chore: release main

.claude/settings.json

@@ -1,123 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "# Development Commands",
-      "Bash(pnpm install)",
-      "Bash(pnpm dev)",
-      "Bash(pnpm build)",
-      "Bash(pnpm test)",
-      "Bash(pnpm test:*)",
-      "Bash(pnpm lint)",
-      "Bash(pnpm lint:fix)",
-      "Bash(pnpm type-check)",
-      "Bash(pnpm codegen)",
-      "Bash(pnpm storybook)",
-      "Bash(pnpm --filter * dev)",
-      "Bash(pnpm --filter * build)",
-      "Bash(pnpm --filter * test)",
-      "Bash(pnpm --filter * lint)",
-      "Bash(pnpm --filter * codegen)",
-      
-      "# Git Commands (read-only)",
-      "Bash(git status)",
-      "Bash(git diff)",
-      "Bash(git log)",
-      "Bash(git branch)",
-      "Bash(git remote -v)",
-      
-      "# Search Commands",
-      "Bash(rg *)",
-      
-      "# File System (read-only)",
-      "Bash(ls)",
-      "Bash(ls -la)",
-      "Bash(pwd)",
-      "Bash(find . -name)",
-      "Bash(find . -type)",
-      
-      "# Node/NPM Commands",
-      "Bash(node --version)",
-      "Bash(pnpm --version)",
-      "Bash(npx --version)",
-      
-      "# Environment Commands",
-      "Bash(echo $*)",
-      "Bash(which *)",
-      
-      "# Process Commands",
-      "Bash(ps aux | grep)",
-      "Bash(lsof -i)",
-      
-      "# Documentation Domains",
-      "WebFetch(domain:tailwindcss.com)",
-      "WebFetch(domain:github.com)",
-      "WebFetch(domain:reka-ui.com)",
-      "WebFetch(domain:nodejs.org)",
-      "WebFetch(domain:pnpm.io)",
-      "WebFetch(domain:vitejs.dev)",
-      "WebFetch(domain:nuxt.com)",
-      "WebFetch(domain:nestjs.com)",
-      
-      "# IDE Integration",
-      "mcp__ide__getDiagnostics",
-      
-      "# Browser MCP (for testing)",
-      "mcp__browsermcp__browser_navigate",
-      "mcp__browsermcp__browser_click",
-      "mcp__browsermcp__browser_screenshot"
-    ],
-    "deny": [
-      "# Dangerous Commands",
-      "Bash(rm -rf)",
-      "Bash(chmod 777)",
-      "Bash(curl)",
-      "Bash(wget)",
-      "Bash(ssh)",
-      "Bash(scp)",
-      "Bash(sudo)",
-      "Bash(su)",
-      "Bash(pkill)",
-      "Bash(kill)",
-      "Bash(killall)",
-      "Bash(python)",
-      "Bash(python3)",
-      "Bash(pip)",
-      "Bash(npm)",
-      "Bash(yarn)",
-      "Bash(apt)",
-      "Bash(brew)",
-      "Bash(systemctl)",
-      "Bash(service)",
-      "Bash(docker)",
-      "Bash(docker-compose)",
-      
-      "# File Modification (use Edit/Write tools instead)",
-      "Bash(sed)",
-      "Bash(awk)",
-      "Bash(perl)",
-      "Bash(echo > *)",
-      "Bash(echo >> *)",
-      "Bash(cat > *)",
-      "Bash(cat >> *)",
-      "Bash(tee)",
-      
-      "# Git Write Commands (require explicit user action)",
-      "Bash(git add)",
-      "Bash(git commit)",
-      "Bash(git push)",
-      "Bash(git pull)",
-      "Bash(git merge)",
-      "Bash(git rebase)",
-      "Bash(git checkout)",
-      "Bash(git reset)",
-      "Bash(git clean)",
-      
-      "# Package Management Write Commands",
-      "Bash(pnpm add)",
-      "Bash(pnpm remove)",
-      "Bash(pnpm update)",
-      "Bash(pnpm upgrade)"
-    ]
-  },
-  "enableAllProjectMcpServers": false
-}

.cursor/rules/api-rules.mdc

@@ -1,14 +0,0 @@
----
-description: 
-globs: api/**/*,api/*
-alwaysApply: false
----
-
-* pnpm ONLY
-* always run scripts from api/package.json unless requested
-* prefer adding new files to the nest repo located at api/src/unraid-api/ instead of the legacy code
-* Test suite is VITEST, do not use jest
-pnpm --filter ./api test
-* Prefer to not mock simple dependencies
-* For error testing, use `.rejects.toThrow()` without arguments - don't test exact error message strings unless the message format is specifically what you're testing
-

.cursor/rules/default.mdc

@@ -1,8 +0,0 @@
----
-description: 
-globs: 
-alwaysApply: true
----
-Never add comments unless they are needed for clarity of function
-
-Be CONCISE, keep replies shorter than a paragraph if at all passible.

.cursor/rules/no-comments.mdc

@@ -1,6 +0,0 @@
----
-description: 
-globs: 
-alwaysApply: true
----
-Never add comments for obvious things, and avoid commenting when starting and ending code blocks

.cursor/rules/web-graphql.mdc

@@ -1,9 +0,0 @@
----
-description: 
-globs: web/**/*
-alwaysApply: false
----
-* Always run `pnpm codegen` for GraphQL code generation in the web directory
-* GraphQL queries must be placed in `.query.ts` files
-* GraphQL mutations must be placed in `.mutation.ts` files
-* All GraphQL under `web/` and follow this naming convention

.cursor/rules/web-testing-rules.mdc

@@ -1,244 +0,0 @@
----
-description: 
-globs: **/*.test.ts,**/__test__/components/**/*.ts,**/__test__/store/**/*.ts,**/__test__/mocks/**/*.ts
-alwaysApply: false
----
-
-## General Testing Best Practices
-- **Error Testing:** Use `.rejects.toThrow()` without arguments to test that functions throw errors. Don't test exact error message strings unless the message format is specifically what you're testing
-- **Focus on Behavior:** Test what the code does, not implementation details like exact error message wording
-
-## Vue Component Testing Best Practices
-- This is a Nuxt.js app but we are testing with vitest outside of the Nuxt environment
-- Nuxt is currently set to auto import so some vue files may need compute or ref imported
-- Use pnpm when running termical commands and stay within the web directory.
-- The directory for tests is located under `web/__test__` when running test just run `pnpm test`
-
-### Setup
-- Use `mount` from Vue Test Utils for component testing
-- Stub complex child components that aren't the focus of the test
-- Mock external dependencies and services
-
-```typescript
-import { mount } from '@vue/test-utils';
-import { beforeEach, describe, expect, it, vi } from 'vitest';
-import { createTestingPinia } from '@pinia/testing'
-import { useSomeStore } from '@/stores/myStore'
-import YourComponent from '~/components/YourComponent.vue';
-
-// Mock dependencies
-vi.mock('~/helpers/someHelper', () => ({
-  SOME_CONSTANT: 'mocked-value',
-}));
-
-describe('YourComponent', () => {
-  beforeEach(() => {
-    vi.clearAllMocks();
-  });
-  
-  it('renders correctly', () => {
-    const wrapper = mount(YourComponent, {
-      global: {
-        plugins: [createTestingPinia()],
-        stubs: {
-          // Stub child components when needed
-          ChildComponent: true,
-        },
-      },
-    });
-
-    const store = useSomeStore() // uses the testing pinia!
-    // state can be directly manipulated
-    store.name = 'my new name'
-
-    // actions are stubbed by default, meaning they don't execute their code by default.
-    // See below to customize this behavior.
-    store.someAction()
-
-    expect(store.someAction).toHaveBeenCalledTimes(1)
-    
-    // Assertions on components
-    expect(wrapper.text()).toContain('Expected content');
-  });
-});
-```
-
-### Testing Patterns
-- Test component behavior and output, not implementation details
-- Verify that the expected elements are rendered
-- Test component interactions (clicks, inputs, etc.)
-- Check for expected prop handling and event emissions
-- Use `createTestingPinia()` for mocking stores in components
-
-### Finding Elements
-- Use semantic queries like `find('button')` or `find('[data-test="id"]')` but prefer not to use data test ID's
-- Find components with `findComponent(ComponentName)`
-- Use `findAll` to check for multiple elements
-
-### Assertions
-- Assert on rendered text content with `wrapper.text()`
-- Assert on element attributes with `element.attributes()`
-- Verify element existence with `expect(element.exists()).toBe(true)`
-- Check component state through rendered output
-
-### Component Interaction
-- Trigger events with `await element.trigger('click')`
-- Set input values with `await input.setValue('value')`
-- Test emitted events with `wrapper.emitted()`
-
-### Mocking
-- Mock external services and API calls
-- Prefer not using mocks whenever possible
-- Use `vi.mock()` for module-level mocks
-- Specify return values for component methods with `vi.spyOn()`
-- Reset mocks between tests with `vi.clearAllMocks()`
-- Frequently used mocks are stored under `web/test/mocks`
-
-### Async Testing
-- Use `await nextTick()` for DOM updates
-- Use `flushPromises()` for more complex promise chains
-- Always await async operations before making assertions
-
-## Store Testing with Pinia
-
-### Basic Setup
-- When testing Store files use `createPinia` and `setActivePinia`
-
-```typescript
-import { createPinia, setActivePinia } from 'pinia';
-import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
-import { useYourStore } from '~/store/your-store';
-
-// Mock declarations must be at top level due to hoisting
-const mockDependencyFn = vi.fn();
-
-// Module mocks must use factory functions
-vi.mock('~/store/dependency', () => ({
-  useDependencyStore: () => ({
-    someMethod: mockDependencyFn,
-    someProperty: 'mockValue'
-  })
-}));
-
-describe('Your Store', () => {
-  let store: ReturnType<typeof useYourStore>;
-
-  beforeEach(() => {
-    setActivePinia(createPinia());
-    store = useYourStore();
-    vi.clearAllMocks();
-  });
-
-  afterEach(() => {
-    vi.resetAllMocks();
-  });
-
-  it('tests some action', () => {
-    store.someAction();
-    expect(mockDependencyFn).toHaveBeenCalled();
-  });
-});
-```
-
-### Important Guidelines
-1. **Store Initialization**
-   - Use `createPinia()` instead of `createTestingPinia()` for most cases
-   - Only use `createTestingPinia` if you specifically need its testing features
-   - Let stores initialize with their natural default state instead of forcing initial state
-   - Do not mock the store we're actually testing in the test file. That's why we're using `createPinia()`
-
-2. **Vue Reactivity**
-   - Ensure Vue reactivity imports are added to original store files as they may be missing because Nuxt auto import was turned on
-   - Don't rely on Nuxt auto-imports in tests
-
-   ```typescript
-   // Required in store files, even with Nuxt auto-imports
-   import { computed, ref, watchEffect } from 'vue';
-   ```
-
-3. **Mocking Best Practices**
-   - Place all mock declarations at the top level
-   - Use factory functions for module mocks to avoid hoisting issues
-   
-   ```typescript
-   // ❌ Wrong - will cause hoisting issues
-   const mockFn = vi.fn();
-   vi.mock('module', () => ({ method: mockFn }));
-
-   // ✅ Correct - using factory function
-   vi.mock('module', () => {
-     const mockFn = vi.fn();
-     return { method: mockFn };
-   });
-   ```
-
-4. **Testing Actions**
-   - Test action side effects and state changes
-   - Verify actions are called with correct parameters
-   - Mock external dependencies appropriately
-   
-   ```typescript
-   it('should handle action correctly', () => {
-     store.yourAction();
-     expect(mockDependencyFn).toHaveBeenCalledWith(
-       expectedArg1,
-       expectedArg2
-     );
-     expect(store.someState).toBe(expectedValue);
-   });
-   ```
-
-5. **Common Pitfalls**
-   - Don't mix mock declarations and module mocks incorrectly
-   - Avoid relying on Nuxt's auto-imports in test environment
-   - Clear mocks between tests to ensure isolation
-   - Remember that `vi.mock()` calls are hoisted
-
-### Testing State & Getters
-- Test computed properties by accessing them directly
-- Verify state changes after actions
-- Test getter dependencies are properly mocked
-
-```typescript
-it('computes derived state correctly', () => {
-  store.setState('new value');
-  expect(store.computedValue).toBe('expected result');
-});
-```
-
-### Testing Complex Interactions
-- Test store interactions with other stores
-- Verify proper error handling
-- Test async operations completely
-
-```typescript
-it('handles async operations', async () => {
-  const promise = store.asyncAction();
-  expect(store.status).toBe('loading');
-  await promise;
-  expect(store.status).toBe('success');
-});
-```
-
-### Testing Actions
-- Verify actions are called with the right parameters
-- Test action side effects if not stubbed
-- Override specific action implementations when needed
-
-```typescript
-// Test action calls
-store.yourAction(params);
-expect(store.yourAction).toHaveBeenCalledWith(params);
-
-// Test with real implementation
-const pinia = createTestingPinia({
-  createSpy: vi.fn,
-  stubActions: false,
-});
-```
-
-### Testing State & Getters
-- Set initial state for focused testing
-- Test computed properties by accessing them directly
-- Verify state changes by updating the store
-

.github/CODEOWNERS

@@ -0,0 +1 @@
+@elibosley @pujitm @mdatelle @zackspear

.github/ISSUE_TEMPLATE/work_intent.md

@@ -3,7 +3,7 @@ name: Work Intent
 about: Request approval for planned development work (must be approved before starting)
 title: 'Work Intent: '
 labels: work-intent, unapproved
-assignees: 'elibosley'
+assignees: ''
 ---
 
 <!--

.github/codeql/README.md

@@ -1,49 +0,0 @@
-# CodeQL Security Analysis for Unraid API
-
-This directory contains custom CodeQL queries and configurations for security analysis of the Unraid API codebase.
-
-## Overview
-
-The analysis is configured to run:
-- On all pushes to the main branch
-- On all pull requests
-- Weekly via scheduled runs
-
-## Custom Queries
-
-The following custom queries are implemented:
-
-1. **API Authorization Bypass Detection**  
-   Identifies API handlers that may not properly check authorization before performing operations.
-
-2. **GraphQL Injection Detection**  
-   Detects potential injection vulnerabilities in GraphQL queries and operations.
-
-3. **Hardcoded Secrets Detection**  
-   Finds potential hardcoded secrets or credentials in the codebase.
-
-4. **Insecure Cryptographic Implementations**  
-   Identifies usage of weak cryptographic algorithms or insecure random number generation.
-
-5. **Path Traversal Vulnerability Detection**  
-   Detects potential path traversal vulnerabilities in file system operations.
-
-## Configuration
-
-The CodeQL analysis is configured in:
-- `.github/workflows/codeql-analysis.yml` - Workflow configuration
-- `.github/codeql/codeql-config.yml` - CodeQL engine configuration
-
-## Running Locally
-
-To run these queries locally:
-
-1. Install the CodeQL CLI: https://github.com/github/codeql-cli-binaries/releases
-2. Create a CodeQL database:
-   ```
-   codeql database create <db-name> --language=javascript --source-root=.
-   ```
-3. Run a query:
-   ```
-   codeql query run .github/codeql/custom-queries/javascript/api-auth-bypass.ql --database=<db-name>
-   ``` 

.github/codeql/codeql-config.yml

@@ -1,16 +0,0 @@
-name: "Unraid API CodeQL Configuration"
-
-disable-default-queries: false
-
-queries:
-  - name: Extended Security Queries
-    uses: security-extended
-  - name: Custom Unraid API Queries
-    uses: ./.github/codeql/custom-queries
-
-query-filters:
-  - exclude:
-      problem.severity:
-        - warning
-        - recommendation
-      tags contain: security 

.github/codeql/custom-queries/javascript/api-auth-bypass.ql

@@ -1,45 +0,0 @@
-/**
- * @name Potential API Authorization Bypass
- * @description Functions that process API requests without verifying authorization may lead to security vulnerabilities.
- * @kind problem
- * @problem.severity error
- * @precision medium
- * @id js/api-auth-bypass
- * @tags security
- *       external/cwe/cwe-285
- */
-
-import javascript
-
-/**
- * Identifies functions that appear to handle API requests
- */
-predicate isApiHandler(Function f) {
-  exists(f.getAParameter()) and
-  (
-    f.getName().regexpMatch("(?i).*(api|handler|controller|resolver|endpoint).*") or
-    exists(CallExpr call |
-      call.getCalleeName().regexpMatch("(?i).*(get|post|put|delete|patch).*") and
-      call.getArgument(1) = f
-    )
-  )
-}
-
-/**
- * Identifies expressions that appear to perform authorization checks
- */
-predicate isAuthCheck(DataFlow::Node node) {
-  exists(CallExpr call |
-    call.getCalleeName().regexpMatch("(?i).*(authorize|authenticate|isAuth|checkAuth|verifyAuth|hasPermission|isAdmin|canAccess).*") and
-    call.flow().getASuccessor*() = node
-  )
-}
-
-from Function apiHandler
-where
-  isApiHandler(apiHandler) and
-  not exists(DataFlow::Node authCheck | 
-    isAuthCheck(authCheck) and
-    authCheck.getEnclosingExpr().getEnclosingFunction() = apiHandler
-  )
-select apiHandler, "API handler function may not perform proper authorization checks." 

.github/codeql/custom-queries/javascript/graphql-injection.ql

@@ -1,77 +0,0 @@
-/**
- * @name Potential GraphQL Injection
- * @description User-controlled input used directly in GraphQL queries may lead to injection vulnerabilities.
- * @kind path-problem
- * @problem.severity error
- * @precision high
- * @id js/graphql-injection
- * @tags security
- *       external/cwe/cwe-943
- */
-
-import javascript
-import DataFlow::PathGraph
-
-class GraphQLQueryExecution extends DataFlow::CallNode {
-  GraphQLQueryExecution() {
-    exists(string name |
-      name = this.getCalleeName() and
-      (
-        name = "execute" or 
-        name = "executeQuery" or
-        name = "query" or
-        name.regexpMatch("(?i).*graphql.*query.*")
-      )
-    )
-  }
-
-  DataFlow::Node getQuery() {
-    result = this.getArgument(0)
-  }
-}
-
-class UserControlledInput extends DataFlow::Node {
-  UserControlledInput() {
-    exists(DataFlow::ParameterNode param | 
-      param.getName().regexpMatch("(?i).*(query|request|input|args|variables|params).*") and
-      this = param
-    )
-    or
-    exists(DataFlow::PropRead prop |
-      prop.getPropertyName().regexpMatch("(?i).*(query|request|input|args|variables|params).*") and
-      this = prop
-    )
-  }
-}
-
-/**
- * Holds if `node` is a string concatenation.
- */
-predicate isStringConcatenation(DataFlow::Node node) {
-  exists(BinaryExpr concat |
-    concat.getOperator() = "+" and
-    concat.flow() = node
-  )
-}
-
-class GraphQLInjectionConfig extends TaintTracking::Configuration {
-  GraphQLInjectionConfig() { this = "GraphQLInjectionConfig" }
-
-  override predicate isSource(DataFlow::Node source) {
-    source instanceof UserControlledInput
-  }
-
-  override predicate isSink(DataFlow::Node sink) {
-    exists(GraphQLQueryExecution exec | sink = exec.getQuery())
-  }
-
-  override predicate isAdditionalTaintStep(DataFlow::Node pred, DataFlow::Node succ) {
-    // Add any GraphQL-specific taint steps if needed
-    isStringConcatenation(succ) and
-    succ.(DataFlow::BinaryExprNode).getAnOperand() = pred
-  }
-}
-
-from GraphQLInjectionConfig config, DataFlow::PathNode source, DataFlow::PathNode sink
-where config.hasFlowPath(source, sink)
-select sink.getNode(), source, sink, "GraphQL query may contain user-controlled input from $@.", source.getNode(), "user input" 

.github/codeql/custom-queries/javascript/hardcoded-secrets.ql

@@ -1,53 +0,0 @@
-/**
- * @name Hardcoded Secrets
- * @description Hardcoded secrets or credentials in source code can lead to security vulnerabilities.
- * @kind problem
- * @problem.severity error
- * @precision medium
- * @id js/hardcoded-secrets
- * @tags security
- *       external/cwe/cwe-798
- */
-
-import javascript
-
-/**
- * Identifies variable declarations or assignments that may contain secrets
- */
-predicate isSensitiveAssignment(DataFlow::Node node) {
-  exists(DataFlow::PropWrite propWrite |
-    propWrite.getPropertyName().regexpMatch("(?i).*(secret|key|password|token|credential|auth).*") and
-    propWrite.getRhs() = node
-  )
-  or
-  exists(VariableDeclarator decl |
-    decl.getName().regexpMatch("(?i).*(secret|key|password|token|credential|auth).*") and
-    decl.getInit().flow() = node
-  )
-}
-
-/**
- * Identifies literals that look like secrets
- */
-predicate isSecretLiteral(StringLiteral literal) {
-  // Match alphanumeric strings of moderate length that may be secrets
-  literal.getValue().regexpMatch("[A-Za-z0-9_\\-]{8,}") and
-  
-  not (
-    // Skip likely non-sensitive literals
-    literal.getValue().regexpMatch("(?i)^(true|false|null|undefined|localhost|development|production|staging)$") or
-    // Skip URLs without credentials
-    literal.getValue().regexpMatch("^https?://[^:@/]+")
-  )
-}
-
-from DataFlow::Node source
-where
-  isSensitiveAssignment(source) and
-  (
-    exists(StringLiteral literal | 
-      literal.flow() = source and 
-      isSecretLiteral(literal)
-    )
-  )
-select source, "This assignment may contain a hardcoded secret or credential." 

.github/codeql/custom-queries/javascript/insecure-crypto.ql

@@ -1,90 +0,0 @@
-/**
- * @name Insecure Cryptographic Implementation
- * @description Usage of weak cryptographic algorithms or improper implementations can lead to security vulnerabilities.
- * @kind problem
- * @problem.severity error
- * @precision high
- * @id js/insecure-crypto
- * @tags security
- *       external/cwe/cwe-327
- */
-
-import javascript
-
-/**
- * Identifies calls to crypto functions with insecure algorithms
- */
-predicate isInsecureCryptoCall(CallExpr call) {
-  // Node.js crypto module uses
-  exists(string methodName |
-    methodName = call.getCalleeName() and
-    (
-      // Detect MD5 usage
-      methodName.regexpMatch("(?i).*md5.*") or
-      methodName.regexpMatch("(?i).*sha1.*") or
-      
-      // Insecure crypto constructors
-      (
-        methodName = "createHash" or
-        methodName = "createCipheriv" or
-        methodName = "createDecipher"
-      ) and
-      (
-        exists(StringLiteral algo | 
-          algo = call.getArgument(0) and
-          (
-            algo.getValue().regexpMatch("(?i).*(md5|md4|md2|sha1|des|rc4|blowfish).*") or
-            algo.getValue().regexpMatch("(?i).*(ecb).*") // ECB mode
-          )
-        )
-      )
-    )
-  )
-  or
-  // Browser crypto API uses
-  exists(MethodCallExpr mce, string propertyName |
-    propertyName = mce.getMethodName() and
-    (
-      propertyName = "subtle" and
-      exists(MethodCallExpr subtleCall | 
-        subtleCall.getReceiver() = mce and 
-        subtleCall.getMethodName() = "encrypt" and
-        exists(ObjectExpr obj | 
-          obj = subtleCall.getArgument(0) and
-          exists(Property p | 
-            p = obj.getAProperty() and
-            p.getName() = "name" and
-            exists(StringLiteral algo | 
-              algo = p.getInit() and
-              algo.getValue().regexpMatch("(?i).*(rc4|des|aes-cbc).*")
-            )
-          )
-        )
-      )
-    )
-  )
-}
-
-/**
- * Identifies usage of Math.random() for security-sensitive operations
- */
-predicate isInsecureRandomCall(CallExpr call) {
-  exists(PropertyAccess prop | 
-    prop.getPropertyName() = "random" and
-    prop.getBase().toString() = "Math" and
-    call.getCallee() = prop
-  )
-}
-
-from Expr insecureExpr, string message
-where
-  (
-    insecureExpr instanceof CallExpr and
-    isInsecureCryptoCall(insecureExpr) and
-    message = "Using potentially insecure cryptographic algorithm or mode."
-  ) or (
-    insecureExpr instanceof CallExpr and
-    isInsecureRandomCall(insecureExpr) and
-    message = "Using Math.random() for security-sensitive operation. Consider using crypto.getRandomValues() instead."
-  )
-select insecureExpr, message 

.github/codeql/custom-queries/javascript/path-traversal.ql

@@ -1,130 +0,0 @@
-/**
- * @name Path Traversal Vulnerability
- * @description User-controlled inputs used in file operations may allow for path traversal attacks.
- * @kind path-problem
- * @problem.severity error
- * @precision high
- * @id js/path-traversal
- * @tags security
- *       external/cwe/cwe-22
- */
-
-import javascript
-import DataFlow::PathGraph
-
-/**
- * Identifies sources of user-controlled input
- */
-class UserInput extends DataFlow::Node {
-  UserInput() {
-    // HTTP request parameters
-    exists(DataFlow::ParameterNode param |
-      param.getName().regexpMatch("(?i).*(req|request|param|query|body|user|input).*") and
-      this = param
-    )
-    or
-    // Access to common request properties
-    exists(DataFlow::PropRead prop |
-      (
-        prop.getPropertyName() = "query" or
-        prop.getPropertyName() = "body" or
-        prop.getPropertyName() = "params" or
-        prop.getPropertyName() = "files"
-      ) and
-      this = prop
-    )
-  }
-}
-
-/**
- * Identifies fs module imports
- */
-class FileSystemAccess extends DataFlow::CallNode {
-  FileSystemAccess() {
-    // Node.js fs module functions
-    exists(string name |
-      name = this.getCalleeName() and
-      (
-        name = "readFile" or
-        name = "readFileSync" or
-        name = "writeFile" or
-        name = "writeFileSync" or
-        name = "appendFile" or
-        name = "appendFileSync" or
-        name = "createReadStream" or
-        name = "createWriteStream" or
-        name = "openSync" or
-        name = "open"
-      )
-    )
-    or
-    // File system operations via require('fs')
-    exists(DataFlow::SourceNode fsModule, string methodName |
-      (fsModule.getAPropertyRead("promises") or fsModule).flowsTo(this.getReceiver()) and
-      methodName = this.getMethodName() and
-      (
-        methodName = "readFile" or
-        methodName = "writeFile" or
-        methodName = "appendFile" or
-        methodName = "readdir" or
-        methodName = "stat"
-      )
-    )
-  }
-
-  DataFlow::Node getPathArgument() {
-    result = this.getArgument(0)
-  }
-}
-
-/**
- * Identifies sanitization of file paths
- */
-predicate isPathSanitized(DataFlow::Node node) {
-  // Check for path normalization or validation
-  exists(DataFlow::CallNode call |
-    (
-      call.getCalleeName() = "resolve" or
-      call.getCalleeName() = "normalize" or
-      call.getCalleeName() = "isAbsolute" or
-      call.getCalleeName() = "relative" or
-      call.getCalleeName().regexpMatch("(?i).*(sanitize|validate|check).*path.*")
-    ) and
-    call.flowsTo(node)
-  )
-  or
-  // Check for path traversal mitigation patterns
-  exists(DataFlow::CallNode call |
-    call.getCalleeName() = "replace" and
-    exists(StringLiteral regex |
-      regex = call.getArgument(0).(DataFlow::RegExpCreationNode).getSource().getAChildExpr() and
-      regex.getValue().regexpMatch("(\\.\\./|\\.\\.\\\\)")
-    ) and
-    call.flowsTo(node)
-  )
-}
-
-/**
- * Configuration for tracking flow from user input to file system operations
- */
-class PathTraversalConfig extends TaintTracking::Configuration {
-  PathTraversalConfig() { this = "PathTraversalConfig" }
-
-  override predicate isSource(DataFlow::Node source) {
-    source instanceof UserInput
-  }
-
-  override predicate isSink(DataFlow::Node sink) {
-    exists(FileSystemAccess fileAccess |
-      sink = fileAccess.getPathArgument()
-    )
-  }
-
-  override predicate isSanitizer(DataFlow::Node node) {
-    isPathSanitized(node)
-  }
-}
-
-from PathTraversalConfig config, DataFlow::PathNode source, DataFlow::PathNode sink
-where config.hasFlowPath(source, sink)
-select sink.getNode(), source, sink, "File system operation depends on a user-controlled value $@.", source.getNode(), "user input" 

