@burakboduroglu/nors 0.1.0 → 0.1.2

package/README.md

@@ -1,6 +1,4 @@
-<div align="center">
-
-<img src="assets/nors-mark-512.png" alt="Nors mark" width="112">
+![Nors mark](assets/nors-mark-32.png)
 
 # Nors
 
@@ -13,8 +11,6 @@
 ![No Docker](https://img.shields.io/badge/Docker-not_required-000?style=flat-square&logo=docker)
 ![Bun](https://img.shields.io/badge/Bun-runtime-000?style=flat-square&logo=bun)
 
-</div>
-
 ---
 
 Nors is not an application you deploy. It is one migration and one static
@@ -22,11 +18,7 @@ page, copied into a PocketBase directory you already have. The database,
 auth, HTTP server and backups are already running — a dedicated notes app
 would duplicate all of them.
 
-<div align="center">
-
-<img src="assets/screenshot-dash.png" alt="Nors dashboard — note cards with kind tabs" width="760">
-
-</div>
+![Nors dashboard — note cards with kind tabs](assets/screenshot-dash.png)
 
 ## What it is
 
@@ -51,11 +43,7 @@ is nothing else to fill in.
 | 🛡️ | **Unsaved work asks first** | Leaving the editor with edits pops a guard instead of silently dropping the draft. |
 | 📵 | **No telemetry** | Zero outbound requests. The page talks to your PocketBase and nothing else. |
 
-<div align="center">
-
-<img src="assets/screenshot-reader.png" alt="Nors reader — CLI shelf note with rendered Mermaid diagrams" width="760">
-
-</div>
+![Nors reader — CLI shelf note with rendered Mermaid diagrams](assets/screenshot-reader.png)
 
 ## Footprint
 
@@ -89,7 +77,7 @@ For a source checkout and remote host, the `deploy/` installer performs the
 stop → copy → start sequence:
 
 ```bash
-scp -r pb_migrations pb_public deploy/install.sh host:/tmp/nors-stage/
+scp -r pb_migrations pb_hooks pb_public deploy/install.sh host:/tmp/nors-stage/
 ssh host
 sudo /tmp/nors-stage/install.sh /tmp/nors-stage
 ```
@@ -108,6 +96,7 @@ NORS_PB_URL=https://your.host NORS_PB_EMAIL=... NORS_PB_PASSWORD=... \
 ```
 browser ──▶ /nors/                            static page, superuser login
 browser ──▶ /api/collections/nors_notes/*      superuser only, CRUD + reorder
+Glance  ──▶ 127.0.0.1:8090/api/nors/summary    counts + recent titles
 agent   ──▶ drafts markdown ──▶ editor ──▶ publish
 ```
 
@@ -123,6 +112,11 @@ with the browser profile has the keys, documented rather than hidden. There is
 no audit log and no second user; this is a single-operator surface behind
 Cloudflare Access, not a multi-user app.
 
+The Glance summary hook has no PocketBase authentication because Glance reads
+it over loopback. The public reverse proxy must return `404` for the exact
+`/api/nors/summary` path; `deploy/patch-caddy-nors-summary.py` installs that
+guard. Do not expose this endpoint publicly: it includes recent note titles.
+
 ## What it deliberately does not do
 
 No in-app LLM calls. No public notes or team sharing. No wiki search, tag

package/bin/nors.js

@@ -22,7 +22,7 @@ Options
   -h, --help   this
   -v, --version
 
-The install step only writes pb_migrations/ and pb_public/nors/.
+The install step only writes pb_migrations/, pb_hooks/, and pb_public/nors/.
 Your data lives in pb_data/ and is never read or written.
 `
 
