@hanzo/build 0.2.50 → 0.2.52

package/README.md

@@ -99,18 +99,18 @@ hanzo.id token for `Host.admin`. One left column, never two.
 | `-/automations` | repeating work, read from `/v1/auto/flows` |
 | `-/customize` · `-/customize/connectors` · `/plugins` · `/agents` | Customize: skills, connectors, plugins, agents |
 | `-/mcp` | Connectors → Discover, where the fleet's native MCP servers now live |
-| `-/codebases` | the forge's repositories |
-| `-/sync` | bring granted repositories onto the forge |
-| `-/projects` | the forge's boards |
+| `-/projects` | the org's projects: its repositories on the forge |
+| `-/sync` | link repositories from GitHub onto the forge |
 | `-/issues` | the forge's issues |
 | `-/artifacts` | what the org has built |
 | `-/templates` | the public starters |
 | `-/plans` | the plans this brand sells, and the move to another |
 | `-/settings/<section>` | Billing, Usage, Members, Integrations, Notifications, … |
-| `<slug>` | a project's workspace |
+| `<org>/<repo>` | a project's workspace: the repository, and its site when it has one |
+| `<slug>` | a deployed site's workspace |
 
-A project slug holds no `_` and never starts with `-`, so the forms cannot
-collide.
+A project slug holds no `_` and never starts with `-`, and a repository is the
+one address of two segments, so the forms cannot collide.
 
 ## What is on the screen
 
@@ -214,7 +214,7 @@ picker and open-in-tab; Share and Publish; the console dock under it.
 | `PATCH /v1/agent/sessions/{id}` `{title}` · `{published}` | rename a run, share its story at `GET /v1/agent/builds/{org}/{project}` |
 | `GET /v1/agent/sessions?kind=coding&status=&after=` | Find, by status, paged |
 | `GET`/`POST /v1/agent/targets` · `PATCH`/`DELETE …/{id}` · `POST …/{id}/key` | the org's machines, and a machine's claim key |
-| `GET`/`POST`/`DELETE /v1/account/keys` | your API keys |
+| `GET`/`POST /v1/account/keys` · `DELETE …/{id}` | your API keys, as many as you need; one revoked at a time |
 | `GET /v1/auto/flows` · `POST /v1/auto/flows` · `POST /v1/auto/flows/{id}/enable` | automations |
 | `GET /v1/environment` · `GET`/`PUT`/`DELETE /v1/environment/{repo}` · `PUT`/`DELETE …/secrets/{name}` | a codebase's environment |
 | `GET /v1/agent/coding/{session}/changes` · `/tree` · `/blob` | what a run pushed, and its branch's files, from the forge |

package/lib/api/github.d.ts

@@ -8,6 +8,7 @@
  *   POST /v1/provider/github/user/complete     {grant} → the connection
  *   POST /v1/provider/github/user/disconnect
  *   GET  /v1/provider/github/installations     the accounts this org has bound the App on
+ *   POST /v1/provider/github/issues/backfill   {state, repo?} → mirror GitHub issues onto the board
  *
  * Paged by an opaque `after` cursor; `next` is the cursor for the page after
  * this one, or empty on the last. Rows are read defensively: a field the
@@ -128,3 +129,20 @@ export declare function accounts(g: Grants): Account[];
 export declare function grants(t: Target, signal?: AbortSignal): Promise<Grants>;
 /** Queue a mirror of the named repositories onto the forge. The names are `owner/name`. */
 export declare function bring(t: Target, repos: string[]): Promise<number>;
+/** What one issue sync did. */
+export interface Synced {
+    repos: number;
+    issues: number;
+    created: number;
+    updated: number;
+    failed: number;
+    /** The pass stopped at its budget; syncing again continues where it stopped. */
+    truncated: boolean;
+}
+/**
+ * Mirror GitHub issues onto the board — open and closed, so a closed one reads as
+ * closed here too. `repo` (`name` or `owner/name`) syncs one project; empty syncs
+ * every repository the connection grants. Idempotent: a second sync updates and
+ * never duplicates, and the App's webhook keeps them live afterwards.
+ */
+export declare function syncIssues(t: Target, repo?: string): Promise<Synced>;

