co-maintainer 0.4.0-beta.1

package/dist/src/server/pages/settings.js

@@ -0,0 +1,337 @@
+import { html, layout, skSlot, text } from "./layout.js";
+import { VERSION } from "../../version.js";
+const SOURCE_URL = "https://github.com/GroophyLifefor/co-maintainer";
+export function renderSettings(username, config, webhookUrl) {
+    const aiOk = Boolean(config.ai && config.ai !== "none" && config.token);
+    const ghOk = Boolean(config.auth === "gh" || (config.auth === "pat" && config.githubPat));
+    const appOk = Boolean(config.githubAppId && config.githubAppPrivateKey);
+    return html(layout({
+        title: "Settings · co-maintainer",
+        username,
+        active: "settings",
+        body: `<div class="wrap side">
+  <aside>
+    <p class="lbl">Settings</p>
+    <nav>
+      <a href="/settings" class="on">Models and keys</a>
+      <a href="#github">GitHub</a>
+      <a href="#defaults">Defaults</a>
+      <a href="#server">Server</a>
+      <a href="#remote">Remote review</a>
+      <a href="#access">Access</a>
+      <a href="#about">About</a>
+    </nav>
+  </aside>
+  <div>
+    <div class="pagehead"><div><h1>Settings</h1>
+      <p class="lead">Used by every repository unless it overrides them.</p></div></div>
+    <div class="card" data-async>
+      ${skSlot()}
+      <div class="hd"><h2>Models and API key</h2>
+        <span class="st ${aiOk ? "ok" : "warn"}" style="margin-left:auto">${aiOk ? "Configured" : "Not set"}</span></div>
+      <div class="bd">
+        <div class="field"><label>Provider</label>
+          <select id="ai">
+            <option value="none"${!config.ai || config.ai === "none" ? " selected" : ""}>None</option>
+            <option value="openrouter"${config.ai === "openrouter" ? " selected" : ""}>OpenRouter</option>
+            <option value="hetzner"${config.ai === "hetzner" ? " selected" : ""}>Hetzner</option>
+          </select></div>
+        <div class="field"><label>API key</label>
+          <input id="token" type="password" placeholder="Leave blank to keep the current key">
+          <div class="hint">${config.token ? "A key is saved" : "No key saved"}</div></div>
+        <div class="two" style="max-width:none">
+          <div class="field"><label>Main model</label>
+            <input id="high" value="${text(config.highModel ?? "")}">
+            <div class="hint">Writes reviews</div></div>
+          <div class="field"><label>Cheap model</label>
+            <input id="low" value="${text(config.lowModel ?? "")}">
+            <div class="hint">Reads history when setting up a repository</div></div>
+        </div>
+      </div>
+      <div class="ft"><button class="primary" id="save-ai">Save</button></div>
+    </div>
+    <div class="card" id="github" data-async>
+      ${skSlot()}
+      <div class="hd"><h2>GitHub</h2>
+        <span class="st ${ghOk ? "ok" : "warn"}" style="margin-left:auto">${ghOk ? "Configured" : "Not set"}</span></div>
+      <div class="bd">
+        <div class="field"><label>Access</label>
+          <select id="auth">
+            <option value="gh"${config.auth !== "pat" ? " selected" : ""}>gh CLI</option>
+            <option value="pat"${config.auth === "pat" ? " selected" : ""}>Personal access token</option>
+          </select></div>
+        <div class="field"><label>Personal access token</label>
+          <input id="pat" type="password" placeholder="Leave blank to keep the current token"></div>
+      </div>
+      <div class="ft"><button class="primary" id="save-gh">Save</button></div>
+    </div>
+    <div class="card" data-async>
+      ${skSlot()}
+      <div class="hd"><h2>GitHub App</h2>
+        <span class="st ${appOk ? "ok" : "warn"}" style="margin-left:auto">${appOk ? "Configured" : "Not set"}</span></div>
+      <div class="bd">
+        <p class="muted" style="margin:0 0 16px">Needed to post reviews on pull requests.</p>
+        <div class="two" style="max-width:none">
+          <div class="field"><label>App ID</label>
+            <input id="app-id" value="${text(config.githubAppId ?? "")}"></div>
+          <div class="field"><label>Webhook address</label>
+            <input id="webhook-url" value="${text(webhookUrl)}">
+            <div class="hint">Public URL GitHub uses to send webhook events</div></div>
+        </div>
+        <div class="field wide"><label>Private key</label>
+          <textarea id="app-key" class="mono pem" rows="8" spellcheck="false"
+            autocomplete="off" autocapitalize="off"
+            placeholder="-----BEGIN RSA PRIVATE KEY-----
+...
