@twango/twiki 0.0.0-stage → 0.1.1

package/site/src/routes/[...slug]/+page.server.ts

@@ -0,0 +1,24 @@
+import { error } from '@sveltejs/kit';
+import type { EntryGenerator, PageServerLoad } from './$types';
+import { requestContent } from '$lib/server/runtime-content';
+import type { TocEntry } from '$lib/types';
+
+export const entries: EntryGenerator = async () => {
+	if (import.meta.env.VITE_STATIC_EXPORT !== 'true') return [];
+	return (await requestContent(undefined).model()).contentEntries().map((slug) => ({ slug }));
+};
+
+export const load: PageServerLoad = async ({ params, platform }) => {
+	const route = params.slug.replace(/^\/+|\/+$/g, '');
+	const content = requestContent(platform);
+	const model = await content.model();
+	const slug = model.pageSlugForRoute(route);
+	if (slug) {
+		const { markdown: _markdown, ...page } = await content.page(slug);
+		const toc: TocEntry[] = page.toc.map((t) => ({ id: t.slug, text: t.text, level: t.depth + 1 }));
+		return { kind: 'page' as const, route, page, toc };
+	}
+	const listing = model.folderListing(route);
+	if (listing) return { kind: 'folder' as const, route, listing, toc: [] as TocEntry[] };
+	error(404, 'Page not found');
+};

package/site/src/routes/[...slug]/+page.svelte

@@ -0,0 +1,180 @@
+<script lang="ts">
+	import Folder from '@lucide/svelte/icons/folder';
+	import FileText from '@lucide/svelte/icons/file-text';
+	import NoteActions from '$lib/components/doc/NoteActions.svelte';
+	import { textExportUrl } from '$lib/text-exports';
+	import SEO from '$lib/components/SEO.svelte';
+	import Backlinks from '$lib/components/doc/Backlinks.svelte';
+	import Breadcrumbs from '$lib/components/doc/Breadcrumbs.svelte';
+	import ContentMeta from '$lib/components/doc/ContentMeta.svelte';
+	import LicenseNotice from '$lib/components/doc/LicenseNotice.svelte';
+	import LockedContent from '$lib/components/doc/LockedContent.svelte';
+	import { enhanceArticle } from '$lib/components/doc/enhancements';
+	import { linkPopovers } from '$lib/components/popover';
+	import type { PageData } from './$types';
+	import { curator, noteSchema, pageAuthor } from '$lib/metadata';
+	import { socialImageUrl } from '$lib/social-image';
+
+	interface Props {
+		data: PageData;
+	}
+
+	const { data }: Props = $props();
+
+	const articleKey = $derived(data.kind === 'page' ? JSON.stringify(data.page) : '');
+
+	const canonical = $derived(data.route === '' ? '/' : `/${data.route}`);
+	const author = $derived(data.kind === 'page' ? pageAuthor(data.page) : undefined);
+	// Split only a leading H1, retaining its original markup and deep-link id.
+	const heading = $derived(
+		data.kind === 'page' ? (data.page.html.match(/^\s*<h1\b[^>]*>[\s\S]*?<\/h1>/i)?.[0] ?? '') : ''
+	);
+	const body = $derived(data.kind === 'page' ? data.page.html.slice(heading.length) : '');
+
+	// Pagefind permits only the final comma-separated filter to use inline
+	// `key:value` syntax. Emit one hidden capture element per value instead so
+	// course and every tag become independent, repeatable filters.