.github/workflows/build-plugin.yml

@@ -1,185 +0,0 @@
-name: Build Plugin Component
-
-on:
-  workflow_call:
-    inputs:
-      RELEASE_CREATED:
-        type: string
-        required: true
-        description: "Whether a release was created"
-      RELEASE_TAG:
-        type: string
-        required: false
-        description: "Name of the tag when a release is created"
-      TAG:
-        type: string
-        required: false
-        description: "Tag for the build (e.g. PR number or version)"
-      BUCKET_PATH:
-        type: string
-        required: true
-        description: "Path in the bucket where artifacts should be stored"
-      BASE_URL:
-        type: string
-        required: true
-        description: "Base URL for the plugin builds"
-      BUILD_NUMBER:
-        type: string
-        required: true
-        description: "Build number for the plugin builds"
-    secrets:
-      CF_ACCESS_KEY_ID:
-        required: true
-      CF_SECRET_ACCESS_KEY:
-        required: true
-      CF_BUCKET_PREVIEW:
-        required: true
-      CF_ENDPOINT:
-        required: true
-      UNRAID_BOT_GITHUB_ADMIN_TOKEN:
-        required: false
-jobs:
-  build-plugin:
-    name: Build and Deploy Plugin
-    defaults:
-      run:
-        working-directory: plugin
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout repo
-        uses: actions/checkout@v5
-        with:
-          fetch-depth: 0
-
-      - name: Install Node
-        uses: actions/setup-node@v4
-        with:
-          node-version-file: ".nvmrc"
-
-      - uses: pnpm/action-setup@v4
-        name: Install pnpm
-        with:
-          run_install: false
-
-      - name: Get pnpm store directory
-        id: pnpm-cache
-        shell: bash
-        run: |
-          echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT
-
-      - name: Get API Version
-        id: vars
-        run: |
-          GIT_SHA=$(git rev-parse --short HEAD)
-          IS_TAGGED=$(git describe --tags --abbrev=0 --exact-match || echo '')
-          PACKAGE_LOCK_VERSION=$(jq -r '.version' package.json)
-          API_VERSION=$([[ -n "$IS_TAGGED" ]] && echo "$PACKAGE_LOCK_VERSION" || echo "${PACKAGE_LOCK_VERSION}+${GIT_SHA}")
-          echo "API_VERSION=${API_VERSION}" >> $GITHUB_OUTPUT
-
-      - uses: actions/cache@v4
-        name: Setup pnpm cache
-        with:
-          path: ${{ steps.pnpm-cache.outputs.STORE_PATH }}
-          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
-          restore-keys: |
-            ${{ runner.os }}-pnpm-store-
-
-      - name: Install dependencies
-        run: |
-          cd ${{ github.workspace }}
-          pnpm install --frozen-lockfile --filter @unraid/connect-plugin
-
-      - name: Download Unraid UI Components
-        uses: actions/download-artifact@v5
-        with:
-          name: unraid-wc-ui
-          path: ${{ github.workspace }}/plugin/source/dynamix.unraid.net/usr/local/emhttp/plugins/dynamix.my.servers/unraid-components/uui
-          merge-multiple: true
-      - name: Download Unraid Web Components
-        uses: actions/download-artifact@v5
-        with:
-          pattern: unraid-wc-rich
-          path: ${{ github.workspace }}/plugin/source/dynamix.unraid.net/usr/local/emhttp/plugins/dynamix.my.servers/unraid-components/standalone
-          merge-multiple: true
-      - name: Download Unraid API
-        uses: actions/download-artifact@v5
-        with:
-          name: unraid-api
-          path: ${{ github.workspace }}/plugin/api/
-      - name: Extract Unraid API
-        run: |
-          mkdir -p ${{ github.workspace }}/plugin/source/dynamix.unraid.net/usr/local/unraid-api
-          tar -xzf ${{ github.workspace }}/plugin/api/unraid-api.tgz -C ${{ github.workspace }}/plugin/source/dynamix.unraid.net/usr/local/unraid-api
-      - name: Build Plugin and TXZ Based on Event and Tag
-        id: build-plugin
-        run: |
-          cd ${{ github.workspace }}/plugin
-          pnpm run build:txz --tag="${{ inputs.TAG }}" --base-url="${{ inputs.BASE_URL }}" --api-version="${{ steps.vars.outputs.API_VERSION }}" --build-number="${{ inputs.BUILD_NUMBER }}"
-          pnpm run build:plugin --tag="${{ inputs.TAG }}" --base-url="${{ inputs.BASE_URL }}" --api-version="${{ steps.vars.outputs.API_VERSION }}" --build-number="${{ inputs.BUILD_NUMBER }}"
-
-      - name: Ensure Plugin Files Exist
-        run: |
-          ls -al ./deploy
-          if [ ! -f ./deploy/*.plg ]; then
-            echo "Error: .plg file not found in plugin/deploy/"
-            exit 1
-          fi
-
-          if [ ! -f ./deploy/*.txz ]; then
-            echo "Error: .txz file not found in plugin/deploy/"
-            exit 1
-          fi
-
-      - name: Upload to GHA
-        uses: actions/upload-artifact@v4
-        with:
-          name: unraid-plugin-${{ github.run_id }}-${{ inputs.RELEASE_TAG }}
-          path: plugin/deploy/
-
-      - name: Upload Release Assets
-        if: inputs.RELEASE_CREATED == 'true'
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-          RELEASE_TAG: ${{ inputs.RELEASE_TAG }}
-        run: |
-          # For each file in release directory
-          for file in deploy/*; do
-            echo "Uploading $file to release..."
-            gh release upload "${RELEASE_TAG}" "$file" --clobber
-          done  
-
-      - name: Workflow Dispatch and wait
-        if: inputs.RELEASE_CREATED == 'true'
-        uses: the-actions-org/workflow-dispatch@v4.0.0
-        with:
-          workflow: release-production.yml
-          inputs: '{ "version": "v${{ steps.vars.outputs.API_VERSION }}" }'
-          token: ${{ secrets.UNRAID_BOT_GITHUB_ADMIN_TOKEN }}
-
-      - name: Upload to Cloudflare
-        if: inputs.RELEASE_CREATED == 'false'
-        env:
-          AWS_ACCESS_KEY_ID: ${{ secrets.CF_ACCESS_KEY_ID }}
-          AWS_SECRET_ACCESS_KEY: ${{ secrets.CF_SECRET_ACCESS_KEY }}
-          AWS_DEFAULT_REGION: auto
-        run: |
-          # Sync the deploy directory to the Cloudflare bucket with explicit content encoding and public-read ACL
-          aws s3 sync deploy/ s3://${{ secrets.CF_BUCKET_PREVIEW }}/${{ inputs.BUCKET_PATH }} \
-            --endpoint-url ${{ secrets.CF_ENDPOINT }} \
-            --checksum-algorithm CRC32 \
-            --no-guess-mime-type \
-            --content-encoding none \
-            --acl public-read
-
-      - name: Comment URL
-        if: github.event_name == 'pull_request'
-        uses: thollander/actions-comment-pull-request@v3
-        with:
-          comment-tag: prlink
-          mode: recreate
-          message: |
-            This plugin has been deployed to Cloudflare R2 and is available for testing.
-            Download it at this URL:
-            ```
-            ${{ inputs.BASE_URL }}/tag/${{ inputs.TAG }}/dynamix.unraid.net.plg
-            ```

.github/workflows/claude-code-review.yml

@@ -1,103 +0,0 @@
-name: Claude Code Review
-
-on:
-  pull_request:
-    types: [opened, synchronize]
-    # Skip reviews for non-code changes
-    paths-ignore:
-      - "**/*.md"
-      - "**/package-lock.json"
-      - "**/pnpm-lock.yaml"
-      - "**/.gitignore"
-      - "**/LICENSE"
-      - "**/*.config.js"
-      - "**/*.config.ts"
-      - "**/tsconfig.json"
-      - "**/.github/workflows/*.yml"
-      - "**/docs/**"
-
-jobs:
-  claude-review:
-    # Skip review for bot PRs and WIP/skip-review PRs
-    # Only run if changes are significant (>10 lines)
-    if: |
-      (github.event.pull_request.additions > 10 || github.event.pull_request.deletions > 10) &&
-      !contains(github.event.pull_request.title, '[skip-review]') &&
-      !contains(github.event.pull_request.title, '[WIP]') &&
-      !endsWith(github.event.pull_request.user.login, '[bot]') &&
-      github.event.pull_request.user.login != 'dependabot' &&
-      github.event.pull_request.user.login != 'renovate'
-    
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      pull-requests: read
-      issues: read
-      id-token: write
-    
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v5
-        with:
-          fetch-depth: 1
-
-      - name: Run Claude Code Review
-        id: claude-review
-        uses: anthropics/claude-code-action@beta
-        with:
-          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
-
-          # Optional: Specify model (defaults to Claude Sonnet 4, uncomment for Claude Opus 4)
-          # model: "claude-opus-4-20250514"
-          
-          # Direct prompt for automated review (no @claude mention needed)
-          direct_prompt: |
-            IMPORTANT: Review ONLY the DIFF/CHANGESET - the actual lines that were added or modified in this PR.
-            DO NOT review the entire file context, only analyze the specific changes being made.
-            
-            Look for HIGH-PRIORITY issues in the CHANGED LINES ONLY:
-            
-            1. CRITICAL BUGS: Logic errors, null pointer issues, infinite loops, race conditions
-            2. SECURITY: SQL injection, XSS, authentication bypass, exposed secrets, unsafe operations
-            3. BREAKING CHANGES: API contract violations, removed exports, changed function signatures
-            4. DATA LOSS RISKS: Destructive operations without safeguards, missing data validation
-            
-            DO NOT comment on:
-            - Code that wasn't changed in this PR
-            - Style, formatting, or documentation
-            - Test coverage (unless tests are broken by the changes)
-            - Minor optimizations or best practices
-            - Existing code issues that weren't introduced by this PR
-            
-            If you find no critical issues in the DIFF, respond with: "✅ No critical issues found in changes"
-            
-            Keep response under 10 lines. Reference specific line numbers from the diff when reporting issues.
-
-          # Optional: Use sticky comments to make Claude reuse the same comment on subsequent pushes to the same PR
-          use_sticky_comment: true
-          
-          # Context-aware review based on PR characteristics
-          # Uncomment to enable different review strategies based on context
-          # direct_prompt: |
-          #   ${{ 
-          #   (github.event.pull_request.additions > 500) && 
-          #   'Large PR detected. Focus only on architectural issues and breaking changes. Skip minor issues.' ||
-          #   contains(github.event.pull_request.title, 'fix') && 
-          #   'Bug fix PR: Verify the fix addresses the root cause and check for regression risks.' ||
-          #   contains(github.event.pull_request.title, 'deps') && 
-          #   'Dependency update: Check for breaking changes and security advisories only.' ||
-          #   contains(github.event.pull_request.title, 'refactor') && 
-          #   'Refactor PR: Verify no behavior changes and check for performance regressions.' ||
-          #   contains(github.event.pull_request.title, 'feat') && 
-          #   'New feature: Check for security issues, edge cases, and integration problems only.' ||
-          #   'Standard review: Check for critical bugs, security issues, and breaking changes only.'
-          #   }}
-          
-          # Optional: Add specific tools for running tests or linting
-          # allowed_tools: "Bash(npm run test),Bash(npm run lint),Bash(npm run typecheck)"
-          
-          # Optional: Skip review for certain conditions
-          # if: |
-          #   !contains(github.event.pull_request.title, '[skip-review]') &&
-          #   !contains(github.event.pull_request.title, '[WIP]')
-

.github/workflows/claude.yml

@@ -1,64 +0,0 @@
-name: Claude Code
-
-on:
-  issue_comment:
-    types: [created]
-  pull_request_review_comment:
-    types: [created]
-  issues:
-    types: [opened, assigned]
-  pull_request_review:
-    types: [submitted]
-
-jobs:
-  claude:
-    if: |
-      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
-      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
-      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
-      (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      pull-requests: read
-      issues: read
-      id-token: write
-      actions: read # Required for Claude to read CI results on PRs
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v5
-        with:
-          fetch-depth: 1
-
-      - name: Run Claude Code
-        id: claude
-        uses: anthropics/claude-code-action@beta
-        with:
-          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
-
-          # This is an optional setting that allows Claude to read CI results on PRs
-          additional_permissions: |
-            actions: read
-          
-          # Optional: Specify model (defaults to Claude Sonnet 4, uncomment for Claude Opus 4)
-          # model: "claude-opus-4-20250514"
-          
-          # Optional: Customize the trigger phrase (default: @claude)
-          # trigger_phrase: "/claude"
-          
-          # Optional: Trigger when specific user is assigned to an issue
-          # assignee_trigger: "claude-bot"
-          
-          # Optional: Allow Claude to run specific commands
-          # allowed_tools: "Bash(npm install),Bash(npm run build),Bash(npm run test:*),Bash(npm run lint:*)"
-          
-          # Optional: Add custom instructions for Claude to customize its behavior for your project
-          # custom_instructions: |
-          #   Follow our coding standards
-          #   Ensure all new code has tests
-          #   Use TypeScript for new files
-          
-          # Optional: Custom environment variables for Claude
-          # claude_env: |
-          #   NODE_ENV: test
-

.github/workflows/codeql-analysis.yml

@@ -1,40 +0,0 @@
-name: "CodeQL Security Analysis"
-
-on:
-  push:
-    branches: [ main ]
-  pull_request:
-    branches: [ main ]
-  schedule:
-    - cron: '0 0 * * 0'  # Run weekly on Sundays
-
-jobs:
-  analyze:
-    name: Analyze
-    runs-on: ubuntu-latest
-    permissions:
-      actions: read
-      contents: read
-      security-events: write
-
-    strategy:
-      fail-fast: false
-      matrix:
-        language: [ 'javascript', 'typescript' ]
-
-    steps:
-    - name: Checkout repository
-      uses: actions/checkout@v5
-
-    - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
-      with:
-        languages: ${{ matrix.language }}
-        config-file: ./.github/codeql/codeql-config.yml
-        queries: +security-and-quality
-
-    - name: Autobuild
-      uses: github/codeql-action/autobuild@v3
-
-    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3 

.github/workflows/create-docusaurus-pr.yml

@@ -20,49 +20,26 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout source repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v4
         with:
           path: source-repo
 
       - name: Checkout docs repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v4
         with:
           repository: unraid/docs
           path: docs-repo
           token: ${{ secrets.DOCS_PAT_UNRAID_BOT }}
 
-      - name: Copy and process docs
+      - name: Copy updated docs
         run: |
           if [ ! -d "source-repo/api/docs" ]; then
             echo "Source directory does not exist!"
             exit 1
           fi
-          
-          # Remove old API docs but preserve other folders
           rm -rf docs-repo/docs/API/
           mkdir -p docs-repo/docs/API
-          
-          # Copy all markdown files and maintain directory structure
           cp -r source-repo/api/docs/public/. docs-repo/docs/API/
-          
-          # Copy images to Docusaurus static directory
-          mkdir -p docs-repo/static/img/api
-          
-          # Copy images from public/images if they exist
-          if [ -d "source-repo/api/docs/public/images" ]; then
-            cp -r source-repo/api/docs/public/images/. docs-repo/static/img/api/
-          fi
-          
-          # Also copy any images from the parent docs/images directory
-          if [ -d "source-repo/api/docs/images" ]; then
-            cp -r source-repo/api/docs/images/. docs-repo/static/img/api/
-          fi
-          
-          # Update image paths in markdown files
-          # Replace relative image paths with absolute paths pointing to /img/api/
-          find docs-repo/docs/API -name "*.md" -type f -exec sed -i 's|!\[\([^]]*\)\](\./images/\([^)]*\))|![\1](/img/api/\2)|g' {} \;
-          find docs-repo/docs/API -name "*.md" -type f -exec sed -i 's|!\[\([^]]*\)\](images/\([^)]*\))|![\1](/img/api/\2)|g' {} \;
-          find docs-repo/docs/API -name "*.md" -type f -exec sed -i 's|!\[\([^]]*\)\](../images/\([^)]*\))|![\1](/img/api/\2)|g' {} \;
       - name: Create Pull Request
         uses: peter-evans/create-pull-request@v7
         with:
@@ -76,7 +53,7 @@ jobs:
             Changes were automatically generated from api/docs/* directory.
 
             @coderabbitai ignore
-          reviewers: ljm42, elibosley
+          reviewers: ljm42, elibosley, pujitm, mdatelle
           branch: update-api-docs
           base: main
           delete-branch: true

.github/workflows/deploy-storybook.yml

@@ -1,76 +0,0 @@
-name: Deploy Storybook to Cloudflare Workers
-permissions:
-  contents: read
-  pull-requests: write
-  issues: write
-on:
-  push:
-    branches:
-      - main
-    paths:
-      - 'unraid-ui/**'
-  pull_request:
-    paths:
-      - 'unraid-ui/**'
-  workflow_dispatch:
-
-jobs:
-  deploy:
-    runs-on: ubuntu-latest
-    name: Deploy Storybook
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v5
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: '22.18.0'
-
-      - uses: pnpm/action-setup@v4
-        name: Install pnpm
-        with:
-          run_install: false
-
-      - name: Cache APT Packages
-        uses: awalsh128/cache-apt-pkgs-action@v1.5.3
-        with:
-          packages: bash procps python3 libvirt-dev jq zstd git build-essential libvirt-daemon-system
-          version: 1.0
-
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile
-
-      - name: Build Storybook
-        run: |
-          cd unraid-ui
-          pnpm build-storybook
-
-      - name: Deploy to Cloudflare Workers (Staging)
-        id: deploy_staging
-        if: github.event_name == 'pull_request'
-        uses: cloudflare/wrangler-action@v3
-        with:
-          apiToken: ${{ secrets.CLOUDFLARE_DEPLOY_TOKEN }}
-          command: deploy --env staging
-          workingDirectory: unraid-ui
-
-      - name: Deploy to Cloudflare Workers (Production)
-        if: github.ref == 'refs/heads/main' && github.event_name == 'push'
-        uses: cloudflare/wrangler-action@v3
-        with:
-          apiToken: ${{ secrets.CLOUDFLARE_DEPLOY_TOKEN }}
-          command: deploy
-          workingDirectory: unraid-ui
-
-      - name: Comment PR with deployment URL
-        if: github.event_name == 'pull_request'
-        uses: actions/github-script@v8
-        with:
-          script: |
-            github.rest.issues.createComment({
-              issue_number: context.issue.number,
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              body: `🚀 Storybook has been deployed to staging: ${{ steps.deploy_staging.outputs['deployment-url'] }}`
-            }) 

.github/workflows/main.yml

@@ -12,32 +12,26 @@ concurrency:
 
 jobs:
   release-please:
-    name: Release Please
+    # Only run release-please on pushes to main
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     runs-on: ubuntu-latest
     permissions:
       contents: write
       pull-requests: write
     steps:
-      - name: Checkout
-        uses: actions/checkout@v5
-        # Only run release-please on pushes to main
-        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
-
       - id: release
         uses: googleapis/release-please-action@v4
-        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     outputs:
-      releases_created: ${{ steps.release.outputs.releases_created || 'false' }}
-      tag_name: ${{ steps.release.outputs.tag_name || '' }}
+      releases_created: ${{ steps.release.outputs.releases_created }}
+      tag_name: ${{ steps.release.outputs.tag_name }}
   test-api:
-    name: Test API
     defaults:
       run:
         working-directory: api
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v4
 
       - name: Install Node
         uses: actions/setup-node@v4
@@ -45,9 +39,9 @@ jobs:
           node-version-file: ".nvmrc"
 
       - name: Cache APT Packages
-        uses: awalsh128/cache-apt-pkgs-action@v1.5.3
+        uses: awalsh128/cache-apt-pkgs-action@v1.4.3
         with:
-          packages: bash procps python3 libvirt-dev jq zstd git build-essential libvirt-daemon-system php-cli
+          packages: bash procps python3 libvirt-dev jq zstd git build-essential
           version: 1.0
 
       - name: Install pnpm
@@ -75,121 +69,18 @@ jobs:
       - name: Lint
         run: pnpm run lint
 
-      - name: Type Check
-        run: pnpm run type-check
-
-      - name: Setup libvirt
-        run: |
-          # Create required groups (if they don't already exist)
-          sudo groupadd -f libvirt
-          sudo groupadd -f kvm
-
-          # Create libvirt user if not present, and add it to the kvm group
-          sudo useradd -m -s /bin/bash -g libvirt libvirt || true
-          sudo usermod -aG kvm libvirt || true
-
-          # Set up libvirt directories and permissions
-          sudo mkdir -p /var/run/libvirt /var/log/libvirt /etc/libvirt
-          sudo chown root:libvirt /var/run/libvirt /var/log/libvirt
-          sudo chmod g+w /var/run/libvirt /var/log/libvirt
-
-          # Configure libvirt by appending required settings
-          sudo tee -a /etc/libvirt/libvirtd.conf > /dev/null <<EOF
-          unix_sock_group = "libvirt"
-          unix_sock_rw_perms = "0770"
-          auth_unix_rw = "none"
-          EOF
-
-          # Add the current user to libvirt and kvm groups (note: this change won't apply to the current session)
-          sudo usermod -aG libvirt,kvm $USER
-
-          sudo mkdir -p /var/run/libvirt
-          sudo chown root:libvirt /var/run/libvirt
-          sudo chmod 775 /var/run/libvirt
-
-
-          # Start libvirtd in the background
-          sudo /usr/sbin/libvirtd --daemon
-
-          # Wait a bit longer for libvirtd to start
-          sleep 5
-
-          # Verify libvirt is running using sudo to bypass group membership delays
-          sudo virsh list --all || true
-
-      - name: Build UI Package First
-        run: |
-          echo "🔧 Building UI package for web tests dependency..."
-          cd ../unraid-ui && pnpm run build
-
-      - name: Run Tests Concurrently
-        run: |
-          set -e
-
-          # Run all tests in parallel with labeled output and coverage generation
-          echo "🚀 Starting API coverage tests..."
-          pnpm run coverage > api-test.log 2>&1 &
-          API_PID=$!
-
-          echo "🚀 Starting Connect plugin tests..."
-          (cd ../packages/unraid-api-plugin-connect && pnpm test --coverage 2>/dev/null || pnpm test) > connect-test.log 2>&1 &
-          CONNECT_PID=$!
-
-          echo "🚀 Starting Shared package tests..."
-          (cd ../packages/unraid-shared && pnpm test --coverage 2>/dev/null || pnpm test) > shared-test.log 2>&1 &
-          SHARED_PID=$!
-
-          echo "🚀 Starting Web package coverage tests..."
-          (cd ../web && (pnpm test --coverage || pnpm test)) > web-test.log 2>&1 &
-          WEB_PID=$!
-
-          echo "🚀 Starting UI package coverage tests..."
-          (cd ../unraid-ui && pnpm test --coverage 2>/dev/null || pnpm test) > ui-test.log 2>&1 &
-          UI_PID=$!
-
-          echo "🚀 Starting Plugin tests..."
-          (cd ../plugin && pnpm test) > plugin-test.log 2>&1 &
-          PLUGIN_PID=$!
-
-          # Wait for all processes and capture exit codes
-          wait $API_PID && echo "✅ API tests completed" || { echo "❌ API tests failed"; API_EXIT=1; }
-          wait $CONNECT_PID && echo "✅ Connect tests completed" || { echo "❌ Connect tests failed"; CONNECT_EXIT=1; }
-          wait $SHARED_PID && echo "✅ Shared tests completed" || { echo "❌ Shared tests failed"; SHARED_EXIT=1; }
-          wait $WEB_PID && echo "✅ Web tests completed" || { echo "❌ Web tests failed"; WEB_EXIT=1; }
-          wait $UI_PID && echo "✅ UI tests completed" || { echo "❌ UI tests failed"; UI_EXIT=1; }
-          wait $PLUGIN_PID && echo "✅ Plugin tests completed" || { echo "❌ Plugin tests failed"; PLUGIN_EXIT=1; }
-
-          # Display all outputs
-          echo "📋 API Test Results:" && cat api-test.log
-          echo "📋 Connect Plugin Test Results:" && cat connect-test.log  
-          echo "📋 Shared Package Test Results:" && cat shared-test.log
-          echo "📋 Web Package Test Results:" && cat web-test.log
-          echo "📋 UI Package Test Results:" && cat ui-test.log
-          echo "📋 Plugin Test Results:" && cat plugin-test.log
-
-          # Exit with error if any test failed
-          if [[ ${API_EXIT:-0} -eq 1 || ${CONNECT_EXIT:-0} -eq 1 || ${SHARED_EXIT:-0} -eq 1 || ${WEB_EXIT:-0} -eq 1 || ${UI_EXIT:-0} -eq 1 || ${PLUGIN_EXIT:-0} -eq 1 ]]; then
-            exit 1
-          fi
-
-      - name: Upload all coverage reports to Codecov
-        uses: codecov/codecov-action@v5
-        with:
-          token: ${{ secrets.CODECOV_TOKEN }}
-          files: ./coverage/coverage-final.json,../web/coverage/coverage-final.json,../unraid-ui/coverage/coverage-final.json,../packages/unraid-api-plugin-connect/coverage/coverage-final.json,../packages/unraid-shared/coverage/coverage-final.json
-          fail_ci_if_error: false
+      - name: Test
+        run: pnpm run coverage
 
   build-api:
-    name: Build API
+    name: Build and Test API
     runs-on: ubuntu-latest
-    outputs:
-      build_number: ${{ steps.buildnumber.outputs.build_number }}
     defaults:
       run:
         working-directory: api
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v4
 
       - name: Install Node
         uses: actions/setup-node@v4
@@ -216,7 +107,7 @@ jobs:
             ${{ runner.os }}-pnpm-store-
 
       - name: Cache APT Packages
-        uses: awalsh128/cache-apt-pkgs-action@v1.5.3
+        uses: awalsh128/cache-apt-pkgs-action@v1.4.3
         with:
           packages: bash procps python3 libvirt-dev jq zstd git build-essential
           version: 1.0
@@ -226,6 +117,13 @@ jobs:
           cd ${{ github.workspace }}
           pnpm install --frozen-lockfile
 
+      - name: Lint
+        run: pnpm run lint
+
+      - name: Type Check
+        run: pnpm run type-check
+        continue-on-error: true
+
       - name: Build
         run: pnpm run build
 
