 'Failed to update configuration' });\n    }\n  };\n\n  // POST /api/admin/restart - Trigger xpod restart\n  const restartHandler: RouteHandler = async (\n    _req: AuthenticatedRequest,\n    res: ServerResponse,\n  ) => {\n    try {\n      const ppid = process.ppid;\n\n      if (!ppid) {\n        sendJson(res, 500, { error: 'Cannot determine parent process' });\n        return;\n      }\n\n      logger.log(`[Admin] Sending SIGUSR1 to parent process (pid: ${ppid})`);\n\n      // Send response before triggering restart\n      sendJson(res, 200, {\n        success: true,\n        message: 'Restart signal sent. Server will restart shortly.',\n      });\n\n      // Give time for response to be sent, then signal parent\n      setTimeout(() => {\n        try {\n          process.kill(ppid, 'SIGUSR1');\n        } catch (err) {\n          logger.error('[Admin] Failed to send restart signal:', err);\n        }\n      }, 100);\n    } catch (error) {\n      logger.error('[Admin] Restart error:', error);\n      sendJson(res, 500, { error: 'Failed to trigger restart' });\n    }\n  };\n\n  // Log buffer for recent logs (in-memory)\n  const logBuffer: Array<{\n    timestamp: string;\n    level: string;\n    source: string;\n    message: string;\n  }> = [];\n  const MAX_LOG_BUFFER = 1000;\n\n  // Capture stdout/stderr logs\n  const originalStdoutWrite = process.stdout.write.bind(process.stdout);\n  const originalStderrWrite = process.stderr.write.bind(process.stderr);\n\n  function addLog(level: string, source: string, message: string): void {\n    const entry = {\n      timestamp: new Date().toISOString(),\n      level,\n      source,\n      message: message.trim(),\n    };\n    logBuffer.push(entry);\n    if (logBuffer.length > MAX_LOG_BUFFER) {\n      logBuffer.shift();\n    }\n  }\n\n  // Intercept stdout\n  process.stdout.write = (chunk: any, ...args: any[]): boolean => {\n    const message = chunk.toString();\n    addLog('info', 'xpod', message);\n    return originalStdoutWrite(chunk, ...args);\n  };\n\n  // Intercept stderr\n  process.stderr.write = (chunk: any, ...args: any[]): boolean => {\n    const message = chunk.toString();\n    addLog('error', 'xpod', message);\n    return originalStderrWrite(chunk, ...args);\n  };\n\n  // GET /api/admin/logs - Get recent logs\n  const getLogsHandler: RouteHandler = async (\n    req: AuthenticatedRequest,\n    res: ServerResponse,\n  ) => {\n    try {\n      const url = new URL(req.url || '', `http://${req.headers.host}`);\n      const limit = parseInt(url.searchParams.get('limit') || '100', 10);\n      const level = url.searchParams.get('level');\n      const source = url.searchParams.get('source');\n\n      let logs = [...logBuffer];\n\n      // Apply filters\n      if (level && level !== 'all') {\n        logs = logs.filter(log => log.level === level);\n      }\n      if (source && source !== 'all') {\n        logs = logs.filter(log => log.source === source);\n      }\n\n      // Return last N logs\n      logs = logs.slice(-limit);\n\n      sendJson(res, 200, { logs });\n    } catch (error) {\n      logger.error('[Admin] Get logs error:', error);\n      sendJson(res, 500, { error: 'Failed to get logs' });\n    }\n  };\n\n  // GET /api/admin/logs/stream - Stream logs via SSE\n  const streamLogsHandler: RouteHandler = async (\n    _req: AuthenticatedRequest,\n    res: ServerResponse,\n  ) => {\n    res.writeHead(200, {\n      'Content-Type': 'text/event-stream',\n      'Cache-Control': 'no-cache',\n      'Connection': 'keep-alive',\n    });\n\n    // Send initial logs\n    const lastIndex = logBuffer.length;\n    res.write(`data: ${JSON.stringify({ type: 'init', logs: logBuffer.slice(-100) })}\\n\\n`);\n\n    // Send new logs every second\n    let currentIndex = lastIndex;\n    const interval = setInterval(() => {\n      if (logBuffer.length > currentIndex) {\n        const newLogs = logBuffer.slice(currentIndex);\n        res.write(`data: ${JSON.stringify({ type: 'update', logs: newLogs })}\\n\\n`);\n        currentIndex = logBuffer.length;\n      }\n    }, 1000);\n\n    // Clean up on close\n    res.on('close', () => {\n      clearInterval(interval);\n    });\n  };\n\n  // GET /api/admin/logs/file - Read log file from disk\n  const getLogFileHandler: RouteHandler = async (\n    req: AuthenticatedRequest,\n    res: ServerResponse,\n  ) => {\n    try {\n      const url = new URL(req.url || '', `http://${req.headers.host}`);\n      const lines = parseInt(url.searchParams.get('lines') || '100', 10);\n\n      // Try common log file locations\n      const logPaths = [\n        path.resolve(process.cwd(), 'logs', 'combined.log'),\n        path.resolve(process.cwd(), 'logs', 'error.log'),\n        path.resolve(process.cwd(), 'xpod.log'),\n        