+	const pagefindCourse = $derived.by(() => {
+		if (data.route === '') return undefined;
+		return data.route.split('/')[0];
+	});
+
+	function shortDate(iso?: string): string {
+		return iso
+			? new Date(iso).toLocaleDateString('en-US', {
+					year: 'numeric',
+					month: 'short',
+					day: 'numeric'
+				})
+			: '';
+	}
+</script>
+
+<svelte:head>
+	<link rel="alternate" type="text/plain" title="LLM index" href="/llms.txt" />
+	{#if data.kind === 'page' && !data.page.locked}
+		<link rel="alternate" type="text/markdown" href={textExportUrl(data.page.slug)} />
+		<link rel="alternate" type="text/plain" href={textExportUrl(data.page.slug, 'txt')} />
+	{/if}
+</svelte:head>
+
+{#if data.kind === 'page'}
+	<SEO
+		title={data.route === '' ? undefined : data.page.title}
+		description={data.page.description}
+		{canonical}
+		type="article"
+		noindex={!data.page.publication.public}
+		jsonLd={noteSchema(canonical, data.page)}
+		image={socialImageUrl(data.page.slug)}
+		modified={data.page.dates.modified}
+		published={data.page.dates.published}
+		{author}
+		tags={data.page.tags}
+	/>
+
+	<Breadcrumbs route={data.route} current={data.page.title} />
+
+	{#key articleKey}
+		<article
+			class="prose dark:prose-invert max-w-none"
+			data-pagefind-body={data.page.locked ? undefined : true}
+			data-pagefind-ignore={data.page.locked ? true : undefined}
+			{@attach enhanceArticle(articleKey)}
+			{@attach linkPopovers(articleKey)}
+		>
+			{#if data.route !== ''}
+				<div class="hidden" data-pagefind-ignore>
+					<span data-pagefind-filter="course">{pagefindCourse}</span>
+					{#each data.page.tags as tag (tag)}
+						<span data-pagefind-filter="tag">{tag}</span>
+					{/each}
+				</div>
+				<!-- Frontmatter title beats Pagefind's h1-scraping (some pages lack an h1). -->
+				<span class="sr-only" data-pagefind-meta="title">{data.page.title}</span>
+			{/if}
+			{#if heading}
+				{@html heading}
+			{:else if data.kind === 'page'}
+				<h1>{data.page.title}</h1>
+			{/if}
+			<div class="doc-meta" data-pagefind-ignore>
+				<ContentMeta
+					modified={data.route ? data.page.dates?.modified : undefined}
+					published={data.route ? data.page.dates?.published : undefined}
+					author={data.page.locked ? undefined : (author ?? curator)}
+					curated={!author}
+					readingTime={data.route ? data.page.readingTime : undefined}
+					publication={data.page.publication}
+				/>
+			</div>
+			{#if data.page.locked}
+				<LockedContent />
+				{#if data.page.toc.length}
+					<div class="mt-6 space-y-3" aria-label="Page outline">
+						{#each data.page.toc as heading (heading.slug)}
+							<div
+								id={heading.slug}
+								class="scroll-mt-20 border-l border-border pl-3 text-sm text-muted"
+								style:margin-left={`${heading.depth * 0.75}rem`}
+							>
+								{heading.text}
+							</div>
+						{/each}
+					</div>
+				{/if}
+			{:else}
+				{#key data.page.slug}
+					<NoteActions slug={data.page.slug} />
+				{/key}
+				{@html body}
+			{/if}
+		</article>
+	{/key}
+	{#if data.page.license}
+		<div class="mt-6"><LicenseNotice license={data.page.license} /></div>
+	{/if}
+
+	<Backlinks backlinks={data.page.backlinks} />
+{:else}
+	<SEO
+		title={data.listing.name}
+		description={`Browse ${data.listing.name} course notes and files. Public material is readable; other content requires access.`}
+		{canonical}
+	/>
+
+	<Breadcrumbs route={data.route} current={data.listing.name} />
+
+	<article class="prose dark:prose-invert max-w-none" data-pagefind-body>
+		{#if pagefindCourse}
+			<span class="hidden" data-pagefind-ignore data-pagefind-filter="course">{pagefindCourse}</span
+			>
+		{/if}
+		<h1>{data.listing.name}</h1>
+		<p class="text-muted">
+			{data.listing.pageCount}
+			{data.listing.pageCount === 1 ? 'item' : 'items'} under this folder.