@@ -237,26 +135,15 @@ jobs:
           PACKAGE_LOCK_VERSION=$(jq -r '.version' package.json)
           API_VERSION=$([[ -n "$IS_TAGGED" ]] && echo "$PACKAGE_LOCK_VERSION" || echo "${PACKAGE_LOCK_VERSION}+${GIT_SHA}")
           export API_VERSION
-          echo "API_VERSION=${API_VERSION}" >> $GITHUB_ENV
-          echo "PACKAGE_LOCK_VERSION=${PACKAGE_LOCK_VERSION}" >> $GITHUB_OUTPUT
-
-      - name: Generate build number
-        id: buildnumber
-        uses: onyxmueller/build-tag-number@v1
-        with:
-          token: ${{secrets.github_token}}
-          prefix: ${{steps.vars.outputs.PACKAGE_LOCK_VERSION}}
 
       - name: Build
-        run: |
-          pnpm run build:release
-          tar -czf deploy/unraid-api.tgz -C deploy/pack/ .
+        run: pnpm run build-and-pack
 
       - name: Upload tgz to Github artifacts
         uses: actions/upload-artifact@v4
         with:
           name: unraid-api
-          path: ${{ github.workspace }}/api/deploy/unraid-api.tgz
+          path: ${{ github.workspace }}/api/deploy/release/*.tgz
 
   build-unraid-ui-webcomponents:
     name: Build Unraid UI Library (Webcomponent Version)
@@ -266,7 +153,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v4
 
       - name: Install Node
         uses: actions/setup-node@v4
@@ -293,7 +180,7 @@ jobs:
             ${{ runner.os }}-pnpm-store-
 
       - name: Cache APT Packages
-        uses: awalsh128/cache-apt-pkgs-action@v1.5.3
+        uses: awalsh128/cache-apt-pkgs-action@v1.4.3
         with:
           packages: bash procps python3 libvirt-dev jq zstd git build-essential
           version: 1.0
@@ -303,9 +190,6 @@ jobs:
           cd ${{ github.workspace }}
           pnpm install --frozen-lockfile --filter @unraid/ui
 
-      - name: Lint
-        run: pnpm run lint
-
       - name: Build
         run: pnpm run build:wc
 
@@ -313,26 +197,29 @@ jobs:
         uses: actions/upload-artifact@v4
         with:
           name: unraid-wc-ui
-          path: unraid-ui/dist-wc/
+          path: unraid-ui/dist/
 
   build-web:
     # needs: [build-unraid-ui]
     name: Build Web App
+    environment:
+      name: production
     defaults:
       run:
         working-directory: web
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v4
 
       - name: Create env file
         run: |
           touch .env
-          echo VITE_ACCOUNT=${{ secrets.VITE_ACCOUNT }} >> .env
-          echo VITE_CONNECT=${{ secrets.VITE_CONNECT }} >> .env
-          echo VITE_UNRAID_NET=${{ secrets.VITE_UNRAID_NET }} >> .env
-          echo VITE_CALLBACK_KEY=${{ secrets.VITE_CALLBACK_KEY }} >> .env
+          echo VITE_ACCOUNT=${{ vars.VITE_ACCOUNT }} >> .env
+          echo VITE_CONNECT=${{ vars.VITE_CONNECT }} >> .env
+          echo VITE_UNRAID_NET=${{ vars.VITE_UNRAID_NET }} >> .env
+          echo VITE_CALLBACK_KEY=${{ vars.VITE_CALLBACK_KEY }} >> .env
+          cat .env
 
       - name: Install Node
         uses: actions/setup-node@v4
@@ -367,13 +254,10 @@ jobs:
         run: |
           cd ${{ github.workspace }}/unraid-ui
           pnpm run build
-
       - name: Lint files
+        continue-on-error: true
         run: pnpm run lint
 
-      - name: Type Check
-        run: pnpm run type-check
-
       - name: Test
         run: pnpm run test:ci
 
@@ -384,49 +268,198 @@ jobs:
         uses: actions/upload-artifact@v4
         with:
           name: unraid-wc-rich
-          path: web/dist
+          path: web/.nuxt/nuxt-custom-elements/dist/unraid-components
 
-  build-plugin-staging-pr:
-    name: Build and Deploy Plugin
-    needs:
-      - release-please
-      - build-api
-      - build-web
-      - build-unraid-ui-webcomponents
-      - test-api
-    uses: ./.github/workflows/build-plugin.yml
-    with:
-      RELEASE_CREATED: false
-      TAG: ${{ github.event.pull_request.number && format('PR{0}', github.event.pull_request.number) || '' }}
-      BUCKET_PATH: ${{ github.event.pull_request.number && format('unraid-api/tag/PR{0}', github.event.pull_request.number) || 'unraid-api' }}
-      BASE_URL: "https://preview.dl.unraid.net/unraid-api"
-      BUILD_NUMBER: ${{ needs.build-api.outputs.build_number }}
-    secrets:
-      CF_ACCESS_KEY_ID: ${{ secrets.CF_ACCESS_KEY_ID }}
-      CF_SECRET_ACCESS_KEY: ${{ secrets.CF_SECRET_ACCESS_KEY }}
-      CF_BUCKET_PREVIEW: ${{ secrets.CF_BUCKET_PREVIEW }}
-      CF_ENDPOINT: ${{ secrets.CF_ENDPOINT }}
+  build-plugin:
+    needs: [build-api, build-web, build-unraid-ui-webcomponents]
+    outputs:
+      tag: ${{ steps.build-plugin.outputs.tag }}
+    defaults:
+      run:
+        working-directory: plugin
+    runs-on: ubuntu-latest
+    steps:
+      - name: Set Timezone
+        uses: szenius/set-timezone@v1.2
+        with:
+          timezoneLinux: "America/Los_Angeles"
+      - name: Checkout repo
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
 
-  build-plugin-production:
-    if: ${{ needs.release-please.outputs.releases_created == 'true' }}
-    name: Build and Deploy Production Plugin
-    needs:
-      - release-please
-      - build-api
-      - build-web
-      - build-unraid-ui-webcomponents
-      - test-api
-    uses: ./.github/workflows/build-plugin.yml
-    with:
-      RELEASE_CREATED: true
-      RELEASE_TAG: ${{ needs.release-please.outputs.tag_name }}
-      TAG: ""
-      BUCKET_PATH: unraid-api
-      BASE_URL: "https://stable.dl.unraid.net/unraid-api"
-      BUILD_NUMBER: ${{ needs.build-api.outputs.build_number }}
-    secrets:
-      CF_ACCESS_KEY_ID: ${{ secrets.CF_ACCESS_KEY_ID }}
-      CF_SECRET_ACCESS_KEY: ${{ secrets.CF_SECRET_ACCESS_KEY }}
-      CF_BUCKET_PREVIEW: ${{ secrets.CF_BUCKET_PREVIEW }}
-      CF_ENDPOINT: ${{ secrets.CF_ENDPOINT }}
-      UNRAID_BOT_GITHUB_ADMIN_TOKEN: ${{ secrets.UNRAID_BOT_GITHUB_ADMIN_TOKEN }}
+      - name: Install Node
+        uses: actions/setup-node@v4
+        with:
+          node-version-file: ".nvmrc"
+
+      - uses: pnpm/action-setup@v4
+        name: Install pnpm
+        with:
+          
+          run_install: false
+
+      - name: Get pnpm store directory
+        id: pnpm-cache
+        shell: bash
+        run: |
+          echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT
+
+      - uses: actions/cache@v4
+        name: Setup pnpm cache
+        with:
+          path: ${{ steps.pnpm-cache.outputs.STORE_PATH }}
+          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-pnpm-store-
+
+      - name: Install dependencies
+        run: |
+          cd ${{ github.workspace }}
+          pnpm install --frozen-lockfile --filter @unraid/connect-plugin
+
+      - name: Download Unraid Web Components
+        uses: actions/download-artifact@v4
+        with:
+          pattern: unraid-wc-*
+          path: ./plugin/source/dynamix.unraid.net/usr/local/emhttp/plugins/dynamix.my.servers/unraid-components
+          merge-multiple: true
+      - name: Download Unraid API
+        uses: actions/download-artifact@v4
+        with:
+          name: unraid-api
+          path: /tmp/unraid-api/
+      - name: Extract Unraid API and Build Plugin
+        id: build-plugin
+        run: |
+          tar -xzf /tmp/unraid-api/unraid-api.tgz -C ${{ github.workspace }}/plugin/source/dynamix.unraid.net/usr/local/unraid-api
+          cd ${{ github.workspace }}/plugin
+
+          if [ -n "${{ github.event.pull_request.number }}" ]; then
+            export TAG=PR${{ github.event.pull_request.number }}
+            # Put tag into github env
+            echo "TAG=${TAG}" >> $GITHUB_OUTPUT
+          fi
+
+          pnpm run build
+      - name: Upload binary txz and plg to Github artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: connect-files
+          path: |
+            plugin/deploy/release/plugins/
+            plugin/deploy/release/archive/*.txz
+          retention-days: 5
+          if-no-files-found: error
+
+  release-pull-request:
+    if: |
+      github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    needs: [test-api, build-plugin]
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v4
+
+      - name: Make PR Release Folder
+        run: mkdir pr-release/
+
+      - name: Download plugin binary tgz
+        uses: actions/download-artifact@v4
+        with:
+          name: connect-files
+
+      - name: Copy other release files to pr-release
+        run: |
+          cp archive/*.txz pr-release/
+          cp plugins/pr/dynamix.unraid.net.plg pr-release/dynamix.unraid.net.plg
+
+      - name: Upload to Cloudflare
+        uses: jakejarvis/s3-sync-action@v0.5.1
+        env:
+          AWS_S3_ENDPOINT: ${{ secrets.CF_ENDPOINT }}
+          AWS_S3_BUCKET: ${{ secrets.CF_BUCKET_PREVIEW }}
+          AWS_ACCESS_KEY_ID: ${{ secrets.CF_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.CF_SECRET_ACCESS_KEY }}
+          AWS_REGION: "auto"
+          SOURCE_DIR: pr-release
+          DEST_DIR: unraid-api/tag/${{ needs.build-plugin.outputs.tag }}
+      - name: Comment URL
+        uses: thollander/actions-comment-pull-request@v3
+        with:
+          comment-tag: prlink
+          mode: recreate
+          message: |
+            This plugin has been deployed to Cloudflare R2 and is available for testing.
+            Download it at this URL:
+            ```
+            https://preview.dl.unraid.net/unraid-api/tag/${{ needs.build-plugin.outputs.tag }}/dynamix.unraid.net.plg
+            ```
+
+  release-staging:
+    environment:
+      name: staging
+    # Only release if this is a push to the main branch
+    if: startsWith(github.ref, 'refs/heads/main')
+    runs-on: ubuntu-latest
+    needs: [test-api, build-plugin]
+
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v4
+
+      - name: Make Staging Release Folder
+        run: mkdir staging-release/
+
+      - name: Download plugin binary tgz
+        uses: actions/download-artifact@v4
+        with:
+          name: connect-files
+
+      - name: Copy Files for Staging Release
+        run: |
+          cp archive/*.txz staging-release/
+          cp plugins/staging/dynamix.unraid.net.plg staging-release/dynamix.unraid.net.plg
+          ls -al staging-release
+
+      - name: Upload Staging Plugin to Cloudflare Bucket
+        uses: jakejarvis/s3-sync-action@v0.5.1
+        env:
+          AWS_S3_ENDPOINT: ${{ secrets.CF_ENDPOINT }}
+          AWS_S3_BUCKET: ${{ secrets.CF_BUCKET_PREVIEW }}
+          AWS_ACCESS_KEY_ID: ${{ secrets.CF_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.CF_SECRET_ACCESS_KEY }}
+          AWS_REGION: "auto"
+          SOURCE_DIR: staging-release
+          DEST_DIR: unraid-api
+
+  create-draft-release:
+    # Only run if release-please created a release
+    if: needs.release-please.outputs.releases_created == 'true'
+    runs-on: ubuntu-latest
+    needs: [release-please, test-api, build-plugin]
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v4
+
+      - name: Download plugin binary tgz
+        uses: actions/download-artifact@v4
+        with:
+          name: connect-files
+
+      - name: Move Files to Release Folder
+        run: |
+          mkdir -p release/
+          mv plugins/production/dynamix.unraid.net.plg release/
+          mv archive/*.txz release/
+
+      - name: Upload Release Assets
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          release_name=$(gh release list --repo ${{ github.repository }} --json name,isDraft --jq '.[] | select(.isDraft == true) | .name' | head -n 1)
+          # For each file in release directory
+          for file in release/*; do
+            echo "Uploading $file to release..."
+            gh release upload "${release_name}" "$file" --clobber
+          done

.github/workflows/push-staging-pr-on-close.yml

@@ -4,68 +4,43 @@ on:
   pull_request:
     types:
       - closed
-  workflow_dispatch:
-    inputs:
-      pr_number:
-        description: "PR number to test with"
-        required: true
-        type: string
-      pr_merged:
-        description: "Simulate merged PR"
-        required: true
-        type: boolean
-        default: true
 
 jobs:
   push-staging:
-    if: (github.event_name == 'pull_request' && github.event.pull_request.merged == true) || (github.event_name == 'workflow_dispatch' && inputs.pr_merged == true)
+    if: github.event.pull_request.merged == true
     runs-on: ubuntu-latest
     permissions:
       contents: read
-      actions: read
     steps:
       - name: Set Timezone
-        uses: szenius/set-timezone@v2.0
+        uses: szenius/set-timezone@v1.2
         with:
           timezoneLinux: "America/Los_Angeles"
-
-      - name: Set PR number
-        id: pr_number
-        run: |
-          if [ "${{ github.event_name }}" == "pull_request" ]; then
-            echo "pr_number=${{ github.event.pull_request.number }}" >> $GITHUB_OUTPUT
-          else
-            echo "pr_number=${{ inputs.pr_number }}" >> $GITHUB_OUTPUT
-          fi
+      - name: Checkout repo
+        uses: actions/checkout@v4
+        with:
+          ref: refs/pull/${{ github.event.pull_request.base.ref }}/merge
 
       - name: Download artifact
-        uses: dawidd6/action-download-artifact@v11
+        uses: actions/download-artifact@v4
         with:
-          name_is_regexp: true
-          name: unraid-plugin-.*
+          name: connect-files
           path: connect-files
-          pr: ${{ steps.pr_number.outputs.pr_number }}
-          workflow_conclusion: success
-          workflow_search: true
-          search_artifacts: true
 
       - name: Update Downloaded Staging Plugin to New Date
         run: |
-          # Find the .plg file in the downloaded artifact
-          plgfile=$(find connect-files -name "*.plg" -type f | head -1)
-          if [ ! -f "$plgfile" ]; then
-            echo "ERROR: .plg file not found in connect-files/"
-            ls -la connect-files/
+          if [ ! -f "connect-files/plugins/dynamix.unraid.net.pr.plg" ]; then
+            echo "ERROR: dynamix.unraid.net.pr.plg not found"
             exit 1
           fi
 
-          echo "Found plugin file: $plgfile"
+          plgfile="connect-files/plugins/dynamix.unraid.net.pr.plg"
           version=$(date +"%Y.%m.%d.%H%M")
           sed -i -E "s#(<!ENTITY version \").*(\">)#\1${version}\2#g" "${plgfile}" || exit 1
                 
           # Change the plugin url to point to staging
           url="https://preview.dl.unraid.net/unraid-api/dynamix.unraid.net.plg"
-          sed -i -E "s#(<!ENTITY plugin_url \").*?(\">)#\1${url}\2#g" "${plgfile}" || exit 1
+          sed -i -E "s#(<!ENTITY pluginURL \").*(\">)#\1${url}\2#g" "${plgfile}" || exit 1
           cat "${plgfile}"
           mkdir -p pr-release
           mv "${plgfile}" pr-release/dynamix.unraid.net.plg
@@ -79,4 +54,4 @@ jobs:
           AWS_SECRET_ACCESS_KEY: ${{ secrets.CF_SECRET_ACCESS_KEY }}
           AWS_REGION: "auto"
           SOURCE_DIR: pr-release
-          DEST_DIR: unraid-api/tag/PR${{ steps.pr_number.outputs.pr_number }}
+          DEST_DIR: unraid-api/pr/${{ github.event.pull_request.number }}

.github/workflows/release-production.yml

@@ -1,14 +1,11 @@
-name: Publish Release
+name: Publish Release to Digital Ocean
 
 on:
-  workflow_dispatch:
-    inputs:
-      version:
-        description: 'Tag to release - will replace active release'
-        required: true
+  release:
+    types: [published]
 
 jobs:
-  publish:
+  publish-to-digital-ocean:
     runs-on: ubuntu-latest
 
     steps:
@@ -19,7 +16,7 @@ jobs:
           regex: true
           token: ${{ secrets.GITHUB_TOKEN }}
           target: "./"
-          version: ${{ inputs.version && format('tags/{0}', inputs.version) || 'latest' }}
+          version: "latest"
 
       - uses: cardinalby/git-get-release-action@v1
         id: release-info
@@ -28,112 +25,32 @@ jobs:
         with:
           latest: true
           prerelease: false
-      - uses: actions/setup-node@v4
-        with:
-          node-version: '22.18.0'
-      - run: |
-          cat << 'EOF' > release-notes.txt
+      - name: Get Release Changelog
+        run: |
+          notes=$(cat << EOF
           ${{ steps.release-info.outputs.body }}
           EOF
-      - run: npm install html-escaper@2 xml2js
-      - name: Update Plugin Changelog
-        uses: actions/github-script@v8
+          )
+          escapedNotes=$(sed -e 's/[&\\/]/\\&/g; s/$/\\/' -e '$s/\\$//' <<<"$notes")
+          sed -i -z -E "s/<CHANGES>(.*)<\/CHANGES>/<CHANGES>\n${escapedNotes}\n<\/CHANGES>/g" "dynamix.unraid.net.plg"
+
+      - name: Upload All Release Files to DO Spaces
+        uses: BetaHuhn/do-spaces-action@v2
         with:
-          script: |
-            const fs = require('fs');
-            const { escape } = require('html-escaper');
+          access_key: ${{ secrets.DO_ACCESS_KEY }}
+          secret_key: ${{ secrets.DO_SECRET_KEY }}
+          space_name: ${{ secrets.DO_SPACE_NAME }}
+          space_region: ${{ secrets.DO_SPACE_REGION }}
+          source: "."
+          out_dir: unraid-api
 
-            const releaseNotes = escape(fs.readFileSync('release-notes.txt', 'utf8'));
-            
-            if (!releaseNotes) {
-              console.error('No release notes found');
-              process.exit(1);
-            }
-
-            // Read the plugin file
-            const pluginPath = 'dynamix.unraid.net.plg';
-
-            if (!fs.existsSync(pluginPath)) {
-              console.error('Plugin file not found:', pluginPath);
-              process.exit(1);
-            }
-            
-            let pluginContent = fs.readFileSync(pluginPath, 'utf8');
-            
-            // Replace the changelog section using CDATA
-            pluginContent = pluginContent.replace(
-              /<CHANGES>[\s\S]*?<\/CHANGES>/,
-              `<CHANGES>\n${releaseNotes}\n</CHANGES>`
-            );
-            
-            // Validate the plugin file is valid XML
-            const xml2js = require('xml2js');
-            const parser = new xml2js.Parser({
-              explicitCharkey: true,
-              trim: true,
-              explicitRoot: true,
-              explicitArray: false,
-              attrkey: 'ATTR',
-              charkey: 'TEXT',
-              xmlnskey: 'XMLNS',
-              normalizeTags: false,
-              normalize: false,
-              strict: false // Try with less strict parsing
-            });
-            parser.parseStringPromise(pluginContent).then((result) => {
-              if (!result) {
-                console.error('Plugin file is not valid XML');
-                process.exit(1);
-              }
-              console.log('Plugin file is valid XML');
-
-              // Write back to file
-              fs.writeFileSync(pluginPath, pluginContent);
-            }).catch((err) => {
-              console.error('Plugin file is not valid XML', err);
-              process.exit(1);
-            });
-
-      - name: Cleanup Inline Scripts
-        run: |
-          rm -rf node_modules/
-      - name: Upload Release Files to DO Spaces
-        env:
-          AWS_ACCESS_KEY_ID: ${{ secrets.DO_ACCESS_KEY }}
-          AWS_SECRET_ACCESS_KEY: ${{ secrets.DO_SECRET_KEY }}
-          AWS_DEFAULT_REGION: ${{ secrets.DO_SPACE_REGION }}
-          AWS_ENDPOINT_URL: https://${{ secrets.DO_SPACE_REGION }}.digitaloceanspaces.com
-        run: |
-          # Upload files with explicit content encoding and public-read ACL
-          aws s3 sync . s3://${{ secrets.DO_SPACE_NAME }}/unraid-api \
-            --checksum-algorithm CRC32 \
-            --no-guess-mime-type \
-            --content-encoding none \
-            --acl public-read
-
-      - name: Upload Release Files to Cloudflare Bucket
+      - name: Upload Staging Plugin to Cloudflare Bucket
+        uses: jakejarvis/s3-sync-action@v0.5.1
         env:
+          AWS_S3_ENDPOINT: ${{ secrets.CF_ENDPOINT }}
+          AWS_S3_BUCKET: ${{ secrets.CF_BUCKET }}
           AWS_ACCESS_KEY_ID: ${{ secrets.CF_ACCESS_KEY_ID }}
           AWS_SECRET_ACCESS_KEY: ${{ secrets.CF_SECRET_ACCESS_KEY }}
-          AWS_DEFAULT_REGION: auto
-          AWS_ENDPOINT_URL: ${{ secrets.CF_ENDPOINT }}
-        run: |
-          # Upload files with explicit content encoding and public-read ACL
-          aws s3 sync . s3://${{ secrets.CF_BUCKET }}/unraid-api \
-            --checksum-algorithm CRC32 \
-            --no-guess-mime-type \
-            --content-encoding none \
-            --acl public-read
-
-      - name: Actions for Discord
-        uses: Ilshidur/action-discord@0.4.0
-        env:
-          DISCORD_WEBHOOK: ${{ secrets.PUBLIC_DISCORD_RELEASE_ENDPOINT }}
-        with:
-          args: |
-            🚀 **Unraid API Release ${{ inputs.version }}**
-            
-            View Release: https://github.com/${{ github.repository }}/releases/tag/${{ inputs.version }}
-            
-            **Changelog:**
-            ${{ steps.release-info.outputs.body }}
+          AWS_REGION: 'auto'
+          SOURCE_DIR: "."
+          DEST_DIR: unraid-api

.github/workflows/test-libvirt.yml

@@ -22,16 +22,16 @@ jobs:
         working-directory: ./libvirt
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v4
         with:
           submodules: recursive
 
       - uses: actions/setup-python@v5
         with:
-          python-version: "3.13.7"
+          python-version: "3.10"
 
       - name: Cache APT Packages
-        uses: awalsh128/cache-apt-pkgs-action@v1.5.3
+        uses: awalsh128/cache-apt-pkgs-action@v1.4.3
         with:
           packages: libvirt-dev
           version: 1.0
@@ -44,7 +44,7 @@ jobs:
       - name: Install pnpm
         uses: pnpm/action-setup@v4
         with:
-          version: 10.15.0
+          version: 10
           run_install: false
 
       - name: Get pnpm store directory

.gitignore

@@ -29,10 +29,6 @@ unraid-ui/node_modules/
 # TypeScript v1 declaration files
 typings/
 
-# Auto-generated type declarations for Nuxt UI
-auto-imports.d.ts
-components.d.ts
-
 # Optional npm cache directory
 .npm
 
@@ -80,9 +76,6 @@ typescript
 # Github actions
 RELEASE_NOTES.md
 
-# Test backups
-api/dev/configs/api.json.backup
-
 # Docker Deploy Folder
 deploy/*
 !deploy/.gitkeep
@@ -95,31 +88,10 @@ deploy/*
 .nitro
 .cache
 .output
+.env*
 !.env.example
 
 fb_keepalive
 
 # pnpm store
 .pnpm-store
-
-# Nix
-result
-result-*
-.direnv/
-.envrc
-
-# Webgui sync script helpers
-web/scripts/.sync-webgui-repo-*
-
-# Activation code data
-plugin/source/dynamix.unraid.net/usr/local/emhttp/plugins/dynamix.my.servers/data/activation-data.php
-
-# Config file that changes between versions
-api/dev/Unraid.net/myservers.cfg
-
-# Claude local settings
-.claude/settings.local.json
-
-# local Mise settings
-.mise.toml
-

.husky/_/pre-commit

@@ -1,12 +0,0 @@
-#!/bin/sh
-
-if [ "$SKIP_SIMPLE_GIT_HOOKS" = "1" ]; then
-    echo "[INFO] SKIP_SIMPLE_GIT_HOOKS is set to 1, skipping hook."
-    exit 0
-fi
-
-if [ -f "$SIMPLE_GIT_HOOKS_RC" ]; then
-    . "$SIMPLE_GIT_HOOKS_RC"
-fi
-
-pnpm lint-staged

.npmrc

@@ -1 +0,0 @@
- 

.nvmrc

@@ -1 +1 @@
-22.18.0
+20

.rclone-version

@@ -1 +0,0 @@
-1.69.1 

.release-please-manifest.json

@@ -1 +1 @@
-{".":"4.20.1"}
+{"api":"4.1.2","web":"4.1.2","unraid-ui":"4.1.2","plugin":"4.1.2"}

.vscode/settings.json

@@ -0,0 +1,15 @@
+{
+    "files.associations": {
+      "*.page": "php"
+    },
+    "editor.codeActionsOnSave": {
+      "source.fixAll": "never",
+      "source.fixAll.eslint": "explicit"
+    },
+    "i18n-ally.localesPaths": [
+      "locales"
+    ],
+    "i18n-ally.keystyle": "flat",
+    "eslint.experimental.useFlatConfig": true
+  }
+  

.vscode/sftp-template.json

@@ -0,0 +1,22 @@
+{
+    "_comment": "rename this file to .vscode/sftp.json and replace name/host/privateKeyPath for your system",
+    "name": "Tower",
+    "host": "Tower.local",
+    "protocol": "sftp",
+    "port": 22,
+    "username": "root",
+    "privateKeyPath": "C:/Users/username/.ssh/tower",
+    "remotePath": "/",
+    "context": "plugin/source/dynamix.unraid.net/",
+    "uploadOnSave": true,
+    "useTempFile": false,
+    "openSsh": false,
+    "ignore": [
+      "// comment: ignore dot files/dirs in root of repo",
+      ".github",
+      ".vscode",
+      ".git",
+      ".DS_Store"
+    ]
+  }
+  

