SVG2DrawIOLib 1.2.2__tar.gz → 1.3.4__tar.gz

{svg2drawiolib-1.2.2 → svg2drawiolib-1.3.4}/.gitignore

@@ -39,13 +39,14 @@ debug/
 /test_*.xml
 /test_*.py
 
+# Bundled web UI (built artifact — not source)
+src/SVG2DrawIOLib/web/*
+!src/SVG2DrawIOLib/web/.gitkeep
+
 # web-ui (Next.js)
 web-ui/node_modules/
 web-ui/.next/
 web-ui/out/
 web-ui/.env.local
 web-ui/.env*.local
-
-# api (FastAPI)
-api/__pycache__/
-api/**/__pycache__/
+!web-ui/.env.production

{svg2drawiolib-1.2.2 → svg2drawiolib-1.3.4}/CHANGELOG.md

@@ -5,6 +5,82 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.3.4] - 2026-02-22
+
+### Fixed
+
+- **PyPI wheel packaging**: Fixed project build file to remove web includes/excludes that were breaking CI/CD
+
+### Changed
+
+- **`Makefile`**: Simplified `build-release` target to remove `.gitkeep` preservation logic since the placeholder is not needed in distribution builds.
+
+
+## [1.3.3] - 2026-02-22
+
+### Fixed
+
+- **PyPI wheel packaging**: Fixed duplicate `.gitkeep` file in wheel that caused PyPI upload rejection. Modified `build-release` Makefile target to not preserve the `.gitkeep` placeholder file when copying web UI build artifacts, as it's only needed for development and editable installs.
+
+### Changed
+
+- **`Makefile`**: Simplified `build-release` target to remove `.gitkeep` preservation logic since the placeholder is not needed in distribution builds.
+
+## [1.3.2] - 2026-02-22
+
+### Fixed
+
+- **Editable install compatibility**: Added `.gitkeep` placeholder file in `src/SVG2DrawIOLib/web/` directory to enable editable installs (`pip install -e .`) to work before the web UI is built. This fixes CI/CD workflows that install in editable mode for testing before building the web UI.
+- **Web UI packaging**: Fixed `pyproject.toml` hatchling configuration to properly include the web UI static files in the built wheel and sdist. Changed from `artifacts` to `force-include` configuration for both wheel and sdist targets. The web UI directory (`src/SVG2DrawIOLib/web/`) is now correctly included in PyPI releases, ensuring `pip install SVG2DrawIOLib[web]` followed by `svg2drawiolib web` works out of the box.
+
+### Changed
+
+- **`.gitignore`**: Updated web directory exclusion pattern to allow `.gitkeep` placeholder file while still ignoring all build artifacts.
+- **`Makefile`**: Updated `build-release` target to preserve `.gitkeep` file when copying web UI build artifacts.
+
+## [1.3.1] - 2026-02-22
+
+### Fixed
+
+- **Security: Data URI sanitization** (Bug #27): Updated SVG sanitization to only block dangerous data: URIs (`data:text/html`, `data:text/javascript`, `data:application/javascript`, `data:application/x-javascript`) while allowing safe image data: URIs (`data:image/png`, `data:image/jpeg`, `data:image/svg+xml`, etc.) for legitimate embedded images.
+- **Security: Case-insensitive element filtering** (Bug #28): Made dangerous element checking case-insensitive to prevent sanitization bypass via case variants like `<Script>`, `<SCRIPT>`, or `<ForeignObject>`. Updated `_DANGEROUS_ELEMENTS` set to store lowercase values and added `.lower()` call during comparison.
+- **API: Duplicate error handling** (Bug #29): Extracted duplicate library error handling logic into shared `handle_library_value_error()` helper function in `processing.py`. Updated five routers (`add`, `remove`, `list`, `extract`, `inspect`) to use the centralized helper, eliminating code duplication.
+- **API: Type safety** (Bug #31): Changed `handle_library_value_error()` return type from `-> None` to `-> NoReturn` to accurately reflect that the function always raises an exception and never returns, improving type checker guarantees.
+- **API: Rename endpoint error handling** (Bug #32): Added "Invalid library" error check to rename endpoint to return 422 for malformed library files instead of 500 internal server error, consistent with other endpoints.
+- **API: Icon names validation** (Bug #26): Added element type validation to `parse_icon_names()` to ensure all list elements are strings, preventing unhashable type errors downstream when non-string values are passed.
+- **Next.js dev mode warning** (Bug #30): Made `output: "export"` conditional in `next.config.ts` (only set in production) to eliminate Next.js warning about rewrites not working with static exports during development.
+
+### Changed
+
+- **Web UI default**: Changed "Inject CSS classes" checkbox default from `false` to `true` in both CreateTab and ManageTab components for better out-of-box experience.