+		</p>
+	</article>
+
+	<ul class="m-0 mt-4 list-none p-0">
+		{#each data.listing.entries as entry (entry.route)}
+			<li>
+				<a
+					class="flex items-center gap-3 rounded-md px-3 py-2 text-sm text-text no-underline hover:bg-surface"
+					href={entry.route}
+				>
+					{#if entry.isFolder}
+						<Folder class="size-4 shrink-0 text-muted" aria-hidden="true" />
+					{:else}
+						<FileText class="size-4 shrink-0 text-muted" aria-hidden="true" />
+					{/if}
+					<span class="min-w-0 flex-1 truncate font-medium">{entry.title}</span>
+					{#if entry.modified}
+						<span class="shrink-0 text-xs text-muted">{shortDate(entry.modified)}</span>
+					{/if}
+				</a>
+			</li>
+		{/each}
+	</ul>
+{/if}

package/site/src/routes/[course]/files/[...file]/+page.svelte

@@ -0,0 +1,373 @@
+<script lang="ts">
+	import SEO from '$lib/components/SEO.svelte';
+	import LicenseNotice from '$lib/components/doc/LicenseNotice.svelte';
+	import LockedContent from '$lib/components/doc/LockedContent.svelte';
+	import BookOpen from '@lucide/svelte/icons/book-open';
+	import Check from '@lucide/svelte/icons/check';
+	import ChevronRight from '@lucide/svelte/icons/chevron-right';
+	import Copy from '@lucide/svelte/icons/copy';
+	import Download from '@lucide/svelte/icons/download';
+	import Pin from '@lucide/svelte/icons/pin';
+	import File from '@lucide/svelte/icons/file';
+	import ArrowUpRight from '@lucide/svelte/icons/arrow-up-right';
+	import History from '@lucide/svelte/icons/history';
+	import GitCommitHorizontal from '@lucide/svelte/icons/git-commit-horizontal';
+	import ArrowLeft from '@lucide/svelte/icons/arrow-left';
+	import { fileRoute, fileSize } from '$lib/files';
+	import FileIcon from '$lib/components/files/FileIcon.svelte';
+	import FileTabs from '$lib/components/files/FileTabs.svelte';
+	import FileCode from '$lib/components/files/FileCode.svelte';
+	import FileHistory from '$lib/components/files/FileHistory.svelte';
+	import type { FileBlame, FileChange } from '$lib/file-history';
+	import { fileWorkspace } from '$lib/components/files/file-workspace.svelte';
+	import { sameFile } from '$lib/file-tabs';
+	import { beforeNavigate } from '$app/navigation';
+	import { onMount, tick, untrack } from 'svelte';
+	import type { PageData } from './$types';
+	let { data }: { data: PageData } = $props();
+	const workspace = fileWorkspace();
+	let viewport = $state<HTMLElement>();
+	let historyOpen = $state(false);
+	let blaming = $state(false);
+	let blame = $state<FileBlame>();
+	let selectedCommit = $state('');
+	let sourceText = $state<string>();
+	let rmdMode = $state<'read' | 'interactive' | 'source'>(
+		untrack(() => (data.rmd ? 'read' : 'source'))
+	);
+	let diff = $state<{ text: string; commit: FileChange }>();
+	$effect(() => {
+		data.course;
+		data.path;
+		diff = undefined;
+		blame = undefined;
+		selectedCommit = '';
+		sourceText = undefined;
+		rmdMode = data.rmd ? 'read' : 'source';
+	});
+	const activeTab = $derived(workspace.tabs.find((tab) => sameFile(tab, data)));
+	function rememberPosition() {
+		if (data.file && viewport && !diff) workspace.remember(data.course, data.path, viewport);
+	}
+	beforeNavigate(rememberPosition);
+	onMount(() => {
+		window.addEventListener('pagehide', rememberPosition);
+		return () => window.removeEventListener('pagehide', rememberPosition);
+	});
+	$effect(() => {
+		const { course, path, file } = data;