@tailwind-shared/base-utilities.css

@@ -1,96 +0,0 @@
-@custom-variant dark (&:where(.dark, .dark *));
-
-/* Utility defaults for web components (when we were using shadow DOM) */
-:host {
-    --tw-divide-y-reverse: 0;
-    --tw-border-style: solid;
-    --tw-font-weight: initial;
-    --tw-tracking: initial;
-    --tw-translate-x: 0;
-    --tw-translate-y: 0;
-    --tw-translate-z: 0;
-    --tw-rotate-x: rotateX(0);
-    --tw-rotate-y: rotateY(0);
-    --tw-rotate-z: rotateZ(0);
-    --tw-skew-x: skewX(0);
-    --tw-skew-y: skewY(0);
-    --tw-space-x-reverse: 0;
-    --tw-gradient-position: initial;
-    --tw-gradient-from: #0000;
-    --tw-gradient-via: #0000;
-    --tw-gradient-to: #0000;
-    --tw-gradient-stops: initial;
-    --tw-gradient-via-stops: initial;
-    --tw-gradient-from-position: 0%;
-    --tw-gradient-via-position: 50%;
-    --tw-gradient-to-position: 100%;
-    --tw-shadow: 0 0 #0000;
-    --tw-shadow-color: initial;
-    --tw-inset-shadow: 0 0 #0000;
-    --tw-inset-shadow-color: initial;
-    --tw-ring-color: initial;
-    --tw-ring-shadow: 0 0 #0000;
-    --tw-inset-ring-color: initial;
-    --tw-inset-ring-shadow: 0 0 #0000;
-    --tw-ring-inset: initial;
-    --tw-ring-offset-width: 0px;
-    --tw-ring-offset-color: #fff;
-    --tw-ring-offset-shadow: 0 0 #0000;
-    --tw-blur: initial;
-    --tw-brightness: initial;
-    --tw-contrast: initial;
-    --tw-grayscale: initial;
-    --tw-hue-rotate: initial;
-    --tw-invert: initial;
-    --tw-opacity: initial;
-    --tw-saturate: initial;
-    --tw-sepia: initial;
-    --tw-drop-shadow: initial;
-    --tw-duration: initial;
-    --tw-ease: initial;
-}
-
-/* Global border color - this is what's causing the issue! */
-/* Commenting out since it affects all elements globally
-*,
-::after,
-::before,
-::backdrop,
-::file-selector-button {
-  border-color: hsl(var(--border));
-}
-*/
-
-body {
-    --color-alpha: #1c1b1b;
-    --color-beta: #f2f2f2;
-    --color-gamma: #999999;
-    --color-gamma-opaque: rgba(153, 153, 153, 0.5);
-    --color-customgradient-start: rgba(242, 242, 242, 0);
-    --color-customgradient-end: rgba(242, 242, 242, 0.85);
-    --shadow-beta: 0 25px 50px -12px rgba(242, 242, 242, 0.15);
-    --ring-offset-shadow: 0 0 var(--color-beta);
-    --ring-shadow: 0 0 var(--color-beta);
-  }
-
-button:not(:disabled),
-[role='button']:not(:disabled) {
-  cursor: pointer;
-}
-
-/* Font size overrides for SSO button component */
-unraid-sso-button {
-  --text-xs: 0.75rem;
-  --text-sm: 0.875rem;
-  --text-base: 1rem;
-  --text-lg: 1.125rem;
-  --text-xl: 1.25rem;
-  --text-2xl: 1.5rem;
-  --text-3xl: 1.875rem;
-  --text-4xl: 2.25rem;
-  --text-5xl: 3rem;
-  --text-6xl: 3.75rem;
-  --text-7xl: 4.5rem;
-  --text-8xl: 6rem;
-  --text-9xl: 8rem;
-}

@tailwind-shared/css-variables.css

@@ -1,144 +0,0 @@
-/* Hybrid theme system: Native CSS + Theme Store fallback */
-
-/* Light mode defaults */
-:root {
-    /* Nuxt UI Color System - Primary (Orange for Unraid) */
-    --ui-color-primary-50: #fff7ed;
-    --ui-color-primary-100: #ffedd5;
-    --ui-color-primary-200: #fed7aa;
-    --ui-color-primary-300: #fdba74;
-    --ui-color-primary-400: #fb923c;
-    --ui-color-primary-500: #ff8c2f;
-    --ui-color-primary-600: #ea580c;
-    --ui-color-primary-700: #c2410c;
-    --ui-color-primary-800: #9a3412;
-    --ui-color-primary-900: #7c2d12;
-    --ui-color-primary-950: #431407;
-
-    /* Nuxt UI Color System - Neutral (True Gray) */
-    --ui-color-neutral-50: #fafafa;
-    --ui-color-neutral-100: #f5f5f5;
-    --ui-color-neutral-200: #e5e5e5;
-    --ui-color-neutral-300: #d4d4d4;
-    --ui-color-neutral-400: #a3a3a3;
-    --ui-color-neutral-500: #737373;
-    --ui-color-neutral-600: #525252;
-    --ui-color-neutral-700: #404040;
-    --ui-color-neutral-800: #262626;
-    --ui-color-neutral-900: #171717;
-    --ui-color-neutral-950: #0a0a0a;
-
-    /* Nuxt UI Default color shades */
-    --ui-primary: var(--ui-color-primary-500);
-    --ui-secondary: var(--ui-color-neutral-500);
-    
-    /* Nuxt UI Design Tokens - Text */
-    --ui-text-dimmed: var(--ui-color-neutral-400);
-    --ui-text-muted: var(--ui-color-neutral-500);
-    --ui-text-toned: var(--ui-color-neutral-600);
-    --ui-text: var(--ui-color-neutral-700);
-    --ui-text-highlighted: var(--ui-color-neutral-900);
-    --ui-text-inverted: white;
-
-    /* Nuxt UI Design Tokens - Background */
-    --ui-bg: white;
-    --ui-bg-muted: var(--ui-color-neutral-50);
-    --ui-bg-elevated: var(--ui-color-neutral-100);
-    --ui-bg-accented: var(--ui-color-neutral-200);
-    --ui-bg-inverted: var(--ui-color-neutral-900);
-
-    /* Nuxt UI Design Tokens - Border */
-    --ui-border: var(--ui-color-neutral-200);
-    --ui-border-muted: var(--ui-color-neutral-200);
-    --ui-border-accented: var(--ui-color-neutral-300);
-    --ui-border-inverted: var(--ui-color-neutral-900);
-
-    /* Nuxt UI Radius */
-    --ui-radius: 0.5rem;
-    
-    --background: 0 0% 100%;
-    --foreground: 0 0% 3.9%;
-    --muted: 0 0% 96.1%;
-    --muted-foreground: 0 0% 45.1%;
-    --popover: 0 0% 100%;
-    --popover-foreground: 0 0% 3.9%;
-    --card: 0 0% 100%;
-    --card-foreground: 0 0% 3.9%;
-    --border: 0 0% 89.8%;
-    --input: 0 0% 89.8%;
-    --primary: 24 100% 50%; /* Orange #ff8c2f in HSL */
-    --primary-foreground: 0 0% 98%;
-    --secondary: 0 0% 96.1%;
-    --secondary-foreground: 0 0% 9%;
-    --accent: 0 0% 96.1%;
-    --accent-foreground: 0 0% 9%;
-    --destructive: 0 84.2% 60.2%;
-    --destructive-foreground: 0 0% 98%;
-    --ring: 24 100% 50%; /* Orange ring to match primary */
-    --chart-1: 12 76% 61%;
-    --chart-2: 173 58% 39%;
-    --chart-3: 197 37% 24%;
-    --chart-4: 43 74% 66%;
-    --chart-5: 27 87% 67%;
-  }
-
-  /* Dark mode */
-  .dark {
-    /* Nuxt UI Default color shades - Dark mode */
-    --ui-primary: var(--ui-color-primary-400);
-    --ui-secondary: var(--ui-color-neutral-400);
-    
-    /* Nuxt UI Design Tokens - Text (Dark) */
-    --ui-text-dimmed: var(--ui-color-neutral-500);
-    --ui-text-muted: var(--ui-color-neutral-400);
-    --ui-text-toned: var(--ui-color-neutral-300);
-    --ui-text: var(--ui-color-neutral-200);
-    --ui-text-highlighted: white;
-    --ui-text-inverted: var(--ui-color-neutral-900);
-
-    /* Nuxt UI Design Tokens - Background (Dark) */
-    --ui-bg: var(--ui-color-neutral-900);
-    --ui-bg-muted: var(--ui-color-neutral-800);
-    --ui-bg-elevated: var(--ui-color-neutral-800);
-    --ui-bg-accented: var(--ui-color-neutral-700);
-    --ui-bg-inverted: white;
-
-    /* Nuxt UI Design Tokens - Border (Dark) */
-    --ui-border: var(--ui-color-neutral-800);
-    --ui-border-muted: var(--ui-color-neutral-700);
-    --ui-border-accented: var(--ui-color-neutral-700);
-    --ui-border-inverted: white;
-    
-    --background: 0 0% 3.9%;
-    --foreground: 0 0% 98%;
-    --muted: 0 0% 14.9%;
-    --muted-foreground: 0 0% 63.9%;
-    --popover: 0 0% 3.9%;
-    --popover-foreground: 0 0% 98%;
-    --card: 0 0% 3.9%;
-    --card-foreground: 0 0% 98%;
-    --border: 0 0% 14.9%;
-    --input: 0 0% 14.9%;
-    --primary: 24 100% 50%; /* Orange #ff8c2f in HSL */
-    --primary-foreground: 0 0% 98%;
-    --secondary: 0 0% 14.9%;
-    --secondary-foreground: 0 0% 98%;
-    --accent: 0 0% 14.9%;
-    --accent-foreground: 0 0% 98%;
-    --destructive: 0 62.8% 30.6%;
-    --destructive-foreground: 0 0% 98%;
-    --ring: 24 100% 50%; /* Orange ring to match primary */
-    --chart-1: 220 70% 50%;
-    --chart-2: 160 60% 45%;
-    --chart-3: 30 80% 55%;
-    --chart-4: 280 65% 60%;
-    --chart-5: 340 75% 55%;
-  }
-
-  /* Alternative class-based dark mode support for specific Unraid themes */
-  .dark[data-theme='black'],
-  .dark[data-theme='gray'] {
-    --background: 0 0% 3.9%;
-    --foreground: 0 0% 98%;
-    --border: 0 0% 14.9%;
-  }

@tailwind-shared/index.css

@@ -1,6 +0,0 @@
-/* Tailwind Shared Styles - Single entry point for all shared CSS */
-@import './css-variables.css';
-@import './unraid-theme.css';
-@import './theme-variants.css';
-@import './base-utilities.css';
-@import './sonner.css';

@tailwind-shared/theme-variants.css

@@ -1,96 +0,0 @@
-/**
- * Tailwind v4 Theme Variants
- * Defines theme-specific CSS variables that can be switched via classes
- * These are applied dynamically based on the theme selected in GraphQL
- */
-
-/* Default/White Theme */
-:root,
-.theme-white {
-  --header-text-primary: #ffffff;
-  --header-text-secondary: #999999;
-  --header-background-color: #1c1b1b;
-  --header-gradient-start: rgba(28, 27, 27, 0);
-  --header-gradient-end: rgba(28, 27, 27, 0.7);
-  --ui-border-muted: hsl(240 5% 20%);
-  --color-border: #383735;
-  --color-alpha: #ff8c2f;
-  --color-beta: #1c1b1b;
-  --color-gamma: #ffffff;
-  --color-gamma-opaque: rgba(255, 255, 255, 0.3);
-}
-
-/* Black Theme */
-.theme-black,
-.theme-black.dark {
-  --header-text-primary: #1c1b1b;
-  --header-text-secondary: #999999;
-  --header-background-color: #f2f2f2;
-  --header-gradient-start: rgba(242, 242, 242, 0);
-  --header-gradient-end: rgba(242, 242, 242, 0.7);
-  --ui-border-muted: hsl(240 5.9% 90%);
-  --color-border: #e0e0e0;
-  --color-alpha: #ff8c2f;
-  --color-beta: #f2f2f2;
-  --color-gamma: #1c1b1b;
-  --color-gamma-opaque: rgba(28, 27, 27, 0.3);
-}
-
-/* Gray Theme */
-.theme-gray {
-  --header-text-primary: #ffffff;
-  --header-text-secondary: #999999;
-  --header-background-color: #1c1b1b;
-  --header-gradient-start: rgba(28, 27, 27, 0);
-  --header-gradient-end: rgba(28, 27, 27, 0.7);
-  --ui-border-muted: hsl(240 5% 25%);
-  --color-border: #383735;
-  --color-alpha: #ff8c2f;
-  --color-beta: #383735;
-  --color-gamma: #ffffff;
-  --color-gamma-opaque: rgba(255, 255, 255, 0.3);
-}
-
-/* Azure Theme */
-.theme-azure {
-  --header-text-primary: #1c1b1b;
-  --header-text-secondary: #999999;
-  --header-background-color: #f2f2f2;
-  --header-gradient-start: rgba(242, 242, 242, 0);
-  --header-gradient-end: rgba(242, 242, 242, 0.7);
-  --ui-border-muted: hsl(210 40% 80%);
-  --color-border: #5a8bb8;
-  --color-alpha: #ff8c2f;
-  --color-beta: #e7f2f8;
-  --color-gamma: #336699;
-  --color-gamma-opaque: rgba(51, 102, 153, 0.3);
-}
-
-/* Dark Mode Overrides */
-.dark {
-  --ui-border-muted: hsl(240 5% 20%);
-  --color-border: #383735;
-}
-
-/* 
- * Dynamic color variables for user overrides from GraphQL
- * These are set via JavaScript and override the theme defaults
- */
-.has-custom-header-text {
-  --header-text-primary: var(--custom-header-text-primary);
-  --color-header-text-primary: var(--custom-header-text-primary);
-}
-
-.has-custom-header-meta {
-  --header-text-secondary: var(--custom-header-text-secondary);
-  --color-header-text-secondary: var(--custom-header-text-secondary);
-}
-
-.has-custom-header-bg {
-  --header-background-color: var(--custom-header-background-color);
-  --color-header-background: var(--custom-header-background-color);
-  --header-gradient-start: var(--custom-header-gradient-start);
-  --header-gradient-end: var(--custom-header-gradient-end);
-  --color-header-gradient-start: var(--custom-header-gradient-start);
-  --color-header-gradient-end: var(--custom-header-gradient-end);
-}

@tailwind-shared/unraid-theme.css

@@ -1,280 +0,0 @@
-@theme static {
-  /* Breakpoints */
-  --breakpoint-xs: 30rem;
-  --breakpoint-2xl: 100rem;
-  --breakpoint-3xl: 120rem;
-  /* Container settings */
-  --container-center: true;
-  --container-padding: 2rem;
-  --container-screen-2xl: 1400px;
-
-  /* Font families */
-  --font-sans:
-    clear-sans, ui-sans-serif, system-ui, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji',
-    'Segoe UI Symbol', 'Noto Color Emoji';
-
-  /* Grid template columns */
-  --grid-template-columns-settings: 35% 1fr;
-
-  /* Border color default */
-  --default-border-color: var(--color-border);
-  --ui-border-muted: hsl(var(--border));
-  --ui-radius: 0.5rem;
-  --ui-primary: var(--color-primary-500);
-  --ui-primary-hover: var(--color-primary-600);
-  --ui-primary-active: var(--color-primary-700);
-
-  /* Color palette */
-  --color-inherit: inherit;
-  --color-transparent: transparent;
-  --color-black: #1c1b1b;
-  --color-grey-darkest: #222;
-  --color-grey-darker: #606f7b;
-  --color-grey-dark: #383735;
-  --color-grey-mid: #999999;
-  --color-grey: #e0e0e0;
-  --color-grey-light: #dae1e7;
-  --color-grey-lighter: #f1f5f8;
-  --color-grey-lightest: #f2f2f2;
-  --color-white: #ffffff;
-
-  /* Unraid colors */
-  --color-yellow-accent: #e9bf41;
-  --color-orange-dark: #f15a2c;
-  --color-orange: #ff8c2f;
-
-  /* Unraid red palette */
-  --color-unraid-red: #e22828;
-  --color-unraid-red-50: #fef2f2;
-  --color-unraid-red-100: #ffe1e1;
-  --color-unraid-red-200: #ffc9c9;
-  --color-unraid-red-300: #fea3a3;
-  --color-unraid-red-400: #fc6d6d;
-  --color-unraid-red-500: #f43f3f;
-  --color-unraid-red-600: #e22828;
-  --color-unraid-red-700: #bd1818;
-  --color-unraid-red-800: #9c1818;
-  --color-unraid-red-900: #821a1a;
-  --color-unraid-red-950: #470808;
-
-  /* Unraid green palette */
-  --color-unraid-green: #63a659;
-  --color-unraid-green-50: #f5f9f4;
-  --color-unraid-green-100: #e7f3e5;
-  --color-unraid-green-200: #d0e6cc;
-  --color-unraid-green-300: #aad1a4;
-  --color-unraid-green-400: #7db474;
-  --color-unraid-green-500: #63a659;
-  --color-unraid-green-600: #457b3e;
-  --color-unraid-green-700: #396134;
-  --color-unraid-green-800: #314e2d;
-  --color-unraid-green-900: #284126;
-  --color-unraid-green-950: #122211;
-
-  /* Primary colors (orange) */
-  --color-primary-50: #fff7ed;
-  --color-primary-100: #ffedd5;
-  --color-primary-200: #fed7aa;
-  --color-primary-300: #fdba74;
-  --color-primary-400: #fb923c;
-  --color-primary-500: #ff6600;
-  --color-primary-600: #ea580c;
-  --color-primary-700: #c2410c;
-  --color-primary-800: #9a3412;
-  --color-primary-900: #7c2d12;
-  --color-primary-950: #431407;
-
-  /* Header colors - defaults will be overridden by theme */
-  --color-header-text-primary: var(--header-text-primary, #1c1c1c);
-  --color-header-text-secondary: var(--header-text-secondary, #999999);
-  --color-header-background: var(--header-background-color, #f2f2f2);
-
-  /* Legacy colors - defaults (overridden by theme-variants.css) */
-  --color-alpha: #ff8c2f;
-  --color-beta: #f2f2f2;
-  --color-gamma: #999999;
-  --color-gamma-opaque: rgba(153, 153, 153, 0.5);
-  --color-customgradient-start: rgba(242, 242, 242, 0);
-  --color-customgradient-end: rgba(242, 242, 242, 0.85);
-
-  /* Gradients - defaults (overridden by theme-variants.css) */
-  --color-header-gradient-start: rgba(242, 242, 242, 0);
-  --color-header-gradient-end: rgba(242, 242, 242, 0.85);
-  --color-banner-gradient: none;
-
-  /* Font sizes */
-  --font-10px: 10px;
-  --font-12px: 12px;
-  --font-14px: 14px;
-  --font-16px: 16px;
-  --font-18px: 18px;
-  --font-20px: 20px;
-  --font-24px: 24px;
-  --font-30px: 30px;
-
-  /* Spacing */
-  --spacing-4_5: 1.125rem;
-  --spacing--8px: -8px;
-  --spacing-2px: 2px;
-  --spacing-4px: 4px;
-  --spacing-6px: 6px;
-  --spacing-8px: 8px;
-  --spacing-10px: 10px;
-  --spacing-12px: 12px;
-  --spacing-14px: 14px;
-  --spacing-16px: 16px;
-  --spacing-20px: 20px;
-  --spacing-24px: 24px;
-  --spacing-28px: 28px;
-  --spacing-32px: 32px;
-  --spacing-36px: 36px;
-  --spacing-40px: 40px;
-  --spacing-64px: 64px;
-  --spacing-80px: 80px;
-  --spacing-90px: 90px;
-  --spacing-150px: 150px;
-  --spacing-160px: 160px;
-  --spacing-200px: 200px;
-  --spacing-260px: 260px;
-  --spacing-300px: 300px;
-  --spacing-310px: 310px;
-  --spacing-350px: 350px;
-  --spacing-448px: 448px;
-  --spacing-512px: 512px;
-  --spacing-640px: 640px;
-  --spacing-800px: 800px;
-
-  /* Width and Height values */
-  --width-36px: 36px;
-  --height-36px: 36px;
-
-  /* Min/Max widths */
-  --min-width-86px: 86px;
-  --min-width-160px: 160px;
-  --min-width-260px: 260px;
-  --min-width-300px: 300px;
-  --min-width-310px: 310px;
-  --min-width-350px: 350px;
-  --min-width-800px: 800px;
-
-  --max-width-86px: 86px;
-  --max-width-160px: 160px;
-  --max-width-260px: 260px;
-  --max-width-300px: 300px;
-  --max-width-310px: 310px;
-  --max-width-350px: 350px;
-  --max-width-640px: 640px;
-  --max-width-800px: 800px;
-  --max-width-1024px: 1024px;
-
-  /* Container sizes adjusted for 10px base font size (1.6x scale) */
-  --container-xs: 32rem;
-  --container-sm: 38.4rem;
-  --container-md: 44.8rem;
-  --container-lg: 51.2rem;
-  --container-xl: 57.6rem;
-  --container-2xl: 67.2rem;
-  --container-3xl: 76.8rem;
-  --container-4xl: 89.6rem;
-  --container-5xl: 102.4rem;
-  --container-6xl: 115.2rem;
-  --container-7xl: 128rem;
-  
-  /* Extended width scale for max-w-* utilities */
-  --width-5xl: 102.4rem;
-  --width-6xl: 115.2rem;
-  --width-7xl: 128rem;
-  --width-8xl: 140.8rem;
-  --width-9xl: 153.6rem;
-  --width-10xl: 166.4rem;
-
-  /* Animations */
-  --animate-mark-2: mark-2 1.5s ease infinite;
-  --animate-mark-3: mark-3 1.5s ease infinite;
-  --animate-mark-6: mark-6 1.5s ease infinite;
-  --animate-mark-7: mark-7 1.5s ease infinite;
-
-  /* Radius */
-  --radius: 0.5rem;
-
-  /* Text Resizing */
-  --text-xs: 1.2rem; /* 12px at 10px base */
-  --text-sm: 1.4rem; /* 14px at 10px base */
-  --text-base: 1.6rem; /* 16px at 10px base */
-  --text-lg: 1.8rem; /* 18px at 10px base */
-  --text-xl: 2rem; /* 20px at 10px base */
-  --text-2xl: 2.4rem; /* 24px at 10px base */
-  --text-3xl: 3rem; /* 30px at 10px base */
-  --text-4xl: 3.6rem; /* 36px at 10px base */
-  --text-5xl: 4.8rem; /* 48px at 10px base */
-  --text-6xl: 6rem; /* 60px at 10px base */
-  --text-7xl: 7.2rem; /* 72px at 10px base */
-  --text-8xl: 9.6rem; /* 96px at 10px base */
-  --text-9xl: 12.8rem; /* 128px at 10px base */
-  --spacing: 0.4rem; /* 4px at 10px base */
-}
-
-/* Keyframes */
-@keyframes mark-2 {
-  50% {
-    transform: translateY(-40px);
-  }
-  to {
-    transform: translateY(0);
-  }
-}
-
-@keyframes mark-3 {
-  50% {
-    transform: translateY(-62px);
-  }
-  to {
-    transform: translateY(0);
-  }
-}
-
-@keyframes mark-6 {
-  50% {
-    transform: translateY(40px);
-  }
-  to {
-    transform: translateY(0);
-  }
-}
-
-@keyframes mark-7 {
-  50% {
-    transform: translateY(62px);
-  }
-  to {
-    transform: translateY(0);
-  }
-}
-
-/* Theme colors that reference CSS variables */
-@theme inline {
-  --color-background: hsl(var(--background));
-  --color-foreground: hsl(var(--foreground));
-  --color-muted: hsl(var(--muted));
-  --color-muted-foreground: hsl(var(--muted-foreground));
-  --color-popover: hsl(var(--popover));
-  --color-popover-foreground: hsl(var(--popover-foreground));
-  --color-card: hsl(var(--card));
-  --color-card-foreground: hsl(var(--card-foreground));
-  --color-border: hsl(var(--border));
-  --color-input: hsl(var(--input));
-  --color-primary: hsl(var(--primary));
-  --color-primary-foreground: hsl(var(--primary-foreground));
-  --color-secondary: hsl(var(--secondary));
-  --color-secondary-foreground: hsl(var(--secondary-foreground));
-  --color-accent: hsl(var(--accent));
-  --color-accent-foreground: hsl(var(--accent-foreground));
-  --color-destructive: hsl(var(--destructive));
-  --color-destructive-foreground: hsl(var(--destructive-foreground));
-  --color-ring: hsl(var(--ring));
-  --color-chart-1: hsl(var(--chart-1, 12 76% 61%));
-  --color-chart-2: hsl(var(--chart-2, 173 58% 39%));
-  --color-chart-3: hsl(var(--chart-3, 197 37% 24%));
-  --color-chart-4: hsl(var(--chart-4, 43 74% 66%));
-  --color-chart-5: hsl(var(--chart-5, 27 87% 67%));
-}

CLAUDE.md

@@ -1,163 +0,0 @@
-# CLAUDE.md
-
-This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
-
-## Project Overview
-
-This is the Unraid API monorepo containing multiple packages that provide API functionality for Unraid servers. It uses pnpm workspaces with the following structure:
-
-- `/api` - Core NestJS API server with GraphQL
-- `/web` - Nuxt.js frontend application
-- `/unraid-ui` - Vue 3 component library
-- `/plugin` - Unraid plugin package (.plg)
-- `/packages` - Shared packages and API plugins
-
-## Essential Commands
-
-### Development
-
-```bash
-pnpm install              # Install all dependencies
-pnpm dev                  # Run all dev servers concurrently
-pnpm build                # Build all packages
-pnpm build:watch          # Watch mode with local plugin build
-```
-
-### Testing & Code Quality
-
-```bash
-pnpm test                 # Run all tests
-pnpm lint                 # Run linting
-pnpm lint:fix             # Fix linting issues
-pnpm type-check           # TypeScript type checking
-```
-
-### API Development
-
-```bash
-cd api && pnpm dev        # Run API server (http://localhost:3001)
-cd api && pnpm test:watch # Run tests in watch mode
-cd api && pnpm codegen    # Generate GraphQL types
-```
-
-### Deployment
-
-```bash
-pnpm unraid:deploy <SERVER_IP>  # Deploy all to Unraid server
-```
-
-### Developer Tools
-
-```bash
-unraid-api developer                       # Interactive prompt for tools
-unraid-api developer --sandbox true        # Enable GraphQL sandbox
-unraid-api developer --sandbox false       # Disable GraphQL sandbox
-unraid-api developer --enable-modal        # Enable modal testing tool
-unraid-api developer --disable-modal       # Disable modal testing tool
-```
-
-## Architecture Notes
-
-### API Structure (NestJS)
-
-- Modules: `auth`, `config`, `plugins`, `emhttp`, `monitoring`
-- GraphQL API with Apollo Server at `/graphql`
-- Redux store for state management in `src/store/`
-- Plugin system for extending functionality
-- Entry points: `src/index.ts` (server), `src/cli.ts` (CLI)
-
-### Key Patterns
-
-- TypeScript imports use `.js` extensions (ESM compatibility)
-- NestJS dependency injection with decorators
-- GraphQL schema-first approach with code generation
-- API plugins follow specific structure (see `api/docs/developer/api-plugins.md`)
-
-### Authentication
-
-- API key authentication via headers
-- Cookie-based session management
-- Keys stored in `/boot/config/plugins/unraid-api/`
-
-### Development Workflow
-
-1. Work Intent required before starting development
-2. Fork from `main` branch
-3. Reference Work Intent in PR
-4. No direct pushes to main
-
-### Debug Mode
-
-```bash
-LOG_LEVEL=debug unraid-api start --debug
-```
-
-Enables GraphQL playground at `http://tower.local/graphql`
-
-## Coding Guidelines
-
-### General Rules
-
-- Never add comments unless they are needed for clarity of function
-- Never add comments for obvious things, and avoid commenting when starting and ending code blocks
-- Be CONCISE, keep replies shorter than a paragraph if at all possible
-
-### API Development Rules (`api/**/*`)
-
-- Use pnpm ONLY for package management
-- Always run scripts from api/package.json unless requested
-- Prefer adding new files to the NestJS repo located at `api/src/unraid-api/` instead of the legacy code
-- Test suite is VITEST, do not use jest
-- Run tests with: `pnpm --filter ./api test`
-- Prefer to not mock simple dependencies
-
-### Web Development Rules (`web/**/*`)
-
-- Always run `pnpm codegen` for GraphQL code generation in the web directory
-- GraphQL queries must be placed in `.query.ts` files
-- GraphQL mutations must be placed in `.mutation.ts` files
-- All GraphQL under `web/` must follow this naming convention
-
-### Testing Guidelines
-
-#### General Testing Best Practices
-
-- **Error Testing:** Use `.rejects.toThrow()` without arguments to test that functions throw errors. Don't test exact error message strings unless the message format is specifically what you're testing
-- **Focus on Behavior:** Test what the code does, not implementation details like exact error message wording
-- **Avoid Brittleness:** Don't write tests that break when minor changes are made to error messages, log formats, or other non-essential details
-- **Use Mocks Correctly**: Mocks should be used as nouns, not verbs.
-
-#### Vue Component Testing
-
-- This is a Nuxt.js app but we are testing with vitest outside of the Nuxt environment
-- Nuxt is currently set to auto import so some vue files may need compute or ref imported
-- Use pnpm when running terminal commands and stay within the web directory
-- Tests are located under `web/__test__`, run with `pnpm test`
-- Use `mount` from Vue Test Utils for component testing
-- Stub complex child components that aren't the focus of the test
-- Mock external dependencies and services
-- Test component behavior and output, not implementation details
-- Use `createTestingPinia()` for mocking stores in components
-- Find elements with semantic queries like `find('button')` rather than data-test IDs
-- Use `await nextTick()` for DOM updates
-- Always await async operations before making assertions
-
-#### Store Testing with Pinia
-
-- Use `createPinia()` and `setActivePinia` when testing Store files
-- Only use `createTestingPinia` if you specifically need its testing features
-- Let stores initialize with their natural default state
-- Don't mock the store being tested
-- Ensure Vue reactivity imports are added to store files (computed, ref, watchEffect)
-- Place all mock declarations at the top level
-- Use factory functions for module mocks to avoid hoisting issues
-- Clear mocks between tests to ensure isolation
-
-## Development Memories
-
-- We are using tailwind v4 we do not need a tailwind config anymore 
-- always search the internet for tailwind v4 documentation when making tailwind related style changes
-- never run or restart the API server or web server. I will handle the lifecycle, simply wait and ask me to do this for you
-- Never use the `any` type. Always prefer proper typing
-- Avoid using casting whenever possible, prefer proper typing from the start
-- **IMPORTANT:** cache-manager v7 expects TTL values in **milliseconds**, not seconds. Always use milliseconds when setting cache TTL (e.g., 600000 for 10 minutes, not 600)