+
+## [1.3.0] - 2026-02-21
+
+### Added
+
+- **Browser-based Web UI**: New optional web interface that exposes all CLI commands as a browser UI. Install with `pip install "SVG2DrawIOLib[web]"` and launch with `svg2drawio web`. The server automatically opens the browser and serves both the API and frontend from a single process on port 8000.
+  - **Six tabs**: Create (convert SVGs to a new library), Manage (add icons, remove icons, rename icons), Extract (save icons as SVG files), Inspect (view icon details and SVG previews), Validate (structural integrity report), Split Paths (split compound paths for per-path color control)
+  - **FastAPI sidecar** (`src/SVG2DrawIOLib/api/`): Nine REST endpoints under `/api/*` wrapping the same Python services used by the CLI. Reuses `process_svg_files()`, `determine_sizing_strategy()`, `sanitize_filename()`, and `safe_path_join()` directly — no logic duplication.
+  - **SVG sanitization**: Uploaded SVG files are stripped of `<script>`, `<foreignObject>`, `javascript:` hrefs, and event-handler attributes before processing. Enforces a 10 MB per-file size limit.
+  - **Bundled static export**: The pre-built Next.js UI is copied into `src/SVG2DrawIOLib/web/` at release time and included in the Python wheel via hatchling artifacts — no Node.js required at runtime.
+  - **`[web]` optional dependency group**: `fastapi>=0.115.0`, `uvicorn[standard]>=0.32.0`, `python-multipart>=0.0.12`.
+  - **`svg2drawio` entry point**: Added as a shorter alias alongside `SVG2DrawIOLib` and `svg2drawiolib`.
+- **Web UI Makefile targets**: `make dev-api` (FastAPI with hot-reload), `make dev-web` (Next.js dev server), `make dev-all` (both together), `make build-web` (Next.js static export), `make build-release` (build + copy into package), `make start-web` (build then launch).
+
+### Fixed
+
+- **Windows `FileResponse` race condition** (`api/routers/`): All file-returning endpoints (`create`, `add`, `remove`, `rename`, `split-paths`) now use `Response(content=path.read_bytes())` instead of `FileResponse(path)`. `FileResponse` streams lazily — on Windows the `get_temp_dir()` dependency's `finally` cleanup block could delete the temp directory before the file body was streamed, causing "Failed to fetch" in the browser with no server-side error logged.
+- **Static build CORS mismatch** (`web-ui/src/lib/api.ts`): Changed the `API_BASE` fallback from `"http://localhost:8000"` to `""` so the static export uses relative URLs (`/api/create` instead of `http://localhost:8000/api/create`). This fixes "Failed to fetch" when the browser opens to `http://127.0.0.1:8000` (the CLI's default bind address) while the hardcoded URL pointed to `http://localhost:8000` — a cross-origin mismatch the CORS policy rejected.
+- **Dev-mode API routing** (`web-ui/next.config.ts`): Added a conditional dev-mode proxy rewrite that forwards `/api/*` to the FastAPI server (`http://localhost:8000`) when running `next dev`, so `make dev-all` works without a `.env.local` file. The rewrite is omitted during `next build` (static export does not support rewrites).
+- **Next.js RSC `__PAGE__.txt` 404s**: `make build-release` now renames RSC page payload files from their on-disk subdirectory form (`create/__next.create/__PAGE__.txt`) to the flat dot-separated form (`create/__next.create.__PAGE__.txt`) that the browser requests. Starlette's `StaticFiles` serves paths literally, so the mismatched filenames caused 404s that silently broke client-side navigation.
+- **Cross-platform `build-release` target**: Replaced Unix-only `rm -rf` and `cp -r` shell commands in the Makefile with a Python one-liner using `shutil.rmtree` and `shutil.copytree`, which works on Windows without Git Bash or WSL.
+
+### Changed
+
+- **`pyproject.toml`**: Added `[web]` optional dependency group; added `svg2drawio` script entry point; added `[tool.hatch.build.targets.wheel] artifacts` to include the gitignored `src/SVG2DrawIOLib/web/` directory in the built wheel.
+- **`.gitignore`**: Added `src/SVG2DrawIOLib/web/` (generated build artifact); removed stale `api/__pycache__/` entries from the old top-level `api/` directory.
+- **Documentation**: Updated `README.md`, `QUICKSTART.md`, and `ARCHITECTURE.md` to document the web UI feature, installation, tab-to-command mapping, developer build workflow, FastAPI sidecar architecture, and bundled static export path resolution.
+
 ## [1.2.1] - 2026-02-09
 
