addition of new dashboard

backend/http/apiKeys.js

@@ -0,0 +1,50 @@
+import { getConfig } from "../common/config.js";
+import { fail, sessionRoute } from "../common/http.js";
+import {
+  listKeys as defaultList,
+  generateKey as defaultGenerate,
+  revokeKey as defaultRevoke,
+} from "../modules/core/apiKey.js";
+
+const requireUser = (fn) => sessionRoute("apikeys", fn);
+
+// Internal modules have no `app` row and issue no billable calls, so no key.
+const mintableModules = () =>
+  Object.entries(getConfig().appModules)
+    .filter(([, m]) => !m?.internal)
+    .map(([type]) => type);
+
+export function apiKeyHandlers({
+  listKeys = defaultList,
+  generateKey = defaultGenerate,
+  revokeKey = defaultRevoke,
+} = {}) {
+  return {
+    whoami: requireUser(async (req, res) => {
+      res.json({ username: req.user.username, canViewJson: req.user.canViewJson, modules: mintableModules() });
+    }),
+
+    list: requireUser(async (req, res) => {
+      res.json(await listKeys(req.user.id));
+    }),
+
+    create: requireUser(async (req, res) => {
+      const { type, label, expiresTs } = req.body || {};
+      if (!mintableModules().includes(type)) {
+        return fail(res, 400, "bad_request", "unknown module");
+      }
+      if (expiresTs != null && (typeof expiresTs !== "string" || Number.isNaN(Date.parse(expiresTs)))) {
+        return fail(res, 400, "bad_request", "invalid expiresTs (expected an ISO date string)");
+      }
+      // Returns the raw key ONCE — the client must surface it immediately.
+      res.json(await generateKey(req.user.id, type, { label: label || null, expiresTs: expiresTs || null }));
+    }),
+
+    revoke: requireUser(async (req, res) => {
+      const id = parseInt(req.params.id, 10);
+      if (!Number.isInteger(id)) return fail(res, 400, "bad_request", "invalid id");
+      const ok = await revokeKey(req.user.id, id);
+      res.status(ok ? 200 : 404).json({ ok });
+    }),
+  };
+}