package/lib/api/github.js

@@ -8,6 +8,7 @@
  *   POST /v1/provider/github/user/complete     {grant} → the connection
  *   POST /v1/provider/github/user/disconnect
  *   GET  /v1/provider/github/installations     the accounts this org has bound the App on
+ *   POST /v1/provider/github/issues/backfill   {state, repo?} → mirror GitHub issues onto the board
  *
  * Paged by an opaque `after` cursor; `next` is the cursor for the page after
  * this one, or empty on the last. Rows are read defensively: a field the
@@ -143,3 +144,21 @@ export async function bring(t, repos) {
     const raw = obj(await call(t, 'POST', '/v1/provider/github/repos/import', { repos: names }));
     return num(raw.queued);
 }
+/**
+ * Mirror GitHub issues onto the board — open and closed, so a closed one reads as
+ * closed here too. `repo` (`name` or `owner/name`) syncs one project; empty syncs
+ * every repository the connection grants. Idempotent: a second sync updates and
+ * never duplicates, and the App's webhook keeps them live afterwards.
+ */
+export async function syncIssues(t, repo = '') {
+    const name = repo.trim();
+    const raw = obj(await call(t, 'POST', '/v1/provider/github/issues/backfill', name ? { state: 'all', repo: name } : { state: 'all' }));
+    return {
+        repos: num(raw.repos),
+        issues: num(raw.issues),
+        created: num(raw.created),
+        updated: num(raw.updated),
+        failed: num(raw.failed),
+        truncated: raw.truncated === true,
+    };
+}

package/lib/api/keys.d.ts

@@ -1,31 +1,38 @@
 /**
- * A person's own API keys: one secret key (sk-, it belongs on a server) and one
- * publishable key (pk-, safe in a page's source), at most one of each.
+ * A person's API keys, each its own credential: as many as they like, of either
+ * type — secret (sk-, it belongs on a server) or publishable (pk-, safe in a
+ * page's source).
  *
- *   GET    /v1/account/keys             {keys: [{type, prefix, key?, limit?, createdAt}]}
- *   POST   /v1/account/keys             {type, limit?} → {key, type, limit}, answered once
- *   DELETE /v1/account/keys?type=…      revoke that one
+ *   GET    /v1/account/keys        {keys: [{id, name, type, prefix, key?, status, limit?, created, …}]}
+ *   POST   /v1/account/keys        {name, type, limit?} → the key, its secret answered once
+ *   DELETE /v1/account/keys/{id}   revoke exactly that one; it stays listed as revoked
  *
- * Creating is rotating: a new key of a type ends the one before it. A secret key
- * is answered once and by its prefix after; a publishable key is public by
- * construction and always comes back whole. A limit only narrows what a key may
- * reach — `model:zen5`, `project:acme`, `product:commerce`, `model:*`.
+ * Creating a key never touches another. A secret key is answered once and by its
+ * prefix after; a publishable key is public by construction and always comes back
+ * whole. A limit only narrows what a key may reach — `model:zen5`,
+ * `project:acme`, `product:train`, `read:*`.
  */
 import { type Target } from './call.ts';
 export declare const KINDS: readonly ['secret', 'publishable'];
 export type Kind = (typeof KINDS)[number];
 export interface Key {
+    id: string;
+    name: string;
     type: Kind;
     /** The recognizable head, never enough to use the key. */
     prefix: string;
     /** The whole key: a publishable key's only. */
     key: string;
+    /** active, expired, revoked or disabled. */
+    status: string;
     /** `kind:name` entries; none reaches whatever its holder does. */
     limit: string[];
-    /** When it last changed, as IAM records it. */
+    /** When it was made, as IAM records it. */
     created: string;
 }
 export interface Minted {
+    id: string;
+    name: string;
     type: Kind;
     /** The key itself. A secret one is never readable again. */
     key: string;
@@ -36,6 +43,7 @@ export declare function keys(t: Target): Promise<Key[]>;
 export declare const LIMIT: RegExp;
 /** The limits a person typed, split on commas and spaces; throws on the first that is not one. */
 export declare function limits(raw: string): string[];
-/** Create a key of this type, ending the one before it. The answer is the only time a secret key is shown. */
-export declare function mint(t: Target, type: Kind, limit?: string[]): Promise<Minted>;
-export declare function revoke(t: Target, type: Kind): Promise<void>;
+/** Create a new key beside the ones held. The answer is the only time a secret key is shown. */
+export declare function mint(t: Target, type: Kind, name?: string, limit?: string[]): Promise<Minted>;
+/** Revoke exactly one key, by id. Every other key keeps working. */
+export declare function revoke(t: Target, id: string): Promise<void>;