+-----END RSA PRIVATE KEY-----
+Leave blank to keep the current key"></textarea></div>
+        <div class="field"><label>Webhook secret</label>
+          <input id="hook-secret" type="password" placeholder="Leave blank to keep the current secret"></div>
+      </div>
+      <div class="ft"><button class="primary" id="save-app">Save</button></div>
+    </div>
+    <div class="card" id="defaults" data-async>
+      ${skSlot()}
+      <div class="hd"><h2>Defaults for new repositories</h2></div>
+      <div class="bd">
+        <div class="two" style="max-width:none">
+          <div class="field"><label>Months of pull requests</label>
+            <input id="def-months" value="${text(config.defaults?.maxPrMonths ?? "")}"></div>
+          <div class="field"><label>Commits</label>
+            <input id="def-commits" value="${text(config.defaults?.maxCommits ?? "")}"></div>
+          <div class="field"><label>Max lines per pull request</label>
+            <input id="def-lines" value="${text(config.defaults?.maxPullRequestChangeLines ?? "")}"></div>
+        </div>
+      </div>
+      <div class="ft"><button class="primary" id="save-def">Save</button></div>
+    </div>
+    <div class="card" id="server" data-async>
+      ${skSlot()}
+      <div class="hd"><h2>Job queue</h2></div>
+      <div class="bd">
+        <div class="field"><label>Max concurrent jobs</label>
+          <input id="max-jobs" value="${text(config.maxConcurrentJobs ?? "")}" placeholder="No limit">
+          <div class="hint">Cap how many background jobs run at once across init, remake, and review. Leave blank for no limit.</div></div>
+        <div class="two" style="max-width:none;margin-top:16px">
+          <div class="field"><label>Remote sync timeout (seconds)</label>
+            <input id="remote-timeout" value="${text(config.remoteSyncTimeoutSeconds ?? "")}" placeholder="10"></div>
+          <div class="field"><label>Max remote reviews per token</label>
+            <input id="remote-per-token" value="${text(config.maxConcurrentRemoteReviewsPerToken ?? "")}" placeholder="No limit"></div>
+          <div class="field"><label>Max tool output chars</label>
+            <input id="remote-tool-chars" value="${text(config.remoteToolOutputMaxChars ?? "")}" placeholder="500000"></div>
+        </div>
+      </div>
+      <div class="ft"><button class="primary" id="save-server">Save</button></div>
+    </div>
+    <div class="card" id="remote" data-async>
+      ${skSlot()}
+      <div class="hd"><h2>Remote review tokens</h2></div>
+      <div class="bd">
+        <p class="muted" style="margin:0 0 16px">Bearer tokens for <code>co-maintainer review --remote</code>. The secret is shown once when created.</p>
+        <div id="remote-token-list" class="muted">Loading…</div>
+        <div class="two" style="max-width:none;margin-top:16px">
+          <div class="field"><label>New token name</label>
+            <input id="remote-token-name" placeholder="e.g. laptop"></div>
+        </div>
+      </div>
+      <div class="ft">
+        <button class="primary" id="create-remote-token">Create token</button>
+      </div>
+    </div>
+    <div class="card" id="access" data-async>
+      ${skSlot()}
+      <div class="hd"><h2>Sign-in</h2></div>
+      <div class="bd">
+        <p class="muted" style="margin:0 0 16px">A <code>--disable-auth</code>/<code>--enable-auth</code> flag on <code>serve</code> overrides these for that run.</p>
+        <div class="field wide"><label><input type="checkbox" id="password-auth"${config.passwordAuthDisabled ? "" : " checked"}> Password sign-in</label>
+          <div class="hint">Set with <code>--password</code> when you start serve, or printed to the console if you omit the flag.</div></div>
+        <div class="field wide"><label><input type="checkbox" id="github-auth"${config.githubAuthEnabled ? " checked" : ""}> GitHub sign-in</label></div>
+        <div class="two" style="max-width:none">
+          <div class="field"><label>OAuth client ID</label>
+            <input id="oauth-client-id" value="${text(config.githubOAuthClientId ?? "")}"></div>
+          <div class="field"><label>OAuth client secret</label>
+            <input id="oauth-client-secret" type="password" placeholder="${config.githubOAuthClientSecret
+            ? "Leave blank to keep the current secret"
+            : ""}"></div>
+        </div>
+        <div class="field wide"><label>Allowed GitHub username</label>
+          <input id="oauth-allowed-user" value="${text(config.githubOAuthAllowedUser ?? "")}">
+          <div class="hint">Only this GitHub account can sign in through OAuth.</div></div>
+      </div>
+      <div class="ft"><button class="primary" id="save-access">Save</button></div>
+    </div>
+    <div class="card" id="about">
+      <div class="hd"><h2>About</h2></div>
+      <div class="bd">
+        <table style="margin:-18px -18px 0;width:calc(100% + 36px)">
+          <tbody>
+            <tr><td style="width:200px" class="muted">Version</td>
+              <td>${text(VERSION)}</td></tr>
+            <tr><td class="muted">Repository</td>
+              <td><a href="${SOURCE_URL}">${text(SOURCE_URL.replace("https://", ""))}</a></td></tr>
