@burakboduroglu/nors 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Burak Boduroğlu
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,154 @@
+<div align="center">
+
+<img src="assets/nors-mark-512.png" alt="Nors mark" width="112">
+
+# Nors
+
+**Personal ops notes that ride a PocketBase instance you already run.**
+
+[![License](https://img.shields.io/github/license/burakboduroglu/nors?style=flat-square)](LICENSE)
+[![npm](https://img.shields.io/npm/v/@burakboduroglu/nors?style=flat-square&color=000)](https://www.npmjs.com/package/@burakboduroglu/nors)
+![Self-hosted](https://img.shields.io/badge/self--hosted-only-000?style=flat-square)
+![No telemetry](https://img.shields.io/badge/telemetry-none-000?style=flat-square)
+![No Docker](https://img.shields.io/badge/Docker-not_required-000?style=flat-square&logo=docker)
+![Bun](https://img.shields.io/badge/Bun-runtime-000?style=flat-square&logo=bun)
+
+</div>
+
+---
+
+Nors is not an application you deploy. It is one migration and one static
+page, copied into a PocketBase directory you already have. The database,
+auth, HTTP server and backups are already running — a dedicated notes app
+would duplicate all of them.
+
+<div align="center">
+
+<img src="assets/screenshot-dash.png" alt="Nors dashboard — note cards with kind tabs" width="760">
+
+</div>
+
+## What it is
+
+Notes live as cards on a dashboard, filed under four kinds: Diagram, Runbook,
+Reference, Scratch. An agent drafts in markdown, you publish from the panel —
+paste a blob, fix the title, pick a kind, done. Bodies render as markdown and
+Mermaid fences become diagrams in the reader.
+
+Writing stays minimal on purpose: title, kind, pinned, body. The slug grows
+out of the title and the summary out of the first clean body line, so there
+is nothing else to fill in.
+
+## Highlights
+
+|     | Feature | How it works |
+| --- | ------- | ------------ |
+| 🧩 | **No infrastructure of its own** | Files copied into an existing PocketBase. No container, no second database, no extra port. |
+| 📝 | **Write four things, nothing else** | Title, kind, pinned, body. Slug and summary derive themselves. |
+| 📊 | **Diagrams without a plugin** | Mermaid loads only on pages that hold a fence; everything else never downloads it. |
+| ↔️ | **Order by dragging** | Native HTML5 drag-and-drop renumbers `sort`; pinned cards stay first by construction. No DnD library. |
+| 📥 | **Seeds are upserts** | `bun run import-seeds` matches by slug — re-running updates instead of duplicating. |
+| 🛡️ | **Unsaved work asks first** | Leaving the editor with edits pops a guard instead of silently dropping the draft. |
+| 📵 | **No telemetry** | Zero outbound requests. The page talks to your PocketBase and nothing else. |
+
+<div align="center">
+
+<img src="assets/screenshot-reader.png" alt="Nors reader — CLI shelf note with rendered Mermaid diagrams" width="760">
+
+</div>
+
+## Footprint
+
+Measured with `du`:
+
+| | |
+| --- | --- |
+| Installed files | **3.5 MB** — migration 4 KB, page the rest |
+| First visit | **~87 KB** — entry JS ~79 KB (gzip ~24 KB), CSS ~7.5 KB |
+| The other 3.4 MB | Mermaid diagram chunks, fetched only when a reader page holds a fence |
+| Database growth | one `nors_notes` row per note, inside the existing `pb_data` |
+| Extra processes | none |
+| Extra ports | none |
+
+If PocketBase is already running, the marginal cost of Nors is the file sizes.
+
+## Install
+
+Install into a PocketBase directory with the packaged CLI:
+
+```bash
+bunx @burakboduroglu/nors install /path/to/pocketbase
+```
+
+This copies the migration and built page; it never touches `pb_data`. Then
+restart PocketBase so the migration runs. **If it was already running, stop it
+before copying and start it afterwards** — PocketBase watches its directories
+and can race a service manager doing the same.
+
+For a source checkout and remote host, the `deploy/` installer performs the
+stop → copy → start sequence:
+
+```bash
+scp -r pb_migrations pb_public deploy/install.sh host:/tmp/nors-stage/
+ssh host
+sudo /tmp/nors-stage/install.sh /tmp/nors-stage
+```
+
+The page is served at `/nors/`. Gate `/nors` and
+`/api/collections/nors_notes` in Cloudflare Access the way `/subs/` is gated
+(see `deploy/access-caddy.md`). Then load the three seed notes through the API:
+
+```bash
+NORS_PB_URL=https://your.host NORS_PB_EMAIL=... NORS_PB_PASSWORD=... \
+  bun run import-seeds
+```
+
+## How it works
+
+```
+browser ──▶ /nors/                            static page, superuser login
+browser ──▶ /api/collections/nors_notes/*      superuser only, CRUD + reorder
+agent   ──▶ drafts markdown ──▶ editor ──▶ publish
+```
+
+Routes are hashes: `#/` dashboard, `#/n/<slug>` reader,
+`#/edit/<slug|$new>` editor. `/nors/?new=1` is the stable external entry point
+for a new note; it consumes the query and opens the `$new` editor route.
+
+## Security
+
+The `nors_notes` collection has null API rules, which in PocketBase means
+superuser only. The dashboard holds a superuser token in localStorage — anyone
+with the browser profile has the keys, documented rather than hidden. There is
+no audit log and no second user; this is a single-operator surface behind
+Cloudflare Access, not a multi-user app.
+
+## What it deliberately does not do
+
+No in-app LLM calls. No public notes or team sharing. No wiki search, tag
+graph, or version history UI. No reminders. It does not replace a vault or a
+knowledge base — it is the live dashboard above them.
+
+## Stack
+
+PocketBase for storage, auth and HTTP. SolidJS + Vite UI compiled to static
+files under `pb_public/nors/`. `marked` for markdown, Mermaid on demand, no
+CSS library, no UI server. Bun as the package manager.
+
+## Develop the UI
+
+Source lives in `web/`. The shipped page is built output:
+
+```bash
+bun --cwd web install
+bun run build      # root script — emits pb_public/nors/
+bun run dev        # local UI; /api proxied to :8090 (NORS_PB_PORT to move it)
+```
+
+Against a tunneled production box: `ssh -N -L 8090:127.0.0.1:8090 host`,
+then `bun run dev` — the browser stays on localhost, so neither CORS nor
+Cloudflare Access is in the path.
+
+## License
+
+MIT — see [LICENSE](LICENSE).

