Add manifest-based addon manager

routes/addon_routes.py

@@ -0,0 +1,104 @@
+"""Admin API for Odysseus manifest addons."""
+
+from fastapi import APIRouter, HTTPException, Request
+from pydantic import BaseModel, Field
+
+from src.addons import (
+    addon_template,
+    delete_addon,
+    get_addon,
+    get_enabled_addon_contributions,
+    list_addons,
+    save_addon_manifest,
+    set_addon_enabled,
+)
+
+
+class AddonManifestRequest(BaseModel):
+    manifest: dict = Field(default_factory=dict)
+
+
+class AddonEnabledRequest(BaseModel):
+    enabled: bool
+
+
+def setup_addon_routes(auth_manager) -> APIRouter:
+    router = APIRouter(prefix="/api/addons", tags=["addons"])
+
+    def _require_admin(request: Request) -> str:
+        token = request.cookies.get("odysseus_session")
+        user = auth_manager.get_username_for_token(token)
+        if not user:
+            raise HTTPException(401, "Not authenticated")
+        if not auth_manager.is_admin(user):
+            raise HTTPException(403, "Admin only")
+        return user
+
+    @router.get("")
+    async def list_all(request: Request):
+        _require_admin(request)
+        return {
+            "addons": list_addons(),
+            "enabled_contributions": get_enabled_addon_contributions(),
+        }
+
+    @router.get("/template")
+    async def get_template(request: Request, addon_id: str = "my-addon"):
+        _require_admin(request)
+        try:
+            return {"manifest": addon_template(addon_id)}
+        except ValueError as exc:
+            raise HTTPException(400, str(exc)) from exc
+
+    @router.post("")
+    async def create_or_update(body: AddonManifestRequest, request: Request):
+        _require_admin(request)
+        try:
+            addon = save_addon_manifest(body.manifest)
+        except ValueError as exc:
+            raise HTTPException(400, str(exc)) from exc
+        return {"ok": True, "addon": addon}
+
+    @router.get("/{addon_id}")
+    async def get_one(addon_id: str, request: Request):
+        _require_admin(request)
+        try:
+            addon = get_addon(addon_id)
+        except ValueError as exc:
+            raise HTTPException(400, str(exc)) from exc
+        if not addon:
+            raise HTTPException(404, "Addon not found")
+        return {"addon": addon}
+
+    @router.patch("/{addon_id}")
+    async def update_one(addon_id: str, body: AddonManifestRequest, request: Request):
+        _require_admin(request)
+        manifest = dict(body.manifest or {})
+        manifest["id"] = addon_id
+        try:
+            addon = save_addon_manifest(manifest)
+        except ValueError as exc:
+            raise HTTPException(400, str(exc)) from exc
+        return {"ok": True, "addon": addon}
+
+    @router.post("/{addon_id}/enabled")
+    async def set_enabled(addon_id: str, body: AddonEnabledRequest, request: Request):
+        _require_admin(request)
+        try:
+            addon = set_addon_enabled(addon_id, body.enabled)
+        except KeyError as exc:
+            raise HTTPException(404, "Addon not found") from exc
+        except ValueError as exc:
+            raise HTTPException(400, str(exc)) from exc
+        return {"ok": True, "addon": addon}
+
+    @router.delete("/{addon_id}")
+    async def delete_one(addon_id: str, request: Request):
+        _require_admin(request)
+        try:
+            deleted = delete_addon(addon_id)
+        except ValueError as exc:
+            raise HTTPException(400, str(exc)) from exc
+        return {"ok": deleted}
+
+    return router