+		if (!workspace.ready || !viewport) return;
+		const position = untrack(() => {
+			if (file) workspace.open(course, path);
+			return workspace.tabs.find((tab) => sameFile(tab, { course, path }));
+		});
+		void tick().then(() => {
+			if (viewport && data.course === course && data.path === path)
+				viewport.scrollTo({
+					top: position?.top ?? 0,
+					left: position?.left ?? 0,
+					behavior: 'instant'
+				});
+		});
+	});
+	let copied = $state(false);
+	let copyFailed = $state(false);
+	const name = $derived(data.path.split('/').at(-1) || data.course);
+	const segments = $derived(data.path.split('/').filter(Boolean));
+	const action =
+		'inline-flex items-center gap-1.5 rounded px-2 py-1.5 text-xs text-muted no-underline hover:bg-surface hover:text-text';
+	$effect(() => {
+		data.path;
+		copied = false;
+		copyFailed = false;
+	});
+	async function copy() {
+		try {
+			await navigator.clipboard.writeText(diff?.text ?? sourceText ?? '');
+			copied = true;
+			copyFailed = false;
+		} catch {
+			copyFailed = true;
+		}
+	}
+</script>
+
+<SEO
+	title={`${name} · Files`}
+	description=""
+	canonical={fileRoute(data.course, data.path)}
+	noindex
+/>
+
+<div class="flex h-full min-h-0 flex-col" data-pagefind-ignore>
+	<div class="flex shrink-0 flex-col border-b border-border">
+		<nav
+			class="flex items-center gap-1 overflow-x-auto px-3 py-1.5 text-xs whitespace-nowrap text-muted"
+			aria-label="File breadcrumbs"
+		>
+			<a class="hover:text-text" href={`/${encodeURIComponent(data.course)}`}>{data.course}</a>
+			<ChevronRight size={12} />
+			<a class="hover:text-text" href={fileRoute(data.course)}>Files</a>
+			{#each segments as segment, i}
+				<ChevronRight size={12} />
+				<a
+					class="hover:text-text"
+					href={fileRoute(data.course, segments.slice(0, i + 1).join('/'))}
+					aria-current={i === segments.length - 1 ? 'page' : undefined}>{segment}</a
+				>
+			{/each}
+		</nav>
+		<header
+			class="order-first flex min-w-0 items-center border-b border-border bg-surface pr-2 max-sm:flex-col max-sm:items-stretch"
+		>
+			{#if !data.file && !workspace.tabs.length}<div
+					class="flex min-w-0 items-center gap-2 border-r border-border bg-bg px-3 py-2"
+				>
+					<FileIcon {name} folder={!data.file} expanded={!data.file} />
+					<h1 class="m-0 break-all font-mono text-xs font-medium">{name}</h1>
+				</div>{:else}<h1 class="sr-only">{name}</h1>{/if}
+			<FileTabs course={data.course} path={data.path} isFile={!!data.file} />
+			{#if data.file}
+				<div class="flex shrink-0 items-center gap-1 overflow-x-auto">
+					{#if /\.rmd$/i.test(data.path) && !data.file.locked && !diff}
+						<div
+							class="flex shrink-0 rounded border border-border"
+							role="group"
+							aria-label="Worksheet view"
+						>
+							{#each [['read', 'Read'], ['interactive', 'Interactive'], ['source', 'Source']] as [mode, label]}
+								<button
+									class={action}
+									disabled={mode === 'read' && !data.rmd}
+									class:opacity-50={mode === 'read' && !data.rmd}
+									class:bg-bg={rmdMode === mode}
+									aria-pressed={rmdMode === mode}
+									onclick={() => (rmdMode = mode as typeof rmdMode)}>{label}</button
+								>
+							{/each}
+						</div>
+					{/if}
+					{#if data.file.history}
+						{#if data.file.kind === 'text'}<button
+								class={action}
+								title="Toggle blame"
