feat(http): add identity and setup endpoints + OpenAPI

Author: devwhodevs

src/http.rs

@@ -332,6 +332,14 @@ struct ReindexFileBody {
     file: String,
 }
 
+#[derive(Debug, Deserialize)]
+struct SetupBody {
+    mode: String,
+    name: Option<String>,
+    role: Option<String>,
+    purpose: Option<String>,
+}
+
 // ---------------------------------------------------------------------------
 // CORS
 // ---------------------------------------------------------------------------
@@ -388,6 +396,9 @@ pub fn build_router(state: ApiState) -> Router {
         .route("/api/delete", post(handle_delete))
         // Index maintenance
         .route("/api/reindex-file", post(handle_reindex_file))
+        // Identity endpoints
+        .route("/api/identity", get(handle_identity))
+        .route("/api/setup", post(handle_setup))
         // Migration endpoints
         .route("/api/migrate/preview", post(handle_migrate_preview))
         .route("/api/migrate/apply", post(handle_migrate_apply))
@@ -1066,6 +1077,60 @@ async fn handle_reindex_file(
     })))
 }
 
+// ---------------------------------------------------------------------------
+// Identity / setup endpoint handlers
+// ---------------------------------------------------------------------------
+
+async fn handle_identity(
+    State(state): State<ApiState>,
+    headers: HeaderMap,
+) -> Result<impl IntoResponse, ApiError> {
+    authorize(&headers, &state, false)?;
+    let store = state.store.lock().await;
+    let config = crate::config::Config::load().unwrap_or_default();
+    let block = crate::identity::format_identity_block(&config, &store)
+        .map_err(|e| ApiError::internal(&format!("{e:#}")))?;
+    Ok(Json(serde_json::json!({ "identity": block })))
+}
+
+async fn handle_setup(
+    State(state): State<ApiState>,
+    headers: HeaderMap,
+    Json(body): Json<SetupBody>,
+) -> Result<impl IntoResponse, ApiError> {
+    authorize(&headers, &state, true)?;
+    match body.mode.as_str() {
+        "detect" => {
+            let result = crate::onboarding::run_detect_json(&state.vault_path)
+                .map_err(|e| ApiError::internal(&format!("{e:#}")))?;
+            Ok(Json(result))
+        }
+        "apply" => {
+            let mut config = crate::config::Config::load().unwrap_or_default();
+            let data_dir = crate::config::Config::data_dir()
+                .map_err(|e| ApiError::internal(&format!("{e:#}")))?;
+            let flags = crate::onboarding::ApplyFlags {
+                name: body.name,
+                role: body.role,
+                purpose: body.purpose,
+                identity_only: false,
+                reindex_only: false,
+            };
+            let result = crate::onboarding::run_apply_json(
+                &state.vault_path,
+                &mut config,
+                &data_dir,
+                flags,
+            )
+            .map_err(|e| ApiError::internal(&format!("{e:#}")))?;
+            Ok(Json(result))
+        }
+        other => Err(ApiError::bad_request(&format!(
+            "Unknown mode: {other}. Use 'detect' or 'apply'."
+        ))),
+    }
+}
+
 // ---------------------------------------------------------------------------
 // Tests
 // ---------------------------------------------------------------------------

src/openapi.rs

@@ -29,6 +29,10 @@ pub fn build_openapi_spec(server_url: &str) -> serde_json::Value {
     paths.insert("/api/delete".into(), build_delete());
     paths.insert("/api/reindex-file".into(), build_reindex_file());
 
+    // Identity endpoints
+    paths.insert("/api/identity".into(), build_identity_endpoint());
+    paths.insert("/api/setup".into(), build_setup_endpoint());
+
     // Migration endpoints
     paths.insert("/api/migrate/preview".into(), build_migrate_preview());
     paths.insert("/api/migrate/apply".into(), build_migrate_apply());
@@ -38,7 +42,7 @@ pub fn build_openapi_spec(server_url: &str) -> serde_json::Value {
         "openapi": "3.1.0",
         "info": {
             "title": "engraph",
-            "version": "1.5.5",
+            "version": "1.6.0",
             "description": "AI-powered semantic search and management API for Obsidian vaults."
         },
         "servers": [{ "url": server_url }],
@@ -450,6 +454,39 @@ fn build_reindex_file() -> serde_json::Value {
     })
 }
 
+fn build_identity_endpoint() -> serde_json::Value {
+    serde_json::json!({
+        "get": {
+            "operationId": "getIdentity",
+            "summary": "Returns compact user identity (L0) and current context (L1).",
+            "responses": { "200": { "description": "Identity block as JSON with 'identity' key" } }
+        }
+    })
+}
+
+fn build_setup_endpoint() -> serde_json::Value {
+    serde_json::json!({
+        "post": {
+            "operationId": "setup",
+            "summary": "Run first-time setup or update identity. Use 'detect' to inspect, 'apply' to configure.",
+            "requestBody": {
+                "required": true,
+                "content": { "application/json": { "schema": {
+                    "type": "object",
+                    "required": ["mode"],
+                    "properties": {
+                        "mode": { "type": "string", "description": "'detect' or 'apply'" },
+                        "name": { "type": "string", "description": "User name (apply mode)" },
+                        "role": { "type": "string", "description": "User role (apply mode)" },
+                        "purpose": { "type": "string", "description": "Vault purpose (apply mode)" }
+                    }
+                }}}
+            },
+            "responses": { "200": { "description": "Setup result as JSON" } }
+        }
+    })
+}
+
 fn build_migrate_preview() -> serde_json::Value {
     serde_json::json!({
         "post": {