CONTRIBUTING.md

@@ -7,17 +7,6 @@ Thank you for your interest in contributing to Unraid Connect! We want to make c
 - Submitting a fix
 - Proposing new features
 
-## TypeScript Import Extensions in the API Directory
-
-When working with the API directory, you'll notice that TypeScript files are imported with `.js` extensions (e.g., `import { something } from './file.js'`) even though the actual files have `.ts` extensions. This is because:
-
-1. We use ECMAScript modules (ESM) in our TypeScript configuration
-2. When TypeScript compiles `.ts` files to `.js`, the import paths in the compiled code need to reference `.js` files
-3. TypeScript doesn't automatically change the extensions in import statements during compilation
-4. Using `.js` extensions in imports ensures that both TypeScript during development and Node.js in production can resolve the modules correctly
-
-This approach follows the [official TypeScript ESM recommendation](https://www.typescriptlang.org/docs/handbook/esm-node.html) and ensures compatibility across development and production environments.
-
 ## Development Process
 
 We use GitHub to host code, to track issues and feature requests, as well as accept pull requests.
@@ -58,14 +47,6 @@ We use GitHub to host code, to track issues and feature requests, as well as acc
 
 **Note:** Direct pushes to the main branch are not allowed. All changes must go through the PR process.
 
-## Developer Documentation
-
-For detailed information about development workflows, repository organization, and other technical details, please refer to our developer documentation:
-
-- [Development Guide](api/docs/developer/development.md) - Setup, building, and debugging instructions
-- [Development Workflows](api/docs/developer/workflows.md) - Detailed workflows for local development, building, and deployment
-- [Repository Organization](api/docs/developer/repo-organization.md) - High-level architecture and project structure
-
 ## Bug Reports and Feature Requests
 
 We use GitHub issues to track bugs and feature requests:

LICENSE.txt

@@ -1,352 +0,0 @@
-Project License Notice
-----------------------
-
-This project is licensed under the terms of the GNU General Public License version 2,
-**or (at your option) any later version** published by the Free Software Foundation.
-
-The full text of the GNU GPL v2.0 is provided below for reference.
-
-----------------------
-
-                    GNU GENERAL PUBLIC LICENSE
-                       Version 2, June 1991
-
- Copyright (C) 1989, 1991 Free Software Foundation, Inc.,
- <https://fsf.org/>
- Everyone is permitted to copy and distribute verbatim copies
- of this license document, but changing it is not allowed.
-
-                            Preamble
-
-  The licenses for most software are designed to take away your
-freedom to share and change it.  By contrast, the GNU General Public
-License is intended to guarantee your freedom to share and change free
-software--to make sure the software is free for all its users.  This
-General Public License applies to most of the Free Software
-Foundation's software and to any other program whose authors commit to
-using it.  (Some other Free Software Foundation software is covered by
-the GNU Lesser General Public License instead.)  You can apply it to
-your programs, too.
-
-  When we speak of free software, we are referring to freedom, not
-price.  Our General Public Licenses are designed to make sure that you
-have the freedom to distribute copies of free software (and charge for
-this service if you wish), that you receive source code or can get it
-if you want it, that you can change the software or use pieces of it
-in new free programs; and that you know you can do these things.
-
-  To protect your rights, we need to make restrictions that forbid
-anyone to deny you these rights or to ask you to surrender the rights.
-These restrictions translate to certain responsibilities for you if you
-distribute copies of the software, or if you modify it.
-
-  For example, if you distribute copies of such a program, whether
-gratis or for a fee, you must give the recipients all the rights that
-you have.  You must make sure that they, too, receive or can get the
-source code.  And you must show them these terms so they know their
-rights.
-
-  We protect your rights with two steps: (1) copyright the software, and
-(2) offer you this license which gives you legal permission to copy,
-distribute and/or modify the software.
-
-  Also, for each author's protection and ours, we want to make certain
-that everyone understands that there is no warranty for this free
-software.  If the software is modified by someone else and passed on, we
-want its recipients to know that what they have is not the original, so
-that any problems introduced by others will not reflect on the original
-authors' reputations.
-
-  Finally, any free program is threatened constantly by software
-patents.  We wish to avoid the danger that redistributors of a free
-program will individually obtain patent licenses, in effect making the
-program proprietary.  To prevent this, we have made it clear that any
-patent must be licensed for everyone's free use or not licensed at all.
-
-  The precise terms and conditions for copying, distribution and
-modification follow.
-
-                    GNU GENERAL PUBLIC LICENSE
-   TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
-
-  0. This License applies to any program or other work which contains
-a notice placed by the copyright holder saying it may be distributed
-under the terms of this General Public License.  The "Program", below,
-refers to any such program or work, and a "work based on the Program"
-means either the Program or any derivative work under copyright law:
-that is to say, a work containing the Program or a portion of it,
-either verbatim or with modifications and/or translated into another
-language.  (Hereinafter, translation is included without limitation in
-the term "modification".)  Each licensee is addressed as "you".
-
-Activities other than copying, distribution and modification are not
-covered by this License; they are outside its scope.  The act of
-running the Program is not restricted, and the output from the Program
-is covered only if its contents constitute a work based on the
-Program (independent of having been made by running the Program).
-Whether that is true depends on what the Program does.
-
-  1. You may copy and distribute verbatim copies of the Program's
-source code as you receive it, in any medium, provided that you
-conspicuously and appropriately publish on each copy an appropriate
-copyright notice and disclaimer of warranty; keep intact all the
-notices that refer to this License and to the absence of any warranty;
-and give any other recipients of the Program a copy of this License
-along with the Program.
-
-You may charge a fee for the physical act of transferring a copy, and
-you may at your option offer warranty protection in exchange for a fee.
-
-  2. You may modify your copy or copies of the Program or any portion
-of it, thus forming a work based on the Program, and copy and
-distribute such modifications or work under the terms of Section 1
-above, provided that you also meet all of these conditions:
-
-    a) You must cause the modified files to carry prominent notices
-    stating that you changed the files and the date of any change.
-
-    b) You must cause any work that you distribute or publish, that in
-    whole or in part contains or is derived from the Program or any
-    part thereof, to be licensed as a whole at no charge to all third
-    parties under the terms of this License.
-
-    c) If the modified program normally reads commands interactively
-    when run, you must cause it, when started running for such
-    interactive use in the most ordinary way, to print or display an
-    announcement including an appropriate copyright notice and a
-    notice that there is no warranty (or else, saying that you provide
-    a warranty) and that users may redistribute the program under
-    these conditions, and telling the user how to view a copy of this
-    License.  (Exception: if the Program itself is interactive but
-    does not normally print such an announcement, your work based on
-    the Program is not required to print an announcement.)
-
-These requirements apply to the modified work as a whole.  If
-identifiable sections of that work are not derived from the Program,
-and can be reasonably considered independent and separate works in
-themselves, then this License, and its terms, do not apply to those
-sections when you distribute them as separate works.  But when you
-distribute the same sections as part of a whole which is a work based
-on the Program, the distribution of the whole must be on the terms of
-this License, whose permissions for other licensees extend to the
-entire whole, and thus to each and every part regardless of who wrote it.
-
-Thus, it is not the intent of this section to claim rights or contest
-your rights to work written entirely by you; rather, the intent is to
-exercise the right to control the distribution of derivative or
-collective works based on the Program.
-
-In addition, mere aggregation of another work not based on the Program
-with the Program (or with a work based on the Program) on a volume of
-a storage or distribution medium does not bring the other work under
-the scope of this License.
-
-  3. You may copy and distribute the Program (or a work based on it,
-under Section 2) in object code or executable form under the terms of
-Sections 1 and 2 above provided that you also do one of the following:
-
-    a) Accompany it with the complete corresponding machine-readable
-    source code, which must be distributed under the terms of Sections
-    1 and 2 above on a medium customarily used for software interchange; or,
-
-    b) Accompany it with a written offer, valid for at least three
-    years, to give any third party, for a charge no more than your
-    cost of physically performing source distribution, a complete
-    machine-readable copy of the corresponding source code, to be
-    distributed under the terms of Sections 1 and 2 above on a medium
-    customarily used for software interchange; or,
-
-    c) Accompany it with the information you received as to the offer
-    to distribute corresponding source code.  (This alternative is
-    allowed only for noncommercial distribution and only if you
-    received the program in object code or executable form with such
-    an offer, in accord with Subsection b above.)
-
-The source code for a work means the preferred form of the work for
-making modifications to it.  For an executable work, complete source
-code means all the source code for all modules it contains, plus any
-associated interface definition files, plus the scripts used to
-control compilation and installation of the executable.  However, as a
-special exception, the source code distributed need not include
-anything that is normally distributed (in either source or binary
-form) with the major components (compiler, kernel, and so on) of the
-operating system on which the executable runs, unless that component
-itself accompanies the executable.
-
-If distribution of executable or object code is made by offering
-access to copy from a designated place, then offering equivalent
-access to copy the source code from the same place counts as
-distribution of the source code, even though third parties are not
-compelled to copy the source along with the object code.
-
-  4. You may not copy, modify, sublicense, or distribute the Program
-except as expressly provided under this License.  Any attempt
-otherwise to copy, modify, sublicense or distribute the Program is
-void, and will automatically terminate your rights under this License.
-However, parties who have received copies, or rights, from you under
-this License will not have their licenses terminated so long as such
-parties remain in full compliance.
-
-  5. You are not required to accept this License, since you have not
-signed it.  However, nothing else grants you permission to modify or
-distribute the Program or its derivative works.  These actions are
-prohibited by law if you do not accept this License.  Therefore, by
-modifying or distributing the Program (or any work based on the
-Program), you indicate your acceptance of this License to do so, and
-all its terms and conditions for copying, distributing or modifying
-the Program or works based on it.
-
-  6. Each time you redistribute the Program (or any work based on the
-Program), the recipient automatically receives a license from the
-original licensor to copy, distribute or modify the Program subject to
-these terms and conditions.  You may not impose any further
-restrictions on the recipients' exercise of the rights granted herein.
-You are not responsible for enforcing compliance by third parties to
-this License.
-
-  7. If, as a consequence of a court judgment or allegation of patent
-infringement or for any other reason (not limited to patent issues),
-conditions are imposed on you (whether by court order, agreement or
-otherwise) that contradict the conditions of this License, they do not
-excuse you from the conditions of this License.  If you cannot
-distribute so as to satisfy simultaneously your obligations under this
-License and any other pertinent obligations, then as a consequence you
-may not distribute the Program at all.  For example, if a patent
-license would not permit royalty-free redistribution of the Program by
-all those who receive copies directly or indirectly through you, then
-the only way you could satisfy both it and this License would be to
-refrain entirely from distribution of the Program.
-
-If any portion of this section is held invalid or unenforceable under
-any particular circumstance, the balance of the section is intended to
-apply and the section as a whole is intended to apply in other
-circumstances.
-
-It is not the purpose of this section to induce you to infringe any
-patents or other property right claims or to contest validity of any
-such claims; this section has the sole purpose of protecting the
-integrity of the free software distribution system, which is
-implemented by public license practices.  Many people have made
-generous contributions to the wide range of software distributed
-through that system in reliance on consistent application of that
-system; it is up to the author/donor to decide if he or she is willing
-to distribute software through any other system and a licensee cannot
-impose that choice.
-
-This section is intended to make thoroughly clear what is believed to
-be a consequence of the rest of this License.
-
-  8. If the distribution and/or use of the Program is restricted in
-certain countries either by patents or by copyrighted interfaces, the
-original copyright holder who places the Program under this License
-may add an explicit geographical distribution limitation excluding
-those countries, so that distribution is permitted only in or among
-countries not thus excluded.  In such case, this License incorporates
-the limitation as if written in the body of this License.
-
-  9. The Free Software Foundation may publish revised and/or new versions
-of the General Public License from time to time.  Such new versions will
-be similar in spirit to the present version, but may differ in detail to
-address new problems or concerns.
-
-Each version is given a distinguishing version number.  If the Program
-specifies a version number of this License which applies to it and "any
-later version", you have the option of following the terms and conditions
-either of that version or of any later version published by the Free
-Software Foundation.  If the Program does not specify a version number of
-this License, you may choose any version ever published by the Free Software
-Foundation.
-
-  10. If you wish to incorporate parts of the Program into other free
-programs whose distribution conditions are different, write to the author
-to ask for permission.  For software which is copyrighted by the Free
-Software Foundation, write to the Free Software Foundation; we sometimes
-make exceptions for this.  Our decision will be guided by the two goals
-of preserving the free status of all derivatives of our free software and
-of promoting the sharing and reuse of software generally.
-
-                            NO WARRANTY
-
-  11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
-FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW.  EXCEPT WHEN
-OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
-PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
-OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
-MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  THE ENTIRE RISK AS
-TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU.  SHOULD THE
-PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
-REPAIR OR CORRECTION.
-
-  12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
-WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
-REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
-INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
-OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
-TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
-YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
-PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
-POSSIBILITY OF SUCH DAMAGES.
-
-                     END OF TERMS AND CONDITIONS
-
-            How to Apply These Terms to Your New Programs
-
-  If you develop a new program, and you want it to be of the greatest
-possible use to the public, the best way to achieve this is to make it
-free software which everyone can redistribute and change under these terms.
-
-  To do so, attach the following notices to the program.  It is safest
-to attach them to the start of each source file to most effectively
-convey the exclusion of warranty; and each file should have at least
-the "copyright" line and a pointer to where the full notice is found.
-
-    Unraid API - Core API functionality for Unraid systems
-    Copyright (C) 2024  Lime Technology, Inc.
-
-    This program is free software; you can redistribute it and/or modify
-    it under the terms of the GNU General Public License as published by
-    the Free Software Foundation; either version 2 of the License, or
-    (at your option) any later version.
-
-    This program is distributed in the hope that it will be useful,
-    but WITHOUT ANY WARRANTY; without even the implied warranty of
-    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-    GNU General Public License for more details.
-
-    You should have received a copy of the GNU General Public License along
-    with this program; if not, see <https://www.gnu.org/licenses/>.
-
-Also add information on how to contact you by electronic and paper mail.
-
-For questions about licensing or to report issues:
-- Website: https://unraid.net
-- Email: support@unraid.net
-
-If the program is interactive, make it output a short notice like this
-when it starts in an interactive mode:
-
-    Gnomovision version 69, Copyright (C) year name of author
-    Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
-    This is free software, and you are welcome to redistribute it
-    under certain conditions; type `show c' for details.
-
-The hypothetical commands `show w' and `show c' should show the appropriate
-parts of the General Public License.  Of course, the commands you use may
-be called something other than `show w' and `show c'; they could even be
-mouse-clicks or menu items--whatever suits your program.
-
-You should also get your employer (if you work as a programmer) or your
-school, if any, to sign a "copyright disclaimer" for the program, if
-necessary.  Here is a sample; alter the names:
-
-  Yoyodyne, Inc., hereby disclaims all copyright interest in the program
-  `Gnomovision' (which makes passes at compilers) written by James Hacker.
-
-  <signature of Moe Ghoul>, 1 April 1989
-  Moe Ghoul, President of Vice
-
-This General Public License does not permit incorporating your program into
-proprietary programs.  If your program is a subroutine library, you may
-consider it more useful to permit linking proprietary applications with the
-library.  If this is what you want to do, use the GNU Lesser General
-Public License instead of this License.

api/.depcheckrc

@@ -1,10 +0,0 @@
-{
-  "parsers": {
-    "**/*.ts": [
-      "@depcheck/parser-typescript",
-      {
-        "project": "tsconfig.json"
-      }
-    ]
-  }
-}

api/.env.development

@@ -9,16 +9,6 @@ PATHS_MY_SERVERS_CONFIG=./dev/Unraid.net/myservers.cfg # My servers config file
 PATHS_MY_SERVERS_FB=./dev/Unraid.net/fb_keepalive # My servers flashbackup timekeeper file
 PATHS_KEYFILE_BASE=./dev/Unraid.net # Keyfile location
 PATHS_MACHINE_ID=./dev/data/machine-id
-PATHS_PARITY_CHECKS=./dev/states/parity-checks.log
-PATHS_CONFIG_MODULES=./dev/configs
-PATHS_ACTIVATION_BASE=./dev/activation
-PATHS_PASSWD=./dev/passwd
-PATHS_RCLONE_SOCKET=./dev/rclone-socket
-PATHS_LOG_BASE=./dev/log # Where we store logs
-PATHS_LOGS_FILE=./dev/log/graphql-api.log
-PATHS_CONNECT_STATUS_FILE_PATH=./dev/connectStatus.json # Connect plugin status file
-PATHS_OIDC_JSON=./dev/configs/oidc.local.json
-PATHS_LOCAL_SESSION_FILE=./dev/local-session
 ENVIRONMENT="development"
 NODE_ENV="development"
 PORT="3001"
@@ -30,4 +20,4 @@ BYPASS_PERMISSION_CHECKS=false
 BYPASS_CORS_CHECKS=true
 CHOKIDAR_USEPOLLING=true
 LOG_TRANSPORT=console
-LOG_LEVEL=trace
+LOG_LEVEL=trace

api/.env.production

@@ -1,5 +0,0 @@
-ENVIRONMENT="production"
-NODE_ENV="production"
-PORT="/var/run/unraid-api.sock"
-MOTHERSHIP_GRAPHQL_LINK="https://mothership.unraid.net/ws"
-PATHS_CONFIG_MODULES="/boot/config/plugins/dynamix.my.servers/configs"

api/.env.staging

@@ -1,5 +0,0 @@
-ENVIRONMENT="staging"
-NODE_ENV="production"
-PORT="/var/run/unraid-api.sock"
-MOTHERSHIP_GRAPHQL_LINK="https://staging.mothership.unraid.net/ws"
-PATHS_CONFIG_MODULES="/boot/config/plugins/dynamix.my.servers/configs"

api/.env.test

@@ -9,11 +9,5 @@ PATHS_MY_SERVERS_CONFIG=./dev/Unraid.net/myservers.cfg # My servers config file
 PATHS_MY_SERVERS_FB=./dev/Unraid.net/fb_keepalive # My servers flashbackup timekeeper file
 PATHS_KEYFILE_BASE=./dev/Unraid.net # Keyfile location
 PATHS_MACHINE_ID=./dev/data/machine-id
-PATHS_PARITY_CHECKS=./dev/states/parity-checks.log
-PATHS_CONFIG_MODULES=./dev/configs
-PATHS_ACTIVATION_BASE=./dev/activation
-PATHS_PASSWD=./dev/passwd
-PATHS_LOGS_FILE=./dev/log/graphql-api.log
-PATHS_LOCAL_SESSION_FILE=./dev/local-session
 PORT=5000
-NODE_ENV="test"
+NODE_ENV="test"

api/.eslintrc.ts

@@ -1,62 +1,35 @@
 import eslint from '@eslint/js';
-import importPlugin from 'eslint-plugin-import';
 import noRelativeImportPaths from 'eslint-plugin-no-relative-import-paths';
 import prettier from 'eslint-plugin-prettier';
 import tseslint from 'typescript-eslint';
 
-export default tseslint.config(
-    eslint.configs.recommended,
-    ...tseslint.configs.recommended,
-    {
-        ignores: ['src/graphql/generated/client/**/*', 'src/**/**/dummy-process.js'],
+export default tseslint.config(eslint.configs.recommended, ...tseslint.configs.recommended, {
+    plugins: {
+        'no-relative-import-paths': noRelativeImportPaths,
+        prettier: prettier,
     },
-    {
-        plugins: {
-            'no-relative-import-paths': noRelativeImportPaths,
-            prettier: prettier,
-            import: importPlugin,
-        },
-        rules: {
-            '@typescript-eslint/no-redundant-type-constituents': 'off',
-            '@typescript-eslint/no-unsafe-call': 'off',
-            '@typescript-eslint/naming-convention': 'off',
-            '@typescript-eslint/no-unsafe-assignment': 'off',
-            '@typescript-eslint/no-unsafe-return': 'off',
-            '@typescript-eslint/ban-types': 'off',
-            '@typescript-eslint/no-explicit-any': 'off',
-            '@typescript-eslint/no-empty-object-type': 'off',
-            'no-use-before-define': ['off'],
-            'no-multiple-empty-lines': ['error', { max: 1, maxBOF: 0, maxEOF: 1 }],
-            '@typescript-eslint/no-unused-vars': 'off',
-            '@typescript-eslint/no-unused-expressions': 'off',
-            'import/no-unresolved': 'off',
-            'import/no-absolute-path': 'off',
-            'import/prefer-default-export': 'off',
-            'no-relative-import-paths/no-relative-import-paths': [
-                'error',
-                { allowSameFolder: false, rootDir: 'src', prefix: '@app' },
-            ],
-            'prettier/prettier': 'error',
-            'import/extensions': [
-                'error',
-                'ignorePackages',
-                {
-                    js: 'always',
-                    ts: 'always',
-                },
-            ],
-            'no-restricted-globals': [
-                'error',
-                {
-                    name: '__dirname',
-                    message: 'Use import.meta.url instead of __dirname in ESM',
-                },
-                {
-                    name: '__filename',
-                    message: 'Use import.meta.url instead of __filename in ESM',
-                },
-            ],
-            'eol-last': ['error', 'always'],
-        },
-    }
-);
+    rules: {
+        '@typescript-eslint/no-redundant-type-constituents': 'off',
+        '@typescript-eslint/no-unsafe-call': 'off',
+        '@typescript-eslint/naming-convention': 'off',
+        '@typescript-eslint/no-unsafe-assignment': 'off',
+        '@typescript-eslint/no-unsafe-return': 'off',
+        '@typescript-eslint/ban-types': 'off',
+        '@typescript-eslint/no-explicit-any': 'off',
+        '@typescript-eslint/no-empty-object-type': 'off',
+        'no-use-before-define': ['off'],
+        'no-multiple-empty-lines': ['error', { max: 1, maxBOF: 0, maxEOF: 1 }],
+        '@typescript-eslint/no-unused-vars': 'off',
+        '@typescript-eslint/no-unused-expressions': 'off',
+        'import/no-unresolved': 'off',
+        'import/extensions': 'off',
+        'import/no-absolute-path': 'off',
+        'import/prefer-default-export': 'off',
+        'no-relative-import-paths/no-relative-import-paths': [
+            'error',
+            { allowSameFolder: false, rootDir: 'src', prefix: '@app' },
+        ],
+        'prettier/prettier': 'error',
+    },
+    ignores: ['src/graphql/generated/client/**/*'],
+});

api/.gitignore

@@ -82,14 +82,3 @@ deploy/*
 .idea
 
 !**/*.login.*
-
-# local api configs - don't need project-wide tracking
-dev/connectStatus.json
-dev/configs/*
-# local status - doesn't need to be tracked
-dev/connectStatus.json
-# mock local session file
-dev/local-session
-
-# local OIDC config for testing - contains secrets
-dev/configs/oidc.local.json

api/.gqlconfig

@@ -1,5 +0,0 @@
-{
-  schema: {
-    files: 'src/graphql/schema/types/**/*.graphql'
-  }
-}

api/.vscode/extensions.json

@@ -1,11 +0,0 @@
-{
-    "recommendations": [
-        "mikestead.dotenv",
-        "eamodio.gitlens",
-        "dbaeumer.vscode-eslint",
-        "antfu.goto-alias",
-        "bierner.markdown-mermaid",
-        "github.vscode-pull-request-github",
-        "bierner.markdown-preview-github-styles"
-    ]
-}

api/.vscode/settings.json

@@ -0,0 +1,7 @@
+{
+    "eslint.lintTask.options": "--flag unstable_ts_config",
+    "eslint.options": {
+        "flags": ["unstable_ts_config"],
+        "overrideConfigFile": ".eslintrc.ts"
+    }
+}

api/Dockerfile

@@ -1,7 +1,7 @@
 ###########################################################
 # Development/Build Image
 ###########################################################
-FROM node:22.18.0-bookworm-slim AS development
+FROM node:20-bookworm-slim AS development
 
 # Install build tools and dependencies
 RUN apt-get update -y && apt-get install -y \
@@ -42,4 +42,4 @@ ENV NODE_ENV=production
 
 COPY . .
 