 ### Changed
@@ -203,5 +279,11 @@ The project follows SOLID principles with clear module boundaries:
 - `library_manager.py`: Library file management
 - `cli/`: Modular CLI with dynamic command loading
 
+[1.3.0]: https://github.com/jamesbconner/SVG2DrawIOLib/compare/v1.2.1...v1.3.0
+[1.2.1]: https://github.com/jamesbconner/SVG2DrawIOLib/compare/v1.2.0...v1.2.1
+[1.2.0]: https://github.com/jamesbconner/SVG2DrawIOLib/compare/v1.1.2...v1.2.0
+[1.1.2]: https://github.com/jamesbconner/SVG2DrawIOLib/compare/v1.1.1...v1.1.2
+[1.1.1]: https://github.com/jamesbconner/SVG2DrawIOLib/compare/v1.1.0...v1.1.1
+[1.1.0]: https://github.com/jamesbconner/SVG2DrawIOLib/compare/v1.0.1...v1.1.0
 [1.0.1]: https://github.com/jamesbconner/SVG2DrawIOLib/compare/v1.0.0...v1.0.1
 [1.0.0]: https://github.com/jamesbconner/SVG2DrawIOLib/releases/tag/v1.0.0

{svg2drawiolib-1.2.2 → svg2drawiolib-1.3.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: SVG2DrawIOLib
-Version: 1.2.2
+Version: 1.3.4
 Summary: Generate DrawIO shape libraries from SVGs
 Project-URL: Homepage, https://github.com/jamesbconner/SVG2DrawIOLib
 Project-URL: Documentation, https://github.com/jamesbconner/SVG2DrawIOLib#readme
@@ -23,6 +23,7 @@ Requires-Dist: rich>=13.0.0
 Requires-Dist: svgelements>=1.9.0
 Provides-Extra: dev
 Requires-Dist: bandit>=1.7.0; extra == 'dev'
+Requires-Dist: httpx>=0.27.0; extra == 'dev'
 Requires-Dist: mypy>=1.18.0; extra == 'dev'
 Requires-Dist: pip>=26.0.1; extra == 'dev'
 Requires-Dist: pre-commit>=4.4.0; extra == 'dev'
@@ -31,6 +32,10 @@ Requires-Dist: pytest>=8.4.2; extra == 'dev'
 Requires-Dist: ruff>=0.14.4; extra == 'dev'
 Requires-Dist: twine>=5.0.0; extra == 'dev'
 Requires-Dist: uv>=0.10.0; extra == 'dev'
+Provides-Extra: web
+Requires-Dist: fastapi>=0.115.0; extra == 'web'
+Requires-Dist: python-multipart>=0.0.12; extra == 'web'
+Requires-Dist: uvicorn[standard]>=0.32.0; extra == 'web'
 Description-Content-Type: text/markdown
 
 # SVG2DrawIOLib
@@ -55,6 +60,7 @@ Convert SVG files into DrawIO/diagrams.net shape libraries with support for colo
 - 🎨 **Color Customization**: Inject CSS classes to enable color editing directly in DrawIO's interface
 - 📏 **Flexible Sizing**: Proportional scaling with aspect ratio preservation, or fixed dimensions
 - 📚 **Library Management**: Create new libraries, add/remove icons, and list contents
+- 🌐 **Browser-based Web UI**: All commands available in a local web interface — no command line required
 - 🚀 **Modern CLI**: Beautiful, colorful output with rich-click
 - 🔧 **Modern Python Stack**: Built with ruff, mypy, bandit, pytest, and pre-commit hooks
 