@@ -52,6 +52,7 @@ async function install(dir, force) {
 
   const parts = [
     ["pb_migrations", "pb_migrations"],
+    ["pb_hooks", "pb_hooks"],
     [join("pb_public", "nors"), join("pb_public", "nors")]
   ]
   for (const [from, to] of parts) {
@@ -71,7 +72,9 @@ Next, and none of it is automatic:
   3. Put an auth layer in front of /nors and
      /api/collections/nors_notes. The collection is superuser-only on its own;
      the page is a login form anyone could reach.
-  4. A source checkout includes optional seed notes and the import-seeds script.
+  4. Block /api/nors/summary at the public reverse proxy. It is intentionally
+     unauthenticated so a same-host Glance can read it over loopback.
+  5. A source checkout includes optional seed notes and the import-seeds script.
 `)
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burakboduroglu/nors",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Personal ops notes dashboard on PocketBase — Norse-named, Solid UI at /nors/",
   "license": "MIT",
   "author": "Burak Boduroğlu",
@@ -18,6 +18,7 @@
   "files": [
     "bin",
     "pb_migrations",
+    "pb_hooks",
     "pb_public",
     "LICENSE",
     "README.md"

package/pb_hooks/nors.pb.js

@@ -0,0 +1,44 @@
+/// <reference path="../pb_data/types.d.ts" />
+
+// GET /api/nors/summary
+//
+// Intentionally unauthenticated inside PocketBase: Glance reaches it directly
+// over 127.0.0.1, while Caddy returns 404 for the exact public path. Keep that
+// Caddy guard in place because note titles are private metadata.
+routerAdd("GET", "/api/nors/summary", (e) => {
+  const records = e.app.findRecordsByFilter(
+    "nors_notes",
+    "id != ''",
+    "-updated",
+    500,
+    0
+  )
+
+  let drafts = 0
+  let pinned = 0
+  const recent = []
+
+  for (const record of records) {
+    const status = record.getString("status")
+    if (status === "draft") drafts++
+    if (record.getBool("pinned")) pinned++
+
+    if (recent.length < 5) {
+      const kind = record.getString("kind")
+      recent.push({
+        title: record.getString("title"),
+        slug: record.getString("slug"),
+        kind: kind === "runbook" ? "Runbook" : kind === "decision" ? "Karar" : "Not",
+        status: status,
+        updated: record.getString("updated").substring(0, 10)
+      })
+    }
+  }
+
+  return e.json(200, {
+    total: records.length,
+    drafts: drafts,
+    pinned: pinned,
+    recent: recent
+  })
+})

package/pb_public/nors/assets/{abnfDiagram-VCTEODGH-72Hc1HpF.js → abnfDiagram-VCTEODGH-BjNTd20L.js}