package/lib/api/keys.js

@@ -1,17 +1,18 @@
 /**
- * A person's own API keys: one secret key (sk-, it belongs on a server) and one
- * publishable key (pk-, safe in a page's source), at most one of each.
+ * A person's API keys, each its own credential: as many as they like, of either
+ * type — secret (sk-, it belongs on a server) or publishable (pk-, safe in a
+ * page's source).
  *
- *   GET    /v1/account/keys             {keys: [{type, prefix, key?, limit?, createdAt}]}
- *   POST   /v1/account/keys             {type, limit?} → {key, type, limit}, answered once
- *   DELETE /v1/account/keys?type=…      revoke that one
+ *   GET    /v1/account/keys        {keys: [{id, name, type, prefix, key?, status, limit?, created, …}]}
+ *   POST   /v1/account/keys        {name, type, limit?} → the key, its secret answered once
+ *   DELETE /v1/account/keys/{id}   revoke exactly that one; it stays listed as revoked
  *
- * Creating is rotating: a new key of a type ends the one before it. A secret key
- * is answered once and by its prefix after; a publishable key is public by
- * construction and always comes back whole. A limit only narrows what a key may
- * reach — `model:zen5`, `project:acme`, `product:commerce`, `model:*`.
+ * Creating a key never touches another. A secret key is answered once and by its
+ * prefix after; a publishable key is public by construction and always comes back
+ * whole. A limit only narrows what a key may reach — `model:zen5`,
+ * `project:acme`, `product:train`, `read:*`.
  */
-import { call, query } from './call.js';
+import { call } from './call.js';
 export const KINDS = ['secret', 'publishable'];
 const str = (v) => (typeof v === 'string' ? v : '');
 const list = (v) => (Array.isArray(v) ? v.filter((s) => typeof s === 'string' && s !== '') : []);
@@ -23,9 +24,18 @@ export async function keys(t) {
     for (const raw of rows) {
         const o = (raw && typeof raw === 'object' ? raw : {});
         const type = kind(o.type);
-        if (!type)
+        if (!type || !str(o.id))
             continue;
-        out.push({ type, prefix: str(o.prefix), key: str(o.key), limit: list(o.limit), created: str(o.createdAt) });
+        out.push({
+            id: str(o.id),
+            name: str(o.name),
+            type,
+            prefix: str(o.prefix),
+            key: str(o.key),
+            status: str(o.status) || 'active',
+            limit: list(o.limit),
+            created: str(o.created),
+        });
     }
     return out;
 }
@@ -42,14 +52,20 @@ export function limits(raw) {
         throw new Error(`${bad} is not a limit — write it as kind:name, like model:zen5`);
     return out;
 }
-/** Create a key of this type, ending the one before it. The answer is the only time a secret key is shown. */
-export async function mint(t, type, limit = []) {
-    const r = await call(t, 'POST', '/v1/account/keys', limit.length ? { type, limit } : { type });
-    const key = str(r?.key) || str(r?.accessKey);
+/** Create a new key beside the ones held. The answer is the only time a secret key is shown. */
+export async function mint(t, type, name = '', limit = []) {
+    const body = { type };
+    if (name.trim())
+        body.name = name.trim();
+    if (limit.length)
+        body.limit = limit;
+    const r = await call(t, 'POST', '/v1/account/keys', body);
+    const key = str(r?.key);
     if (!key)
         throw new Error('The platform answered no key');
-    return { type: kind(r?.type) ?? type, key, limit: list(r?.limit) };
+    return { id: str(r?.id), name: str(r?.name), type: kind(r?.type) ?? type, key, limit: list(r?.limit) };
 }
-export async function revoke(t, type) {
-    await call(t, 'DELETE', `/v1/account/keys${query({ type })}`);
+/** Revoke exactly one key, by id. Every other key keeps working. */
+export async function revoke(t, id) {
+    await call(t, 'DELETE', `/v1/account/keys/${encodeURIComponent(id)}`);
 }