@@ -93,6 +99,54 @@ SVG2DrawIOLib create icons/ --css -o colorable-icons.xml
 SVG2DrawIOLib create icons/ --max-size 64 -o large-icons.xml -R
 ```
 
+## Web UI
+
+All CLI commands are available as a browser-based interface. Install with the `web` optional dependencies and launch with a single command:
+
+```bash
+pip install 'SVG2DrawIOLib[web]'
+svg2drawio web
+```
+
+This starts a local FastAPI server and opens the UI automatically in your default browser at `http://127.0.0.1:8000`.
+
+**Available tabs:**
+
+| Tab | Equivalent CLI command |
+|-----|------------------------|
+| Create | `svg2drawio create` |
+| Manage (Add / Remove / Rename) | `svg2drawio add` / `remove` / `rename` |
+| Extract | `svg2drawio extract` |
+| Inspect | `svg2drawio inspect` |
+| Validate | `svg2drawio validate` |
+| Split Paths | `svg2drawio split-paths` |
+
+**Options:**
+
+```bash
+svg2drawio web --host 0.0.0.0   # Listen on all interfaces
+svg2drawio web --port 9000      # Custom port
+svg2drawio web --no-browser     # Don't open browser automatically
+```
+
+### Building from Source
+
+If you are working from a source checkout, build the Next.js frontend first, then launch:
+
+```bash
+make build-release   # builds web-ui/ and copies output into the Python package
+svg2drawio web
+```
+
+Or run the frontend and API separately during development:
+
+```bash
+make dev-api   # FastAPI on :8000  (terminal 1)
+make dev-web   # Next.js on :3000  (terminal 2)
+```
+
+---
+
 ## Documentation
 
 - [Quick Start Guide](QUICKSTART.md) - Get started quickly for users and developers

{svg2drawiolib-1.2.2 → svg2drawiolib-1.3.4}/QUICKSTART.md

@@ -231,6 +231,41 @@ Options:
   -q, --quiet             Suppress output except errors
 ```
 
+## Web UI
+
+### Installation
+```bash
+pip install "SVG2DrawIOLib[web]"
+```
+
+### Launch
+```bash
+svg2drawio web
+# Opens http://127.0.0.1:8000 in your browser automatically
+```
+
+### Options
+```bash
+svg2drawio web --port 9000          # Use a different port
+svg2drawio web --host 0.0.0.0       # Listen on all interfaces
+svg2drawio web --no-browser         # Don't auto-open the browser
+svg2drawio web --ui-dir /path/to/ui # Use a custom pre-built UI directory
+```
+
+### Tabs
+| Tab | Equivalent CLI Command |
+|-----|----------------------|
+| Create | `svg2drawio create` |
+| Manage → Add Icons | `svg2drawio add` |
+| Manage → Remove Icons | `svg2drawio remove` |
+| Manage → Rename Icon | `svg2drawio rename` |
+| Extract | `svg2drawio extract` |
+| Inspect | `svg2drawio inspect` |
+| Validate | `svg2drawio validate` |
+| Split Paths | `svg2drawio split-paths` |
+
+---
+
 ## For Developers
 
 ### Setup
@@ -267,6 +302,24 @@ make all        # Run all checks
 make clean      # Clean build artifacts
 ```
 
+### Web UI Development
+```bash
+# Install web dependencies and start FastAPI + Next.js dev servers
+make dev-api    # FastAPI only on port 8000 (with --reload)
+make dev-web    # Next.js dev server only (port 3000)
+
+# Build the static export and copy into the Python package
+make build-release   # Runs npm build + copies output to src/SVG2DrawIOLib/web/
+
+# Build and launch the web UI from the source tree
+make start-web
+```
+
+The `web-ui/` directory contains the Next.js frontend source. The built static export
+is copied to `src/SVG2DrawIOLib/web/` (gitignored — generated artifact) for bundling
+into the Python wheel via `make build-release`. The FastAPI server at
+`SVG2DrawIOLib.api.main:app` serves both the API (`/api/*`) and the static UI (`/`).
+
 ### Running Tests
 ```bash
 # All tests

{svg2drawiolib-1.2.2 → svg2drawiolib-1.3.4}/README.md

@@ -20,6 +20,7 @@ Convert SVG files into DrawIO/diagrams.net shape libraries with support for colo
 - 🎨 **Color Customization**: Inject CSS classes to enable color editing directly in DrawIO's interface
 - 📏 **Flexible Sizing**: Proportional scaling with aspect ratio preservation, or fixed dimensions
 - 📚 **Library Management**: Create new libraries, add/remove icons, and list contents
+- 🌐 **Browser-based Web UI**: All commands available in a local web interface — no command line required
 - 🚀 **Modern CLI**: Beautiful, colorful output with rich-click
 - 🔧 **Modern Python Stack**: Built with ruff, mypy, bandit, pytest, and pre-commit hooks
 
