kryten-webqueue 0.1.1__tar.gz

kryten_webqueue-0.1.1/.github/workflows/python-publish.yml

@@ -0,0 +1,75 @@
+name: Publish Python Package to PyPI
+
+on:
+  workflow_call:
+  release:
+    types: [published]
+  push:
+    tags:
+      - 'kryten-webqueue-v*'
+      - 'v*'
+
+permissions:
+  contents: read
+  id-token: write
+
+jobs:
+  release-build:
+    name: Build distribution packages
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v4
+        with:
+          version: "latest"
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Build release distributions
+        run: |
+          uv build
+          echo "📦 Built packages:"
+          ls -lh dist/
+
+      - name: Upload distributions
+        uses: actions/upload-artifact@v4
+        with:
+          name: release-dists
+          path: dist/
+
+  pypi-publish:
+    name: Publish to PyPI
+    runs-on: ubuntu-latest
+    needs:
+      - release-build
+    environment:
+      name: pypi
+    permissions:
+      id-token: write
+
+    steps:
+      - name: Retrieve release distributions
+        uses: actions/download-artifact@v4
+        with:
+          name: release-dists
+          path: dist/
+
+      - name: Publish release distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          packages-dir: dist/
+          skip-existing: true
+          attestations: false
+
+      - name: Success notification
+        if: success()
+        run: |
+          echo "✅ Successfully published to PyPI!"
+          echo "🔗 Package URL: https://pypi.org/project/kryten-webqueue/"

kryten_webqueue-0.1.1/.github/workflows/release.yml

@@ -0,0 +1,125 @@
+name: Release Automation
+
+# Automatically create GitHub releases when version in pyproject.toml changes
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - 'pyproject.toml'
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: read
+  id-token: write
+
+jobs:
+  create-release:
+    name: Create Release
+    runs-on: ubuntu-latest
+    
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0  # Full history for changelog
+      
+      - name: Read version from pyproject.toml
+        id: version
+        run: |
+          VERSION=$(grep -m1 'version = "' pyproject.toml | cut -d '"' -f 2)
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+          echo "tag=v$VERSION" >> $GITHUB_OUTPUT
+          echo "📦 Version: $VERSION"
+      
+      - name: Check if tag exists
+        id: check_tag
+        run: |
+          git fetch --tags
+          if git rev-parse "${{ steps.version.outputs.tag }}" >/dev/null 2>&1; then
+            echo "exists=true" >> $GITHUB_OUTPUT
+            echo "ℹ️ Tag ${{ steps.version.outputs.tag }} already exists"
+          else
+            echo "exists=false" >> $GITHUB_OUTPUT
+            echo "✨ Tag ${{ steps.version.outputs.tag }} will be created"
+          fi
+      
+      - name: Generate changelog
+        id: changelog
+        if: steps.check_tag.outputs.exists == 'false'
+        run: |
+          echo "Generating changelog..."
+          
+          # Get previous tag
+          PREV_TAG=$(git describe --tags --abbrev=0 HEAD^ 2>/dev/null || echo "")
+          
+          if [ -z "$PREV_TAG" ]; then
+            echo "📝 First release - generating full changelog"
+            COMMITS=$(git log --pretty=format:"- %s (%h)" --no-merges)
+          else
+            echo "📝 Generating changelog since $PREV_TAG"
+            COMMITS=$(git log ${PREV_TAG}..HEAD --pretty=format:"- %s (%h)" --no-merges)
+          fi
+          
+          # Save changelog to file
+          cat > changelog.md << EOF
+          ## What's Changed
+          
+          ${COMMITS}
+          
+          **Full Changelog**: https://github.com/${{ github.repository }}/compare/${PREV_TAG}...${{ steps.version.outputs.tag }}
+          EOF
+          
+          cat changelog.md
+      
+      - name: Create Git tag
+        if: steps.check_tag.outputs.exists == 'false'
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git tag -a "${{ steps.version.outputs.tag }}" -m "Release ${{ steps.version.outputs.tag }}"
+          git push origin "${{ steps.version.outputs.tag }}"
+      
+      - name: Create GitHub Release
+        if: steps.check_tag.outputs.exists == 'false'
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh release create "${{ steps.version.outputs.tag }}" \
+            --title "Release ${{ steps.version.outputs.tag }}" \
+            --notes-file changelog.md
+      
+      - name: Skip release creation
+        if: steps.check_tag.outputs.exists == 'true'
+        run: |
+          echo "ℹ️ Release ${{ steps.version.outputs.tag }} already exists - skipping"
+
+  publish-to-pypi:
+    name: Publish to PyPI
+    needs: [create-release]
+    uses: ./.github/workflows/python-publish.yml
+    permissions:
+      id-token: write
+      contents: read
+
+  notify-release:
+    name: Notify Release Created
+    runs-on: ubuntu-latest
+    needs: [create-release, publish-to-pypi]
+    
+    steps:
+      - uses: actions/checkout@v4
+      
+      - name: Read version from pyproject.toml
+        id: version
+        run: |
+          VERSION=$(grep -m1 'version = "' pyproject.toml | cut -d '"' -f 2)
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+          echo "tag=v$VERSION" >> $GITHUB_OUTPUT
+      
+      - name: Send notification
+        run: |
+          echo "📢 Release notification"
+          echo "Version: ${{ steps.version.outputs.tag }}"
+          echo "Repository: ${{ github.repository }}"
+          echo "Release URL: https://github.com/${{ github.repository }}/releases/tag/${{ steps.version.outputs.tag }}"