package/lib/api/work.d.ts

@@ -31,7 +31,21 @@ export interface Work {
     assignee: string;
     /** The repository the item is bound to, or ''. */
     repo: string;
+    /** Where it was opened: `git` (the forge, or mirrored from GitHub), `team`, `agent`, … */
+    source: string;
+    labels: string[];
+    /** Its page upstream (a GitHub issue for a mirrored one), https only, or ''. */
+    url: string;
+    /** Unix milliseconds, or 0 when the platform did not say. */
+    created: number;
+    updated: number;
 }
+/** The project an item is filed under: its repository, else its board. */
+export declare const projectOf: (w: Work) => string;
+/** Done and canceled are closed; every other column is open work. */
+export declare const closed: (w: Work) => boolean;
+/** Whether `w` belongs to the project `key` — by repository or by board, either case. */
+export declare function inProject(w: Work, key: string): boolean;
 export declare function board(raw: unknown): Board | null;
 export declare function work(raw: unknown): Work | null;
 export declare function boards(t: Target): Promise<Board[]>;

package/lib/api/work.js

@@ -12,7 +12,19 @@
  * reads the work and opens a run against it.
  */
 import { call, seg } from './call.js';
+/** The project an item is filed under: its repository, else its board. */
+export const projectOf = (w) => w.repo || w.project;
+/** Done and canceled are closed; every other column is open work. */
+export const closed = (w) => w.status === 'done' || w.status === 'canceled';
+/** Whether `w` belongs to the project `key` — by repository or by board, either case. */
+export function inProject(w, key) {
+    const k = key.toLowerCase();
+    return w.repo.toLowerCase() === k || w.project.toLowerCase() === k;
+}
 const str = (v) => (typeof v === 'string' ? v : '');
+/** The platform states seconds; a value already in milliseconds is kept. */
+const when = (v) => (typeof v === 'number' && Number.isFinite(v) && v > 0 ? (v < 1e12 ? v * 1000 : v) : 0);
+const https = (v) => (typeof v === 'string' && /^https:\/\//.test(v) ? v : '');
 const obj = (v) => v && typeof v === 'object' ? v : {};
 function rows(raw) {
     if (Array.isArray(raw))
@@ -49,6 +61,11 @@ export function work(raw) {
         priority: str(o.priority) || 'none',
         assignee: str(o.assignee),
         repo: str(o.repo),
+        source: str(o.source),
+        labels: Array.isArray(o.labels) ? o.labels.filter((l) => typeof l === 'string' && l !== '') : [],
+        url: https(o.url) || https(o.extRef),
+        created: when(o.createdAt),
+        updated: when(o.updatedAt),
     };
 }
 export async function boards(t) {

