Save in-progress keysat integration and StartOS 0.4 work

Snapshot of the working tree before cleanup. Captures:
- Keysat licensing: server/license.js, /api/license/* endpoints in
  server/index.js, activation modal in public/index.html, embedded
  Ed25519 issuer key (assets/issuer.pub).
- StartOS 0.4 expansion: setApiKey action, version files v0.1.1
  through v0.1.15, file-models/config.json.ts, manifest updates.
- Self-hosted registry server (startos-registry/).
- Build/deploy scripts (bin/bump-version.sh, bin/deploy.sh, vendored
  yt-dlp binary), .gitignore, .deploy.env.example.
- Recent design docs (KEYSAT_INTEGRATION.md, UPGRADE-DESIGN.md) —
  retained here so they remain recoverable when removed in the
  follow-up cleanup commit.

startos/actions/index.ts

@@ -1,4 +1,4 @@
 import { sdk } from '../sdk'
+import { setApiKey } from './setApiKey'
 
-// Actions will be added once the base build is verified.
-export const actions = sdk.Actions.of()
+export const actions = sdk.Actions.of().addAction(setApiKey)

startos/actions/setApiKey.ts

@@ -0,0 +1,43 @@
+import { sdk } from '../sdk'
+import { configFile } from '../file-models/config.json'
+
+const { InputSpec, Value } = sdk
+
+const inputSpec = InputSpec.of({
+  gemini_api_key: Value.text({
+    name: 'Gemini API Key',
+    description:
+      'Your Google Gemini API key. Get a free key at aistudio.google.com/apikey',
+    required: true,
+    default: null,
+    masked: true,
+    minLength: 1,
+    maxLength: 256,
+  }),
+})
+
+export const setApiKey = sdk.Action.withInput(
+  'set-api-key',
+
+  async ({ effects }) => ({
+    name: 'Set Gemini API Key',
+    description:
+      'Configure your Google Gemini API key for transcription and analysis',
+    warning: null,
+    allowedStatuses: 'any',
+    group: null,
+    visibility: 'enabled',
+  }),
+
+  inputSpec,
+
+  async ({ effects }) => {
+    const config = await configFile.read().once()
+    return { gemini_api_key: config?.gemini_api_key || undefined }
+  },
+
+  async ({ effects, input }) => {
+    await configFile.merge(effects, { gemini_api_key: input.gemini_api_key })
+    return null
+  },
+)

startos/file-models/config.json.ts

@@ -0,0 +1,15 @@
+import { FileHelper } from '@start9labs/start-sdk'
+import { Volume } from '@start9labs/start-sdk/package/lib/util/Volume'
+import { z } from 'zod'
+
+const mainVolume = new Volume('main')
+
+export const configFile = FileHelper.json(
+  {
+    base: mainVolume,
+    subpath: 'config/startos-config.json',
+  },
+  z.object({
+    gemini_api_key: z.string().default(''),
+  }),
+)

startos/manifest/i18n.ts

@@ -10,12 +10,13 @@ export const long = {
     'summaries with timestamps. Features include channel and podcast subscriptions ' +
     'with automatic new episode detection, a background processing queue with ' +
     'configurable delays, auto-download per subscription, organized history with ' +
-    'folders, multiple AI model support, and a responsive web interface. ' +
+    'folders, and a responsive web interface. ' +
     'Requires a Google Gemini API key (free tier available at aistudio.google.com/apikey).',
 }
 
 export const alertInstall = {
   en_US:
-    'After installing, open the web UI and enter your Google Gemini API key in Settings. ' +
-    'For reliable YouTube downloads, set up OAuth2 authentication in Settings > YouTube Authentication.',
+    'After installing, configure your Google Gemini API key using the "Set Gemini API Key" ' +
+    'action in the service menu. A free API key is available at aistudio.google.com/apikey. ' +
+    'Note: The embedded YouTube player will not work if you are connected to a VPN.',
 }

startos/manifest/index.ts

@@ -5,13 +5,11 @@ export const manifest = setupManifest({
   id: 'youtube-summarizer',
   title: 'YouTube Summarizer',
   license: 'Proprietary',
-  packageRepo: 'https://github.com/user/youtube-summarizer-startos',
-  upstreamRepo: 'https://github.com/user/youtube-summarizer',
-  marketingUrl: 'https://github.com/user/youtube-summarizer',
+  packageRepo: 'https://ten31.xyz',
+  upstreamRepo: 'https://ten31.xyz',
+  marketingUrl: 'https://ten31.xyz',
   donationUrl: null,
-  docsUrls: [
-    'https://github.com/user/youtube-summarizer/blob/main/README.md',
-  ],
+  docsUrls: [],
   description: { short, long },
   volumes: ['main'],
   images: {