-CMD ["pnpm", "run", "build:release"]
+CMD ["pnpm", "run", "build-and-pack"]

api/codegen.ts

@@ -1,47 +1,105 @@
 import type { CodegenConfig } from '@graphql-codegen/cli';
 
 const config: CodegenConfig = {
-    overwrite: true,
-    emitLegacyCommonJSImports: false,
-    verbose: true,
-    config: {
-        namingConvention: {
-            enumValues: 'change-case-all#upperCase',
-            transformUnderscore: true,
-            useTypeImports: true,
-        },
-        scalars: {
-            DateTime: 'string',
-            Long: 'number',
-            JSON: 'Record<string, any>',
-            URL: 'URL',
-            Port: 'number',
-            UUID: 'string',
-        },
-        scalarSchemas: {
-            URL: 'z.instanceof(URL)',
-            Long: 'z.number()',
-            JSON: 'z.record(z.string(), z.any())',
-            Port: 'z.number()',
-            UUID: 'z.string()',
-        },
+  overwrite: true,
+  emitLegacyCommonJSImports: false,
+  verbose: true,
+  config: {
+  namingConvention: {
+      typeNames: './fix-array-type.cjs',
+      enumValues: 'change-case#upperCase',
+      useTypeImports: true,
     },
-    generates: {
-        // Generate Types for CLI Internal GraphQL Queries
-        'src/unraid-api/cli/generated/': {
-            documents: ['src/unraid-api/cli/queries/**/*.ts', 'src/unraid-api/cli/mutations/**/*.ts'],
-            schema: './generated-schema.graphql',
-            preset: 'client',
-            presetConfig: {
-                gqlTagName: 'gql',
-            },
-            config: {
-                useTypeImports: true,
-                withObjectType: true,
-            },
-            plugins: [{ add: { content: '/* eslint-disable */' } }],
-        },
+    scalars: {
+      DateTime: 'string',
+      Long: 'number',
+      JSON: '{ [key: string]: any }',
+      URL: 'URL',
+      Port: 'number',
+      UUID: 'string',
     },
+  },
+  generates: {
+    'src/graphql/generated/client/': {
+      documents: './src/graphql/mothership/*.ts',
+      schema: {
+        [process.env.MOTHERSHIP_GRAPHQL_LINK as string]: {
+          headers: {
+            origin: 'https://forums.unraid.net',
+          },
+        },
+      },
+      preset: 'client',
+      presetConfig: {
+        gqlTagName: 'graphql',
+      },
+      config: {
+        useTypeImports: true,
+        withObjectType: true,
+      },
+      plugins: [
+        { add: { content: '/* eslint-disable */' } },
+      ],
+    },
+    // Generate Types for the API Server
+    'src/graphql/generated/api/types.ts': {
+      schema: [
+        './src/graphql/types.ts',
+        './src/graphql/schema/types/**/*.graphql',
+      ],
+      plugins: [
+        'typescript',
+        'typescript-resolvers',
+        { add: { content: '/* eslint-disable */' } },
+      ],
+      config: {
+        contextType: '@app/graphql/schema/utils#Context',
+        useIndexSignature: true,
+      },
+    },
+    // Generate Operations for any built-in API Server Operations (e.g., report.ts)
+    'src/graphql/generated/api/operations.ts': {
+      documents: './src/graphql/client/api/*.ts',
+      schema: [
+        './src/graphql/types.ts',
+        './src/graphql/schema/types/**/*.graphql',
+      ],
+      preset: 'import-types',
+      presetConfig: {
+        typesPath: '@app/graphql/generated/api/types',
+      },
+      plugins: [
+        'typescript-validation-schema',
+        'typescript-operations',
+        'typed-document-node',
+        { add: { content: '/* eslint-disable */' } },
+      ],
+      config: {
+        importFrom: '@app/graphql/generated/api/types',
+        strictScalars: false,
+        schema: 'zod',
+        withObjectType: true,
+      },
+    },
+    'src/graphql/generated/client/validators.ts': {
+      schema: {
+        [process.env.MOTHERSHIP_GRAPHQL_LINK as string]: {
+          headers: {
+            origin: 'https://forums.unraid.net',
+          },
+        },
+      },
+      plugins: [
+        'typescript-validation-schema',
+        { add: { content: '/* eslint-disable */' } },
+      ],
+      config: {
+        importFrom: '@app/graphql/generated/client/graphql',
+        strictScalars: false,
+        schema: 'zod',
+      },
+    },
+  },
 };
 
-export default config;
+export default config;

api/commitlint.config.js

@@ -1 +0,0 @@
-module.exports = { extends: ['@commitlint/config-conventional'] };

api/dev/Unraid.net/Pro.key

@@ -1 +0,0 @@
-┘[5╢╦Ояb┴ю└;R╛леЩ²ДА├y÷шd│яя╛Еlя▓ё"Hи╜ь;QДs≈@Вы▄╠╩1·Qy╓к|й╔+╨фM)X9jя▄тГО⌠1а2WHщ'│.ЕJё-╨MPгS╜╧:Ю▓]o9^ЮО0┴$"░ l^`╪>3к:╦я	ЯО┤q~ёш≈└с ш5ёЗ=р╟─]╗IWf╥и ⌡?:У2ВоE5[р╨Ш(÷╤Е}з+о│ШIмAч²%╞╓дq:ё╤эb╣┼

api/dev/Unraid.net/myservers.cfg

@@ -1,5 +1,5 @@
 [api]
-version="4.4.1"
+version="4.0.1"
 extraOrigins="https://google.com,https://test.com"
 [local]
 sandbox="yes"

api/dev/Unraid.net/myservers.example.cfg

@@ -1,20 +0,0 @@
-[api]
-version="4.4.1"
-extraOrigins="https://google.com,https://test.com"
-[local]
-sandbox="yes"
-[remote]
-wanaccess="yes"
-wanport="8443"
-upnpEnabled="no"
-apikey="_______________________BIG_API_KEY_HERE_________________________"
-localApiKey="_______________________LOCAL_API_KEY_HERE_________________________"
-email="test@example.com"
-username="zspearmint"
-avatar="https://via.placeholder.com/200"
-regWizTime="1611175408732_0951-1653-3509-FBA155FA23C0"
-accesstoken=""
-idtoken=""
-refreshtoken=""
-dynamicRemoteAccessType="DISABLED"
-ssoSubIds=""

api/dev/activation/activation_code_12345.activationcode

@@ -1,13 +0,0 @@
-{
-  "code": "EXAMPLE_CODE_123",
-  "partnerName": "MyPartner Inc.",
-  "partnerUrl": "https://partner.example.com",
-  "serverName": "MyAwesomeServer",
-  "sysModel": "CustomBuild v1.0",
-  "comment": "This is a test activation code for development.",
-  "header": "#336699",
-  "headermetacolor": "#FFFFFF",
-  "background": "#F0F0F0",
-  "showBannerGradient": "yes",
-  "theme": "black"
-}

api/dev/activation/applied.txt

@@ -1 +0,0 @@
-true

api/dev/activation/assets/logo.svg

@@ -1,19 +0,0 @@
-<?xml version="1.0" encoding="utf-8" ?>
-<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="442" height="221">
-	<defs>
-		<linearGradient id="gradient_0" gradientUnits="userSpaceOnUse" x1="608.84924" y1="48.058002" x2="447.47684" y2="388.15295">
-			<stop offset="0" stop-color="#ECC02F"/>
-			<stop offset="1" stop-color="#B8436B"/>
-		</linearGradient>
-	</defs>
-	<path fill="url(#gradient_0)" transform="scale(0.431641 0.431641)" d="M126.543 236.139C141.269 184.983 170.747 148.08 228.938 144.823C240.378 144.182 259.66 144.749 271.333 145.215C299.585 144.391 350.558 142.667 377.842 145.685C414.099 149.696 443.185 175.429 472.192 195.251L586.561 274.337C636.114 308.874 627.234 309.151 685.21 309.042L778.304 309.082C799.091 309.099 813.482 308.867 828.82 292.529C857.893 261.561 843.003 209.317 800.506 200.17C790.505 198.018 779.334 199.535 769.11 199.523L702.658 199.488C690.005 186.062 675.199 151.817 658.182 145.215L739.199 145.198C765.636 145.196 796.164 142.886 821.565 150.344C923.889 180.389 922.324 331.136 816.611 357.807C802.524 361.361 788.425 361.034 774.035 361.031L663.497 361.009C623.773 360.859 603.599 349.313 572.35 327.596L430.421 229.848C415.731 219.804 401.419 209.118 386.451 199.488C377.579 199.501 368.42 200.01 359.582 199.488L272.561 199.497C258.582 199.485 235.352 198.06 222.607 200.981C192.741 207.825 177.956 234.361 180.015 263.294C177.545 260.392 178.63 254.678 178.838 251.164C179.877 233.569 187.409 224.968 197.345 212.22C184.786 202.853 156.933 193.749 149.447 186.645C143.454 196.583 136.881 205.628 132.955 216.732C130.766 222.921 130.678 230.967 127.506 236.625L126.543 236.139Z"/>
-	<path fill="#308DAF" transform="scale(0.431641 0.431641)" d="M149.447 186.645C156.933 193.749 184.786 202.853 197.345 212.22C187.409 224.968 179.877 233.569 178.838 251.164C178.63 254.678 177.545 260.392 180.015 263.294C192.489 309.751 221.563 309.078 263.512 309.07L322.096 309.048C333.708 325.984 348.958 344.904 361.795 361.006L232.654 361.03C176.801 360.579 130.605 315.939 126.498 260.613C125.893 252.473 126.453 244.293 126.543 236.139L127.506 236.625C130.678 230.967 130.766 222.921 132.955 216.732C136.881 205.628 143.454 196.583 149.447 186.645Z"/>
-	<defs>
-		<linearGradient id="gradient_1" gradientUnits="userSpaceOnUse" x1="620.42566" y1="140.57172" x2="611.08759" y2="282.2207">
-			<stop offset="0" stop-color="#F5A22C"/>
-			<stop offset="1" stop-color="#E17543"/>
-		</linearGradient>
-	</defs>
-	<path fill="url(#gradient_1)" transform="scale(0.431641 0.431641)" d="M570.215 137.504C646.214 133.055 670.623 188.789 707.064 241.977L726.71 270.658C729.065 274.1 737.591 284.13 737.576 287.916L674.645 287.916C674.5 287.132 659.251 264.134 658.182 263.294C658.133 262.92 623.915 212.832 620.593 208.697C602.652 186.369 565.856 181.796 545.393 203.424C542.002 207.007 539.705 211.779 535.713 214.764C534.409 212.586 496.093 187.105 490.641 183.32C508.306 154.99 539.004 142.872 570.215 137.504Z"/>
-	<path fill="#308DAF" transform="scale(0.431641 0.431641)" d="M286.656 221.485L350.512 221.485C354.248 227.374 358.556 232.986 362.565 238.698L379.9 263.82C397.44 289.065 410.994 321.185 447.698 317.317C464.599 315.536 476.472 305.449 486.751 292.741C494.293 298.818 530.089 320.341 533.124 324.28C532.441 328.231 526.229 334.319 522.861 336.255C521.587 339.958 509.164 348.519 505.635 350.88C463.781 378.879 411.472 377.537 373.808 343.464C365.331 335.795 359.734 326.969 353.351 317.641L336.798 293.614C320.035 269.591 302.915 245.863 286.656 221.485Z"/>
-</svg>

api/dev/configs/README.md

@@ -1,34 +0,0 @@
-# Development Configuration Files
-
-This directory contains configuration files for local development.
-
-## OIDC Configuration
-
-### oidc.json
-The default OIDC configuration file. This file is committed to git and should only contain non-sensitive test configurations.
-
-### Using a Local Configuration (gitignored)
-For local testing with real OAuth providers:
-
-1. Create an `oidc.local.json` file based on `oidc.json`
-2. Set the environment variable: `PATHS_OIDC_JSON=./dev/configs/oidc.local.json`
-3. The API will load your local configuration instead of the default
-
-Example:
-```bash
-PATHS_OIDC_JSON=./dev/configs/oidc.local.json pnpm dev
-```
-
-### Setting up OAuth Apps
-
-#### Google
-1. Go to [Google Cloud Console](https://console.cloud.google.com/)
-2. Create a new project or select existing
-3. Enable Google+ API
-4. Create OAuth 2.0 credentials
-5. Add authorized redirect URI: `http://localhost:3000/graphql/api/auth/oidc/callback`
-
-#### GitHub
-1. Go to GitHub Settings > Developer settings > OAuth Apps
-2. Create a new OAuth App
-3. Set Authorization callback URL: `http://localhost:3000/graphql/api/auth/oidc/callback`

api/dev/configs/api.json

@@ -1,9 +0,0 @@
-{
-  "version": "4.19.1",
-  "extraOrigins": [],
-  "sandbox": true,
-  "ssoSubIds": [],
-  "plugins": [
-    "unraid-api-plugin-connect"
-  ]
-}

api/dev/configs/connect.json

@@ -1,12 +0,0 @@
-{
-  "wanaccess": true,
-  "wanport": 8443,
-  "upnpEnabled": false,
-  "apikey": "",
-  "localApiKey": "_______________________LOCAL_API_KEY_HERE_________________________",
-  "email": "test@example.com",
-  "username": "zspearmint",
-  "avatar": "https://via.placeholder.com/200",
-  "regWizTime": "1611175408732_0951-1653-3509-FBA155FA23C0",
-  "dynamicRemoteAccessType": "STATIC"
-}

api/dev/configs/oidc.json

@@ -1,22 +0,0 @@
-{
-  "providers": [
-    {
-      "id": "unraid.net",
-      "name": "Unraid.net",
-      "clientId": "CONNECT_SERVER_SSO",
-      "issuer": "https://account.unraid.net",
-      "authorizationEndpoint": "https://account.unraid.net/sso/",
-      "tokenEndpoint": "https://account.unraid.net/api/oauth2/token",
-      "scopes": [
-        "openid",
-        "profile",
-        "email"
-      ],
-      "authorizedSubIds": [
-        "297294e2-b31c-4bcc-a441-88aee0ad609f"
-      ],
-      "buttonText": "Login With Unraid.net"
-    }
-  ],
-  "defaultAllowedOrigins": []
-}

api/dev/data/machine-id

@@ -1 +0,0 @@
-d0b5433294c110f1eed72bdb63910a9a

api/dev/data/unraid-version

@@ -1 +0,0 @@
-version="6.12.0-beta5"

api/dev/dynamix/case-model.cfg

@@ -1 +0,0 @@
-case-model.png

api/dev/dynamix/dynamix.cfg

@@ -1,42 +1,36 @@
 [display]
-date=%c
-time=%I:%M %p
-number=.,
-scale=-1
-tabs=1
-users=Tasks:3
-resize=0
-wwn=0
-total=1
-usage=0
-banner=image
-dashapps=icons
-theme=black
-text=1
-unit=C
-warning=70
-critical=90
-hot=45
-max=55
-sysinfo=/Tools/SystemProfiler
-header=336699
-headermetacolor=FFFFFF
-background=F0F0F0
-showBannerGradient=yes
-
+date="%c"
+time="%I:%M %p"
+number=".,"
+scale="-1"
+tabs="1"
+users="Tasks:3"
+resize="0"
+wwn="0"
+total="1"
+usage="0"
+banner="image"
+dashapps="icons"
+theme="white"
+text="1"
+unit="C"
+warning="70"
+critical="90"
+hot="45"
+max="55"
+sysinfo="/Tools/SystemProfiler"
 [notify]
-entity=1
-normal=1
-warning=1
-alert=1
-unraid=1
-plugin=1
-docker_notify=1
-report=1
-display=0
-date=d-m-Y
-time=H:i
-position=top-right
-path=./dev/notifications
-system=*/1 * * * *
-
+entity="1"
+normal="1"
+warning="1"
+alert="1"
+unraid="1"
+plugin="1"
+docker_notify="1"
+report="1"
+display="0"
+date="d-m-Y"
+time="H:i"
+position="top-right"
+path="/app/dev/notifications"
+system="*/1 * * * *"

api/dev/ident.cfg

@@ -1,36 +0,0 @@
-# Generated settings:
-NAME="Unraid"
-timeZone="America/New_York"
-COMMENT="Media server"
-SECURITY="user"
-WORKGROUP="WORKGROUP"
-DOMAIN=""
-DOMAIN_SHORT=""
-hideDotFiles="no"
-enableFruit="yes"
-USE_NETBIOS="no"
-localMaster="yes"
-serverMultiChannel="no"
-USE_WSD="yes"
-WSD_OPT=""
-WSD2_OPT=""
-USE_NTP="yes"
-NTP_SERVER1="time1.google.com"
-NTP_SERVER2="time2.google.com"
-NTP_SERVER3="time3.google.com"
-NTP_SERVER4="time4.google.com"
-DOMAIN_LOGIN="Administrator"
-DOMAIN_PASSWD=""
-SYS_MODEL="Custom"
-SYS_ARRAY_SLOTS="24"
-USE_SSL="yes"
-PORT="80"
-PORTSSL="8443"
-LOCAL_TLD="local"
-BIND_MGT="no"
-USE_TELNET="no"
-PORTTELNET="23"
-USE_SSH="yes"
-PORTSSH="22"
-USE_UPNP="yes"
-START_PAGE="Main"

api/dev/keys/b5b4aa3d-8e40-4c92-bc40-d50182071886.json

@@ -0,0 +1,11 @@
+{
+  "createdAt": "2025-01-27T16:22:56.501Z",
+  "description": "API key for Connect user",
+  "id": "b5b4aa3d-8e40-4c92-bc40-d50182071886",
+  "key": "_______________________LOCAL_API_KEY_HERE_________________________",
+  "name": "Connect",
+  "permissions": [],
+  "roles": [
+    "connect"
+  ]
+}

api/dev/log/.gitkeep

@@ -1 +0,0 @@
-# custom log directory for tests & development

api/dev/states/myservers.cfg

@@ -1,5 +1,5 @@
 [api]
-version="4.4.1"
+version="4.0.1"
 extraOrigins="https://google.com,https://test.com"
 [local]
 sandbox="yes"

api/dev/states/network.ini

@@ -1,30 +0,0 @@
-[eth0]
-DHCP_KEEPRESOLV="no"
-DNS_SERVER1="1.1.1.1"
-DNS_SERVER2="8.8.8.8"
-DHCP6_KEEPRESOLV="no"
-BONDING="yes"
-BONDNAME=""
-BONDNICS="eth0,eth1,eth2,eth3"
-BONDING_MODE="1"
-BONDING_MIIMON="100"
-BRIDGING="yes"
-BRNAME=""
-BRNICS="bond0"
-BRSTP="0"
-BRFD="0"
-DESCRIPTION:0=""
-PROTOCOL:0=""
-USE_DHCP:0="yes"
-IPADDR:0="192.168.1.150"
-NETMASK:0="255.255.255.0"
-GATEWAY:0="192.168.1.1"
-METRIC:0=""
-USE_DHCP6:0=""
-IPADDR6:0=""
-NETMASK6:0=""
-GATEWAY6:0=""
-METRIC6:0=""
-PRIVACY6:0=""
-MTU=""
-TYPE="access"

api/dev/states/sec.ini

@@ -1,190 +0,0 @@
-["disk1"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["disk2"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["disk3"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["disk4"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["disk5"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["disk6"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["disk7"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["disk8"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["disk9"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["disk10"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["disk11"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["disk12"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["disk13"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["disk14"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["disk15"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["disk16"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["disk17"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["disk18"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["disk19"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["disk20"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["disk21"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["disk22"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["abc"]
-export="e"
-fruit="no"
-caseSensitive="auto"
-security="public"
-readList=""
-writeList=""
-volsizelimit=""
-["flash"]
-export="e"
-fruit="no"
-security="public"
-readList=""
-writeList=""

api/dev/states/sec_nfs.ini

@@ -1,92 +0,0 @@
-["disk1"]
-export="-"
-security="public"
-hostList=""
-["disk2"]
-export="-"
-security="public"
-hostList=""
-["disk3"]
-export="-"
-security="public"
-hostList=""
-["disk4"]
-export="-"
-security="public"
-hostList=""
-["disk5"]
-export="-"
-security="public"
-hostList=""
-["disk6"]
-export="-"
-security="public"
-hostList=""
-["disk7"]
-export="-"
-security="public"
-hostList=""
-["disk8"]
-export="-"
-security="public"
-hostList=""
-["disk9"]
-export="-"
-security="public"
-hostList=""
-["disk10"]
-export="-"
-security="public"
-hostList=""
-["disk11"]
-export="-"
-security="public"
-hostList=""
-["disk12"]
-export="-"
-security="public"
-hostList=""
-["disk13"]
-export="-"
-security="public"
-hostList=""
-["disk14"]
-export="-"
-security="public"
-hostList=""
-["disk15"]
-export="-"
-security="public"
-hostList=""
-["disk16"]
-export="-"
-security="public"
-hostList=""
-["disk17"]
-export="-"
-security="public"
-hostList=""
-["disk18"]
-export="-"
-security="public"
-hostList=""
-["disk19"]
-export="-"
-security="public"
-hostList=""
-["disk20"]
-export="-"
-security="public"
-hostList=""
-["disk21"]
-export="-"
-security="public"
-hostList=""
-["disk22"]
-export="-"
-security="public"
-hostList=""
-["abc"]
-export="-"
-security="public"
-hostList=""

api/dev/states/shares.ini

@@ -1,102 +0,0 @@
-["appdata"]
-name="appdata"
-nameOrig="appdata"
-comment=""
-allocator="highwater"
-splitLevel=""
-floor="0"
-include=""
-exclude=""
-useCache="no"
-cachePool="cache"
-cow="auto"
-color="yellow-on"
-size="0"
-free="9091184"
-used="32831348"
-luksStatus="0"
-["domains"]
-name="domains"
-nameOrig="domains"
-comment="saved VM instances"
-allocator="highwater"
-splitLevel="1"
-floor="0"
-include=""
-exclude=""
-useCache="prefer"
-cachePool="cache"
-cow="auto"
-color="yellow-on"
-size="0"
-free="9091184"
-used="32831348"
-luksStatus="0"
-["isos"]
-name="isos"
-nameOrig="isos"
-comment="ISO images"
-allocator="highwater"
-splitLevel=""
-floor="0"
-include=""
-exclude=""
-useCache="yes"
-cachePool="cache"
-cow="auto"
-color="yellow-on"
-size="0"
-free="9091184"
-used="32831348"
-luksStatus="0"
-["system"]
-name="system"
-nameOrig="system"
-comment="system data"
-allocator="highwater"
-splitLevel="1"
-floor="0"
-include=""
-exclude=""
-useCache="prefer"
-cachePool="cache"
-cow="auto"
-color="yellow-on"
-size="0"
-free="9091184"
-used="32831348"
-luksStatus="0"
-["system.with.periods"]
-name="system.with.periods"
-nameOrig="system.with.periods"
-comment="system data with periods"
-allocator="highwater"
-splitLevel="1"
-floor="0"
-include=""
-exclude=""
-useCache="prefer"
-cachePool="cache"
-cow="auto"
-color="yellow-on"
-size="0"
-free="9091184"
-used="32831348"
-luksStatus="0"
-["system.with.🚀"]
-name="system.with.🚀"
-nameOrig="system.with.🚀"
-comment="system data with 🚀"
-allocator="highwater"
-splitLevel="1"
-floor="0"
-include=""
-exclude=""
-useCache="prefer"
-cachePool="cache"
-cow="auto"
-color="yellow-on"
-size="0"
-free="9091184"
-used="32831348"
-luksStatus="0"

api/dev/states/users.ini

@@ -1,15 +0,0 @@
-["root"]
-idx="0"
-name="root"
-desc="Console and webGui login account"
-passwd="yes"
-["xo"]
-idx="1"
-name="xo"
-desc=""
-passwd="yes"
-["test_user"]
-idx="2"
-name="test_user"
-desc=""
-passwd="no"

api/dev/states/var.ini

@@ -87,7 +87,7 @@ shareAvahiSMBModel="Xserve"
 shfs_logging="1"
 safeMode="no"
 startMode="Normal"
-configValid="ineligible"
+configValid="yes"
 joinStatus="Not joined"
 deviceCount="4"
 flashGUID="0000-0000-0000-000000000000"
@@ -102,7 +102,6 @@ regTm="1833409182"
 regTm2="0"
 regExp=""
 regGen="0"
-regState="ENOKEYFILE"
 sbName="/boot/config/super.dat"
 sbVersion="2.9.13"
 sbUpdated="1596079143"

api/dev/webGui/images/UN-logotype-gradient.svg

@@ -1 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 222.36 39.04"><defs><linearGradient id="header-logo" x1="47.53" y1="79.1" x2="170.71" y2="-44.08" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#e32929"/><stop offset="1" stop-color="#ff8d30"/></linearGradient></defs><title>unraid.net</title><path d="M146.7,29.47H135l-3,9h-6.49L138.93,0h8l13.41,38.49h-7.09L142.62,6.93l-5.83,16.88h8ZM29.69,0V25.4c0,8.91-5.77,13.64-14.9,13.64S0,34.31,0,25.4V0H6.54V25.4c0,5.17,3.19,7.92,8.25,7.92s8.36-2.75,8.36-7.92V0ZM50.86,12v26.5H44.31V0h6.11l17,26.5V0H74V38.49H67.9ZM171.29,0h6.54V38.49h-6.54Zm51.07,24.69c0,9-5.88,13.8-15.17,13.8H192.67V0H207.3c9.18,0,15.06,4.78,15.06,13.8ZM215.82,13.8c0-5.28-3.3-8.14-8.52-8.14h-8.08V32.77h8c5.33,0,8.63-2.8,8.63-8.08ZM108.31,23.92c4.34-1.6,6.93-5.28,6.93-11.55C115.24,3.68,110.18,0,102.48,0H88.84V38.49h6.55V5.66h6.87c3.8,0,6.21,1.82,6.21,6.71s-2.41,6.76-6.21,6.76H98.88l9.21,19.36h7.53Z" fill="url(#header-logo)"/></svg>

api/docs/developer/api-plugins.md

@@ -1,124 +0,0 @@
-# Working with API plugins
-
-Under the hood, API plugins (i.e. plugins to the `@unraid/api` project) are represented
-as npm `peerDependencies`. This is npm's intended package plugin mechanism, and given that
-peer dependencies are installed by default as of npm v7, it supports bi-directional plugin functionality,
-where the API provides dependencies for the plugin while the plugin provides functionality to the API.
-
-## Private Workspace plugins
-
-### Adding a local workspace package as an API plugin
-
-The challenge with local workspace plugins is that they aren't available via npm during production.
-To solve this, we vendor them during the build process. Here's the complete process:
-
-#### 1. Configure the build system
-
-Add your workspace package to the vendoring configuration in `api/scripts/build.ts`:
-
-```typescript
-const WORKSPACE_PACKAGES_TO_VENDOR = {
-    '@unraid/shared': 'packages/unraid-shared',
-    'unraid-api-plugin-connect': 'packages/unraid-api-plugin-connect',
-    'your-plugin-name': 'packages/your-plugin-path', // Add your plugin here
-} as const;
-```
-
-#### 2. Configure Vite
-
-Add your workspace package to the Vite configuration in `api/vite.config.ts`:
-
-```typescript
-const workspaceDependencies = {
-    '@unraid/shared': 'packages/unraid-shared',
-    'unraid-api-plugin-connect': 'packages/unraid-api-plugin-connect',
-    'your-plugin-name': 'packages/your-plugin-path', // Add your plugin here
-};
-```
-
-This ensures the package is:
-- Excluded from Vite's optimization during development
-- Marked as external during the build process
-- Properly handled in SSR mode
-
-#### 3. Configure the API package.json
-
-Add your workspace package as a peer dependency in `api/package.json`:
-
-```json
-{
-    "peerDependencies": {
-        "unraid-api-plugin-connect": "workspace:*",
-        "your-plugin-name": "workspace:*"
-    },
-    "peerDependenciesMeta": {
-        "unraid-api-plugin-connect": {
-            "optional": true
-        },
-        "your-plugin-name": {
-            "optional": true
-        }
-    }
-}
-```
-
-By marking the workspace dependency "optional", npm will not attempt to install it during development.
-The "workspace:*" identifier will be invalid during build-time and run-time, but won't cause problems
-because the package gets vendored instead.
-
-#### 4. Plugin package setup
-
-Your workspace plugin package should:
-
-1. **Export types and main entry**: Set up proper `main`, `types`, and `exports` fields:
-```json
-{
-    "name": "your-plugin-name",
-    "main": "dist/index.js",
-    "types": "dist/index.d.ts",
-    "type": "module",
-    "exports": {
-        ".": {
-            "types": "./dist/index.d.ts",
-            "import": "./dist/index.js"
-        }
-    },
-    "files": ["dist"]
-}
-```
-
-2. **Use peer dependencies**: Declare shared dependencies as peer dependencies to avoid duplication:
-```json
-{
-    "peerDependencies": {
-        "@nestjs/common": "^11.0.11",
-        "@nestjs/core": "^11.0.11",
-        "graphql": "^16.9.0"
-    }
-}
-```
-
-3. **Include build script**: Add a build script that compiles TypeScript:
-```json
-{
-    "scripts": {
-        "build": "tsc",
-        "prepare": "npm run build"
-    }
-}
-```
-
-#### 5. Build process
-
-During production builds:
-
-1. The build script (`api/scripts/build.ts`) will automatically pack and install your workspace package as a tarball
-2. This happens after `npm install --omit=dev` in the pack directory
-3. The vendored package becomes a regular node_modules dependency in the final build
-
-#### 6. Development vs Production
-
-- **Development**: Vite resolves workspace packages directly from their source
-- **Production**: Packages are vendored as tarballs in `node_modules`
-
-This approach ensures that workspace plugins work seamlessly in both development and production environments.

api/docs/developer/development.md

@@ -2,7 +2,7 @@
 
 ## Installation
 
-Manual install of the staging and production plugins can be done with the following routes:
+Manual install can be done with the following routes:
 [production](https://stable.dl.unraid.net/unraid-api/dynamix.unraid.net.plg)
 [staging](https://preview.dl.unraid.net/unraid-api/dynamix.unraid.net.staging.plg)
 

api/docs/developer/repo-organization.md

@@ -11,11 +11,11 @@ The repository consists of:
 - Core Modules
 - Tests
 
-## API Server Architecture
+## API Server Architecture 
 
 The API server is built with NestJS and provides the core functionality for interacting with Unraid systems.
 