package/bin/nors.js

@@ -0,0 +1,86 @@
+#!/usr/bin/env node
+// Nors's installer. It copies files into a PocketBase directory and prints the
+// steps that cannot be copied for you. It never touches pb_data, never starts
+// or stops anything, and never talks to the network.
+
+import { readFile, mkdir, cp, access } from "node:fs/promises"
+import { constants } from "node:fs"
+import { join, dirname, resolve } from "node:path"
+import { fileURLToPath } from "node:url"
+
+const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "..")
+const pkg = JSON.parse(await readFile(join(ROOT, "package.json"), "utf8"))
+
+const exists = async (p) => access(p, constants.F_OK).then(() => true, () => false)
+
+const HELP = `
+nors ${pkg.version} — personal ops notes on PocketBase
+
+  nors install <pocketbase-dir>   copy the migration and the page into place
+Options
+  --force      install even if the target does not look like a PocketBase directory
+  -h, --help   this
+  -v, --version
+
+The install step only writes pb_migrations/ and pb_public/nors/.
+Your data lives in pb_data/ and is never read or written.
+`
+
+// A PocketBase directory is recognised by the binary or by pb_data beside it.
+// Getting this wrong would scatter files into an unrelated folder, so the check
+// is a refusal rather than a warning.
+async function assertPocketBase(dir, force) {
+  if (force) return
+  const looksRight =
+    (await exists(join(dir, "pocketbase"))) ||
+    (await exists(join(dir, "pocketbase.exe"))) ||
+    (await exists(join(dir, "pb_data")))
+  if (!looksRight) {
+    console.error(
+      `Refusing to install: ${dir} holds no pocketbase binary and no pb_data.\n` +
+      `Point at the directory the PocketBase executable lives in, or pass --force.`
+    )
+    process.exit(1)
+  }
+}
+
+async function install(dir, force) {
+  if (!dir) { console.error("Usage: nors install <pocketbase-dir>"); process.exit(1) }
+  const target = resolve(dir)
+  if (!(await exists(target))) { console.error(`No such directory: ${target}`); process.exit(1) }
+  await assertPocketBase(target, force)
+
+  const parts = [
+    ["pb_migrations", "pb_migrations"],
+    [join("pb_public", "nors"), join("pb_public", "nors")]
+  ]
+  for (const [from, to] of parts) {
+    const dest = join(target, to)
+    await mkdir(dirname(dest), { recursive: true })
+    await cp(join(ROOT, from), dest, { recursive: true })
+    console.log(`  wrote ${to}/`)
+  }
+
+  console.log(`
+Installed into ${target}
+
+Next, and none of it is automatic:
+  1. Restart PocketBase so the migration runs. If it was already running, stop
+     it before copying and start it after.
+  2. Serve the page. It is at /nors/ once PocketBase is serving pb_public.
+  3. Put an auth layer in front of /nors and
+     /api/collections/nors_notes. The collection is superuser-only on its own;
+     the page is a login form anyone could reach.
+  4. A source checkout includes optional seed notes and the import-seeds script.
+`)
+}
+
+const [cmd, ...rest] = process.argv.slice(2)
+const force = rest.includes("--force")
+
+if (cmd === "-v" || cmd === "--version") { console.log(pkg.version); process.exit(0) }
+if (!cmd || cmd === "-h" || cmd === "--help") { console.log(HELP); process.exit(0) }
+if (cmd === "install") { await install(rest.find((a) => !a.startsWith("--")), force); process.exit(0) }
+
+console.error(`Unknown command: ${cmd}\n${HELP}`)
+process.exit(1)

