Scanner surface frontmatter'd (scan/start/stop/cancel/status/active/
active-summary + watch start/stop/status) with provenance comments;
active-summary on a non-admin group.
Claude registry: 10 entries. Fixed handler drift Beam missed: scan_library
request has no "recursive"; scanner/start binds folder_paths (not
invented interval_seconds); scanner/stop binds no body; response is
{message, job_id, status} with 409 coalescing variant
{error, active_job_id}.
Gate fix in drift_test seed: registerScannerRoutes group seeds used bare
"jwt"/"admin" tokens invisible to authLabel; and silently passed before
only because the seeded set was unchecked. Seeds now 'jwtMiddleware'/
'AdminMiddleware' markers. Also: cleanup of a stale-merge-script residue
in collections/update_rule.md example (extra null keys). make test 9/9.
541 B
541 B
method, path, auth, area
| method | path | auth | area |
|---|---|---|---|
| GET | /api/scanner/active | jwt+admin | scanner |
Get Active Scans
Returns every pending/running scan job, so the admin page can re-attach to in-flight scans after a refresh.
Example response
{
"scanning": true,
"jobs": []
}
Errors
| Status | Body | When |
|---|---|---|
| 401 | {"error": "unauthorized"} |
no/invalid JWT |
| 403 | {"error": "admin access required"} |
non-admin |