Restore catalog version and authorized binary download endpoints #15

New issue

Open

opened 2026-11-07 20:27:03 +00:00 by etashj · 0 comments

etashj commented

2026-11-07 20:27:03 +00:00

Member

Goal

Make catalog release metadata and browser downloads available through the web API. GET /api/catalog/version and GET /api/catalog/binary currently return 501.

Scope

Reuse the retained catalog release and integrity infrastructure.
Return the version and binary formats expected by sites/web/src/lib/contracts.ts and the browser catalog handoff.
Select the public or member artifact from verified server identity; prevent anonymous access to member-only bytes.
Handle missing or invalid releases and document response/cache behavior.
Add tests for both audiences, authorization boundaries, and release failure cases.

Done when

A browser can check the catalog version and download the correct authorized artifact without a 501 response. Update OpenAPI and feature documentation.

See sites/docs/src/backend-development.md and sites/docs/src/api/sqlite-backend.md.

## Goal Make catalog release metadata and browser downloads available through the web API. `GET /api/catalog/version` and `GET /api/catalog/binary` currently return 501. ## Scope - Reuse the retained catalog release and integrity infrastructure. - Return the version and binary formats expected by `sites/web/src/lib/contracts.ts` and the browser catalog handoff. - Select the public or member artifact from verified server identity; prevent anonymous access to member-only bytes. - Handle missing or invalid releases and document response/cache behavior. - Add tests for both audiences, authorization boundaries, and release failure cases. ## Done when A browser can check the catalog version and download the correct authorized artifact without a 501 response. Update OpenAPI and feature documentation. See `sites/docs/src/backend-development.md` and `sites/docs/src/api/sqlite-backend.md`.