-### Key Components
+### Key Components:
 
 - `src/unraid-api/` - Core NestJS implementation
 - `src/core/` - Legacy business logic and utilities
@@ -61,7 +61,7 @@ The store syncs data in two ways:
 The repository is organized into several packages:
 
 - `api/` - NestJS API server
-- `plugin/` - Unraid plugin package
+- `plugin/` - Unraid plugin package  
 - `web/` - Frontend application
 - `unraid-ui/` - Shared UI components
 

api/docs/developer/workflows.md

@@ -1,219 +0,0 @@
-# Unraid API Development Workflows
-
-This document outlines the various workflow styles available for developing, building, and deploying the Unraid API monorepo.
-
-## Repository Structure
-
-The Unraid API monorepo consists of several packages:
-
-- `api`: The Unraid API backend
-- `web`: The web frontend components
-- `plugin`: The Unraid plugin
-- `unraid-ui`: UI components library
-
-## Development Workflows
-
-### Local Development
-
-To start all development servers in the monorepo:
-
-```bash
-pnpm dev
-```
-
-This command runs all development servers concurrently:
-
-- API server: <http://localhost:3001>
-- Web components: <http://localhost:4321>
-- UI components: <http://localhost:5173>
-
-### Package-Specific Development
-
-If you want to work on a specific package, you can run its development server individually:
-
-#### API Development
-
-```bash
-cd api
-pnpm dev
-```
-
-#### Web Development
-
-```bash
-cd web
-pnpm dev
-```
-
-#### UI Component Development
-
-```bash
-cd unraid-ui
-pnpm dev
-```
-
-## Building Workflows
-
-### Building All Packages
-
-To build all packages in the monorepo:
-
-```bash
-pnpm build
-```
-
-### Watch Mode Building
-
-For continuous building during development:
-
-```bash
-pnpm build:watch
-```
-
-This is useful when you want to see your changes reflected without manually rebuilding. This will also allow you to install a local plugin to test your changes.
-
-### Package-Specific Building
-
-#### API Building
-
-```bash
-cd api
-pnpm build
-```
-
-#### Web Building
-
-```bash
-cd web
-pnpm build
-```
-
-#### Development Build for Web
-
-```bash
-cd web
-pnpm build:dev
-```
-
-## Deployment Workflows
-
-### Deploying to Development Unraid Server
-
-To deploy to a development Unraid server:
-
-```bash
-pnpm unraid:deploy <SERVER_IP>
-```
-
-This command builds and deploys all components to the specified Unraid server.
-
-### Package-Specific Deployment
-
-#### API Deployment
-
-```bash
-cd api
-pnpm unraid:deploy <SERVER_IP>
-```
-
-#### Web Deployment
-
-```bash
-cd web
-pnpm unraid:deploy <SERVER_IP>
-```
-
-#### Plugin Deployment
-
-```bash
-cd plugin
-pnpm unraid:deploy <SERVER_IP>
-```
-
-## Testing
-
-To run tests across all packages:
-
-```bash
-pnpm test
-```
-
-### Package-Specific Testing
-
-```bash
-cd <package-directory>
-pnpm test
-```
-
-## Code Quality Workflows
-
-### Linting
-
-To lint all packages:
-
-```bash
-pnpm lint
-```
-
-To automatically fix linting issues:
-
-```bash
-pnpm lint:fix
-```
-
-### Type Checking
-
-To run type checking across all packages:
-
-```bash
-pnpm type-check
-```
-
-## GraphQL Codegen Workflows
-
-For packages that use GraphQL, you can generate types from your schema:
-
-```bash
-cd <package-directory>
-pnpm codegen
-```
-
-To watch for changes and regenerate types:
-
-```bash
-cd <package-directory>
-pnpm codegen:watch
-```
-
-## Docker Workflows
-
-The API package supports Docker-based development:
-
-```bash
-cd api
-pnpm container:build    # Build the Docker container
-pnpm container:start    # Start the container
-pnpm container:stop     # Stop the container
-pnpm container:enter    # Enter the container shell
-pnpm container:test     # Run tests in the container
-```
-
-## CLI Commands
-
-When working with a deployed Unraid API, you can use the CLI:
-
-```bash
-unraid-api --help
-```
-
-## Recommended Workflow for New Developers
-
-1. Clone the repository: `git clone git@github.com:unraid/api.git`
-2. Set up the monorepo: `just setup` or `pnpm install`
-3. Start development servers: `pnpm dev`
-4. Make your changes
-5. Test your changes: `pnpm test`
-6. Deploy to a development server: `pnpm unraid:deploy <SERVER_IP>`
-7. Verify your changes on the Unraid server
-
-If using nix, run `nix develop` from the root of the repo before Step 2.

api/docs/public/api-key-app-developer-authorization-flow.md

@@ -1,100 +0,0 @@
-# API Key Authorization Flow
-
-This document describes the self-service API key creation flow for third-party applications.
-
-## Overview
-
-Applications can request API access to an Unraid server by redirecting users to a special authorization page where users can review requested permissions and create an API key with one click.
-
-## Flow
-
-1. **Application initiates request**: The app redirects the user to:
-
-    ```
-    https://[unraid-server]/ApiKeyAuthorize?name=MyApp&scopes=docker:read,vm:*&redirect_uri=https://myapp.com/callback&state=abc123
-    ```
-
-2. **User authentication**: If not already logged in, the user is redirected to login first (standard Unraid auth)
-
-3. **Consent screen**: User sees:
-    - Application name and description
-    - Requested permissions (with checkboxes to approve/deny specific scopes)
-    - API key name field (pre-filled)
-    - Authorize & Cancel buttons
-
-4. **API key creation**: Upon authorization:
-    - API key is created with approved scopes
-    - Key is displayed to the user
-    - If `redirect_uri` is provided, user is redirected back with the key
-
-5. **Callback**: App receives the API key:
-    ```
-    https://myapp.com/callback?api_key=xxx&state=abc123
-    ```
-
-## Query Parameters
-
-- `name` (required): Name of the requesting application
-- `description` (optional): Description of the application
-- `scopes` (required): Comma-separated list of requested scopes
-- `redirect_uri` (optional): URL to redirect after authorization
-- `state` (optional): Opaque value for maintaining state
-
-## Scope Format
-
-Scopes follow the pattern: `resource:action`
-
-### Examples:
-
-- `docker:read` - Read access to Docker
-- `vm:*` - Full access to VMs
-- `system:update` - Update access to system
-- `role:viewer` - Viewer role access
-- `role:admin` - Admin role access
-
-### Available Resources:
-
-- `docker`, `vm`, `system`, `share`, `user`, `network`, `disk`, etc.
-
-### Available Actions:
-
-- `create`, `read`, `update`, `delete` or `*` for all
-
-## Security Considerations
-
-1. **HTTPS required**: Redirect URIs must use HTTPS (except localhost for development)
-2. **User consent**: Users explicitly approve each permission
-3. **Session-based**: Uses existing Unraid authentication session
-4. **One-time display**: API keys are shown once and must be saved securely
-
-## Example Integration
-
-```javascript
-// JavaScript example
-const unraidServer = 'tower.local';
-const appName = 'My Docker Manager';
-const scopes = 'docker:*,system:read';
-const redirectUri = 'https://myapp.com/unraid/callback';
-const state = generateRandomState();
-
-// Store state for verification
-sessionStorage.setItem('oauth_state', state);
-
-// Redirect user to authorization page
-window.location.href =
-    `https://${unraidServer}/ApiKeyAuthorize?` +
-    `name=${encodeURIComponent(appName)}&` +
-    `scopes=${encodeURIComponent(scopes)}&` +
-    `redirect_uri=${encodeURIComponent(redirectUri)}&` +
-    `state=${encodeURIComponent(state)}`;
-
-// Handle callback
-const urlParams = new URLSearchParams(window.location.search);
-const apiKey = urlParams.get('api_key');
-const returnedState = urlParams.get('state');
-
-if (returnedState === sessionStorage.getItem('oauth_state')) {
-    // Save API key securely
-    saveApiKey(apiKey);
-}
-```

api/docs/public/cli.md

@@ -1,17 +1,5 @@
----
-title: CLI Reference
-description: Complete reference for all Unraid API CLI commands
-sidebar_position: 4
----
-
 # CLI Commands
 
-:::info[Command Structure]
-All commands follow the pattern: `unraid-api <command> [options]`
-:::
-
-## 🚀 Service Management
-
 ### Start
 
 ```bash
@@ -21,14 +9,7 @@ unraid-api start [--log-level <level>]
 Starts the Unraid API service.
 
 Options:
-
-- `--log-level`: Set logging level (trace|debug|info|warn|error|fatal)
-
-Alternative: You can also set the log level using the `LOG_LEVEL` environment variable:
-
-```bash
-LOG_LEVEL=trace unraid-api start
-```
+- `--log-level`: Set logging level (trace|debug|info|warn|error)
 
 ### Stop
 
@@ -43,21 +24,11 @@ Stops the Unraid API service.
 ### Restart
 
 ```bash
-unraid-api restart [--log-level <level>]
+unraid-api restart
 ```
 
 Restarts the Unraid API service.
 
-Options:
-
-- `--log-level`: Set logging level (trace|debug|info|warn|error|fatal)
-
-Alternative: You can also set the log level using the `LOG_LEVEL` environment variable:
-
-```bash
-LOG_LEVEL=trace unraid-api restart
-```
-
 ### Logs
 
 ```bash
@@ -68,7 +39,7 @@ View the API logs.
 
 - `-l, --lines`: Optional. Number of lines to tail (default: 100)
 
-## ⚙️ Configuration Commands
+## Configuration Commands
 
 ### Config
 
@@ -90,36 +61,21 @@ Switch between production and staging environments.
 
 ### Developer Mode
 
-:::tip Web GUI Management
-You can also manage developer options through the web interface at **Settings** → **Management Access** → **Developer Options**
-:::
-
 ```bash
-unraid-api developer                       # Interactive prompt for tools
-unraid-api developer --sandbox true        # Enable GraphQL sandbox
-unraid-api developer --sandbox false       # Disable GraphQL sandbox
-unraid-api developer --enable-modal        # Enable modal testing tool
-unraid-api developer --disable-modal       # Disable modal testing tool
+unraid-api developer
 ```
 
-Configure developer features for the API:
-
-- **GraphQL Sandbox**: Enable/disable Apollo GraphQL sandbox at `/graphql`
-- **Modal Testing Tool**: Enable/disable UI modal testing in the Unraid menu
+Configure developer features for the API (e.g., GraphQL sandbox).
 
 ## API Key Management
 
-:::tip Web GUI Management
-You can also manage API keys through the web interface at **Settings** → **Management Access** → **API Keys**
-:::
-
 ### API Key Commands
 
 ```bash
 unraid-api apikey [options]
 ```
 
-Create and manage API keys via CLI.
+Create and manage API keys.
 
 Options:
 
@@ -131,10 +87,6 @@ Options:
 
 ## SSO (Single Sign-On) Management
 
-:::info OIDC Configuration
-For OIDC/SSO provider configuration, see the web interface at **Settings** → **Management Access** → **API** → **OIDC** or refer to the [OIDC Provider Setup](./oidc-provider-setup.md) guide.
-:::
-
 ### SSO Base Command
 
 ```bash

api/docs/public/how-to-use-the-api.md

@@ -1,75 +1,33 @@
----
-title: Using the Unraid API
-description: Learn how to interact with your Unraid server through the GraphQL API
-sidebar_position: 2
----
-
 # Using the Unraid API
 
-:::tip[Quick Start]
-The Unraid API provides a powerful GraphQL interface for managing your server. This guide covers authentication, common queries, and best practices.
-:::
-
 The Unraid API provides a GraphQL interface that allows you to interact with your Unraid server. This guide will help you get started with exploring and using the API.
 
-## 🎮 Enabling the GraphQL Sandbox
+## Enabling the GraphQL Sandbox
 
-### Web GUI Method (Recommended)
+1. First, enable developer mode using the CLI:
 
-:::info[Preferred Method]
-Using the Web GUI is the easiest way to enable the GraphQL sandbox.
-:::
+    ```bash
+    unraid-api developer
+    ```
+
+2. Follow the prompts to enable the sandbox. This will allow you to access the Apollo Sandbox interface.
 
-1. Navigate to **Settings** → **Management Access** → **Developer Options**
-2. Enable the **GraphQL Sandbox** toggle
 3. Access the GraphQL playground by navigating to:
 
     ```txt
     http://YOUR_SERVER_IP/graphql
     ```
 
-### CLI Method
+## Authentication
 
-Alternatively, you can enable developer mode using the CLI:
+Most queries and mutations require authentication. You can authenticate using either:
 
-```bash
-unraid-api developer --sandbox true
-```
+1. API Keys
+2. Cookies (default method when signed into the WebGUI)
 
-Or use the interactive mode:
+### Creating an API Key
 
-```bash
-unraid-api developer
-```
-
-## 🔑 Authentication
-
-:::warning[Required for Most Operations]
-Most queries and mutations require authentication. Always include appropriate credentials in your requests.
-:::
-
-You can authenticate using:
-
-1. **API Keys** - For programmatic access
-2. **Cookies** - Automatic when signed into the WebGUI
-3. **SSO/OIDC** - When configured with external providers
-
-### Managing API Keys
-
-<tabs>
-<tabItem value="gui" label="Web GUI (Recommended)" default>
-
-Navigate to **Settings** → **Management Access** → **API Keys** in your Unraid web interface to:
-
-- View existing API keys
-- Create new API keys
-- Manage permissions and roles
-- Revoke or regenerate keys
-
-</tabItem>
-<tabItem value="cli" label="CLI Method">
-
-You can also use the CLI to create an API key:
+Use the CLI to create an API key:
 
 ```bash
 unraid-api apikey --create
@@ -82,11 +40,6 @@ Follow the prompts to set:
 - Roles
 - Permissions
 
-</tabItem>
-</tabs>
-
-### Using API Keys
-
 The generated API key should be included in your GraphQL requests as a header:
 
 ```json
@@ -95,7 +48,7 @@ The generated API key should be included in your GraphQL requests as a header:
 }
 ```
 
-## 📊 Available Schemas
+## Available Schemas
 
 The API provides access to various aspects of your Unraid server:
 
@@ -124,9 +77,9 @@ The API provides access to various aspects of your Unraid server:
 - Handle SSO configuration
 - Manage allowed origins
 
-### 💻 Example Queries
+### Example Queries
 
-#### Check System Status
+1. Check System Status:
 
 ```graphql
 query {
@@ -147,7 +100,7 @@ query {
 }
 ```
 
-#### Monitor Array Status
+2. Monitor Array Status:
 
 ```graphql
 query {
@@ -170,7 +123,7 @@ query {
 }
 ```
 
-#### List Docker Containers
+3. List Docker Containers:
 
 ```graphql
 query {
@@ -184,7 +137,7 @@ query {
 }
 ```
 
-## 🏗️ Schema Types
+## Schema Types
 
 The API includes several core types:
 
@@ -211,23 +164,19 @@ Available roles:
 - `connect`: Remote access features
 - `guest`: Limited read access
 
-## ✨ Best Practices
+## Best Practices
 
-:::tip[Pro Tips]
 1. Use the Apollo Sandbox to explore the schema and test queries
 2. Start with small queries and gradually add fields as needed
 3. Monitor your query complexity to maintain performance
 4. Use appropriate roles and permissions for your API keys
 5. Keep your API keys secure and rotate them periodically
-:::
 
-## ⏱️ Rate Limiting
+## Rate Limiting
 
-:::caution[Rate Limits]
 The API implements rate limiting to prevent abuse. Ensure your applications handle rate limit responses appropriately.
-:::
 
-## 🚨 Error Handling
+## Error Handling
 
 The API returns standard GraphQL errors in the following format:
 