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "@burakboduroglu/nors",
+  "version": "0.1.0",
+  "description": "Personal ops notes dashboard on PocketBase — Norse-named, Solid UI at /nors/",
+  "license": "MIT",
+  "author": "Burak Boduroğlu",
+  "type": "module",
+  "scripts": {
+    "dev": "bun --cwd web dev",
+    "build": "bun --cwd web build",
+    "prepack": "bun --cwd web build",
+    "preview": "bun --cwd web preview",
+    "import-seeds": "bun scripts/import-seeds.ts"
+  },
+  "bin": {
+    "nors": "bin/nors.js"
+  },
+  "files": [
+    "bin",
+    "pb_migrations",
+    "pb_public",
+    "LICENSE",
+    "README.md"
+  ],
+  "keywords": [
+    "notes",
+    "ops-notes",
+    "pocketbase",
+    "self-hosted",
+    "dashboard",
+    "mermaid",
+    "no-telemetry"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/burakboduroglu/nors.git"
+  },
+  "homepage": "https://github.com/burakboduroglu/nors#readme",
+  "bugs": {
+    "url": "https://github.com/burakboduroglu/nors/issues"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/pb_migrations/1789000000_nors_notes.js

@@ -0,0 +1,47 @@
+/// <reference path="../pb_data/types.d.ts" />
+
+// Nors: personal ops notes. Superuser-only (null API rules).
+// Served as a Solid app from pb_public/nors/ behind Caddy + Access.
+migrate((app) => {
+  const notes = new Collection({
+    name: "nors_notes",
+    type: "base",
+    fields: [
+      { name: "title", type: "text", required: true, max: 160 },
+      { name: "slug", type: "text", required: true, max: 80 },
+      { name: "summary", type: "text", max: 400 },
+      { name: "body", type: "editor", required: false },
+      {
+        name: "kind",
+        type: "select",
+        required: true,
+        maxSelect: 1,
+        values: ["diagram", "runbook", "reference", "scratch"],
+      },
+      { name: "tags", type: "json", maxSize: 8000 },
+      { name: "pinned", type: "bool" },
+      {
+        name: "status",
+        type: "select",
+        required: true,
+        maxSelect: 1,
+        values: ["draft", "published", "archived"],
+      },
+      { name: "sort", type: "number" },
+      { name: "created", type: "autodate", onCreate: true, onUpdate: false },
+      { name: "updated", type: "autodate", onCreate: true, onUpdate: true },
+    ],
+    indexes: [
+      "CREATE UNIQUE INDEX idx_nors_notes_slug ON nors_notes (slug)",
+      "CREATE INDEX idx_nors_notes_status ON nors_notes (status)",
+      "CREATE INDEX idx_nors_notes_sort ON nors_notes (sort)",
+    ],
+  })
+  app.save(notes)
+}, (app) => {
+  try {
+    app.delete(app.findCollectionByNameOrId("nors_notes"))
+  } catch (_) {
+    // already gone
+  }
+})