+								aria-label="Toggle blame"
+								aria-pressed={blaming}
+								onclick={() => (blaming = !blaming)}><GitCommitHorizontal size={14} /></button
+							>{/if}
+						<button
+							class={action}
+							title="File history"
+							aria-label="File history"
+							aria-expanded={historyOpen}
+							onclick={() => (historyOpen = !historyOpen)}><History size={14} /></button
+						>
+					{/if}
+					{#if !activeTab?.pinned}<button
+							class={action}
+							title="Keep this preview open"
+							aria-label="Keep file open"
+							disabled={!workspace.ready}
+							onclick={() => workspace.open(data.course, data.path, true)}><Pin size={14} /></button
+						>{/if}
+					{#if data.file.note}<a class={action} href={data.file.note}
+							><BookOpen size={14} />Read note</a
+						>{/if}
+					{#if data.file.kind === 'text' || diff}<button
+							class={action}
+							disabled={!diff && sourceText === undefined}
+							onclick={copy}
+							>{#if copied}<Check size={14} />Copied{:else}<Copy size={14} />Copy{/if}</button
+						>{/if}
+					{#if data.file.download}
+						{#if data.file.kind === 'pdf' || data.file.kind === 'image'}<a
+								class={action}
+								href={data.file.download}
+								target="_blank"
+								rel="noopener noreferrer"><ArrowUpRight size={14} />Open</a
+							>{/if}
+						<a class={action} href={data.file.download} download={name}
+							><Download size={14} />Download</a
+						>
+					{/if}
+				</div>
+			{/if}
+		</header>
+	</div>
+	{#if copyFailed}<p class="px-3 py-2 text-xs text-muted" role="status">
+			Clipboard unavailable. Select and copy the code below.
+		</p>{/if}
+	{#if diff}<div
+			class="flex items-center gap-2 border-b border-border px-3 py-1.5 text-xs text-muted"
+		>
+			<button
+				class="flex shrink-0 items-center gap-1 text-accent"
+				onclick={() => {
+					diff = undefined;
+					selectedCommit = '';
+				}}><ArrowLeft size={12} />Back to file</button
+			>
+			<span class="truncate">{diff.commit.subject} · {diff.commit.id.slice(0, 7)}</span>
+		</div>{/if}
+	<div class="relative flex min-h-0 min-w-0 flex-1 overflow-hidden">
+		{#if data.file?.locked}
+			<div class="min-w-0 flex-1 overflow-auto p-4"><LockedContent /></div>
+		{:else if rmdMode === 'read' && data.rmd && !diff}
+			<div class="min-h-0 min-w-0 flex-1 overflow-auto bg-surface p-4 sm:p-8" bind:this={viewport}>
+				<article
+					class="rmd-reading prose mx-auto max-w-3xl rounded border border-border bg-bg p-5 shadow-sm sm:p-10 dark:prose-invert"
+					aria-label="Rendered worksheet"
+				>
+					<h1>{data.rmd.title}</h1>
+					{@html data.rmd.html}
+				</article>
+			</div>
+		{:else if rmdMode === 'interactive' && /\.rmd$/i.test(data.path) && data.file?.download && !diff}
+			<div class="min-h-0 min-w-0 flex-1">
+				{#key `${data.course}/${data.path}`}
+					{#await import('$lib/components/files/FileRmd.svelte')}
+						<p class="p-6 text-sm text-muted" role="status">Opening interactive worksheet…</p>
+					{:then component}
+						<component.default
+							url={data.file.download}
+							course={data.course}
+							path={data.path}
+							files={data.files}
+							onload={(text) => (sourceText = text)}
+						/>
+					{:catch}
+						<p class="p-6 text-sm text-muted" role="alert">
+							Could not open the interactive worksheet. Switch to Read or reload to try again.
