feat: single-image transform, NAS/FTP in delivery, backup-all any target, metadata sidecar, prompt view, preset manager, API token + MCP server

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XNQ8ghPfzAfsyVYd6HgFb6

src/pages/api/admin/delivery-targets.ts

@@ -8,12 +8,12 @@ const json = (b: unknown, s = 200) =>
   new Response(JSON.stringify(b), { status: s, headers: { 'Content-Type': 'application/json' } });
 
 export const GET: APIRoute = async () => {
-  const rows = await query<any>(`SELECT id, name, protocol, host, port, username, base_path,
+  const rows = await query<any>(`SELECT id, name, protocol, host, port, username, base_path, is_backup,
     (password_enc IS NOT NULL) AS password_set FROM delivery_targets ORDER BY name`);
   return json({ targets: rows });
 };
 
-// POST: anlegen | { action:'test', id } testen
+// POST: anlegen | { action:'test', id } | { action:'backup_all' }
 export const POST: APIRoute = async ({ request }) => {
   const b = await request.json();
   if (b.action === 'test') {
@@ -21,12 +21,16 @@ export const POST: APIRoute = async ({ request }) => {
     if (!cfg) return json({ ok: false, message: 'Ziel unvollständig konfiguriert.' });
     return json(await testConnection(cfg));
   }
+  if (b.action === 'backup_all') {
+    const { backupAll } = await import('../../../lib/backup');
+    return json(await backupAll());
+  }
   if (!b.name?.trim()) return json({ error: 'Name fehlt.' }, 400);
   const row = await one<any>(
-    `INSERT INTO delivery_targets (name, protocol, host, port, username, password_enc, base_path)
-     VALUES ($1,$2,$3,$4,$5,$6,$7) RETURNING id`,
+    `INSERT INTO delivery_targets (name, protocol, host, port, username, password_enc, base_path, is_backup)
+     VALUES ($1,$2,$3,$4,$5,$6,$7,$8) RETURNING id`,
     [b.name.trim(), b.protocol || 'sftp', b.host || null, b.port || null, b.username || null,
-     b.password ? encrypt(String(b.password)) : null, b.base_path || null]);
+     b.password ? encrypt(String(b.password)) : null, b.base_path || null, !!b.is_backup]);
   return json({ id: row!.id });
 };
 
@@ -39,6 +43,7 @@ export const PATCH: APIRoute = async ({ request }) => {
   for (const c of ['name', 'protocol', 'host', 'port', 'username', 'base_path']) {
     if (c in b) set(c, b[c] === '' ? null : b[c]);
   }
+  if ('is_backup' in b) set('is_backup', !!b.is_backup);
   if (b.password) set('password_enc', encrypt(String(b.password)));
   if (!sets.length) return json({ ok: true });
   args.push(b.id);

src/pages/api/admin/settings.ts

@@ -1,8 +1,10 @@
 import type { APIRoute } from 'astro';
+import { randomBytes } from 'node:crypto';
 import { one, query } from '../../../lib/db';
 import { encrypt, maskSecret, decrypt } from '../../../lib/crypto';
 
 export const prerender = false;
+const randomToken = () => 'klb_' + randomBytes(24).toString('hex');
 const json = (b: unknown, s = 200) =>
   new Response(JSON.stringify(b), { status: s, headers: { 'Content-Type': 'application/json' } });
 
@@ -21,6 +23,7 @@ export const GET: APIRoute = async () => {
     cricut_sheet_cm: s.cricut_sheet_cm, monthly_budget: s.monthly_budget, n8n_webhook_url: s.n8n_webhook_url,
     // Speicherverwaltung
     keep_sources: s.keep_sources, make_thumbnails: s.make_thumbnails, retention_days: s.retention_days,
+    metadata_sidecar: s.metadata_sidecar, api_token: s.api_token,
     // NAS-Sicherung
     nas_enabled: s.nas_enabled, nas_host: s.nas_host, nas_protocol: s.nas_protocol, nas_port: s.nas_port,
     nas_user: s.nas_user, nas_base_path: s.nas_base_path, nas_password_set: !!s.nas_password_enc,
@@ -35,10 +38,11 @@ export const PATCH: APIRoute = async ({ request }) => {
   if (b.openrouter_key) set('openrouter_key_enc', encrypt(String(b.openrouter_key)));
   if (b.picdrop_password) set('picdrop_password_enc', encrypt(String(b.picdrop_password)));
   if (b.nas_password) set('nas_password_enc', encrypt(String(b.nas_password)));
-  const boolCols = ['keep_sources', 'make_thumbnails', 'nas_enabled'];
+  if (b.generate_api_token) set('api_token', randomToken());
+  const boolCols = ['keep_sources', 'make_thumbnails', 'nas_enabled', 'metadata_sidecar'];
   for (const col of ['picdrop_host', 'picdrop_protocol', 'picdrop_port', 'picdrop_user', 'picdrop_base_path',
     'picdrop_default_gallery', 'default_dpi', 'default_crop_mode', 'concurrency', 'cricut_sheet_cm', 'monthly_budget', 'n8n_webhook_url',
-    'keep_sources', 'make_thumbnails', 'retention_days',
+    'keep_sources', 'make_thumbnails', 'retention_days', 'metadata_sidecar', 'api_token',
     'nas_enabled', 'nas_host', 'nas_protocol', 'nas_port', 'nas_user', 'nas_base_path']) {
     if (col in b) {
       const raw = b[col];