@@ -58,6 +59,54 @@ SVG2DrawIOLib create icons/ --css -o colorable-icons.xml
 SVG2DrawIOLib create icons/ --max-size 64 -o large-icons.xml -R
 ```
 
+## Web UI
+
+All CLI commands are available as a browser-based interface. Install with the `web` optional dependencies and launch with a single command:
+
+```bash
+pip install 'SVG2DrawIOLib[web]'
+svg2drawio web
+```
+
+This starts a local FastAPI server and opens the UI automatically in your default browser at `http://127.0.0.1:8000`.
+
+**Available tabs:**
+
+| Tab | Equivalent CLI command |
+|-----|------------------------|
+| Create | `svg2drawio create` |
+| Manage (Add / Remove / Rename) | `svg2drawio add` / `remove` / `rename` |
+| Extract | `svg2drawio extract` |
+| Inspect | `svg2drawio inspect` |
+| Validate | `svg2drawio validate` |
+| Split Paths | `svg2drawio split-paths` |
+
+**Options:**
+
+```bash
+svg2drawio web --host 0.0.0.0   # Listen on all interfaces
+svg2drawio web --port 9000      # Custom port
+svg2drawio web --no-browser     # Don't open browser automatically
+```
+
+### Building from Source
+
+If you are working from a source checkout, build the Next.js frontend first, then launch:
+
+```bash
+make build-release   # builds web-ui/ and copies output into the Python package
+svg2drawio web
+```
+
+Or run the frontend and API separately during development:
+
+```bash
+make dev-api   # FastAPI on :8000  (terminal 1)
+make dev-web   # Next.js on :3000  (terminal 2)
+```
+
+---
+
 ## Documentation
 
 - [Quick Start Guide](QUICKSTART.md) - Get started quickly for users and developers

{svg2drawiolib-1.2.2 → svg2drawiolib-1.3.4}/pyproject.toml

@@ -38,6 +38,11 @@ dependencies = [
 dynamic = ["version"]
 
 [project.optional-dependencies]
+web = [
+  "fastapi>=0.115.0",
+  "uvicorn[standard]>=0.32.0",
+  "python-multipart>=0.0.12",
+]
 dev = [
   "pytest>=8.4.2",
   "pytest-cov>=6.0.0",
@@ -48,6 +53,7 @@ dev = [
   "twine>=5.0.0",
   "pip>=26.0.1",
   "uv>=0.10.0",
+  "httpx>=0.27.0",
 ]
 
 [project.urls]
@@ -60,10 +66,36 @@ Changelog = "https://github.com/jamesbconner/SVG2DrawIOLib/blob/main/CHANGELOG.m
 [project.scripts]
 SVG2DrawIOLib = "SVG2DrawIOLib.cli:cli"
 svg2drawiolib = "SVG2DrawIOLib.cli:cli"
+svg2drawio = "SVG2DrawIOLib.cli:cli"
 
 [tool.hatch.version]
 path = "src/SVG2DrawIOLib/__about__.py"
 
+[tool.hatch.build.targets.wheel]
+packages = ["src/SVG2DrawIOLib"]
+
+[tool.hatch.build.targets.wheel.force-include]
+"src/SVG2DrawIOLib/web" = "SVG2DrawIOLib/web"
+
+[tool.hatch.build.targets.sdist]
+include = [
+  "/src",
+  "/tests",
+  "/README.md",
+  "/LICENSE.txt",
+  "/CHANGELOG.md",
+  "/CONTRIBUTING.md",
+  "/QUICKSTART.md",
+  "/pyproject.toml",
+]
+
+[tool.hatch.build.targets.sdist.force-include]
+"src/SVG2DrawIOLib/web" = "src/SVG2DrawIOLib/web"
+
+# Editable installs work without the web directory
+[tool.hatch.build.targets.editable]
+packages = ["src/SVG2DrawIOLib"]
+
 [tool.hatch.envs.default]
 dependencies = [
   "pytest>=8.0.0",
@@ -126,6 +158,7 @@ ignore = [
 
 [tool.ruff.lint.per-file-ignores]
 "tests/**/*.py" = ["ARG", "S101"]
+"src/SVG2DrawIOLib/api/routers/*.py" = ["B008"]  # Depends() in defaults is standard FastAPI pattern
 
 [tool.mypy]
 python_version = "3.13"
@@ -144,6 +177,18 @@ ignore_missing_imports = true
 module = "rich_click.*"
 ignore_missing_imports = true
 
+[[tool.mypy.overrides]]
+module = "pydantic.*"
+ignore_missing_imports = true
+
+[[tool.mypy.overrides]]
+module = "fastapi.*"
+ignore_missing_imports = true
+
 [[tool.mypy.overrides]]
 module = "SVG2DrawIOLib.cli.*"