path.resolve(process.cwd(), 'combined.log'),\n      ];\n\n      let logPath: string | null = null;\n      for (const p of logPaths) {\n        if (fs.existsSync(p)) {\n          logPath = p;\n          break;\n        }\n      }\n\n      if (!logPath) {\n        sendJson(res, 404, { error: 'No log file found' });\n        return;\n      }\n\n      // Read last N lines\n      const fileLogs: string[] = [];\n      const stats = statSync(logPath);\n      const stream = createReadStream(logPath, {\n        start: Math.max(0, stats.size - 1024 * 100), // Last 100KB\n        end: stats.size,\n      });\n\n      const rl = createInterface({ input: stream });\n      for await (const line of rl) {\n        fileLogs.push(line);\n      }\n\n      const lastLines = fileLogs.slice(-lines);\n      sendJson(res, 200, {\n        file: logPath,\n        lines: lastLines,\n      });\n    } catch (error) {\n      logger.error('[Admin] Get log file error:', error);\n      sendJson(res, 500, { error: 'Failed to read log file' });\n    }\n  };\n\n  // Register routes - public for now (TODO: add auth for production)\n  server.get('/api/admin/status', statusHandler, { public: true });\n  server.get('/api/admin/config', getConfigHandler, { public: true });\n  server.put('/api/admin/config', updateConfigHandler, { public: true });\n  server.post('/api/admin/restart', restartHandler, { public: true });\n  server.get('/api/admin/logs', getLogsHandler, { public: true });\n  server.get('/api/admin/logs/stream', streamLogsHandler, { public: true });\n  server.get('/api/admin/logs/file', getLogFileHandler, { public: true });\n\n  logger.log('[Admin] Admin API routes registered');\n}\n"]}

package/dist/api/handlers/ApiKeyHandler.d.ts

@@ -0,0 +1,15 @@
+import type { ApiServer } from '../ApiServer';
+import type { DrizzleClientCredentialsStore } from '../store/DrizzleClientCredentialsStore';
+export interface ApiKeyHandlerOptions {
+    store: DrizzleClientCredentialsStore;
+}
+/**
+ * Handler for API Key management
+ *
+ * GET    /v1/keys - List user's API keys
+ * POST   /v1/keys - Store a new API key (after creating in CSS)
+ * DELETE /v1/keys/:clientId - Delete an API key
+ *
+ * All endpoints require Solid Token (only frontend can manage keys)
+ */
+export declare function registerApiKeyRoutes(server: ApiServer, options: ApiKeyHandlerOptions): void;

package/dist/api/handlers/ApiKeyHandler.js

@@ -0,0 +1,159 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerApiKeyRoutes = registerApiKeyRoutes;
+const global_logger_factory_1 = require("global-logger-factory");
+const AuthContext_1 = require("../auth/AuthContext");
+/**
+ * Handler for API Key management
+ *
+ * GET    /v1/keys - List user's API keys
+ * POST   /v1/keys - Store a new API key (after creating in CSS)
+ * DELETE /v1/keys/:clientId - Delete an API key
+ *
+ * All endpoints require Solid Token (only frontend can manage keys)
+ */
+function registerApiKeyRoutes(server, options) {
+    const logger = (0, global_logger_factory_1.getLoggerFor)('ApiKeyHandler');
+    const store = options.store;
+    const rejectApiKey = (request, response) => {
+        const auth = request.auth;
+        if (auth && (0, AuthContext_1.isSolidAuth)(auth) && auth.viaApiKey) {
+            sendJson(response, 403, { error: 'API key is not allowed for this endpoint' });
+            return true;
+        }
+        return false;
+    };
+    // GET /v1/keys - List user's API keys
+    server.get('/v1/keys', async (request, response, _params) => {
+        if (rejectApiKey(request, response)) {
+            return;
+        }
+        const auth = request.auth;
+        const webId = (0, AuthContext_1.getWebId)(auth);
+        if (!webId) {
+            sendJson(response, 400, { error: 'Cannot determine user' });
+            return;
+        }
+        try {
+            // Use webId as account identifier
+            const keys = await store.listByAccount(webId);
+            sendJson(response, 200, {
+                keys: keys.map((k) => ({
+                    clientId: k.clientId,
+                    webId: k.webId,
+                    displayName: k.displayName,
+                    createdAt: k.createdAt.toISOString(),
+                })),
+            });
+        }
+        catch (error) {
+            logger.error(`Failed to list API keys: ${error}`);
+            sendJson(response, 500, { error: 'Failed to list keys' });
+        }
+    });
+    // POST /v1/keys - Store API key (frontend calls this after creating credentials in CSS)
+    server.post('/v1/keys', async (request, response, _params) => {
+        if (rejectApiKey(request, response)) {
+            return;
+        }
+        const auth = request.auth;
