deploy: fix TemplateResponse signature

app/routes/api.py

@@ -0,0 +1,50 @@
+import json
+from fastapi import APIRouter, Depends, HTTPException, Request
+from app.auth import get_current_agent
+from app.scopes import has_scope_access, ALL_SCOPES
+from app.models import get_rule, get_all_rules, get_all_ports, add_audit_log
+
+router = APIRouter(prefix="/api")
+
+async def log_audit(request: Request, agent: str, scope: str):
+    ip_address = request.client.host if request.client else "unknown"
+    await add_audit_log(agent, scope, ip_address)
+
+@router.get("/rules/{scope}")
+async def get_scope_rules(scope: str, request: Request, agent: str = Depends(get_current_agent)):
+    if not has_scope_access(agent, scope):
+        await log_audit(request, agent, f"{scope} (FORBIDDEN)")
+        raise HTTPException(status_code=403, detail="Forbidden")
+    
+    await log_audit(request, agent, scope)
+    rule = await get_rule(scope)
+    if not rule:
+        raise HTTPException(status_code=404, detail="Scope not found")
+    
+    return rule
+
+@router.get("/ports")
+async def get_ports_registry(request: Request, agent: str = Depends(get_current_agent)):
+    if not has_scope_access(agent, "infra"):
+        await log_audit(request, agent, "ports (FORBIDDEN)")
+        raise HTTPException(status_code=403, detail="Forbidden: Requires infra scope")
+    
+    await log_audit(request, agent, "ports")
+    ports = await get_all_ports()
+    return ports
+
+@router.get("/search")
+async def search_rules(q: str, request: Request, agent: str = Depends(get_current_agent)):
+    await log_audit(request, agent, f"search (q={q})")
+    
+    all_rules = await get_all_rules()
+    results = {}
+    
+    for scope in ALL_SCOPES:
+        if has_scope_access(agent, scope):
+            content = all_rules.get(scope, {})
+            # Basic string matching in JSON serialization
+            if q.lower() in json.dumps(content).lower():
+                results[scope] = content
+                
+    return results