+            <tr><td class="muted">Developed by</td>
+              <td>Murat Kirazkaya</td></tr>
+          </tbody>
+        </table>
+      </div>
+    </div>
+  </div>
+</div>
+<script>
+function save(btn, body) {
+  run(btn, btn.closest("[data-async]"), async function() {
+    await api("PUT", "/api/settings", body);
+    location.reload();
+  });
+}
+document.getElementById("save-ai").addEventListener("click", function() {
+  save(this, {
+    ai: document.getElementById("ai").value,
+    token: document.getElementById("token").value,
+    highModel: document.getElementById("high").value,
+    lowModel: document.getElementById("low").value
+  });
+});
+document.getElementById("save-gh").addEventListener("click", function() {
+  save(this, {
+    auth: document.getElementById("auth").value,
+    githubPat: document.getElementById("pat").value
+  });
+});
+document.getElementById("save-app").addEventListener("click", function() {
+  save(this, {
+    githubAppId: document.getElementById("app-id").value,
+    githubAppPrivateKey: document.getElementById("app-key").value,
+    githubWebhookSecret: document.getElementById("hook-secret").value,
+    webhookUrl: document.getElementById("webhook-url").value
+  });
+});
+document.getElementById("save-access").addEventListener("click", function() {
+  save(this, {
+    passwordAuthDisabled: !document.getElementById("password-auth").checked,
+    githubAuthEnabled: document.getElementById("github-auth").checked,
+    githubOAuthClientId: document.getElementById("oauth-client-id").value,
+    githubOAuthClientSecret: document.getElementById("oauth-client-secret").value,
+    githubOAuthAllowedUser: document.getElementById("oauth-allowed-user").value
+  });
+});
+function positiveOrNull(raw, label) {
+  if (raw === "") return { ok: true, value: null };
+  var n = Number(raw);
+  if (!Number.isInteger(n) || n <= 0) {
+    return { ok: false, message: label + " must be a positive whole number, or blank." };
+  }
+  return { ok: true, value: n };
+}
+document.getElementById("save-server").addEventListener("click", function() {
+  var card = this.closest("[data-async]");
+  var jobs = positiveOrNull(document.getElementById("max-jobs").value.trim(), "Max concurrent jobs");
+  if (!jobs.ok) { fail(card, jobs.message, function () {}); return; }
+  var timeout = positiveOrNull(document.getElementById("remote-timeout").value.trim(), "Remote sync timeout");
+  if (!timeout.ok) { fail(card, timeout.message, function () {}); return; }
+  var perToken = positiveOrNull(document.getElementById("remote-per-token").value.trim(), "Max remote reviews per token");
+  if (!perToken.ok) { fail(card, perToken.message, function () {}); return; }
+  var toolChars = positiveOrNull(document.getElementById("remote-tool-chars").value.trim(), "Max tool output chars");
+  if (!toolChars.ok) { fail(card, toolChars.message, function () {}); return; }
+  save(this, {
+    maxConcurrentJobs: jobs.value,
+    remoteSyncTimeoutSeconds: timeout.value,
+    maxConcurrentRemoteReviewsPerToken: perToken.value,
+    remoteToolOutputMaxChars: toolChars.value
+  });
+});
+function escHtml(s) {
+  return String(s).replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+async function loadRemoteTokens() {
+  var el = document.getElementById("remote-token-list");
+  try {
+    var rows = await api("GET", "/api/remote-tokens");
+    if (!rows.length) {
+      el.innerHTML = "<p>No tokens yet.</p>";
+      return;
+    }
+    el.innerHTML = "<table><thead><tr><th>Name</th><th>Status</th><th class=\\"num\\">Reviews (30d)</th><th class=\\"num\\">Cost (30d)</th><th></th></tr></thead><tbody>" +
+      rows.map(function(r) {
+        return "<tr><td>" + escHtml(r.name) + "</td><td>" + (r.active ? "Active" : "Inactive") + "</td>" +
+          "<td class=\\"num\\">" + r.reviews30d + "</td><td class=\\"num\\">" + r.cost30d + "</td>" +
+          "<td><button type=\\"button\\" class=\\"btn sm\\" data-token-id=\\"" + escHtml(r.id) + "\\" data-active=\\"" + r.active + "\\">" +
+          (r.active ? "Deactivate" : "Activate") + "</button> " +
+          "<button type=\\"button\\" class=\\"btn sm\\" data-delete-token=\\"" + escHtml(r.id) + "\\">Delete</button></td></tr>";
+      }).join("") + "</tbody></table>";
+    el.querySelectorAll("[data-token-id]").forEach(function(btn) {
+      btn.addEventListener("click", function() {
+        var id = btn.getAttribute("data-token-id");
+        var active = btn.getAttribute("data-active") === "true";
+        run(btn, cardFor(btn), async function() {
+          await api("PATCH", "/api/remote-tokens/" + id, { active: !active });
+          await loadRemoteTokens();
+        });
+      });
+    });
+    el.querySelectorAll("[data-delete-token]").forEach(function(btn) {
+      btn.addEventListener("click", function() {
+        if (!confirm("Delete this token? In-flight remote reviews will be canceled.")) return;
+        var id = btn.getAttribute("data-delete-token");
+        run(btn, cardFor(btn), async function() {
+          await api("DELETE", "/api/remote-tokens/" + id);
+          await loadRemoteTokens();
+        });
+      });
+    });
+  } catch (e) {
+    el.textContent = "Could not load tokens.";