package/pb_public/nors/assets/abnfDiagram-VCTEODGH-72Hc1HpF.js

@@ -0,0 +1 @@
+import{m as e}from"./src-BH-TyZbA.js";import{m as t,t as n}from"./mermaid-parser.core-BR6xQvT6.js";import{n as r}from"./chunk-Y2CYZVJY-DsF7k-Jl.js";import"./chunk-DU6HZSFF-B5Wb9e-Z.js";import{n as i,r as a,t as o}from"./chunk-SVP7TREG-DT0H529z.js";import{t as s}from"./chunk-JWPE2WC7-DVXcaiue.js";import"./mermaid.core-FEPUjAo_.js";var c=t().RailroadAbnf.parser.LangiumParser,l=r(e=>{let t=e.alternatives.map(u);return t.length===1?t[0]:{type:`choice`,alternatives:t}},`transformAlternation`),u=r(e=>{let t=e.elements.map(f);return t.length===1?t[0]:{type:`sequence`,elements:t}},`transformConcatenation`),d=r(e=>{if(e.includes(`*`)){let[t,n]=e.split(`*`);return{min:t?parseInt(t,10):0,max:n?parseInt(n,10):1/0}}let t=parseInt(e,10);return{min:t,max:t}},`parseRepeat`),f=r(e=>{let t=p(e.primary);if(!e.repeat)return t;let{min:n,max:r}=d(e.repeat);return n===0&&r===1?{type:`optional`,element:t}:{type:`repetition`,element:t,min:n,max:r}},`transformElement`),p=r(e=>{switch(e.$type){case`AbnfStringLiteral`:return{type:`terminal`,value:e.value};case`AbnfNumVal`:return{type:`terminal`,value:e.value};case`AbnfRuleName`:return{type:`nonterminal`,name:e.name};case`AbnfGroup`:return l(e.element);case`AbnfOptionalGroup`:return{type:`optional`,element:l(e.element)};default:throw Error(`Unsupported ABNF primary node: ${e.$type}`)}},`transformPrimary`),m=r(e=>({name:e.name,definition:l(e.definition)}),`transformRule`),h=r(e=>{s(e,o),e.title&&o.setTitle(e.title),e.rules.map(e=>o.addRule(m(e)))},`populateDb`),g={parser:{parse:r(t=>{o.clear(),e.debug(`[ABNF Parser] Starting Langium parse`);let r=c.parse(t);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new n(r);let i=r.value;e.debug(`[ABNF Parser] Parsed rules:`,i.rules.length),h(i),e.debug(`[ABNF Parser] Parse complete`)},`parse`),parser:{yy:o}},db:o,renderer:a,styles:i};export{g as diagram};