@@ -1 +1 @@
-import{m as e}from"./src-BH-TyZbA.js";import{m as t,t as n}from"./mermaid-parser.core-BR6xQvT6.js";import{n as r}from"./chunk-Y2CYZVJY-DsF7k-Jl.js";import"./chunk-DU6HZSFF-B5Wb9e-Z.js";import{n as i,r as a,t as o}from"./chunk-SVP7TREG-DT0H529z.js";import{t as s}from"./chunk-JWPE2WC7-DVXcaiue.js";import"./mermaid.core-FEPUjAo_.js";var c=t().RailroadAbnf.parser.LangiumParser,l=r(e=>{let t=e.alternatives.map(u);return t.length===1?t[0]:{type:`choice`,alternatives:t}},`transformAlternation`),u=r(e=>{let t=e.elements.map(f);return t.length===1?t[0]:{type:`sequence`,elements:t}},`transformConcatenation`),d=r(e=>{if(e.includes(`*`)){let[t,n]=e.split(`*`);return{min:t?parseInt(t,10):0,max:n?parseInt(n,10):1/0}}let t=parseInt(e,10);return{min:t,max:t}},`parseRepeat`),f=r(e=>{let t=p(e.primary);if(!e.repeat)return t;let{min:n,max:r}=d(e.repeat);return n===0&&r===1?{type:`optional`,element:t}:{type:`repetition`,element:t,min:n,max:r}},`transformElement`),p=r(e=>{switch(e.$type){case`AbnfStringLiteral`:return{type:`terminal`,value:e.value};case`AbnfNumVal`:return{type:`terminal`,value:e.value};case`AbnfRuleName`:return{type:`nonterminal`,name:e.name};case`AbnfGroup`:return l(e.element);case`AbnfOptionalGroup`:return{type:`optional`,element:l(e.element)};default:throw Error(`Unsupported ABNF primary node: ${e.$type}`)}},`transformPrimary`),m=r(e=>({name:e.name,definition:l(e.definition)}),`transformRule`),h=r(e=>{s(e,o),e.title&&o.setTitle(e.title),e.rules.map(e=>o.addRule(m(e)))},`populateDb`),g={parser:{parse:r(t=>{o.clear(),e.debug(`[ABNF Parser] Starting Langium parse`);let r=c.parse(t);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new n(r);let i=r.value;e.debug(`[ABNF Parser] Parsed rules:`,i.rules.length),h(i),e.debug(`[ABNF Parser] Parse complete`)},`parse`),parser:{yy:o}},db:o,renderer:a,styles:i};export{g as diagram};
+import{m as e}from"./src-BH-TyZbA.js";import{m as t,t as n}from"./mermaid-parser.core-Bh2pMn-f.js";import{n as r}from"./chunk-Y2CYZVJY-DsF7k-Jl.js";import"./chunk-DU6HZSFF-DdkkHC2K.js";import{n as i,r as a,t as o}from"./chunk-SVP7TREG-Cjv1tk7U.js";import{t as s}from"./chunk-JWPE2WC7-DVXcaiue.js";import"./mermaid.core-CL8sN1KK.js";var c=t().RailroadAbnf.parser.LangiumParser,l=r(e=>{let t=e.alternatives.map(u);return t.length===1?t[0]:{type:`choice`,alternatives:t}},`transformAlternation`),u=r(e=>{let t=e.elements.map(f);return t.length===1?t[0]:{type:`sequence`,elements:t}},`transformConcatenation`),d=r(e=>{if(e.includes(`*`)){let[t,n]=e.split(`*`);return{min:t?parseInt(t,10):0,max:n?parseInt(n,10):1/0}}let t=parseInt(e,10);return{min:t,max:t}},`parseRepeat`),f=r(e=>{let t=p(e.primary);if(!e.repeat)return t;let{min:n,max:r}=d(e.repeat);return n===0&&r===1?{type:`optional`,element:t}:{type:`repetition`,element:t,min:n,max:r}},`transformElement`),p=r(e=>{switch(e.$type){case`AbnfStringLiteral`:return{type:`terminal`,value:e.value};case`AbnfNumVal`:return{type:`terminal`,value:e.value};case`AbnfRuleName`:return{type:`nonterminal`,name:e.name};case`AbnfGroup`:return l(e.element);case`AbnfOptionalGroup`:return{type:`optional`,element:l(e.element)};default:throw Error(`Unsupported ABNF primary node: ${e.$type}`)}},`transformPrimary`),m=r(e=>({name:e.name,definition:l(e.definition)}),`transformRule`),h=r(e=>{s(e,o),e.title&&o.setTitle(e.title),e.rules.map(e=>o.addRule(m(e)))},`populateDb`),g={parser:{parse:r(t=>{o.clear(),e.debug(`[ABNF Parser] Starting Langium parse`);let r=c.parse(t);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new n(r);let i=r.value;e.debug(`[ABNF Parser] Parsed rules:`,i.rules.length),h(i),e.debug(`[ABNF Parser] Parse complete`)},`parse`),parser:{yy:o}},db:o,renderer:a,styles:i};export{g as diagram};

package/pb_public/nors/assets/architecture-7GRP2DOG-CszbBaLG.js

@@ -0,0 +1 @@
+import"./chunk-FOHPRMQF-DzxwRta7.js";import{M as e}from"./mermaid-parser.core-Bh2pMn-f.js";export{e as createArchitectureServices};