+  }
+}
+function cardFor(btn) { return btn.closest("[data-async]"); }
+loadRemoteTokens();
+document.getElementById("create-remote-token").addEventListener("click", function() {
+  var name = document.getElementById("remote-token-name").value.trim();
+  if (!name) {
+    fail(this.closest("[data-async]"), "Enter a name for the token.", function () {});
+    return;
+  }
+  run(this, this.closest("[data-async]"), async function() {
+    var created = await api("POST", "/api/remote-tokens", { name: name });
+    prompt("Copy this token now — it will not be shown again:", created.token);
+    document.getElementById("remote-token-name").value = "";
+    await loadRemoteTokens();
+  });
+});
+document.getElementById("save-def").addEventListener("click", function() {
+  var card = this.closest("[data-async]");
+  var positiveInt = function(id, label) {
+    var v = document.getElementById(id).value.trim();
+    if (v === "") return { ok: true, value: null };
+    var n = Number(v);
+    if (!Number.isInteger(n) || n <= 0) {
+      return { ok: false, message: label + " must be a positive whole number, or blank." };
+    }
+    return { ok: true, value: n };
+  };
+  var months = positiveInt("def-months", "Max PR age (months)");
+  if (!months.ok) {
+    fail(card, months.message, function () {});
+    return;
+  }
+  var commits = positiveInt("def-commits", "Max commits");
+  if (!commits.ok) {
+    fail(card, commits.message, function () {});
+    return;
+  }
+  var lines = positiveInt("def-lines", "Max changed lines");
+  if (!lines.ok) {
+    fail(card, lines.message, function () {});
+    return;
+  }
+  save(this, {
+    defaults: {
+      maxPrMonths: months.value,
+      maxCommits: commits.value,
+      maxPullRequestChangeLines: lines.value
+    }
+  });
+});
+</script>`,
+    }));
+}

package/dist/src/server/pages/setup.d.ts

@@ -0,0 +1,5 @@
+export declare function renderSetup(username: string, setup: {
+    ai: boolean;
+    github: boolean;
+    app: boolean;
+}): Response;

package/dist/src/server/pages/setup.js

@@ -0,0 +1,38 @@
+import { html, layout, text } from "./layout.js";
+export function renderSetup(username, setup) {
+    const row = (done, now, n, title, detail) => `<li class="${done ? "done" : now ? "now" : ""}">
+      <span class="n">${done ? "✓" : n}</span>
+      <div class="body">
+        <b>${title}</b>
+        <span class="muted">${text(detail)}</span>
+      </div>
+      <a class="btn sm" href="/settings">Change</a>
+    </li>`;
+    const aiDetail = setup.ai
+        ? "An AI provider and key are saved"
+        : "Add a provider and API key in Settings";
+    const ghDetail = setup.github
+        ? "GitHub access is configured"
+        : "Use gh or a personal access token";
+    const appDetail = setup.app
+        ? "The GitHub App is configured"
+        : "Needed to post reviews on pull requests";
+    return html(layout({
+        title: "Get started · co-maintainer",
+        username,
+        body: `<div class="wrap" style="max-width:660px">
+  <div class="pagehead">
+    <div><h1>Get started</h1>
+      <p class="lead">Two things now, then add your first repository.</p></div>
+  </div>
+  <div class="card"><div class="bd">
+    <ul class="steps">
+      ${row(setup.ai, !setup.ai, "1", "Models and API key", aiDetail)}
+      ${row(setup.github, setup.ai && !setup.github, "2", "GitHub access", ghDetail)}
+      ${row(setup.app, setup.ai && setup.github && !setup.app, "3", "GitHub App", appDetail)}
+    </ul>
+  </div></div>
+  <p class="muted" style="font-size:13px">Ready? <a href="/repos/new">Add a repository</a>.</p>
+</div>`,
+    }));
+}

package/dist/src/server/pages/styles.d.ts

@@ -0,0 +1,2 @@
+/** Generated from src/server/pages/styles.css by scripts/embed_assets.mjs — do not edit. */
+export declare const styles = ":root {\n  --bg: #f6f6f7;\n  --card: #fff;\n  --border: #e2e2e4;\n  --border2: #ededef;\n  --text: #1f2124;\n  --muted: #6a6f75;\n  --dim: #8b9096;\n  --accent: #80c580;\n  --accent-d: #6cae6c;\n  --link: #0b5cd5;\n  --green: #1a9d5a;\n  --amber: #c98a00;\n  --red: #cf3c3c;\n  --mono: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n}\n* {\n  box-sizing: border-box;\n}\nbody {\n  margin: 0;\n  background: var(--bg);\n  color: var(--text);\n  font:\n    14px/1.5 -apple-system,\n    BlinkMacSystemFont,\n    \"Segoe UI\",\n    Roboto,\n    Helvetica,\n    Arial,\n    sans-serif;\n}\na {\n  color: var(--link);\n  text-decoration: none;\n}\na:hover {\n  text-decoration: underline;\n}\ncode,\n.mono {\n  font-family: var(--mono);\n  font-size: 0.9em;\n}\n\n/* top bar */\n.top {\n  background: #fff;\n  border-bottom: 1px solid var(--border);\n}\n.top .in {\n  max-width: 1100px;\n  margin: 0 auto;\n  padding: 0 24px;\n  height: 56px;\n  display: flex;\n  align-items: center;\n  gap: 12px;\n}\n.logo {\n  display: flex;\n  align-items: center;\n  gap: 9px;\n  font-weight: 600;\n  font-size: 15px;\n  color: var(--text);\n}\n.logo:hover {\n  text-decoration: none;\n}\n.logo img {\n  height: 32px;\n  width: 32px;\n  display: block;\n  border-radius: 5px;\n  image-rendering: pixelated;\n  object-fit: cover;\n}\n.brand {\n  width: 180px;\n  height: auto;\n  display: block;\n  