From 94d26492d5436f23e6d0ab8ffdefabe9b551558b Mon Sep 17 00:00:00 2001
From: Thomas Kaul <4159106+dtslvr@users.noreply.github.com>
Date: Fri, 29 May 2026 20:37:47 +0200
Subject: [PATCH] Initial setup

---
 apps/api/src/services/fetch/fetch.module.ts  |   3 +
 apps/api/src/services/fetch/fetch.service.ts | 151 +++++++++++++++++++
 2 files changed, 154 insertions(+)

diff --git a/apps/api/src/services/fetch/fetch.module.ts b/apps/api/src/services/fetch/fetch.module.ts
index f98f2f45c..4764ae322 100644
--- a/apps/api/src/services/fetch/fetch.module.ts
+++ b/apps/api/src/services/fetch/fetch.module.ts
@@ -1,9 +1,12 @@
+import { ConfigurationModule } from '@ghostfolio/api/services/configuration/configuration.module';
 import { FetchService } from '@ghostfolio/api/services/fetch/fetch.service';
+import { PropertyModule } from '@ghostfolio/api/services/property/property.module';
 
 import { Module } from '@nestjs/common';
 
 @Module({
   exports: [FetchService],
+  imports: [ConfigurationModule, PropertyModule],
   providers: [FetchService]
 })
 export class FetchModule {}
diff --git a/apps/api/src/services/fetch/fetch.service.ts b/apps/api/src/services/fetch/fetch.service.ts
index b3bd022d9..fd7ca18ad 100644
--- a/apps/api/src/services/fetch/fetch.service.ts
+++ b/apps/api/src/services/fetch/fetch.service.ts
@@ -1,11 +1,22 @@
 import { redactPaths } from '@ghostfolio/api/helper/object.helper';
+import { PropertyService } from '@ghostfolio/api/services/property/property.service';
+import {
+  PROPERTY_API_KEY_OPENROUTER,
+  PROPERTY_OPENROUTER_MODEL
+} from '@ghostfolio/common/config';
 
 import { Injectable, Logger } from '@nestjs/common';
+import { createOpenRouter } from '@openrouter/ai-sdk-provider';
+import { generateText, jsonSchema, tool } from 'ai';
 
 @Injectable()
 export class FetchService {
   private static readonly REDACTED_QUERY_PARAM_NAMES = ['apikey', 'api_token'];
 
+  private webFetchDomains: { domain: string }[] = [];
+
+  public constructor(private readonly propertyService: PropertyService) {}
+
   public async fetch(
     input: RequestInfo | URL,
     init?: RequestInit
@@ -21,6 +32,14 @@ export class FetchService {
 
     Logger.debug(`${method} ${urlRedacted}`, 'FetchService');
 
+    if (method === 'GET' && this.matchesWebFetchDomain(url)) {
+      const response = await this.fetchViaWebFetchTool(url);
+
+      if (response) {
+        return response;
+      }
+    }
+
     try {
       return await globalThis.fetch(input, init);
     } catch (error) {
@@ -40,6 +59,122 @@ export class FetchService {
     }
   }
 
+  private extractJsonFromWebFetchResult({
+    response,
+    text
+  }: {
+    response: { body?: unknown };
+    text: string;
+  }): string | undefined {
+    const candidates: string[] = [];
+
+    const body = response?.body as
+      | {
+          choices?: {
+            message?: {
+              annotations?: { url_citation?: { content?: string } }[];
+            };
+          }[];
+        }
+      | undefined;
+
+    for (const annotation of body?.choices?.[0]?.message?.annotations ?? []) {
+      if (annotation?.url_citation?.content) {
+        candidates.push(annotation.url_citation.content);
+      }
+    }
+
+    if (text) {
+      candidates.push(text);
+    }
+
+    for (const candidate of candidates) {
+      const sanitized = this.sanitizeJson(candidate);
+
+      if (sanitized) {
+        return sanitized;
+      }
+    }
+
+    return undefined;
+  }
+
+  private async fetchViaWebFetchTool(
+    url: string
+  ): Promise<Response | undefined> {
+    const openRouterApiKey = await this.propertyService.getByKey<string>(
+      PROPERTY_API_KEY_OPENROUTER
+    );
+
+    const openRouterModel = await this.propertyService.getByKey<string>(
+      PROPERTY_OPENROUTER_MODEL
+    );
+
+    if (!openRouterApiKey || !openRouterModel) {
+      return undefined;
+    }
+
+    try {
+      const openRouterService = createOpenRouter({ apiKey: openRouterApiKey });
+
+      const { response, text } = await generateText({
+        model: openRouterService.chat(openRouterModel),
+        prompt: [
+          'Fetch the following URL and return its response body exactly as received.',
+          'Respond with the raw body only (no commentary, no Markdown, and no code fences).',
+          `URL: ${url}`
+        ].join('\n'),
+        tools: {
+          web_fetch: tool({
+            args: { engine: 'auto' },
+            id: 'openrouter.web_fetch',
+            inputSchema: jsonSchema({
+              additionalProperties: true,
+              type: 'object'
+            }),
+            type: 'provider'
+          })
+        }
+      });
+
+      const body = this.extractJsonFromWebFetchResult({ response, text });
+
+      if (!body) {
+        return undefined;
+      }
+
+      Logger.debug(
+        `Routed ${this.redactUrl(url)} via web fetch tool`,
+        'FetchService'
+      );
+
+      return new Response(body, {
+        headers: { 'content-type': 'application/json' }
+      });
+    } catch (error) {
+      Logger.error(
+        `Web fetch tool failed for ${this.redactUrl(url)}: ${
+          error instanceof Error ? error.message : String(error)
+        }`,
+        'FetchService'
+      );
+
+      return undefined;
+    }
+  }
+
+  private matchesWebFetchDomain(rawUrl: string): boolean {
+    try {
+      const { hostname } = new URL(rawUrl);
+
+      return this.webFetchDomains.some(({ domain }) => {
+        return hostname === domain || hostname.endsWith(`.${domain}`);
+      });
+    } catch {
+      return false;
+    }
+  }
+
   private redactUrl(rawUrl: string): string {
     try {
       const url = new URL(rawUrl);
@@ -60,4 +195,20 @@ export class FetchService {
       return rawUrl;
     }
   }
+
+  private sanitizeJson(value: string): string | undefined {
+    const sanitized = value
+      .trim()
+      .replace(/^```(?:json)?/i, '')
+      .replace(/```$/, '')
+      .trim();
+
+    try {
+      JSON.parse(sanitized);
+
+      return sanitized;
+    } catch {
+      return undefined;
+    }
+  }
 }