+        const webId = (0, AuthContext_1.getWebId)(auth);
+        if (!webId) {
+            sendJson(response, 400, { error: 'Cannot determine user' });
+            return;
+        }
+        const body = await readJsonBody(request);
+        if (!body || typeof body !== 'object') {
+            sendJson(response, 400, { error: 'Request body must be a JSON object' });
+            return;
+        }
+        const payload = body;
+        // These come from CSS client credentials creation
+        const clientId = payload.clientId;
+        const clientSecret = payload.clientSecret;
+        const displayName = typeof payload.displayName === 'string' ? payload.displayName : undefined;
+        if (typeof clientId !== 'string' || !clientId.trim()) {
+            sendJson(response, 400, { error: 'clientId is required' });
+            return;
+        }
+        if (typeof clientSecret !== 'string' || !clientSecret.trim()) {
+            sendJson(response, 400, { error: 'clientSecret is required' });
+            return;
+        }
+        try {
+            // Use webId as account identifier
+            await store.store({
+                clientId,
+                clientSecret,
+                webId,
+                accountId: webId,
+                displayName,
+            });
+            logger.info(`Stored API key ${clientId} for user ${webId}`);
+            sendJson(response, 201, {
+                clientId,
+                displayName,
+                message: 'API key stored successfully.',
+            });
+        }
+        catch (error) {
+            logger.error(`Failed to store API key: ${error}`);
+            sendJson(response, 500, { error: 'Failed to store key' });
+        }
+    });
+    // DELETE /v1/keys/:clientId - Delete an API key
+    server.delete('/v1/keys/:clientId', async (request, response, params) => {
+        if (rejectApiKey(request, response)) {
+            return;
+        }
+        const auth = request.auth;
+        const webId = (0, AuthContext_1.getWebId)(auth);
+        const clientId = decodeURIComponent(params.clientId);
+        if (!webId) {
+            sendJson(response, 400, { error: 'Cannot determine user' });
+            return;
+        }
+        try {
+            // Delete with webId check to ensure ownership
+            const deleted = await store.delete(clientId, webId);
+            if (!deleted) {
+                sendJson(response, 404, { error: 'Key not found or access denied' });
+                return;
+            }
+            logger.info(`Deleted API key ${clientId}`);
+            sendJson(response, 200, { status: 'deleted', clientId });
+        }
+        catch (error) {
+            logger.error(`Failed to delete API key: ${error}`);
+            sendJson(response, 500, { error: 'Failed to delete key' });
+        }
+    });
+}
+async function readJsonBody(request) {
+    return new Promise((resolve, reject) => {
+        let data = '';
+        request.setEncoding('utf8');
+        request.on('data', (chunk) => {
+            data += chunk;
+        });
+        request.on('end', () => {
+            if (!data) {
+                resolve(undefined);
+                return;
+            }
+            try {
+                resolve(JSON.parse(data));
+            }
+            catch {
+                resolve(undefined);
+            }
+        });
+        request.on('error', reject);
+    });
+}
+function sendJson(response, status, data) {
+    response.statusCode = status;
+    response.setHeader('Content-Type', 'application/json');
+    response.end(JSON.stringify(data));
+}
+//# sourceMappingURL=ApiKeyHandler.js.map

package/dist/api/handlers/ApiKeyHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiKeyHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/ApiKeyHandler.ts"],"names":[],"mappings":";;AAoBA,oDAmIC;AAtJD,iEAAqD;AAIrD,qDAA4D;AAM5D;;;;;;;;GAQG;AACH,SAAgB,oBAAoB,CAAC,MAAiB,EAAE,OAA6B;IACnF,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,eAAe,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAE5B,MAAM,YAAY,GAAG,CAAC,OAA6B,EAAE,QAAwB,EAAW,EAAE;QACxF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,IAAI,IAAI,IAAI,IAAA,yBAAW,EAAC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAChD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC,CAAC;YAC/E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,sCAAsC;IACtC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QAC1D,IAAI,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAK,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAA,sBAAQ,EAAC,IAAI,CAAC,CAAC;QAE7B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,kCAAkC;YAClC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAC9C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACrB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;iBACrC,CAAC,CAAC;aACJ,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;YAClD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,wFAAwF;IACxF,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QAC3D,IAAI,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAK,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAA,sBAAQ,EAAC,IAAI,CAAC,CAAC;QAE7B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAA+B,CAAC;QAEhD,kDAAkD;QAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,MAAM,WAAW,GAAG,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QAE9F,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YACrD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,kCAAkC;YAClC,MAAM,KAAK,CAAC,KAAK,CAAC;gBAChB,QAAQ;gBACR,YAAY;gBACZ,KAAK;gBACL,SAAS,EAAE,KAAK;gBAChB,WAAW;aACZ,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,kBAAkB,QAAQ,aAAa,KAAK,EAAE,CAAC,CAAC;YAE5D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,QAAQ;gBACR,WAAW;gBACX,OAAO,EAAE,8BAA8B;aACxC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;YAClD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,gDAAgD;IAChD,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACtE,IAAI,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAK,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAA,sBAAQ,EAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAErD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,8CAA8C;YAC9C,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACpD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;gBACrE,OAAO;YACT,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;YAC3C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;YACnD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAA6B;IACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;IACvE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC","sourcesContent":["import type { ServerResponse } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { AuthenticatedRequest } from '../middleware/AuthMiddleware';\nimport type { ApiServer } from '../ApiServer';\nimport type { DrizzleClientCredentialsStore } from '../store/DrizzleClientCredentialsStore';\nimport { getWebId, isSolidAuth } from '../auth/AuthContext';\n\nexport interface ApiKeyHandlerOptions {\n  store: DrizzleClientCredentialsStore;\n}\n\n/**\n * Handler for API Key management\n * \n * GET    /v1/keys - List user's API keys\n * POST   /v1/keys - Store a new API key (after creating in CSS)\n * DELETE /v1/keys/:clientId - Delete an API key\n * \n * All endpoints require Solid Token (only frontend can manage keys)\n */\nexport function registerApiKeyRoutes(server: ApiServer, options: ApiKeyHandlerOptions): void {\n  const logger = getLoggerFor('ApiKeyHandler');\n  const store = options.store;\n\n  const rejectApiKey = (request: AuthenticatedRequest, response: ServerResponse): boolean => {\n    const auth = request.auth;\n    if (auth && isSolidAuth(auth) && auth.viaApiKey) {\n      sendJson(response, 403, { error: 'API key is not allowed for this endpoint' });\n      return true;\n    }\n    return false;\n  };\n\n  // GET /v1/keys - List user's API keys\n  server.get('/v1/keys', async (request, response, _params) => {\n    if (rejectApiKey(request, response)) {\n      return;\n    }\n    const auth = request.auth!;\n    const webId = getWebId(auth);\n\n    if (!webId) {\n      sendJson(response, 400, { error: 'Cannot determine user' });\n      return;\n    }\n\n    try {\n      // Use webId as account identifier\n      const keys = await store.listByAccount(webId);\n      sendJson(response, 200, {\n        keys: keys.map((k) => ({\n          clientId: k.clientId,\n          webId: k.webId,\n          displayName: k.displayName,\n          createdAt: k.createdAt.toISOString(),\n        })),\n      });\n    } catch (error) {\n      logger.error(`Failed to list API keys: ${error}`);\n      sendJson(response, 500, { error: 'Failed to list keys' });\n    }\n  });\n\n  // POST /v1/keys - Store API key (frontend calls this after creating credentials in CSS)\n  server.post('/v1/keys', async (request, response, _params) => {\n    if (rejectApiKey(request, response)) {\n      return;\n    }\n    const auth = request.auth!;\n    const webId = getWebId(auth);\n\n    if (!webId) {\n      sendJson(response, 400, { error: 'Cannot determine user' });\n      return;\n    }\n\n    const body = await readJsonBody(request);\n    if (!body || typeof body !== 'object') {\n      sendJson(response, 400, { error: 'Request body must be a JSON object' });\n      return;\n    }\n\n    const payload = body as Record<string, unknown>;\n\n    // These come from CSS client credentials creation\n    const clientId = payload.clientId;\n    const clientSecret = payload.clientSecret;\n    const displayName = typeof payload.displayName === 'string' ? payload.displayName : undefined;\n\n    if (typeof clientId !