margin: 0 0 14px;\n  border-radius: 8px;\n  image-rendering: pixelated;\n}\n.top .right {\n  margin-left: auto;\n  display: flex;\n  align-items: center;\n  gap: 18px;\n  font-size: 13px;\n  color: var(--muted);\n}\n\n/* layout */\n.wrap {\n  max-width: 1100px;\n  margin: 0 auto;\n  padding: 28px 24px 72px;\n}\n.wrap.side {\n  display: grid;\n  grid-template-columns: 196px 1fr;\n  gap: 32px;\n}\naside nav {\n  display: flex;\n  flex-direction: column;\n  gap: 1px;\n  position: sticky;\n  top: 24px;\n}\naside nav a {\n  padding: 7px 12px;\n  border-radius: 4px;\n  color: var(--text);\n  font-size: 14px;\n}\naside nav a:hover {\n  background: #ededef;\n  text-decoration: none;\n}\naside nav a.on {\n  background: #fff;\n  box-shadow: inset 2px 0 0 var(--accent);\n  border: 1px solid var(--border);\n  font-weight: 500;\n}\naside .lbl {\n  font-size: 11px;\n  text-transform: uppercase;\n  letter-spacing: 0.06em;\n  color: var(--dim);\n  padding: 0 12px;\n  margin: 0 0 8px;\n}\n\nh1 {\n  font-size: 22px;\n  font-weight: 600;\n  margin: 0;\n}\nh2 {\n  font-size: 15px;\n  font-weight: 600;\n  margin: 0;\n}\np.lead {\n  color: var(--muted);\n  margin: 6px 0 0;\n  font-size: 14px;\n}\n.pagehead {\n  display: flex;\n  align-items: center;\n  gap: 16px;\n  margin-bottom: 22px;\n}\n.pagehead .actions {\n  margin-left: auto;\n  display: flex;\n  gap: 8px;\n}\n\n.card {\n  background: var(--card);\n  border: 1px solid var(--border);\n  border-radius: 6px;\n  margin-bottom: 18px;\n}\n.card .hd {\n  padding: 14px 18px;\n  border-bottom: 1px solid var(--border);\n  display: flex;\n  align-items: center;\n  gap: 10px;\n}\n.card .bd {\n  padding: 18px;\n}\n.card .bd.flush {\n  padding: 0;\n}\n.card .ft {\n  padding: 12px 18px;\n  border-top: 1px solid var(--border);\n  background: #fbfbfc;\n  display: flex;\n  align-items: center;\n  gap: 10px;\n  font-size: 13px;\n  color: var(--muted);\n  border-radius: 0 0 6px 6px;\n}\n\n/* table */\ntable {\n  width: 100%;\n  border-collapse: collapse;\n}\nth {\n  text-align: left;\n  font-size: 12px;\n  font-weight: 600;\n  color: var(--muted);\n  padding: 10px 18px;\n  border-bottom: 1px solid var(--border);\n  background: #fbfbfc;\n}\ntd {\n  padding: 14px 18px;\n  border-bottom: 1px solid var(--border2);\n  font-size: 14px;\n}\ntr:last-child td {\n  border-bottom: none;\n}\ntbody tr:hover {\n  background: #fafafb;\n}\n.num {\n  text-align: right;\n  font-variant-numeric: tabular-nums;\n}\n\n/* status text, not badges */\n.st {\n  display: inline-flex;\n  align-items: center;\n  gap: 6px;\n  font-size: 13px;\n}\n.st::before {\n  content: \"\";\n  width: 7px;\n  height: 7px;\n  border-radius: 50%;\n  background: var(--dim);\n}\n.st.ok::before {\n  background: var(--green);\n}\n.st.warn::before {\n  background: var(--amber);\n}\n.st.err::before {\n  background: var(--red);\n}\n.st.run::before {\n  background: var(--link);\n}\n\n/* buttons */\nbutton,\n.btn {\n  font: inherit;\n  font-size: 14px;\n  padding: 6px 14px;\n  border-radius: 4px;\n  border: 1px solid var(--border);\n  background: #fff;\n  color: var(--text);\n  cursor: pointer;\n  display: inline-flex;\n  align-items: center;\n  gap: 7px;\n}\nbutton:hover,\n.btn:hover {\n  background: #f4f4f5;\n  text-decoration: none;\n}\n.btn.primary,\nbutton.primary {\n  background: var(--accent);\n  border-color: var(--accent);\n  color: #fff;\n  font-weight: 500;\n}\n.btn.primary:hover,\nbutton.primary:hover {\n  background: var(--accent-d);\n  border-color: var(--accent-d);\n}\n.btn.sm {\n  padding: 4px 10px;\n  font-size: 13px;\n}\n.btn.link {\n  border: none;\n  background: none;\n  color: var(--link);\n  padding: 0;\n}\n.btn.link:hover {\n  background: none;\n  text-decoration: underline;\n}\nbutton[disabled] {\n  opacity: 0.5;\n  cursor: not-allowed;\n}\n\n/* toggle */\n.tg {\n  position: relative;\n  width: 38px;\n  height: 22px;\n  border-radius: 22px;\n  background: #cfd2d6;\n  border: none;\n  padding: 0;\n  cursor: pointer;\n  transition: background 0.12s ease;\n}\n.tg::after {\n  content: \"\";\n  position: absolute;\n  top: 2px;\n  left: 2px;\n  width: 18px;\n  height: 18px;\n  border-radius: 50%;\n  background: #fff;\n  transition: left 0.12s ease;\n  box-shadow: 0 1px 2px rgba(0, 0, 0, 0.2);\n}\n.tg.on {\n  background: var(--accent);\n}\n.tg.on::after {\n  left: 18px;\n}\n.tg:hover {\n  filter: brightness(0.97);\n}\n\n/* forms */\nlabel {\n  display: block;\n  font-size: 13px;\n  font-weight: 500;\n  margin-bottom: 6px;\n}\ninput,\nselect,\ntextarea {\n  width: 100%;\n  background: #fff;\n  border: 1px solid #cfd2d6;\n  border-radius: 4px;\n  color: var(--text);\n  padding: 8px 10px;\n  font: inherit;\n  font-size: 14px;\n}\ninput:focus,\nselect:focus,\ntextarea:focus {\n  outline: none;\n  border-color: var(--accent);\n  box-shadow: 0 0 0 2px rgba(128, 197, 128, 0.35);\n}\ntextarea {\n  resize: vertical;\n  line-height: 1.35;\n}\n.pem {\n  min-height: 150px;\n}\n.field {\n  margin-bottom: 18px;\n  max-width: 420px;\n}\n.field.wide {\n  max-width: none;\n}\n.hint {\n  font-size: 13px;\n  color: var(--muted);\n  margin-top: 6px;\n  font-weight: 400;\n}\n.two {\n  display: grid;\n  grid-template-columns: 1fr 1fr;\n  gap: 0 24px;\n}\n\n/* bits */\n.muted {\n  color: var(--muted);\n}\n.dim {\n  color: var(--dim);\n}\n.big {\n  font-size: 26px;\n  font-weight: 600;\n  letter-spacing: -0.01em;\n}\n.kfig {\n  display: flex;\n  gap: 44px;\n}\n.kfig .k {\n  font-size: 13px;\n  color: var(--muted);\n  margin-bottom: 2px;\n}\n.notice {\n  background: #f3faf3;\n  border: 1px solid #cfe6cf;\n  border-radius: 6px;\n  padding: 14px 18px;\n  display: flex;\n  align-items: center;\n  gap: 14px;\n  margin-bottom: 18px;\n}\n.notice.info {\n  background: #f2f7ff;\n  border-color: #cfe0fb;\n}\n.notice.bad {\n  background: #fdf3f3;\n  border-color: #f3d0d0;\n}\n.notice .txt {\n  flex: 1;\n}\n.notice b {\n  font-weight: 600;\n}\n.notice .dismiss-worth {\n  margin-left: auto;\n  border: 0;\n  background: transparent;\n  color: var(--muted);\n  padding: 0 4px;\n  font-size: 20px;\n  line-height: 1;\n  cursor: pointer;\n}\n.notice .dismiss-worth:hover {\n  background: transparent;\n  color: var(--text);\n}\n.markdown > :first-child {\n  margin-top: 0;\n}\n.markdown > :last-child {\n  margin-bottom: 0;\n}\n.markdown p,\n.markdown h1,\n.markdown h2,\n.markdown h3,\n.markdown ul,\n.markdown ol,\n.markdown pre {\n  margin: 0 0 12px;\n}\n.markdown h1,\n.markdown h2,\n.markdown h3 {\n  font-size: 15px;\n}\n.markdown ul,\n.markdown ol {\n  padding-left: 22px;\n}\n.markdown pre {\n  overflow-x: auto;\n  padding: 10px 12px;\n  border-radius: 4px;\n  background: #f1f2f3;\n  font-family: var(--mono);\n  font-size: 13px;\n  white-space: pre;\n}\n.markdown code {\n  padding: 1px 4px;\n  border-radius: 3px;\n  background: #f1f2f3;\n}\n.markdown pre code {\n  padding: 0;\n  background: transparent;\n}\n.log {\n  background: #1f2124;\n  color: #e6e6e6;\n  border-radius: 6px;\n  padding: 14px 16px;\n  font-family: var(--mono);\n  font-size: 12.5px;\n  line-height: 1.7;\n  max-height: 320px;\n  overflow: auto;\n  white-space: pre-wrap;\n}\n.log .t {\n  color: #8b9096;\n}\n.crumbs {\n  font-size: 13px;\n  color: var(--muted);\n  margin-bottom: 14px;\n}\n.pager {\n  display: flex;\n  align-items: center;\n  gap: 10px;\n  padding: 12px 18px;\n  border-top: 1px solid var(--border);\n  font-size: 13px;\n  color: var(--muted);\n}\n.pager .sp {\n  margin-left: auto;\n}\n.empty {\n  padding: 56px 24px;\n  text-align: center;\n  color: var(--muted);\n}\n.empty h2 {\n  margin-bottom: 6px;\n}\n.steps {\n  list-style: none;\n  padding: 0;\n  margin: 0;\n}\n.steps li {\n  display: flex;\n  gap: 14px;\n  padding: 16px 0;\n  border-bottom: 1px solid var(--border2);\n}\n.steps li:last-child {\n  border-bottom: none;\n}\n.steps .n {\n  width: 24px;\n  height: 24px;\n  border-radius: 50%;\n  background: #ededef;\n  color: var(--muted);\n  display: flex;\n  align-items: center;\n  justify-content: center;\n  font-size: 12px;\n  font-weight: 600;\n  flex: none;\n}\n.steps li.done .n {\n  background: var(--green);\n  color: #fff;\n}\n.steps li.now .n {\n  background: var(--accent);\n  color: #fff;\n}\n.steps .body {\n  flex: 1;\n}\n.steps .body b {\n  display: block;\n  font-weight: 600;\n  margin-bottom: 2px;\n}\n\nbutton,\n.btn,\n.tg,\n.tg::after,\ntbody tr {\n  transition:\n    background 0.12s ease,\n    border-color 0.12s ease,\n    filter 0.12s ease,\n    left 0.12s ease,\n    color 0.12s ease;\n}\n:focus-visible {\n  outline: 2px solid var(--accent);\n  outline-offset: 2px;\n}\n\n#toasts {\n  position: fixed;\n  right: 20px;\n  bottom: 20px;\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n  z-index: 20;\n  max-width: 360px;\n}\n.toast {\n  background: #1f2124;\n  color: #fff;\n  border-radius: 6px;\n  padding: 10px 14px;\n  font-size: 13px;\n  box-shadow: 0 8px 24px rgba(0, 0, 0, 0.18);\n}\n.fail {\n  margin: 12px 18px;\n  padding: 12px 14px;\n  background: #fdf3f3;\n  border: 1px solid #f3d0d0;\n  border-radius: 6px;\n  display: flex;\n  align-items: center;\n  gap: 12px;\n  font-size: 13px;\n}\n.fail p {\n  margin: 0;\n  flex: 1;\n}\n\n.sk-slot {\n  display: none;\n  padding: 18px;\n}\n.sk,\n.sk-row {\n  height: 12px;\n  background: #ededef;\n  border-radius: 4px;\n  margin-bottom: 10px;\n}\n.sk-row {\n  height: 36px;\n}\n[data-async].busy > :not(.sk-slot):not([data-fail]) {\n  visibility: hidden;\n}\n[data-async].busy > .sk-slot {\n  display: block !important;\n  visibility: visible;\n}\n\n@media (prefers-reduced-motion: reduce) {\n  *,\n  *::before,\n  *::after {\n    animation: none !important;\n    transition: none !important;\n  }\n}\n.bars {\n  display: flex;\n  align-items: flex-end;\n  gap: 2px;\n  height: 56px;\n}\n.bars i {\n  flex: 1 1 0;\n  min-width: 2px;\n  align-self: stretch;\n  background-image: linear-gradient(\n    to top,\n    var(--bar, var(--accent)) var(--h),\n    transparent var(--h)\n  );\n}\n.bars i:hover {\n  --bar: var(--accent-d);\n  background-color: var(--border2);\n}\n.trend {\n  font-size: 12px;\n  margin-top: 3px;\n}\n.trend.up {\n  color: var(--green);\n}\n.trend.down {\n  color: var(--red);\n}\n.kfig.wrap4 {\n  flex-wrap: wrap;\n  gap: 28px 44px;\n}\n";

package/dist/src/server/pages/styles.js

@@ -0,0 +1,2 @@
+/** Generated from src/server/pages/styles.css by scripts/embed_assets.mjs — do not edit. */