package/lib/builder.js

@@ -5,14 +5,14 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  *   /            New — the empty state, a composer over the codebase it works on
  *   /sess_…      one run, live
  *   /-/automations work that runs itself; /-/automations/<id> one, to edit and run
-   /-/codebases the forge's repositories
- *   /-/sync      bring granted repositories onto the forge
- *   /-/projects  the forge's boards
+ *   /-/projects  the org's repositories on the forge: a project is a repository
+ *   /-/sync      link repositories from GitHub onto the forge
  *   /-/issues    the forge's issues
  *   /-/artifacts what this org has built
  *   /-/templates the public starters
  *   /-/customize skills, connectors, plugins and agents
- *   /<slug>      a deployed project's workspace, in this same window
+ *   /<org>/<repo> a repository's workspace, in this same window
+ *   /<slug>      a deployed site's workspace
  *
  * The rail is the sessions rail every Hanzo surface shares: New, the builder's
  * places with the rest under More, the org's coding runs newest first with a
@@ -20,15 +20,15 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  * whose menu opens Settings, Usage, the plans, help and logging out (foot.tsx).
  * Its collapse is an explicit toggle kept per browser.
  *
- * A project's workspace takes the whole window — it has its own chat column,
- * bar and panes — and its mark leads back here.
+ * A workspace takes the whole window — it has its own chat column, bar and
+ * panes — and its mark leads back here.
  *
  * A host with a rail of its own mounts `<Builder rail={false}>` and draws the
  * builder's places (`nav`) and runs in that rail (`useSessions`, or `DevSection`,
  * section.tsx): one left column, never two.
  */
 import { SizableText, XStack, YStack } from '@hanzo/gui';
-import { Blocks, BookOpen, CircleDot, Cpu, FolderGit2, Kanban, LayoutTemplate, Menu, Search, SlidersHorizontal, Workflow } from '@hanzogui/lucide-icons-2';
+import { Blocks, BookOpen, CircleDot, Cpu, FolderGit2, LayoutTemplate, Menu, Search, SlidersHorizontal, Workflow } from '@hanzogui/lucide-icons-2';
 import { Button } from '@hanzo/ui';
 import { SessionRail } from '@hanzo/ui/chat';
 import { HanzoMark } from '@hanzo/ui/product';
@@ -98,13 +98,18 @@ export function nav(host, go) {
     const r = route(host.path);
     const screen = r.kind === 'screen' ? r.screen : '';
     const links = [
-        { id: 'projects', label: 'Projects', icon: _jsx(Kanban, { size: 16 }), onPress: () => go(path({ kind: 'screen', screen: 'projects' })), active: screen === 'projects' },
+        {
+            id: 'projects',
+            label: 'Projects',
+            icon: _jsx(FolderGit2, { size: 16 }),
+            onPress: () => go(path({ kind: 'screen', screen: 'projects' })),
+            active: screen === 'projects' || screen === 'sync' || r.kind === 'repo',
+        },
         { id: 'artifacts', label: 'Artifacts', icon: _jsx(Blocks, { size: 16 }), onPress: () => go(path({ kind: 'screen', screen: 'artifacts' })), active: screen === 'artifacts' },
         { id: 'customize', label: 'Customize', icon: _jsx(SlidersHorizontal, { size: 16 }), onPress: () => go(path({ kind: 'customize', tab: 'skills' })), active: r.kind === 'customize' || screen === 'mcp' },
         { id: 'automations', label: 'Automations', icon: _jsx(Workflow, { size: 16 }), onPress: () => go(path({ kind: 'screen', screen: 'automations' })), active: screen === 'automations' || r.kind === 'automation' },
     ];
     const more = [
-        { id: 'codebases', label: 'Codebase', icon: _jsx(FolderGit2, { size: 16 }), onPress: () => go(path({ kind: 'screen', screen: 'codebases' })), active: screen === 'codebases' },
         {
             id: 'issues',
             label: 'Issues',
@@ -172,7 +177,9 @@ function Screens({ rail }) {
     const host = useHost();
     const r = route(host.path);
     if (r.kind === 'project')
-        return _jsx(Project, { slug: r.slug }, r.slug);
+        return _jsx(Project, { at: { slug: r.slug } }, r.slug);
+    if (r.kind === 'repo')
+        return _jsx(Project, { at: { org: r.org, name: r.name } }, `${r.org}/${r.name}`);
     if (!rail)
         return _jsx(Pane, {});
     return _jsx(Shell, {});