kryten_webqueue-0.1.1/.gitignore

@@ -0,0 +1,79 @@
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+pip-wheel-metadata/
+share/python-wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+
+# Virtual environments
+.venv/
+venv/
+ENV/
+env/
+
+# PyCharm
+.idea/
+
+# VSCode
+.vscode/
+
+# pytest
+.pytest_cache/
+htmlcov/
+.coverage
+.coverage.*
+coverage.xml
+*.cover
+.hypothesis/
+
+# mypy
+.mypy_cache/
+.dmypy.json
+dmypy.json
+
+# Logs
+*.log
+logs/
+
+# Configuration files (keep examples only)
+config.json
+config-*.json
+!config.example.json
+
+# Database files
+*.db
+*.db-wal
+*.db-shm
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Backup files
+*~
+*.bak
+*.swp
+
+# Test output
+test-output/
+
+# uv
+uv.lock

kryten_webqueue-0.1.1/PKG-INFO

@@ -0,0 +1,127 @@
+Metadata-Version: 2.4
+Name: kryten-webqueue
+Version: 0.1.1
+Summary: Netflix/Tubi-style catalog browser and pay-to-play queue management for CyTube
+Author: grobertson
+License-Expression: MIT
+Requires-Python: >=3.12
+Requires-Dist: aiosqlite>=0.20
+Requires-Dist: apscheduler>=3.10
+Requires-Dist: fastapi>=0.115
+Requires-Dist: httpx>=0.27
+Requires-Dist: jinja2>=3.1
+Requires-Dist: pillow>=10.0
+Requires-Dist: pydantic>=2.0
+Requires-Dist: pyjwt>=2.8
+Requires-Dist: uvicorn[standard]>=0.30
+Requires-Dist: websockets>=12.0
+Provides-Extra: dev
+Requires-Dist: black>=24.0; extra == 'dev'
+Requires-Dist: httpx; extra == 'dev'
+Requires-Dist: mypy>=1.10; extra == 'dev'
+Requires-Dist: pytest-asyncio>=0.23; extra == 'dev'
+Requires-Dist: pytest>=8.0; extra == 'dev'
+Requires-Dist: ruff>=0.4; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# kryten-webqueue
+
+Netflix/Tubi-style catalog browser and pay-to-play queue management for CyTube.
+
+## Architecture
+
+```
+Browser → nginx (queue.dropsugar.co) → kryten-webqueue (:2010) → kryten-api-gate (:24444) → NATS services
+```
+
+- **HTTP-only** — webqueue never touches NATS directly
+- **SQLite** for all local state (catalog, OTPs, queue shadow, playlists, schedules)
+- **WebSocket** for real-time queue updates
+- **Polling** api-gate every 3 seconds for playlist state
+
+## Quick Start
+
+```bash
+# Install
+python -m venv .venv
+.venv/bin/pip install -e .
+
+# Configure
+cp config.example.json /etc/kryten-webqueue/config.json
+# Edit config.json with your secrets
+
+# Run
+WQ_CONFIG=/etc/kryten-webqueue/config.json python -m kryten_webqueue
+```
+
+## Configuration
+
+See `config.example.json` for all options. Required secrets:
+
+| Key | Description |
+|-----|-------------|
+| `secret_key` | Random string for JWT signing (≥32 chars) |
+| `api_gate_token` | Bearer token for kryten-api-gate |
+| `mediacms_token` | API token for MediaCMS catalog sync |
+
+## Deployment
+
+```bash
+# Install service
+sudo cp deploy/kryten-webqueue.service /etc/systemd/system/
+sudo systemctl daemon-reload
+sudo systemctl enable --now kryten-webqueue
+
+# nginx
+sudo cp deploy/nginx-queue.conf /etc/nginx/sites-available/queue.dropsugar.co
+sudo ln -s /etc/nginx/sites-available/queue.dropsugar.co /etc/nginx/sites-enabled/
+sudo nginx -t && sudo systemctl reload nginx
+```
+
+## API Endpoints
+
+### Auth
+- `POST /auth/otp/request` — Request OTP (delivered via PM)
+- `POST /auth/otp/verify` — Verify OTP, get session cookie
+- `POST /auth/logout` — Clear session
+- `GET /auth/me` — Current user info
+
+### Catalog
+- `GET /catalog/browse` — Paginated browse (with category filter)
+- `GET /catalog/search?q=...` — Full-text search
+- `GET /catalog/item/{token}` — Item detail
+- `GET /catalog/categories` — List categories
+
+### Queue
+- `GET /queue/state` — Current queue state
+- `POST /queue/add` — Add item (FIFO pay-queue)
+- `POST /queue/playnext` — Add as play-next (premium)
+- `GET /queue/preview?friendly_token=...&tier=...` — Cost preview
+- `GET /queue/history` — User's queue history
+
+### User
+- `GET /user/balance` — Economy balance
+- `GET /user/transactions` — Transaction history
+- `GET /user/profile` — Profile info
+
+### Admin (rank ≥ 3)
+- `GET/POST/PUT/DELETE /admin/playlists/...` — Saved playlists CRUD
+- `GET/POST/PUT/DELETE /admin/schedules/...` — Schedule CRUD
+- `POST /admin/schedules/{id}/fire` — Manual fire
+- `POST /admin/queue/clear` — Clear queue (refunds pay items)
+- `DELETE /admin/queue/{uid}` — Remove item
+- `POST /admin/queue/sync-now` — Trigger catalog sync
+
+### WebSocket
+- `ws://host/ws` — Real-time queue updates (auth via session cookie)
+
+## Dependencies
+
+- Python ≥ 3.12
+- kryten-api-gate ≥ 0.3.6
+- kryten-py ≥ 0.16.1 (upstream, not a direct dependency)
+- kryten-economy ≥ 0.8.11 (upstream, not a direct dependency)
+
+## License
+
+Proprietary — DropSugar / Q&A