+						</p>
+					{/await}
+				{/key}
+			</div>
+		{:else if data.file?.kind === 'text' || diff}
+			<div class="min-h-0 min-w-0 flex-1">
+				{#key `${data.course}/${data.path}/${diff?.commit.id ?? ''}`}
+					<FileCode
+						text={diff?.text}
+						url={data.file?.download}
+						onload={(text) => {
+							if (!diff) sourceText = text;
+						}}
+						filename={diff ? 'change.diff' : name}
+						blame={diff ? undefined : blame}
+						oncommit={(id) => {
+							selectedCommit = id;
+							historyOpen = true;
+						}}
+						onready={(element) => {
+							if (!diff) viewport = element;
+						}}
+					/>
+				{/key}
+			</div>
+		{:else}
+			<div class="file-content min-h-0 flex-1 overflow-auto" bind:this={viewport}>
+				{#if data.file?.kind === 'pdf'}
+					<iframe class="block h-full w-full border-0" title={name} src={data.file.download}
+					></iframe>
+				{:else if data.file?.kind === 'image'}
+					<div class="flex h-full justify-center bg-surface">
+						<img class="max-h-full max-w-full object-contain" src={data.file.download} alt={name} />
+					</div>
+				{:else if data.file}
+					<div
+						class="flex h-full flex-col items-center justify-center px-3 text-center text-sm text-muted"
+					>
+						<File class="mx-auto mb-3" size={28} />
+						<p>
+							{data.file.download
+								? 'No preview for this file type. Download it to open locally.'
+								: 'This file exceeds the hosting size limit and is not available for download.'}
+						</p>
+					</div>
+				{:else}
+					<ul class="m-0 list-none divide-y divide-border p-0" aria-label="Directory contents">
+						{#each data.entries ?? [] as entry (entry.path)}
+							<li>
+								<a
+									class="flex min-w-0 items-center gap-3 px-3 py-2.5 text-sm text-text no-underline hover:bg-surface"
+									href={fileRoute(data.course, entry.path)}
+									onclick={(event) => {
+										if (entry.file) workspace.activate(event, data.course, entry.path);
+									}}
+								>
+									<FileIcon name={entry.name} folder={!!entry.children} />
+									<span class="min-w-0 flex-1 truncate">{entry.name}</span><span
+										class="shrink-0 text-xs text-muted"
+										>{entry.file
+											? entry.file.locked
+												? 'Locked'
+												: fileSize(entry.file.size)
+											: `${entry.children?.length} items`}</span
+									>
+								</a>
+							</li>
+						{:else}<li class="p-4 text-sm text-muted">No browsable files in this course.</li>{/each}
+					</ul>
+				{/if}
+			</div>
+		{/if}
+		{#if data.file?.history}
+			{#key data.file.history}
+				<FileHistory
+					url={data.file.history}
+					bind:open={historyOpen}
+					bind:blaming
+					bind:selected={selectedCommit}
+					onblame={(value) => (blame = value)}
+					onview={(text, commit) => {
+						rememberPosition();
+						diff = { text, commit };
+					}}
+				/>
+			{/key}
+		{/if}
+	</div>
+	{#if data.file?.license}
+		<details class="shrink-0 border-t border-border px-3 text-xs text-muted">
+			<summary class="cursor-pointer py-1.5">{data.file.license.name} · Attribution</summary>
+			<LicenseNotice license={data.file.license} />
+		</details>
+	{/if}
+	<footer
+		class="flex shrink-0 items-center justify-between border-t border-border bg-surface px-3 py-1 text-[0.6875rem] text-muted"
+	>
+		<span
+			>{diff
+				? `${diff.text.split('\n').length} lines · Diff`
+				: sourceText !== undefined
+					? `${sourceText.split('\n').length} lines · UTF-8`
+					: data.file?.kind === 'pdf'
+						? 'PDF'
+						: data.file?.kind === 'image'
+							? 'Image'
+							: 'Files'}</span
+		>
+		<span
+			>{data.file
+				? `${fileSize(data.file.size)} · Read-only`
+				: `${data.entries?.length ?? 0} items`}</span
+		>
+	</footer>
+</div>
+
+<style>
+	.rmd-reading {
+		font-family: 'KaTeX_Main', Georgia, 'Times New Roman', serif;
+		line-height: 1.8;
+	}
+	.rmd-reading :global(:is(h1, h2, h3, h4, h5, h6)) {
+		font-family: inherit;
+	}
+	.rmd-reading :global(pre) {
+		white-space: pre-wrap;
+		overflow-wrap: anywhere;
+	}
+	.rmd-reading :global(img) {
+		margin-inline: auto;
+		background: white;
+	}
+</style>

package/site/src/routes/[course]/files/[...file]/+page.ts

@@ -0,0 +1,38 @@
+import { error } from '@sveltejs/kit';
+import {
+	directoryEntries,
+	fileIndexUrl,
+	fileTree,
+	type CourseFile,
+	type RmdPreview
+} from '$lib/files';
+import type { PageLoad } from './$types';
+
+// File routes share a static shell; only their catalog and selected assets are loaded.