package/pb_public/nors/assets/arc-BEvzHx4o.js

@@ -0,0 +1 @@
+import{n as e,t}from"./path-fybaL0A-.js";import{a as n,c as r,d as i,f as a,i as o,l as s,m as c,n as l,o as u,p as d,r as f,u as p}from"./dist-DTg6UBE_.js";function m(e){return e.innerRadius}function h(e){return e.outerRadius}function g(e){return e.startAngle}function _(e){return e.endAngle}function v(e){return e&&e.padAngle}function y(e,t,n,r,i,a,o,s){var c=n-e,l=r-t,u=o-i,d=s-a,f=d*c-u*l;if(!(f*f<1e-12))return f=(u*(t-a)-d*(e-i))/f,[e+f*c,t+f*l]}function b(e,t,n,r,i,a,o){var c=e-n,l=t-r,u=(o?a:-a)/d(c*c+l*l),f=u*l,p=-u*c,m=e+f,h=t+p,g=n+f,_=r+p,v=(m+g)/2,y=(h+_)/2,b=g-m,x=_-h,S=b*b+x*x,C=i-a,w=m*_-g*h,T=(x<0?-1:1)*d(s(0,C*C*S-w*w)),E=(w*x-b*T)/S,D=(-w*b-x*T)/S,O=(w*x+b*T)/S,k=(-w*b+x*T)/S,A=E-v,j=D-y,M=O-v,N=k-y;return A*A+j*j>M*M+N*N&&(E=O,D=k),{cx:E,cy:D,x01:-f,y01:-p,x11:E*(i/C-1),y11:D*(i/C-1)}}function x(){var s=m,x=h,S=e(0),C=null,w=g,T=_,E=v,D=null,O=t(k);function k(){var e,t,m=+s.apply(this,arguments),h=+x.apply(this,arguments),g=w.apply(this,arguments)-r,_=T.apply(this,arguments)-r,v=l(_-g),k=_>g;if(D||=e=O(),h<m&&(t=h,h=m,m=t),!(h>1e-12))D.moveTo(0,0);else if(v>c-1e-12)D.moveTo(h*u(g),h*a(g)),D.arc(0,0,h,g,_,!k),m>1e-12&&(D.moveTo(m*u(_),m*a(_)),D.arc(0,0,m,_,g,k));else{var A=g,j=_,M=g,N=_,P=v,F=v,I=E.apply(this,arguments)/2,L=I>1e-12&&(C?+C.apply(this,arguments):d(m*m+h*h)),R=p(l(h-m)/2,+S.apply(this,arguments)),z=R,B=R,V,H;if(L>1e-12){var U=o(L/m*a(I)),W=o(L/h*a(I));(P-=U*2)>1e-12?(U*=k?1:-1,M+=U,N-=U):(P=0,M=N=(g+_)/2),(F-=W*2)>1e-12?(W*=k?1:-1,A+=W,j-=W):(F=0,A=j=(g+_)/2)}var G=h*u(A),K=h*a(A),q=m*u(N),J=m*a(N);if(R>1e-12){var Y=h*u(j),X=h*a(j),Z=m*u(M),Q=m*a(M),$;if(v<i){if($=y(G,K,Z,Q,Y,X,q,J)){var ee=G-$[0],te=K-$[1],ne=Y-$[0],re=X-$[1],ie=1/a(f((ee*ne+te*re)/(d(ee*ee+te*te)*d(ne*ne+re*re)))/2),ae=d($[0]*$[0]+$[1]*$[1]);z=p(R,(m-ae)/(ie-1)),B=p(R,(h-ae)/(ie+1))}else z=B=0}}F>1e-12?B>1e-12?(V=b(Z,Q,G,K,h,B,k),H=b(Y,X,q,J,h,B,k),D.moveTo(V.cx+V.x01,V.cy+V.y01),B<R?D.arc(V.cx,V.cy,B,n(V.y01,V.x01),n(H.y01,H.x01),!k):(D.arc(V.cx,V.cy,B,n(V.y01,V.x01),n(V.y11,V.x11),!k),D.arc(0,0,h,n(V.cy+V.y11,V.cx+V.x11),n(H.cy+H.y11,H.cx+H.x11),!k),D.arc(H.cx,H.cy,B,n(H.y11,H.x11),n(H.y01,H.x01),!k))):(D.moveTo(G,K),D.arc(0,0,h,A,j,!k)):D.moveTo(G,K),!(m>1e-12)||!(P>1e-12)?D.lineTo(q,J):z>1e-12?(V=b(q,J,Y,X,m,-z,k),H=b(G,K,Z,Q,m,-z,k),D.lineTo(V.cx+V.x01,V.cy+V.y01),z<R?D.arc(V.cx,V.cy,z,n(V.y01,V.x01),n(H.y01,H.x01),!k):(D.arc(V.cx,V.cy,z,n(V.y01,V.x01),n(V.y11,V.x11),!k),D.arc(0,0,m,n(V.cy+V.y11,V.cx+V.x11),n(H.cy+H.y11,H.cx+H.x11),k),D.arc(H.cx,H.cy,z,n(H.y11,H.x11),n(H.y01,H.x01),!k))):D.arc(0,0,m,N,M,k)}if(D.closePath(),e)return D=null,e+``||null}return k.centroid=function(){var e=(+s.apply(this,arguments)+ +x.apply(this,arguments))/2,t=(+w.apply(this,arguments)+ +T.apply(this,arguments))/2-i/2;return[u(t)*e,a(t)*e]},k.innerRadius=function(t){return arguments.length?(s=typeof t==`function`?t:e(+t),k):s},k.outerRadius=function(t){return arguments.length?(x=typeof t==`function`?t:e(+t),k):x},k.cornerRadius=function(t){return arguments.length?(S=typeof t==`function`?t:e(+t),k):S},k.padRadius=function(t){return arguments.length?(C=t==null?null:typeof t==`function`?t:e(+t),k):C},k.startAngle=function(t){return arguments.length?(w=typeof t==`function`?t:e(+t),k):w},k.endAngle=function(t){return arguments.length?(T=typeof t==`function`?t:e(+t),k):T},k.padAngle=function(t){return arguments.length?(E=typeof t==`function`?t:e(+t),k):E},k.context=function(e){return arguments.length?(D=e??null,k):D},k}export{x as t};

package/pb_public/nors/assets/architecture-7GRP2DOG-HrDOEF9a.js

@@ -0,0 +1 @@
+import"./chunk-FOHPRMQF-DzxwRta7.js";import{M as e}from"./mermaid-parser.core-BR6xQvT6.js";export{e as createArchitectureServices};