kryten_webqueue-0.1.1/README.md

@@ -0,0 +1,101 @@
+# kryten-webqueue
+
+Netflix/Tubi-style catalog browser and pay-to-play queue management for CyTube.
+
+## Architecture
+
+```
+Browser → nginx (queue.dropsugar.co) → kryten-webqueue (:2010) → kryten-api-gate (:24444) → NATS services
+```
+
+- **HTTP-only** — webqueue never touches NATS directly
+- **SQLite** for all local state (catalog, OTPs, queue shadow, playlists, schedules)
+- **WebSocket** for real-time queue updates
+- **Polling** api-gate every 3 seconds for playlist state
+
+## Quick Start
+
+```bash
+# Install
+python -m venv .venv
+.venv/bin/pip install -e .
+
+# Configure
+cp config.example.json /etc/kryten-webqueue/config.json
+# Edit config.json with your secrets
+
+# Run
+WQ_CONFIG=/etc/kryten-webqueue/config.json python -m kryten_webqueue
+```
+
+## Configuration
+
+See `config.example.json` for all options. Required secrets:
+
+| Key | Description |
+|-----|-------------|
+| `secret_key` | Random string for JWT signing (≥32 chars) |
+| `api_gate_token` | Bearer token for kryten-api-gate |
+| `mediacms_token` | API token for MediaCMS catalog sync |
+
+## Deployment
+
+```bash
+# Install service
+sudo cp deploy/kryten-webqueue.service /etc/systemd/system/
+sudo systemctl daemon-reload
+sudo systemctl enable --now kryten-webqueue
+
+# nginx
+sudo cp deploy/nginx-queue.conf /etc/nginx/sites-available/queue.dropsugar.co
+sudo ln -s /etc/nginx/sites-available/queue.dropsugar.co /etc/nginx/sites-enabled/
+sudo nginx -t && sudo systemctl reload nginx
+```
+
+## API Endpoints
+
+### Auth
+- `POST /auth/otp/request` — Request OTP (delivered via PM)
+- `POST /auth/otp/verify` — Verify OTP, get session cookie
+- `POST /auth/logout` — Clear session
+- `GET /auth/me` — Current user info
+
+### Catalog
+- `GET /catalog/browse` — Paginated browse (with category filter)
+- `GET /catalog/search?q=...` — Full-text search
+- `GET /catalog/item/{token}` — Item detail
+- `GET /catalog/categories` — List categories
+
+### Queue
+- `GET /queue/state` — Current queue state
+- `POST /queue/add` — Add item (FIFO pay-queue)
+- `POST /queue/playnext` — Add as play-next (premium)
+- `GET /queue/preview?friendly_token=...&tier=...` — Cost preview
+- `GET /queue/history` — User's queue history
+
+### User
+- `GET /user/balance` — Economy balance
+- `GET /user/transactions` — Transaction history
+- `GET /user/profile` — Profile info
+
+### Admin (rank ≥ 3)
+- `GET/POST/PUT/DELETE /admin/playlists/...` — Saved playlists CRUD
+- `GET/POST/PUT/DELETE /admin/schedules/...` — Schedule CRUD
+- `POST /admin/schedules/{id}/fire` — Manual fire
+- `POST /admin/queue/clear` — Clear queue (refunds pay items)
+- `DELETE /admin/queue/{uid}` — Remove item
+- `POST /admin/queue/sync-now` — Trigger catalog sync
+
+### WebSocket
+- `ws://host/ws` — Real-time queue updates (auth via session cookie)
+
+## Dependencies
+
+- Python ≥ 3.12
+- kryten-api-gate ≥ 0.3.6
+- kryten-py ≥ 0.16.1 (upstream, not a direct dependency)
+- kryten-economy ≥ 0.8.11 (upstream, not a direct dependency)
+
+## License
+
+Proprietary — DropSugar / Q&A