 disable_error_code = ["untyped-decorator"]
+
+[[tool.mypy.overrides]]
+module = "SVG2DrawIOLib.api.*"
+disable_error_code = ["untyped-decorator"]

{svg2drawiolib-1.2.2 → svg2drawiolib-1.3.4}/src/SVG2DrawIOLib/__about__.py

@@ -1,3 +1,3 @@
 """Package version information."""
 
-__version__ = "1.2.2"
+__version__ = "1.3.4"

svg2drawiolib-1.3.4/src/SVG2DrawIOLib/api/__init__.py

@@ -0,0 +1 @@
+"""SVG2DrawIOLib FastAPI sidecar."""

svg2drawiolib-1.3.4/src/SVG2DrawIOLib/api/dependencies.py

@@ -0,0 +1,19 @@
+"""FastAPI dependency providers."""
+
+import shutil
+import tempfile
+from collections.abc import AsyncGenerator
+from pathlib import Path
+
+
+async def get_temp_dir() -> AsyncGenerator[Path]:
+    """Provide a temporary directory that is cleaned up after the request.
+
+    Yields:
+        Path to a temporary directory.
+    """
+    tmp = tempfile.mkdtemp(prefix="svg2drawio_")
+    try:
+        yield Path(tmp)
+    finally:
+        shutil.rmtree(tmp, ignore_errors=True)

svg2drawiolib-1.3.4/src/SVG2DrawIOLib/api/exceptions.py

@@ -0,0 +1,27 @@
+"""Exception handlers for the FastAPI application."""
+
+import xml.etree.ElementTree as ET
+
+from fastapi import Request
+from fastapi.responses import JSONResponse
+
+
+class ConflictError(Exception):
+    """Exception raised when a resource conflict occurs (e.g., duplicate name)."""
+
+    pass
+
+
+async def file_not_found_handler(_request: Request, exc: FileNotFoundError) -> JSONResponse:
+    """Handle FileNotFoundError as HTTP 404."""
+    return JSONResponse(status_code=404, content={"detail": str(exc)})
+
+
+async def conflict_error_handler(_request: Request, exc: ConflictError) -> JSONResponse:
+    """Handle ConflictError as HTTP 409."""
+    return JSONResponse(status_code=409, content={"detail": str(exc)})
+
+
+async def parse_error_handler(_request: Request, exc: ET.ParseError) -> JSONResponse:
+    """Handle XML ParseError as HTTP 422."""
+    return JSONResponse(status_code=422, content={"detail": f"Invalid XML: {exc}"})

svg2drawiolib-1.3.4/src/SVG2DrawIOLib/api/main.py

@@ -0,0 +1,95 @@
+"""FastAPI application for SVG2DrawIOLib web UI."""
+
+import os
+import xml.etree.ElementTree as ET
+from pathlib import Path
+
+from fastapi import FastAPI
+from fastapi.middleware.cors import CORSMiddleware
+from fastapi.staticfiles import StaticFiles
+
+from SVG2DrawIOLib.__about__ import __version__
+from SVG2DrawIOLib.api.exceptions import (
+    ConflictError,
+    conflict_error_handler,
+    file_not_found_handler,
+    parse_error_handler,
+)
+from SVG2DrawIOLib.api.models.responses import HealthResponse
+from SVG2DrawIOLib.api.routers import (
+    add,
+    create,
+    extract,
+    inspect,
+    remove,
+    rename,
+    split_paths,
+    validate,
+)
+from SVG2DrawIOLib.api.routers import list as list_router
+
+app = FastAPI(
+    title="SVG2DrawIOLib API",
+    description="Browser-based UI for converting SVG files into DrawIO shape libraries.",
+    version=__version__,
+)
+
+# CORS — allow origins from env var, defaulting to local Next.js dev server
+allow_origins = os.getenv("CORS_ORIGINS", "http://localhost:3000").split(",")
+
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=allow_origins,
+    allow_credentials=True,
+    allow_methods=["*"],
+    allow_headers=["*"],
+    expose_headers=["*"],
+)
+
+# Exception handlers
+app.add_exception_handler(FileNotFoundError, file_not_found_handler)  # type: ignore[arg-type]
+app.add_exception_handler(ConflictError, conflict_error_handler)  # type: ignore[arg-type]