startos/versions/index.ts

@@ -1,7 +1,22 @@
 import { VersionGraph } from '@start9labs/start-sdk'
 import { v_0_1_0 } from './v0.1.0'
+import { v_0_1_1 } from './v0.1.1'
+import { v_0_1_2 } from './v0.1.2'
+import { v_0_1_3 } from './v0.1.3'
+import { v_0_1_4 } from './v0.1.4'
+import { v_0_1_5 } from './v0.1.5'
+import { v_0_1_6 } from './v0.1.6'
+import { v_0_1_7 } from './v0.1.7'
+import { v_0_1_8 } from './v0.1.8'
+import { v_0_1_9 } from './v0.1.9'
+import { v_0_1_10 } from './v0.1.10'
+import { v_0_1_11 } from './v0.1.11'
+import { v_0_1_12 } from './v0.1.12'
+import { v_0_1_13 } from './v0.1.13'
+import { v_0_1_14 } from './v0.1.14'
+import { v_0_1_15 } from './v0.1.15'
 
 export const versionGraph = VersionGraph.of({
-  current: v_0_1_0,
-  other: [],
+  current: v_0_1_15,
+  other: [v_0_1_14, v_0_1_13, v_0_1_12, v_0_1_11, v_0_1_10, v_0_1_9, v_0_1_8, v_0_1_7, v_0_1_6, v_0_1_5, v_0_1_4, v_0_1_3, v_0_1_2, v_0_1_1, v_0_1_0],
 })

startos/versions/v0.1.1.ts

@@ -0,0 +1,15 @@
+import { VersionInfo } from '@start9labs/start-sdk'
+
+export const v_0_1_1 = VersionInfo.of({
+  version: '0.1.1:0',
+  releaseNotes: {
+    en_US:
+      'Fix library not updating after processing. Add YouTube OAuth authentication UI. ' +
+      'Improve embedded player compatibility. Add library export/import for transferring ' +
+      'between devices. Remove standalone shutdown button (not needed on StartOS).',
+  },
+  migrations: {
+    up: async ({ effects }) => {},
+    down: async ({ effects }) => {},
+  },
+})

startos/versions/v0.1.10.ts

@@ -0,0 +1,12 @@
+import { VersionInfo } from '@start9labs/start-sdk'
+
+export const v_0_1_10 = VersionInfo.of({
+  version: '0.1.10:0',
+  releaseNotes: {
+    en_US: 'Library side bar keeps its position after deleting an item from the library.',
+  },
+  migrations: {
+    up: async ({ effects }) => {},
+    down: async ({ effects }) => {},
+  },
+})

startos/versions/v0.1.11.ts

@@ -0,0 +1,12 @@
+import { VersionInfo } from '@start9labs/start-sdk'
+
+export const v_0_1_11 = VersionInfo.of({
+  version: '0.1.11:0',
+  releaseNotes: {
+    en_US: 'keysat licensing',
+  },
+  migrations: {
+    up: async ({ effects }) => {},
+    down: async ({ effects }) => {},
+  },
+})

startos/versions/v0.1.12.ts

@@ -0,0 +1,12 @@
+import { VersionInfo } from '@start9labs/start-sdk'
+
+export const v_0_1_12 = VersionInfo.of({
+  version: '0.1.12:0',
+  releaseNotes: {
+    en_US: 'keysat licensing',
+  },
+  migrations: {
+    up: async ({ effects }) => {},
+    down: async ({ effects }) => {},
+  },
+})

startos/versions/v0.1.13.ts

@@ -0,0 +1,12 @@
+import { VersionInfo } from '@start9labs/start-sdk'
+
+export const v_0_1_13 = VersionInfo.of({
+  version: '0.1.13:0',
+  releaseNotes: {
+    en_US: 'keysat licensing',
+  },
+  migrations: {
+    up: async ({ effects }) => {},
+    down: async ({ effects }) => {},
+  },
+})

startos/versions/v0.1.14.ts

@@ -0,0 +1,12 @@
+import { VersionInfo } from '@start9labs/start-sdk'
+
+export const v_0_1_14 = VersionInfo.of({
+  version: '0.1.14:0',
+  releaseNotes: {
+    en_US: 'keysat licensing',
+  },
+  migrations: {
+    up: async ({ effects }) => {},
+    down: async ({ effects }) => {},
+  },
+})

startos/versions/v0.1.15.ts

@@ -0,0 +1,12 @@
+import { VersionInfo } from '@start9labs/start-sdk'
+
+export const v_0_1_15 = VersionInfo.of({
+  version: '0.1.15:0',
+  releaseNotes: {
+    en_US: 'bug fixes',
+  },
+  migrations: {
+    up: async ({ effects }) => {},
+    down: async ({ effects }) => {},
+  },
+})

startos/versions/v0.1.2.ts

@@ -0,0 +1,15 @@
+import { VersionInfo } from '@start9labs/start-sdk'
+
+export const v_0_1_2 = VersionInfo.of({
+  version: '0.1.2:0',
+  releaseNotes: {
+    en_US:
+      'Fix YouTube OAuth device code flow (use oauth2 protocol). Improve OAuth UI ' +
+      'with better error reporting and no-flash updates. Add library export/import ' +
+      'for transferring between devices. Remove standalone shutdown button.',
+  },
+  migrations: {
+    up: async ({ effects }) => {},
+    down: async ({ effects }) => {},
+  },
+})