+export const prerender = false;
+export const ssr = false;
+
+export const load: PageLoad = async ({ params, fetch }) => {
+	const response = await fetch(fileIndexUrl(params.course));
+	if (!response.ok) error(response.status === 404 ? 404 : 503, 'Files unavailable');
+	const files: CourseFile[] = await response.json();
+	const file = files.find((entry) => entry.path === params.file);
+	const entries = file ? undefined : directoryEntries(fileTree(files), params.file);
+	if (!file && !entries) error(404, 'File not found');
+	let rmd: RmdPreview | undefined;
+	if (file?.rmdPreview && !file.locked) {
+		const preview = await fetch(file.rmdPreview);
+		if (!preview.ok) error(503, 'Worksheet preview unavailable');
+		rmd = await preview.json();
+	}
+	return {
+		kind: 'file-browser' as const,
+		course: params.course,
+		path: params.file,
+		files,
+		file,
+		rmd,
+		entries,
+		toc: []
+	};
+};

package/site/src/routes/admin/access/+page.server.ts

@@ -0,0 +1,53 @@
+import { githubUsername } from '$lib/github-user';
+import { fail } from '@sveltejs/kit';
+import { requireOwner, revokeAccess } from '$lib/server/access-admin';
+import type { Actions, PageServerLoad } from './$types';
+import { sql } from 'drizzle-orm';
+import { database } from '../../../../database';
+import { siteAccess } from '../../../../database/schema';
+
+export const prerender = false;
+
+export const load: PageServerLoad = async (event) => {
+	const env = await requireOwner(event);
+	const grants = await database(env.DB)
+		.select()
+		.from(siteAccess)
+		.orderBy(sql`${siteAccess.githubLogin} COLLATE NOCASE`);
+	return { grants, ownerId: env.OWNER_GITHUB_ID };
+};
+
+export const actions: Actions = {
+	add: async (event) => {
+		const env = await requireOwner(event);
+		const form = await event.request.formData();
+		// The authenticated owner may grant any GitHub ID. The browser resolves the
+		// profile; the ID controls access and the login is only a display label.
+		const id = form.get('githubId');
+		const login = form.get('githubLogin');
+		if (
+			typeof id !== 'string' ||
+			!/^[1-9]\d*$/.test(id) ||
+			!Number.isSafeInteger(Number(id)) ||
+			typeof login !== 'string' ||
+			!githubUsername.test(login)
+		)
+			return fail(400, { error: 'Resolve a valid GitHub account before adding access.' });
+		if (id === env.OWNER_GITHUB_ID)
+			return fail(400, { error: 'You already have permanent owner access.' });
+		await database(env.DB)
+			.insert(siteAccess)
+			.values({ githubId: id, githubLogin: login, createdAt: Date.now() })
+			.onConflictDoUpdate({ target: siteAccess.githubId, set: { githubLogin: login } });
+		return { message: `@${login} can now sign in and read all courses.` };
+	},
+	revoke: async (event) => {
+		const env = await requireOwner(event);
+		const id = (await event.request.formData()).get('githubId');
+		if (typeof id !== 'string' || !/^[1-9]\d*$/.test(id))
+			return fail(400, { error: 'Invalid GitHub account ID.' });
+		if (id === env.OWNER_GITHUB_ID) return fail(400, { error: 'Owner access cannot be revoked.' });
+		await revokeAccess(env, id);
+		return { message: 'Access revoked. Existing sessions have been signed out.' };
+	}
+};