+export const styles = ":root {\n  --bg: #f6f6f7;\n  --card: #fff;\n  --border: #e2e2e4;\n  --border2: #ededef;\n  --text: #1f2124;\n  --muted: #6a6f75;\n  --dim: #8b9096;\n  --accent: #80c580;\n  --accent-d: #6cae6c;\n  --link: #0b5cd5;\n  --green: #1a9d5a;\n  --amber: #c98a00;\n  --red: #cf3c3c;\n  --mono: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;\n}\n* {\n  box-sizing: border-box;\n}\nbody {\n  margin: 0;\n  background: var(--bg);\n  color: var(--text);\n  font:\n    14px/1.5 -apple-system,\n    BlinkMacSystemFont,\n    \"Segoe UI\",\n    Roboto,\n    Helvetica,\n    Arial,\n    sans-serif;\n}\na {\n  color: var(--link);\n  text-decoration: none;\n}\na:hover {\n  text-decoration: underline;\n}\ncode,\n.mono {\n  font-family: var(--mono);\n  font-size: 0.9em;\n}\n\n/* top bar */\n.top {\n  background: #fff;\n  border-bottom: 1px solid var(--border);\n}\n.top .in {\n  max-width: 1100px;\n  margin: 0 auto;\n  padding: 0 24px;\n  height: 56px;\n  display: flex;\n  align-items: center;\n  gap: 12px;\n}\n.logo {\n  display: flex;\n  align-items: center;\n  gap: 9px;\n  font-weight: 600;\n  font-size: 15px;\n  color: var(--text);\n}\n.logo:hover {\n  text-decoration: none;\n}\n.logo img {\n  height: 32px;\n  width: 32px;\n  display: block;\n  border-radius: 5px;\n  image-rendering: pixelated;\n  object-fit: cover;\n}\n.brand {\n  width: 180px;\n  height: auto;\n  display: block;\n  margin: 0 0 14px;\n  border-radius: 8px;\n  image-rendering: pixelated;\n}\n.top .right {\n  margin-left: auto;\n  display: flex;\n  align-items: center;\n  gap: 18px;\n  font-size: 13px;\n  color: var(--muted);\n}\n\n/* layout */\n.wrap {\n  max-width: 1100px;\n  margin: 0 auto;\n  padding: 28px 24px 72px;\n}\n.wrap.side {\n  display: grid;\n  grid-template-columns: 196px 1fr;\n  gap: 32px;\n}\naside nav {\n  display: flex;\n  flex-direction: column;\n  gap: 1px;\n  position: sticky;\n  top: 24px;\n}\naside nav a {\n  padding: 7px 12px;\n  border-radius: 4px;\n  color: var(--text);\n  font-size: 14px;\n}\naside nav a:hover {\n  background: #ededef;\n  text-decoration: none;\n}\naside nav a.on {\n  background: #fff;\n  box-shadow: inset 2px 0 0 var(--accent);\n  border: 1px solid var(--border);\n  font-weight: 500;\n}\naside .lbl {\n  font-size: 11px;\n  text-transform: uppercase;\n  letter-spacing: 0.06em;\n  color: var(--dim);\n  padding: 0 12px;\n  margin: 0 0 8px;\n}\n\nh1 {\n  font-size: 22px;\n  font-weight: 600;\n  margin: 0;\n}\nh2 {\n  font-size: 15px;\n  font-weight: 600;\n  margin: 0;\n}\np.lead {\n  color: var(--muted);\n  margin: 6px 0 0;\n  font-size: 14px;\n}\n.pagehead {\n  display: flex;\n  align-items: center;\n  gap: 16px;\n  margin-bottom: 22px;\n}\n.pagehead .actions {\n  margin-left: auto;\n  display: flex;\n  gap: 8px;\n}\n\n.card {\n  background: var(--card);\n  border: 1px solid var(--border);\n  border-radius: 6px;\n  margin-bottom: 18px;\n}\n.card .hd {\n  padding: 14px 18px;\n  border-bottom: 1px solid var(--border);\n  display: flex;\n  align-items: center;\n  gap: 10px;\n}\n.card .bd {\n  padding: 18px;\n}\n.card .bd.flush {\n  padding: 0;\n}\n.card .ft {\n  padding: 12px 18px;\n  border-top: 1px solid var(--border);\n  background: #fbfbfc;\n  display: flex;\n  align-items: center;\n  gap: 10px;\n  font-size: 13px;\n  color: var(--muted);\n  border-radius: 0 0 6px 6px;\n}\n\n/* table */\ntable {\n  width: 100%;\n  border-collapse: collapse;\n}\nth {\n  text-align: left;\n  font-size: 12px;\n  font-weight: 600;\n  color: var(--muted);\n  padding: 10px 18px;\n  border-bottom: 1px solid var(--border);\n  background: #fbfbfc;\n}\ntd {\n  padding: 14px 18px;\n  border-bottom: 1px solid var(--border2);\n  font-size: 14px;\n}\ntr:last-child td {\n  border-bottom: none;\n}\ntbody tr:hover {\n  background: #fafafb;\n}\n.num {\n  text-align: right;\n  font-variant-numeric: tabular-nums;\n}\n\n/* status text, not badges */\n.st {\n  display: inline-flex;\n  align-items: center;\n  gap: 6px;\n  font-size: 13px;\n}\n.st::before {\n  content: \"\";\n  width: 7px;\n  height: 7px;\n  border-radius: 50%;\n  background: var(--dim);\n}\n.st.ok::before {\n  background: var(--green);\n}\n.st.warn::before {\n  background: var(--amber);\n}\n.st.err::before {\n  background: var(--red);\n}\n.st.run::before {\n  background: var(--link);\n}\n\n/* buttons */\nbutton,\n.btn {\n  font: inherit;\n  font-size: 14px;\n  padding: 6px 14px;\n  border-radius: 4px;\n  border: 1px solid var(--border);\n  background: #fff;\n  color: var(--text);\n  cursor: pointer;\n  display: inline-flex;\n  align-items: center;\n  gap: 7px;\n}\nbutton:hover,\n.btn:hover {\n  background: #f4f4f5;\n  text-decoration: none;\n}\n.btn.primary,\nbutton.primary {\n  background: var(--accent);\n  border-color: var(--accent);\n  color: #fff;\n  font-weight: 500;\n}\n.btn.primary:hover,\nbutton.primary:hover {\n  background: var(--accent-d);\n  border-color: var(--accent-d);\n}\n.btn.sm {\n  padding: 4px 10px;\n  font-size: 13px;\n}\n.btn.link {\n  border: none;\n  background: none;\n  color: var(--link);\n  padding: 0;\n}\n.btn.link:hover {\n  background: none;\n  text-decoration: underline;\n}\nbutton[disabled] {\n  opacity: 0.5;\n  cursor: not-allowed;\n}\n\n/* toggle */\n.tg {\n  position: relative;\n  width: 38px;\n  height: 22px;\n  border-radius: 22px;\n  