kryten_webqueue-0.1.1/config.example.json

@@ -0,0 +1,27 @@
+{
+  "channel": "Q_A",
+  "host": "0.0.0.0",
+  "port": 2010,
+  "secret_key": "CHANGE_ME_long_random_string",
+  "session_ttl_hours": 24,
+
+  "api_gate_url": "http://127.0.0.1:24444",
+  "api_gate_token": "CHANGE_ME",
+
+  "mediacms_url": "https://www.dropsugar.com",
+  "mediacms_token": "CHANGE_ME",
+
+  "tmdb_api_key": "",
+  "omdb_api_key": "",
+
+  "db_path": "/var/lib/kryten-webqueue/webqueue.db",
+
+  "image_dir": "/var/lib/kryten-webqueue/images",
+  "placeholder_dir": "/var/lib/kryten-webqueue/images/placeholders",
+
+  "catalog_sync_interval_hours": 4,
+  "pre_fire_lock_minutes_default": 15,
+  "state_poll_interval_sec": 3.0,
+
+  "prometheus_port": 28292
+}

kryten_webqueue-0.1.1/deploy/kryten-webqueue.service

@@ -0,0 +1,23 @@
+[Unit]
+Description=kryten-webqueue - CyTube Queue Management
+After=network.target
+
+[Service]
+Type=simple
+User=kryten
+Group=kryten
+WorkingDirectory=/opt/kryten-webqueue
+Environment=WQ_CONFIG=/etc/kryten-webqueue/config.json
+ExecStart=/opt/kryten-webqueue/.venv/bin/python -m kryten_webqueue
+Restart=always
+RestartSec=5
+
+# Hardening
+NoNewPrivileges=true
+ProtectSystem=strict
+ProtectHome=true
+ReadWritePaths=/var/lib/kryten-webqueue
+PrivateTmp=true
+
+[Install]
+WantedBy=multi-user.target

kryten_webqueue-0.1.1/deploy/nginx-queue.conf

@@ -0,0 +1,49 @@
+server {
+    listen 443 ssl http2;
+    server_name queue.dropsugar.co;
+
+    ssl_certificate     /etc/letsencrypt/live/queue.dropsugar.co/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/queue.dropsugar.co/privkey.pem;
+
+    # WebSocket upgrade
+    location /ws {
+        proxy_pass http://127.0.0.1:2010;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_read_timeout 86400;
+    }
+
+    # API + pages
+    location / {
+        proxy_pass http://127.0.0.1:2010;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    # Static assets - serve directly for performance
+    location /static/ {
+        alias /opt/kryten-webqueue/kryten_webqueue/static/;
+        expires 7d;
+        add_header Cache-Control "public, immutable";
+    }
+
+    # Cover art images
+    location /images/ {
+        alias /var/lib/kryten-webqueue/images/;
+        expires 30d;
+        add_header Cache-Control "public, immutable";
+    }
+}
+
+server {
+    listen 80;
+    server_name queue.dropsugar.co;
+    return 301 https://$server_name$request_uri;
+}