+# Note: ValueError is NOT handled globally to avoid masking internal processing errors.
+# Endpoints should catch and handle ValueError explicitly when it represents user input validation.
+# Note: ImportError is NOT handled globally to avoid masking genuine import bugs.
+# The split_paths endpoint explicitly catches ImportError for missing optional dependencies.
+app.add_exception_handler(ET.ParseError, parse_error_handler)  # type: ignore[arg-type]
+
+# Routers
+app.include_router(create.router, prefix="/api")
+app.include_router(add.router, prefix="/api")
+app.include_router(remove.router, prefix="/api")
+app.include_router(rename.router, prefix="/api")
+app.include_router(list_router.router, prefix="/api")
+app.include_router(extract.router, prefix="/api")
+app.include_router(inspect.router, prefix="/api")
+app.include_router(validate.router, prefix="/api")
+app.include_router(split_paths.router, prefix="/api")
+
+
+@app.get("/api/health", response_model=HealthResponse)
+async def health() -> HealthResponse:
+    """Health check endpoint.
+
+    Returns:
+        Service status and current package version.
+    """
+    return HealthResponse(status="ok", version=__version__)
+
+
+# Mount the pre-built Next.js static export when available.
+# This is mounted AFTER all /api/* routes so API routes always take priority.
+#
+# Resolution order:
+#   1. SVG2DRAWIO_UI_DIR env var (explicit override)
+#   2. Bundled web/ directory next to this package (pip install SVG2DrawIOLib[web])
+#   3. web-ui/out/ relative to CWD (source checkout / make start-web)
+_env_ui = os.getenv("SVG2DRAWIO_UI_DIR")
+if _env_ui:
+    _ui_dir = Path(_env_ui)
+else:
+    _pkg_ui = Path(__file__).parent.parent / "web"
+    _ui_dir = _pkg_ui if _pkg_ui.is_dir() else Path("web-ui/out")
+
+if _ui_dir.is_dir():
+    app.mount("/", StaticFiles(directory=_ui_dir, html=True), name="ui")

svg2drawiolib-1.3.4/src/SVG2DrawIOLib/api/models/__init__.py

@@ -0,0 +1 @@
+"""API response models."""

svg2drawiolib-1.3.4/src/SVG2DrawIOLib/api/models/responses.py

@@ -0,0 +1,64 @@
+"""Pydantic response models for API endpoints."""
+
+from pydantic import BaseModel
+
+
+class HealthResponse(BaseModel):
+    """Health check response."""
+
+    status: str
+    version: str
+
+
+class ListResponse(BaseModel):
+    """Response for listing icons in a library."""
+
+    icon_names: list[str]
+    count: int
+
+
+class IconIssue(BaseModel):
+    """A validation issue for a specific icon."""
+
+    severity: str  # "error" or "warning"
+    icon: str
+    message: str
+
+
+class ValidationChecks(BaseModel):
+    """Summary of validation checks performed."""
+
+    xml_structure: bool
+    json_format: bool
+    icon_count: int
+    icons_validated: int
+    icons_failed: int
+
+
+class ValidateResponse(BaseModel):
+    """Response for library validation."""
+
+    valid: bool
+    errors: list[str]
+    warnings: list[str]
+    checks: ValidationChecks
+    icon_issues: list[IconIssue]
+
+
+class IconInfo(BaseModel):
+    """Information about a single icon."""
+
+    name: str
+    width: float
+    height: float
+    shape_type: str | None = None
+    css_classes: list[str] = []
+    inline_styles: str | None = None
+    svg_content: str | None = None
+
+
+class InspectResponse(BaseModel):
+    """Response for inspecting library icons."""
+
+    icons: list[IconInfo]
+    count: int

svg2drawiolib-1.3.4/src/SVG2DrawIOLib/api/routers/__init__.py

@@ -0,0 +1 @@
+"""API routers."""