@@ -243,13 +192,11 @@ The API returns standard GraphQL errors in the following format:
 }
 ```
 
-## 📚 Additional Resources
+## Additional Resources
 
-:::info[Learn More]
 - Use the Apollo Sandbox's schema explorer to browse all available types and fields
 - Check the documentation tab in Apollo Sandbox for detailed field descriptions
 - Monitor the API's health using `unraid-api status`
 - Generate reports using `unraid-api report` for troubleshooting
 
-For more information about specific commands and configuration options, refer to the [CLI documentation](/cli) or run `unraid-api --help`.
-:::
+For more information about specific commands and configuration options, refer to the CLI documentation or run `unraid-api --help`.

api/docs/public/index.md

@@ -1,94 +1,37 @@
----
-title: Welcome to Unraid API
-description: The official GraphQL API for Unraid Server management and automation
-sidebar_position: 1
----
-
-# Welcome to Unraid API
-
-:::tip[What's New]
-Starting with Unraid OS v7.2, the API comes built into the operating system - no plugin installation required!
-:::
+# Unraid API
 
 The Unraid API provides a GraphQL interface for programmatic interaction with your Unraid server. It enables automation, monitoring, and integration capabilities.
 
-## 📦 Availability
+## Current Availability
 
-### ✨ Native Integration (Unraid OS v7.2+)
+The API is available through the Unraid Connect Plugin:
 
-Starting with Unraid OS v7.2, the API is integrated directly into the operating system:
-
-- No plugin installation required
-- Automatically available on system startup
-- Deep system integration
-- Access through **Settings** → **Management Access** → **API**
-
-### 🔌 Plugin Installation (Pre-7.2 and Advanced Users)
-
-For Unraid versions prior to v7.2 or to access newer API features:
-
-1. Install the Unraid Connect Plugin from Community Apps
+1. Install Unraid Connect Plugin from Apps
 2. [Configure the plugin](./how-to-use-the-api.md#enabling-the-graphql-sandbox)
-3. Access API functionality through the [GraphQL Sandbox](./how-to-use-the-api.md)
+3. Access API functionality through the [GraphQL Sandbox](./how-to-use-the-api.md#accessing-the-graphql-sandbox)
 
-:::info Important Notes
-- The Unraid Connect plugin provides the API for pre-7.2 versions
-- You do NOT need to sign in to Unraid Connect to use the API locally
-- Installing the plugin on 7.2+ gives you access to newer API features before they're included in OS releases
-:::
+## Future Availability
 
-## 📚 Documentation Sections
+The API will be integrated directly into the Unraid operating system in an upcoming OS release. This integration will:
 
-<cards>
-<card title="CLI Commands" icon="terminal" href="./cli">
-  Complete reference for all CLI commands
-</card>
-<card title="Using the API" icon="code" href="./how-to-use-the-api">
-  Learn how to interact with the GraphQL API
-</card>
-<card title="OIDC Setup" icon="shield" href="./oidc-provider-setup">
-  Configure SSO authentication providers
-</card>
-<card title="Upcoming Features" icon="rocket" href="./upcoming-features">
-  See what's coming next
-</card>
-</cards>
+- Make the API a core part of the Unraid system
+- Remove the need for separate plugin installation
+- Enable deeper system integration capabilities
 
+## Documentation Sections
 
-## 🌟 Key Features
+- [CLI Commands](./cli.md) - Reference for all available command-line interface commands
+- [Using the Unraid API](./how-to-use-the-api.md) - Comprehensive guide on using the GraphQL API
+- [Upcoming Features](./upcoming-features.md) - Roadmap of planned features and improvements
+
+## Key Features
 
-:::info[Core Capabilities]
 The API provides:
 
-- **GraphQL Interface**: Modern, flexible API with strong typing
-- **Authentication**: Multiple methods including API keys, session cookies, and SSO/OIDC
-- **Comprehensive Coverage**: Access to system information, array management, and Docker operations
-- **Developer Tools**: Built-in GraphQL sandbox configurable via web interface or CLI
-- **Role-Based Access**: Granular permission control
-- **Web Management**: Manage API keys and settings through the web interface
-:::
+- GraphQL Interface: Modern, flexible API with strong typing
+- Authentication: Secure access via API keys or session cookies
+- Comprehensive Coverage: Access to system information, array management, and Docker operations
+- Developer Tools: Built-in GraphQL sandbox for testing
+- Role-Based Access: Granular permission control
 
-## 🚀 Get Started
-
-<tabs>
-<tabItem value="v72" label="Unraid OS v7.2+" default>
-
-1. The API is already installed and running
-2. Access settings at **Settings** → **Management Access** → **API**
-3. Enable the GraphQL Sandbox for development
-4. Create your first API key
-5. Start making GraphQL queries!
-
-</tabItem>
-<tabItem value="older" label="Pre-7.2 Versions">
-
-1. Install the Unraid Connect plugin from Community Apps
-2. No Unraid Connect login required for local API access
-3. Configure the plugin settings
-4. Enable the GraphQL Sandbox
-5. Start exploring the API!
-
-</tabItem>
-</tabs>
-
-For detailed usage instructions, see the [CLI Commands](./cli) reference.
+For detailed usage instructions, see [CLI Commands](./cli.md).

api/docs/public/oidc-provider-setup.md

@@ -1,420 +0,0 @@
----
-title: OIDC Provider Setup
-description: Configure OIDC (OpenID Connect) providers for SSO authentication in Unraid API
-sidebar_position: 3
----
-
-# OIDC Provider Setup
-
-:::info[What is OIDC?]
-OpenID Connect (OIDC) is an authentication protocol that allows users to sign in using their existing accounts from providers like Google, Microsoft, or your corporate identity provider. It enables Single Sign-On (SSO) for seamless and secure authentication.
-:::
-
-This guide walks you through configuring OIDC (OpenID Connect) providers for SSO authentication in the Unraid API using the web interface.
-
-## 🚀 Quick Start
-
-<details open>
-<summary><strong>Getting to OIDC Settings</strong></summary>
-
-1. Navigate to your Unraid server's web interface
-2. Go to **Settings** → **Management Access** → **API** → **OIDC**
-3. You'll see tabs for different providers - click the **+** button to add a new provider
-
-</details>
-
-### OIDC Providers Interface Overview
-
-![Login Page with SSO Options](./images/sso-with-options.png)
-*Login page showing traditional login form with SSO options - "Login With Unraid.net" and "Sign in with Google" buttons*
-
-The interface includes:
-
-- **Provider tabs**: Each configured provider (Unraid.net, Google, etc.) appears as a tab
-- **Add Provider button**: Click the **+** button to add new providers
-- **Authorization Mode dropdown**: Toggle between "simple" and "advanced" modes
-- **Simple Authorization section**: Configure allowed email domains and specific addresses
-- **Add Item buttons**: Click to add multiple authorization rules
-
-## Understanding Authorization Modes
-
-The interface provides two authorization modes:
-
-### Simple Mode (Recommended)
-
-Simple mode is the easiest way to configure authorization. You can:
-
-- Allow specific email domains (e.g., @company.com)
-- Allow specific email addresses
-- Configure who can access your Unraid server with minimal setup
-
-**When to use Simple Mode:**
-
-- You want to allow all users from your company domain
-- You have a small list of specific users
-- You're new to OIDC configuration
-
-<details>
-<summary><strong>Advanced Mode</strong></summary>
-
-Advanced mode provides granular control using claim-based rules. You can:
-
-- Create complex authorization rules based on JWT claims
-- Use operators like equals, contains, endsWith, startsWith
-- Combine multiple conditions with OR/AND logic
-- Choose whether ANY rule must pass (OR mode) or ALL rules must pass (AND mode)
-
-**When to use Advanced Mode:**
-
-- You need to check group memberships
-- You want to verify multiple claims (e.g., email domain AND verified status)
-- You have complex authorization requirements
-- You need fine-grained control over how rules are evaluated
-
-</details>
-
-## Authorization Rules
-
-![Authorization Rules Configuration](./images/advanced-rules.png)
-*Advanced authorization rules showing JWT claim configuration with email endsWith operator for domain-based access control*
-
-### Simple Mode Examples
-
-#### Allow Company Domain
-
-In Simple Authorization:
-
-- **Allowed Email Domains**: Enter `company.com`
-- This allows anyone with @company.com email
-
-#### Allow Specific Users
-
-- **Specific Email Addresses**: Add individual emails
-- Click **Add Item** to add multiple addresses
-
-<details>
-<summary><strong>Advanced Mode Examples</strong></summary>
-
-#### Authorization Rule Mode
-
-When using multiple rules, you can choose how they're evaluated:
-
-- **OR Mode** (default): User is authorized if ANY rule passes
-- **AND Mode**: User is authorized only if ALL rules pass
-
-#### Email Domain with Verification (AND Mode)
-
-To require both email domain AND verification:
-
-1. Set **Authorization Rule Mode** to `AND`
-2. Add two rules:
-   - Rule 1:
-     - **Claim**: `email`
-     - **Operator**: `endsWith`
-     - **Value**: `@company.com`
-   - Rule 2:
-     - **Claim**: `email_verified`
-     - **Operator**: `equals`
-     - **Value**: `true`
-
-This ensures users must have both a company email AND a verified email address.
-
-#### Group-Based Access (OR Mode)
-
-To allow access to multiple groups:
-
-1. Set **Authorization Rule Mode** to `OR` (default)
-2. Add rules for each group:
-   - **Claim**: `groups`
-   - **Operator**: `contains`
-   - **Value**: `admins`
-   
-   Or add another rule:
-   - **Claim**: `groups`
-   - **Operator**: `contains`
-   - **Value**: `developers`
-
-Users in either `admins` OR `developers` group will be authorized.
-
-#### Multiple Domains
-
-- **Claim**: `email`
-- **Operator**: `endsWith`
-- **Values**: Add multiple domains (e.g., `company.com`, `subsidiary.com`)
-
-#### Complex Authorization (AND Mode)
-
-For strict security requiring multiple conditions:
-
-1. Set **Authorization Rule Mode** to `AND`
-2. Add multiple rules that ALL must pass:
-   - Email must be from company domain
-   - Email must be verified
-   - User must be in specific group
-   - Account must have 2FA enabled (if claim available)
-
-</details>
-
-<details>
-<summary><strong>Configuration Interface Details</strong></summary>
-
-### Provider Tabs
-
-- Each configured provider appears as a tab at the top
-- Click a tab to switch between provider configurations
-- The **+** button on the right adds a new provider
-
-### Authorization Mode Dropdown
-
-- **simple**: Best for email-based authorization (recommended for most users)
-- **advanced**: For complex claim-based rules using JWT claims
-
-### Simple Authorization Fields
-
-When "simple" mode is selected, you'll see:
-
-- **Allowed Email Domains**: Enter domains without @ (e.g., `company.com`)
-    - Helper text: "Users with emails ending in these domains can login"
-- **Specific Email Addresses**: Add individual email addresses
-    - Helper text: "Only these exact email addresses can login"
-- **Add Item** buttons to add multiple entries
-
-### Advanced Authorization Fields
-
-When "advanced" mode is selected, you'll see:
-
-- **Authorization Rule Mode**: Choose `OR` (any rule passes) or `AND` (all rules must pass)
-- **Authorization Rules**: Add multiple claim-based rules
-- **For each rule**:
-    - **Claim**: The JWT claim to check
-    - **Operator**: How to compare (equals, contains, endsWith, startsWith)
-    - **Value**: What to match against
-
-### Additional Interface Elements
-
-- **Enable Developer Sandbox**: Toggle to enable GraphQL sandbox at `/graphql`
-- The interface uses a dark theme for better visibility
-- Field validation indicators help ensure correct configuration
-
-</details>
-
-### Required Redirect URI
-
-:::caution[Important Configuration]
-All providers must be configured with this exact redirect URI format:
-:::
-
-```bash
-http://YOUR_UNRAID_IP/graphql/api/auth/oidc/callback
-```
-
-:::tip
-Replace `YOUR_UNRAID_IP` with your actual server IP address (e.g., `192.168.1.100` or `tower.local`).
-:::
-
-### Issuer URL Format
-
-The **Issuer URL** field accepts both formats, but **base URL is strongly recommended** for security:
-
-- **Base URL** (recommended): `https://accounts.google.com`
-- **Full discovery URL**: `https://accounts.google.com/.well-known/openid-configuration`
-
-**⚠️ Security Note**: Always use the base URL format when possible. The system automatically appends `/.well-known/openid-configuration` for OIDC discovery. Using the full discovery URL directly disables important issuer validation checks and is not recommended by the OpenID Connect specification.
-
-**Examples of correct base URLs:**
-- Google: `https://accounts.google.com`
-- Microsoft/Azure: `https://login.microsoftonline.com/YOUR_TENANT_ID/v2.0`
-- Keycloak: `https://keycloak.example.com/realms/YOUR_REALM`
-- Authelia: `https://auth.yourdomain.com`
-
-## ✅ Testing Your Configuration
-
-![Login Page with SSO Buttons](./images/sso-with-options.png)
-*Unraid login page displaying both traditional username/password authentication and SSO options with customized provider buttons*
-
-1. Save your provider configuration
-2. Log out (if logged in)
-3. Navigate to the login page
-4. Your configured provider button should appear
-5. Click to test the login flow
-
-## 🔧 Troubleshooting
-
-### Common Issues
-
-#### "Provider not found" error
-
-- Ensure the Issuer URL is correct
-- Check that the provider supports OIDC discovery (/.well-known/openid-configuration)
-
-#### "Authorization failed"
-
-- In Simple Mode: Check email domains are entered correctly (without @)
-- In Advanced Mode: 
-  - Verify claim names match exactly what your provider sends
-  - Check if Authorization Rule Mode is set correctly (OR vs AND)
-  - Ensure all required claims are present in the token
-- Enable debug logging to see actual claims and rule evaluation
-
-#### "Invalid redirect URI"
-
-- Ensure the redirect URI in your provider matches exactly
-- Include the correct port if using a non-standard configuration
-- Verify the redirect URI protocol matches your server's configuration (HTTP or HTTPS)
-
-#### Cannot see login button
-
-- Check that at least one authorization rule is configured
-- Verify the provider is enabled/saved
-
-### Debug Mode
-
-To troubleshoot issues:
-
-1. Enable debug logging:
-
-```bash
-LOG_LEVEL=debug unraid-api start --debug
-```
-
-2. Check logs for:
-
-- Received claims from provider
-- Authorization rule evaluation
-- Token validation errors
-
-## 🔐 Security Best Practices
-
-1. **Use Simple Mode for authorization** - Prevents overly accepting configurations and reduces misconfiguration risks
-2. **Be specific with authorization** - Don't use overly broad rules
-3. **Rotate secrets regularly** - Update client secrets periodically
-4. **Test thoroughly** - Verify only intended users can access
-
-## 💡 Need Help?
-
-- Check provider's OIDC documentation
-- Review Unraid API logs for detailed error messages
-- Ensure your provider supports standard OIDC discovery
-- Verify network connectivity between Unraid and provider
-
-## 🏢 Provider-Specific Setup
-
-### Unraid.net Provider
-
-The Unraid.net provider is built-in and pre-configured. You only need to configure authorization rules in the interface.
-
-**Configuration:**
-
-- **Issuer URL**: Pre-configured (built-in provider)
-- **Client ID/Secret**: Pre-configured (built-in provider)
-- **Redirect URI**: `http://YOUR_UNRAID_IP/graphql/api/auth/oidc/callback`
-
-:::tip[Redirect URI Protocol]
-**Match the protocol to your server setup:** Use `http://` if accessing your Unraid server without SSL/TLS (typical for local network access). Use `https://` if you've configured SSL/TLS on your server. Some OIDC providers (like Google) require HTTPS and won't accept HTTP redirect URIs.
-:::
-
-Configure authorization rules using Simple Mode (allowed email domains/addresses) or Advanced Mode for complex requirements.
-
-### Google
-
-<details>
-<summary><strong>📋 Setup Steps</strong></summary>
-
-Set up OAuth 2.0 credentials in [Google Cloud Console](https://console.cloud.google.com/):
-
-1. Go to **APIs & Services** → **Credentials**
-2. Click **Create Credentials** → **OAuth client ID**
-3. Choose **Web application** as the application type
-4. Add your redirect URI to **Authorized redirect URIs**
-5. Configure the OAuth consent screen if prompted
-
-</details>
-
-**Configuration:**
-
-- **Issuer URL**: `https://accounts.google.com`
-- **Client ID/Secret**: From your OAuth 2.0 client credentials
-- **Required Scopes**: `openid`, `profile`, `email`
-- **Redirect URI**: `http://YOUR_UNRAID_IP/graphql/api/auth/oidc/callback`
-
-:::warning[Google Domain Requirements]
-**Google requires valid domain names for OAuth redirect URIs.** Local IP addresses and `.local` domains are not accepted. To use Google OAuth with your Unraid server, you'll need:
-
-- **Option 1: Reverse Proxy** - Set up a reverse proxy (like NGINX Proxy Manager or Traefik) with a valid domain name pointing to your Unraid API
-- **Option 2: Tailscale** - Use Tailscale to get a valid `*.ts.net` domain that Google will accept
-- **Option 3: Dynamic DNS** - Use a DDNS service to get a public domain name for your server
-
-Remember to update your redirect URI in both Google Cloud Console and your Unraid OIDC configuration to use the valid domain.
-:::
-
-For Google Workspace domains, use Advanced Mode with the `hd` claim to restrict access to your organization's domain.
-
-### Authelia
-
-Configure OIDC client in your Authelia `configuration.yml` with client ID `unraid-api` and generate a hashed secret using the Authelia hash-password command.
-
-**Configuration:**
-
-- **Issuer URL**: `https://auth.yourdomain.com`
-- **Client ID**: `unraid-api` (or as configured in Authelia)
-- **Client Secret**: Your unhashed secret
-- **Required Scopes**: `openid`, `profile`, `email`, `groups`
-- **Redirect URI**: `http://YOUR_UNRAID_IP/graphql/api/auth/oidc/callback`
-
-Use Advanced Mode with `groups` claim for group-based authorization.
-
-### Microsoft/Azure AD
-
-Register a new app in [Azure Portal](https://portal.azure.com/) under Azure Active Directory → App registrations. Note the Application ID, create a client secret, and note your tenant ID.
-
-**Configuration:**
-
-- **Issuer URL**: `https://login.microsoftonline.com/YOUR_TENANT_ID/v2.0`
-- **Client ID**: Your Application (client) ID
-- **Client Secret**: Generated client secret
-- **Required Scopes**: `openid`, `profile`, `email`
-- **Redirect URI**: `http://YOUR_UNRAID_IP/graphql/api/auth/oidc/callback`
-
-Authorization rules can be configured in the interface using email domains or advanced claims.
-
-### Keycloak
-
-Create a new confidential client in Keycloak Admin Console with `openid-connect` protocol and copy the client secret from the Credentials tab.
-
-**Configuration:**
-
-- **Issuer URL**: `https://keycloak.example.com/realms/YOUR_REALM`
-- **Client ID**: `unraid-api` (or as configured in Keycloak)
-- **Client Secret**: From Keycloak Credentials tab
-- **Required Scopes**: `openid`, `profile`, `email`
-- **Redirect URI**: `http://YOUR_UNRAID_IP/graphql/api/auth/oidc/callback`
-
-For role-based authorization, use Advanced Mode with `realm_access.roles` or `resource_access` claims.
-
-### Authentik
-
-Create a new OAuth2/OpenID Provider in Authentik, then create an Application and link it to the provider.
-
-**Configuration:**
-
-- **Issuer URL**: `https://authentik.example.com/application/o/<application_slug>/`
-- **Client ID**: From Authentik provider configuration
-- **Client Secret**: From Authentik provider configuration
-- **Required Scopes**: `openid`, `profile`, `email`
-- **Redirect URI**: `http://YOUR_UNRAID_IP/graphql/api/auth/oidc/callback`
-
-Authorization rules can be configured in the interface.
-
-### Okta
-
-Create a new OIDC Web Application in Okta Admin Console and assign appropriate users or groups.
-
-**Configuration:**
-
-- **Issuer URL**: `https://YOUR_DOMAIN.okta.com`
-- **Client ID**: From Okta application configuration
-- **Client Secret**: From Okta application configuration
-- **Required Scopes**: `openid`, `profile`, `email`
-- **Redirect URI**: `http://YOUR_UNRAID_IP/graphql/api/auth/oidc/callback`
-
-Authorization rules can be configured in the interface using email domains or advanced claims.

api/docs/public/programmatic-api-key-management.md

@@ -1,252 +0,0 @@
----
-title: Programmatic API Key Management
-description: Create, use, and delete API keys programmatically for automated workflows
-sidebar_position: 4
----
-
-# Programmatic API Key Management
-
-This guide explains how to create, use, and delete API keys programmatically using the Unraid API CLI, enabling automated workflows and scripts.
-
-## Overview
-
-The `unraid-api apikey` command supports both interactive and non-interactive modes, making it suitable for:
-
-- Automated deployment scripts
-- CI/CD pipelines
-- Temporary access provisioning
-- Infrastructure as code workflows
-
-:::tip[Quick Start]
-Jump to the [Complete Workflow Example](#complete-workflow-example) to see everything in action.
-:::
-
-## Creating API Keys Programmatically
-
-### Basic Creation with JSON Output
-
-Use the `--json` flag to get machine-readable output:
-
-```bash
-unraid-api apikey --create --name "workflow key" --roles ADMIN --json
-```
-
-**Output:**
-
-```json
-{
-    "key": "your-generated-api-key-here",
-    "name": "workflow key",
-    "id": "generated-uuid"
-}
-```
-
-### Advanced Creation with Permissions
-
-```bash
-unraid-api apikey --create \
-  --name "limited access key" \
-  --permissions "DOCKER:READ_ANY,ARRAY:READ_ANY" \
-  --description "Read-only access for monitoring" \
-  --json
-```
-
-### Handling Existing Keys
-
-If a key with the same name exists, use `--overwrite`:
-
-```bash
-unraid-api apikey --create --name "existing key" --roles ADMIN --overwrite --json
-```
-
-:::warning[Key Replacement]
-The `--overwrite` flag will permanently replace the existing key. The old key will be immediately invalidated.
-:::
-
-## Deleting API Keys Programmatically
-
-### Non-Interactive Deletion
-
-Delete a key by name without prompts:
-
-```bash
-unraid-api apikey --delete --name "workflow key"
-```
-
-**Output:**
-
-```
-Successfully deleted 1 API key
-```
-
-### JSON Output for Deletion
-
-Use `--json` flag for machine-readable delete confirmation:
-
-```bash
-unraid-api apikey --delete --name "workflow key" --json
-```
-
-**Success Output:**
-
-```json
-{
-    "deleted": 1,
-    "keys": [
-        {
-            "id": "generated-uuid",
-            "name": "workflow key"
-        }
-    ]
-}
-```
-
-**Error Output:**
-
-```json
-{
-    "deleted": 0,
-    "error": "No API key found with name: nonexistent key"
-}
-```
-
-### Error Handling
-
-When the specified key doesn't exist:
-
-```bash
-unraid-api apikey --delete --name "nonexistent key"
-# Output: No API keys found to delete
-```
-
-**JSON Error Output:**
-
-```json
-{
-    "deleted": 0,
-    "message": "No API keys found to delete"
-}
-```
-
-## Complete Workflow Example
-
-Here's a complete example for temporary access provisioning:
-
-```bash
-#!/bin/bash
-set -e
-
-# 1. Create temporary API key
-echo "Creating temporary API key..."
-KEY_DATA=$(unraid-api apikey --create \
-  --name "temp deployment key" \
-  --roles ADMIN \
-  --description "Temporary key for deployment $(date)" \
-  --json)
-
-# 2. Extract the API key
-API_KEY=$(echo "$KEY_DATA" | jq -r '.key')
-echo "API key created successfully"
-
-# 3. Use the key for operations
-echo "Configuring services..."
-curl -H "Authorization: Bearer $API_KEY" \
-  -H "Content-Type: application/json" \
-  -d '{"provider": "azure", "clientId": "your-client-id"}' \
-  http://localhost:3001/graphql
-
-# 4. Clean up (always runs, even on error)
-trap 'echo "Cleaning up..."; unraid-api apikey --delete --name "temp deployment key"' EXIT
-
-echo "Deployment completed successfully"
-```
-
-## Command Reference
-
-### Create Command Options
-
-| Flag                    | Description             | Example                           |
-| ----------------------- | ----------------------- | --------------------------------- |
-| `--name <name>`         | Key name (required)     | `--name "my key"`                 |
-| `--roles <roles>`       | Comma-separated roles   | `--roles ADMIN,VIEWER`            |
-| `--permissions <perms>` | Resource:action pairs   | `--permissions "DOCKER:READ_ANY"` |
-| `--description <desc>`  | Key description         | `--description "CI/CD key"`       |
-| `--overwrite`           | Replace existing key    | `--overwrite`                     |
-| `--json`                | Machine-readable output | `--json`                          |
-
-### Available Roles
-
-- `ADMIN` - Full system access
-- `CONNECT` - Unraid Connect features
-- `VIEWER` - Read-only access
-- `GUEST` - Limited access
-
-### Available Resources and Actions
-
-**Resources:** `ACTIVATION_CODE`, `API_KEY`, `ARRAY`, `CLOUD`, `CONFIG`, `CONNECT`, `CONNECT__REMOTE_ACCESS`, `CUSTOMIZATIONS`, `DASHBOARD`, `DISK`, `DISPLAY`, `DOCKER`, `FLASH`, `INFO`, `LOGS`, `ME`, `NETWORK`, `NOTIFICATIONS`, `ONLINE`, `OS`, `OWNER`, `PERMISSION`, `REGISTRATION`, `SERVERS`, `SERVICES`, `SHARE`, `VARS`, `VMS`, `WELCOME`
-
-**Actions:** `CREATE_ANY`, `CREATE_OWN`, `READ_ANY`, `READ_OWN`, `UPDATE_ANY`, `UPDATE_OWN`, `DELETE_ANY`, `DELETE_OWN`
-
-### Delete Command Options
-
-| Flag            | Description              | Example           |
-| --------------- | ------------------------ | ----------------- |
-| `--delete`      | Enable delete mode       | `--delete`        |
-| `--name <name>` | Key to delete (optional) | `--name "my key"` |
-
-**Note:** If `--name` is omitted, the command runs interactively.
-
-## Best Practices
-
-:::info[Security Best Practices]
-**Minimal Permissions**
-
-- Use specific permissions instead of ADMIN role when possible
-- Example: `--permissions "DOCKER:READ_ANY"` instead of `--roles ADMIN`
-
-**Key Lifecycle Management**
-
-- Always clean up temporary keys after use
-- Store API keys securely (environment variables, secrets management)
-- Use descriptive names and descriptions for audit trails
-  :::
-
-### Error Handling
-
-- Check exit codes (`$?`) after each command
-- Use `set -e` in bash scripts to fail fast
-- Implement proper cleanup with `trap`
-
-### Key Naming
-
-- Use descriptive names that include purpose and date
-- Names must contain only letters, numbers, and spaces
-- Unicode letters are supported
-
-## Troubleshooting
-
-### Common Issues
-
-:::note[Common Error Messages]
-
-**"API key name must contain only letters, numbers, and spaces"**
-
-- **Solution:** Remove special characters like hyphens, underscores, or symbols
-
-**"API key with name 'x' already exists"**
-
-- **Solution:** Use `--overwrite` flag or choose a different name
-
-**"Please add at least one role or permission to the key"**
-
-- **Solution:** Specify either `--roles` or `--permissions` (or both)
-
-:::
-
-### Debug Mode
-
-For troubleshooting, run with debug logging:
-
-```bash
-LOG_LEVEL=debug unraid-api apikey --create --name "debug key" --roles ADMIN
-```

api/docs/public/upcoming-features.md

@@ -1,172 +1,71 @@
----
-title: Roadmap & Features
-description: Current status and upcoming features for the Unraid API
-sidebar_position: 10
----
+# Upcoming Features
 
-# Roadmap & Features
-
-:::info Development Status
-This roadmap outlines completed and planned features for the Unraid API. Features and timelines may change based on development priorities and community feedback.
-:::
-
-## Feature Status Legend
-
-| Status | Description |
-|--------|-------------|
-| ✅ **Done** | Feature is complete and available |
-| 🚧 **In Progress** | Currently under active development |
-| 📅 **Planned** | Scheduled for future development |
-| 💡 **Under Consideration** | Being evaluated for future inclusion |
+Note: This roadmap outlines planned features and improvements for the Unraid API. Features and timelines may change based on development priorities and community feedback.
 
 ## Core Infrastructure
 
-### Completed Features ✅
-
-| Feature | Available Since |
-|---------|-----------------|
-| **API Development Environment Improvements** | v4.0.0 |
-| **Include API in Unraid OS** | Unraid v7.2-beta.1 |
-| **Separate API from Connect Plugin** | Unraid v7.2-beta.1 |
-
-### Upcoming Features 📅
-
-| Feature | Target Timeline |
-|---------|-----------------|
-| **Make API Open Source** | Q1 2025 |
-| **Developer Tools for Plugins** | Q2 2025 |
+| Feature | Status | Tag |
+|---------|--------|-----|
+| API Development Environment Improvements | Done | v4.0.0 |
+| Include API in Unraid OS | Planned (Q1 2025) | - |
+| Make API Open Source | Planned (Q1 2025) | - |
+| Separate API from Connect Plugin | Planned (Q2 2025) | - |
+| Developer Tools for Plugins | Planned (Q2 2025) | - |
 
 ## Security & Authentication
 
-### Completed Features ✅
-
-| Feature | Available Since |
-|---------|-----------------|
-| **Permissions System Rewrite** | v4.0.0 |
-| **OIDC/SSO Support** | Unraid v7.2-beta.1 |
-
-### In Development 🚧
-
-- **User Interface Component Library** - Enhanced security components for the UI
+| Feature | Status | Tag |
+|---------|--------|-----|
+| Permissions System Rewrite | Done | v4.0.0 |
+| User Interface Component Library | In Progress | - |
 
 ## User Interface Improvements
 
-### Planned Features 📅
-
-| Feature | Target Timeline | Description |
-|---------|-----------------|-------------|
-| **New Settings Pages** | Q2 2025 | Modernized settings interface with improved UX |
-| **Custom Theme Creator** | Q2-Q3 2025 | Allow users to create and share custom themes |
-| **New Connect Settings Interface** | Q1 2025 | Redesigned Unraid Connect configuration |
+| Feature | Status | Tag |
+|---------|--------|-----|
+| New Settings Pages | Planned (Q2 2025) | - |
+| Custom Theme Creator | Planned (Q2-Q3 2025) | - |
+| New Connect Settings Interface | Planned (Q1 2025) | - |
 
 ## Array Management
 
-### Completed Features ✅
-
-| Feature | Available Since |
-|---------|-----------------|
-| **Array Status Monitoring** | v4.0.0 |
-
-### Planned Features 📅
-
-| Feature | Target Timeline | Description |
-|---------|-----------------|-------------|
-| **Storage Pool Creation Interface** | Q2 2025 | Simplified pool creation workflow |
-| **Storage Pool Status Interface** | Q2 2025 | Real-time pool health monitoring |
+| Feature | Status | Tag |
+|---------|--------|-----|
+| Array Status Monitoring | Done | v4.0.0 |
+| Storage Pool Creation Interface | Planned (Q2 2025) | - |
+| Storage Pool Status Interface | Planned (Q2 2025) | - |
 
 ## Docker Integration
 
-### Completed Features ✅
-
-| Feature | Available Since |
-|---------|-----------------|
-| **Docker Container Status Monitoring** | v4.0.0 |
-
-### Planned Features 📅
-
-| Feature | Target Timeline | Description |
-|---------|-----------------|-------------|
-| **New Docker Status Interface Design** | Q3 2025 | Modern container management UI |
-| **New Docker Status Interface** | Q3 2025 | Implementation of new design |
-| **Docker Container Setup Interface** | Q3 2025 | Streamlined container deployment |
-| **Docker Compose Support** | TBD | Native docker-compose.yml support |
+| Feature | Status | Tag |
+|---------|--------|-----|
+| Docker Container Status Monitoring | Done | v4.0.0 |
+| New Docker Status Interface Design | Planned (Q3 2025) | - |
+| New Docker Status Interface | Planned (Q3 2025) | - |
+| Docker Container Setup Interface | Planned (Q3 2025) | - |
+| Docker Compose Support | Planned | - |
 
 ## Share Management
 
-### Completed Features ✅
-
-| Feature | Available Since |
-|---------|-----------------|
-| **Array/Cache Share Status Monitoring** | v4.0.0 |
-
-### Under Consideration 💡
-
-- **Storage Share Creation & Settings** - Enhanced share configuration options
-- **Storage Share Management Interface** - Unified share management dashboard
+| Feature | Status | Tag |
+|---------|--------|-----|
+| Array/Cache Share Status Monitoring | Done | v4.0.0 |
+| Storage Share Creation & Settings | Planned | - |
+| Storage Share Management Interface | Planned | - |
 
 ## Plugin System
 
-### Planned Features 📅
-
-| Feature | Target Timeline | Description |
-|---------|-----------------|-------------|
-| **New Plugins Interface** | Q3 2025 | Redesigned plugin management UI |
-| **Plugin Management Interface** | TBD | Advanced plugin configuration |
-| **Plugin Development Tools** | TBD | SDK and tooling for developers |
+| Feature | Status | Tag |
+|---------|--------|-----|
+| New Plugins Interface | Planned (Q3 2025) | - |
+| Plugin Management Interface | Planned | - |
+| Plugin Development Tools | Planned | - |
 
 ## Notifications
 
-### Completed Features ✅
+| Feature | Status | Tag |
+|---------|--------|-----|
+| Notifications System | Done | v4.0.0 |
+| Notifications Interface | Done | v4.0.0 |
 
-| Feature | Available Since |
-|---------|-----------------|
-| **Notifications System** | v4.0.0 |
-| **Notifications Interface** | v4.0.0 |
-
----
-
-## Recent Releases
-
-:::info Full Release History
-For a complete list of all releases, changelogs, and download links, visit the [Unraid API GitHub Releases](https://github.com/unraid/api/releases) page.
-:::
-
-### Unraid v7.2-beta.1 Highlights
-
-- 🎉 **API included in Unraid OS** - Native integration
-- 🔐 **OIDC/SSO Support** - Enterprise authentication
-- 📦 **Standalone API** - Separated from Connect plugin
-
-### v4.0.0 Highlights
-
-- 🛡️ **Permissions System Rewrite** - Enhanced security
-- 📊 **Comprehensive Monitoring** - Array, Docker, and Share status
-- 🔔 **Notifications System** - Real-time alerts and notifications
-- 🛠️ **Developer Environment** - Improved development tools
-
-## Community Feedback
-
-:::tip Have a Feature Request?
-We value community input! Please submit feature requests and feedback through:
-
-- [Unraid Forums](https://forums.unraid.net)
-- [GitHub Issues](https://github.com/unraid/api/issues) - API is open source!
-
-:::
-
-## Version Support
-
-| Unraid Version | API Version | Support Status |
-|----------------|-------------|----------------|
-| Unraid v7.2-beta.1+ | Latest | ✅ Active |
-| 7.0 - 7.1.x | v4.x via Plugin | ⚠️ Limited |
-| 6.12.x | v4.x via Plugin | ⚠️ Limited |
-| < 6.12 | Not Supported | ❌ EOL |
-
-:::warning Legacy Support
-Versions prior to Unraid 7.2 require the API to be installed through the Unraid Connect plugin. Some features may not be available on older versions.
-:::
-
-:::tip Pre-release Versions
-You can always install the Unraid Connect plugin to access pre-release versions of the API and get early access to new features before they're included in Unraid OS releases.
-:::
+Features marked as "Done" are available in current releases. The tag column shows the version where a feature was first introduced.

api/ecosystem.config.json

@@ -11,11 +11,8 @@
             "max_restarts": 10,
             "min_uptime": 10000,
             "watch": false,
-            "interpreter": "/usr/local/bin/node",
             "ignore_watch": ["node_modules", "src", ".env.*", "myservers.cfg"],
-            "out_file": "/var/log/graphql-api.log",
-            "error_file": "/var/log/graphql-api.log",
-            "merge_logs": true,
+            "log_file": "/var/log/graphql-api.log",
             "kill_timeout": 10000
         }
     ]