== 'string' || !clientId.trim()) {\n      sendJson(response, 400, { error: 'clientId is required' });\n      return;\n    }\n\n    if (typeof clientSecret !== 'string' || !clientSecret.trim()) {\n      sendJson(response, 400, { error: 'clientSecret is required' });\n      return;\n    }\n\n    try {\n      // Use webId as account identifier\n      await store.store({\n        clientId,\n        clientSecret,\n        webId,\n        accountId: webId,\n        displayName,\n      });\n\n      logger.info(`Stored API key ${clientId} for user ${webId}`);\n\n      sendJson(response, 201, {\n        clientId,\n        displayName,\n        message: 'API key stored successfully.',\n      });\n    } catch (error) {\n      logger.error(`Failed to store API key: ${error}`);\n      sendJson(response, 500, { error: 'Failed to store key' });\n    }\n  });\n\n  // DELETE /v1/keys/:clientId - Delete an API key\n  server.delete('/v1/keys/:clientId', async (request, response, params) => {\n    if (rejectApiKey(request, response)) {\n      return;\n    }\n    const auth = request.auth!;\n    const webId = getWebId(auth);\n    const clientId = decodeURIComponent(params.clientId);\n\n    if (!webId) {\n      sendJson(response, 400, { error: 'Cannot determine user' });\n      return;\n    }\n\n    try {\n      // Delete with webId check to ensure ownership\n      const deleted = await store.delete(clientId, webId);\n      if (!deleted) {\n        sendJson(response, 404, { error: 'Key not found or access denied' });\n        return;\n      }\n\n      logger.info(`Deleted API key ${clientId}`);\n      sendJson(response, 200, { status: 'deleted', clientId });\n    } catch (error) {\n      logger.error(`Failed to delete API key: ${error}`);\n      sendJson(response, 500, { error: 'Failed to delete key' });\n    }\n  });\n}\n\nasync function readJsonBody(request: AuthenticatedRequest): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let data = '';\n    request.setEncoding('utf8');\n    request.on('data', (chunk: string) => {\n      data += chunk;\n    });\n    request.on('end', () => {\n      if (!data) {\n        resolve(undefined);\n        return;\n      }\n      try {\n        resolve(JSON.parse(data));\n      } catch {\n        resolve(undefined);\n      }\n    });\n    request.on('error', reject);\n  });\n}\n\nfunction sendJson(response: ServerResponse, status: number, data: unknown): void {\n  response.statusCode = status;\n  response.setHeader('Content-Type', 'application/json');\n  response.end(JSON.stringify(data));\n}"]}

package/dist/api/handlers/ChatHandler.d.ts

@@ -0,0 +1,60 @@
+import type { ApiServer } from '../ApiServer';
+import type { AuthContext } from '../auth/AuthContext';
+/**
+ * Chat completion request (OpenAI-compatible)
+ */
+export interface ChatCompletionRequest {
+    model: string;
+    messages: Array<{
+        role: 'system' | 'user' | 'assistant';
+        content: string;
+    }>;
+    temperature?: number;
+    max_tokens?: number;
+    stream?: boolean;
+}
+/**
+ * Chat completion response (OpenAI-compatible)
+ */
+export interface ChatCompletionResponse {
+    id: string;
+    object: 'chat.completion';
+    created: number;
+    model: string;
+    choices: Array<{
+        index: number;
+        message: {
+            role: 'assistant';
+            content: string;
+        };
+        finish_reason: 'stop' | 'length' | 'content_filter';
+    }>;
+    usage: {
+        prompt_tokens: number;
+        completion_tokens: number;
+        total_tokens: number;
+    };
+}
+export interface ChatHandlerOptions {
+    /**
+     * Backend chat service to delegate to (e.g., OpenAI, local model)
+     */
+    chatService?: {
+        complete(request: ChatCompletionRequest, auth: AuthContext): Promise<ChatCompletionResponse>;
+        stream(request: ChatCompletionRequest, auth: AuthContext): Promise<any>;
+        responses?(body: any, auth: AuthContext): Promise<any>;
+        messages?(body: any, auth: AuthContext): Promise<any>;
+        listModels(auth?: AuthContext): Promise<any[]>;
+    };
+}
+/**
+ * Handler for chat completions API (OpenAI-compatible)
+ *
+ * POST /v1/chat/completions - Create a chat completion
+ * POST /v1/responses - Create a response (OpenAI Responses API)
+ * POST /v1/messages - Create a message (Anthropic/OpenAI Threads compatible)
+ * GET  /v1/models - List available models
+ *
+ * Supports both Solid Token (frontend) and API Key (third-party)
+ */
+export declare function registerChatRoutes(server: ApiServer, options: ChatHandlerOptions): void;