startos/versions/v0.1.3.ts

@@ -0,0 +1,16 @@
+import { VersionInfo } from '@start9labs/start-sdk'
+
+export const v_0_1_3 = VersionInfo.of({
+  version: '0.1.3:0',
+  releaseNotes: {
+    en_US:
+      'Remove YouTube OAuth (no longer supported by yt-dlp). Improve cookie setup ' +
+      'instructions for headless servers. Add library export/import for transferring ' +
+      'between devices. Remove standalone shutdown button. Fix library not updating ' +
+      'after processing. Improve embedded player compatibility.',
+  },
+  migrations: {
+    up: async ({ effects }) => {},
+    down: async ({ effects }) => {},
+  },
+})

startos/versions/v0.1.4.ts

@@ -0,0 +1,16 @@
+import { VersionInfo } from '@start9labs/start-sdk'
+
+export const v_0_1_4 = VersionInfo.of({
+  version: '0.1.4:0',
+  releaseNotes: {
+    en_US:
+      'Add Gemini API key as a StartOS Action for easier configuration. ' +
+      'Remove placeholder GitHub links from service overview. ' +
+      'Fix description to accurately reflect Gemini-only AI support. ' +
+      'Add VPN warning for embedded YouTube player compatibility.',
+  },
+  migrations: {
+    up: async ({ effects }) => {},
+    down: async ({ effects }) => {},
+  },
+})

startos/versions/v0.1.5.ts

@@ -0,0 +1,16 @@
+import { VersionInfo } from '@start9labs/start-sdk'
+
+export const v_0_1_5 = VersionInfo.of({
+  version: '0.1.5:0',
+  releaseNotes: {
+    en_US:
+      'Fix YouTube subscription checking by ensuring curl_cffi is properly installed ' +
+      'for yt-dlp browser impersonation. Add Gemini API key as a StartOS Action. ' +
+      'Remove placeholder GitHub links. Fix description to reflect Gemini-only support. ' +
+      'Add VPN warning for embedded YouTube player.',
+  },
+  migrations: {
+    up: async ({ effects }) => {},
+    down: async ({ effects }) => {},
+  },
+})

startos/versions/v0.1.6.ts

@@ -0,0 +1,15 @@
+import { VersionInfo } from '@start9labs/start-sdk'
+
+export const v_0_1_6 = VersionInfo.of({
+  version: '0.1.6:0',
+  releaseNotes: {
+    en_US:
+      'Fix YouTube subscription checking on StartOS by gracefully handling ' +
+      'missing curl_cffi. Browser impersonation is now used only when available, ' +
+      'with automatic fallback for environments where it cannot be installed.',
+  },
+  migrations: {
+    up: async ({ effects }) => {},
+    down: async ({ effects }) => {},
+  },
+})

startos/versions/v0.1.7.ts

@@ -0,0 +1,14 @@
+import { VersionInfo } from '@start9labs/start-sdk'
+
+export const v_0_1_7 = VersionInfo.of({
+  version: '0.1.7:0',
+  releaseNotes: {
+    en_US:
+      'Fix YouTube subscription checking by removing unnecessary browser ' +
+      'impersonation flag that was not present in the original working code.',
+  },
+  migrations: {
+    up: async ({ effects }) => {},
+    down: async ({ effects }) => {},
+  },
+})

startos/versions/v0.1.8.ts

@@ -0,0 +1,19 @@
+import { VersionInfo } from '@start9labs/start-sdk'
+
+export const v_0_1_8 = VersionInfo.of({
+  version: '0.1.8:0',
+  releaseNotes: {
+    en_US:
+      'Library folders now remember their expanded/collapsed state across ' +
+      'page reloads and devices. Subscriptions gain a per-channel ' +
+      '"auto-process" toggle (lightning bolt) that lets new videos skip ' +
+      'the approval queue and start summarizing immediately — settable ' +
+      'either when subscribing from the homepage or later from Settings. ' +
+      'Adds a Library Transfer panel in Settings to export/import your ' +
+      'full library (summaries, folders, subscriptions) between devices.',
+  },
+  migrations: {
+    up: async ({ effects }) => {},
+    down: async ({ effects }) => {},
+  },
+})

startos/versions/v0.1.9.ts

@@ -0,0 +1,17 @@
+import { VersionInfo } from '@start9labs/start-sdk'
+
+export const v_0_1_9 = VersionInfo.of({
+  version: '0.1.9:0',
+  releaseNotes: {
+    en_US:
+      'Fix a race condition where deleting several library items in quick ' +
+      'succession could cause some of them to reappear after a subscription ' +
+      'check. Writes to the skip-list and seen-list are now serialized ' +
+      'per-file so concurrent delete operations no longer overwrite each ' +
+      "other's updates.",
+  },
+  migrations: {
+    up: async ({ effects }) => {},
+    down: async ({ effects }) => {},
+  },
+})