refactor(api): extract account/auth/setup/admin; façade is now spread-only (R7.5 S2)

Move the last four inline domains out of lib/api.ts into per-domain slices, each owning its types + method slice. The barrel now holds ZERO endpoint logic and zero types of its own — it only re-exports core's HTTP machinery, re-exports each domain's types, and spreads the 15 slices into the single `api` object. A new endpoint therefore has nowhere to land but a domain module. The `api` shape and all call sites are unchanged (every req/beacon call byte-identical to dev; no method dropped, no key collision).
2026-07-28 22:59:09 +02:00
parent 8ce1e0230a
commit 8eb6f13288
5 changed files with 349 additions and 320 deletions
@@ -0,0 +1,58 @@
+// The signed-in account & session: the bootstrap `me` probe, multi-account switch/list, sign-out,
+// app version, and preference save. Only touches core's req.
+import { req } from "./core";
+
+export interface Me {
+  id: number;
+  email: string;
+  display_name: string | null;
+  avatar_url: string | null;
+  role: string;
+  is_demo: boolean;
+  has_google: boolean;
+  has_password: boolean;
+  google_enabled: boolean;
+  plex_enabled: boolean;
+  can_read: boolean;
+  can_write: boolean;
+  pending_invites: number;
+  preferences: Record<string, unknown>;
+}
+
+export interface Account {
+  id: number;
+  email: string;
+  display_name: string | null;
+  avatar_url: string | null;
+  active: boolean;
+}
+
+export interface VersionInfo {
+  app_version: string;
+  git_sha: string;
+  build_date: string | null;
+  db_revision: string | null;
+}
+
+export const accountApi = {
+  // Bootstrap probe: 200 always. Returns the user when signed in, or null when logged out
+  // (the endpoint answers `{authenticated:false}` rather than 401, so the public landing never
+  // logs a failed request to the console). React Query treats the null as data, not an error.
+  me: async (): Promise<Me | null> => {
+    // Always 200: `{ authenticated: false }` when logged out, else the full Me + `authenticated`.
+    const r = await req<{ authenticated: boolean } & Partial<Me>>("/api/me");
+    return r.authenticated ? (r as Me) : null;
+  },
+  accounts: (): Promise<Account[]> => req("/api/me/accounts"),
+  deleteAccount: (): Promise<{ deleted: boolean }> => req("/api/me/account", { method: "DELETE" }),
+  switchAccount: (userId: number): Promise<{ ok: boolean; user_id: number }> =>
+    req("/api/me/switch", { method: "POST", body: JSON.stringify({ user_id: userId }) }),
+  // Signs the current tab's active account out of the browser wallet (per-tab aware via the
+  // X-Siftlode-Account header that req() attaches).
+  logout: (): Promise<{ ok: boolean; switched: boolean }> =>
+    req("/auth/logout", { method: "POST" }),
+  version: (): Promise<VersionInfo> => req("/api/version"),
+  // Overwriting preferences is idempotent, so let it retry on a transient gateway blip.
+  savePrefs: (p: Record<string, unknown>) =>
+    req("/api/me/preferences", { method: "PUT", body: JSON.stringify(p) }, { idempotent: true }),
+};