background: #cfd2d6;\n  border: none;\n  padding: 0;\n  cursor: pointer;\n  transition: background 0.12s ease;\n}\n.tg::after {\n  content: \"\";\n  position: absolute;\n  top: 2px;\n  left: 2px;\n  width: 18px;\n  height: 18px;\n  border-radius: 50%;\n  background: #fff;\n  transition: left 0.12s ease;\n  box-shadow: 0 1px 2px rgba(0, 0, 0, 0.2);\n}\n.tg.on {\n  background: var(--accent);\n}\n.tg.on::after {\n  left: 18px;\n}\n.tg:hover {\n  filter: brightness(0.97);\n}\n\n/* forms */\nlabel {\n  display: block;\n  font-size: 13px;\n  font-weight: 500;\n  margin-bottom: 6px;\n}\ninput,\nselect,\ntextarea {\n  width: 100%;\n  background: #fff;\n  border: 1px solid #cfd2d6;\n  border-radius: 4px;\n  color: var(--text);\n  padding: 8px 10px;\n  font: inherit;\n  font-size: 14px;\n}\ninput:focus,\nselect:focus,\ntextarea:focus {\n  outline: none;\n  border-color: var(--accent);\n  box-shadow: 0 0 0 2px rgba(128, 197, 128, 0.35);\n}\ntextarea {\n  resize: vertical;\n  line-height: 1.35;\n}\n.pem {\n  min-height: 150px;\n}\n.field {\n  margin-bottom: 18px;\n  max-width: 420px;\n}\n.field.wide {\n  max-width: none;\n}\n.hint {\n  font-size: 13px;\n  color: var(--muted);\n  margin-top: 6px;\n  font-weight: 400;\n}\n.two {\n  display: grid;\n  grid-template-columns: 1fr 1fr;\n  gap: 0 24px;\n}\n\n/* bits */\n.muted {\n  color: var(--muted);\n}\n.dim {\n  color: var(--dim);\n}\n.big {\n  font-size: 26px;\n  font-weight: 600;\n  letter-spacing: -0.01em;\n}\n.kfig {\n  display: flex;\n  gap: 44px;\n}\n.kfig .k {\n  font-size: 13px;\n  color: var(--muted);\n  margin-bottom: 2px;\n}\n.notice {\n  background: #f3faf3;\n  border: 1px solid #cfe6cf;\n  border-radius: 6px;\n  padding: 14px 18px;\n  display: flex;\n  align-items: center;\n  gap: 14px;\n  margin-bottom: 18px;\n}\n.notice.info {\n  background: #f2f7ff;\n  border-color: #cfe0fb;\n}\n.notice.bad {\n  background: #fdf3f3;\n  border-color: #f3d0d0;\n}\n.notice .txt {\n  flex: 1;\n}\n.notice b {\n  font-weight: 600;\n}\n.notice .dismiss-worth {\n  margin-left: auto;\n  border: 0;\n  background: transparent;\n  color: var(--muted);\n  padding: 0 4px;\n  font-size: 20px;\n  line-height: 1;\n  cursor: pointer;\n}\n.notice .dismiss-worth:hover {\n  background: transparent;\n  color: var(--text);\n}\n.markdown > :first-child {\n  margin-top: 0;\n}\n.markdown > :last-child {\n  margin-bottom: 0;\n}\n.markdown p,\n.markdown h1,\n.markdown h2,\n.markdown h3,\n.markdown ul,\n.markdown ol,\n.markdown pre {\n  margin: 0 0 12px;\n}\n.markdown h1,\n.markdown h2,\n.markdown h3 {\n  font-size: 15px;\n}\n.markdown ul,\n.markdown ol {\n  padding-left: 22px;\n}\n.markdown pre {\n  overflow-x: auto;\n  padding: 10px 12px;\n  border-radius: 4px;\n  background: #f1f2f3;\n  font-family: var(--mono);\n  font-size: 13px;\n  white-space: pre;\n}\n.markdown code {\n  padding: 1px 4px;\n  border-radius: 3px;\n  background: #f1f2f3;\n}\n.markdown pre code {\n  padding: 0;\n  background: transparent;\n}\n.log {\n  background: #1f2124;\n  color: #e6e6e6;\n  border-radius: 6px;\n  padding: 14px 16px;\n  font-family: var(--mono);\n  font-size: 12.5px;\n  line-height: 1.7;\n  max-height: 320px;\n  overflow: auto;\n  white-space: pre-wrap;\n}\n.log .t {\n  color: #8b9096;\n}\n.crumbs {\n  font-size: 13px;\n  color: var(--muted);\n  margin-bottom: 14px;\n}\n.pager {\n  display: flex;\n  align-items: center;\n  gap: 10px;\n  padding: 12px 18px;\n  border-top: 1px solid var(--border);\n  font-size: 13px;\n  color: var(--muted);\n}\n.pager .sp {\n  margin-left: auto;\n}\n.empty {\n  padding: 56px 24px;\n  text-align: center;\n  color: var(--muted);\n}\n.empty h2 {\n  margin-bottom: 6px;\n}\n.steps {\n  list-style: none;\n  padding: 0;\n  margin: 0;\n}\n.steps li {\n  display: flex;\n  gap: 14px;\n  padding: 16px 0;\n  border-bottom: 1px solid var(--border2);\n}\n.steps li:last-child {\n  border-bottom: none;\n}\n.steps .n {\n  width: 24px;\n  height: 24px;\n  border-radius: 50%;\n  background: #ededef;\n  color: var(--muted);\n  display: flex;\n  align-items: center;\n  justify-content: center;\n  font-size: 12px;\n  font-weight: 600;\n  flex: none;\n}\n.steps li.done .n {\n  background: var(--green);\n  color: #fff;\n}\n.steps li.now .n {\n  background: var(--accent);\n  color: #fff;\n}\n.steps .body {\n  flex: 1;\n}\n.steps .body b {\n  display: block;\n  font-weight: 600;\n  margin-bottom: 2px;\n}\n\nbutton,\n.btn,\n.tg,\n.tg::after,\ntbody tr {\n  transition:\n    background 0.12s ease,\n    border-color 0.12s ease,\n    filter 0.12s ease,\n    left 0.12s ease,\n    color 0.12s ease;\n}\n:focus-visible {\n  outline: 2px solid var(--accent);\n  outline-offset: 2px;\n}\n\n#toasts {\n  position: fixed;\n  right: 20px;\n  bottom: 20px;\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n  z-index: 20;\n  max-width: 360px;\n}\n.toast {\n  background: #1f2124;\n  color: #fff;\n  border-radius: 6px;\n  padding: 10px 14px;\n  font-size: 13px;\n  box-shadow: 0 8px 24px rgba(0, 0, 0, 0.18);\n}\n.fail {\n  margin: 12px 18px;\n  padding: 12px 14px;\n  background: #fdf3f3;\n  border: 1px solid #f3d0d0;\n  border-radius: 6px;\n  display: flex;\n  align-items: center;\n  gap: 12px;\n  font-size: 13px;\n}\n.fail p {\n  margin: 0;\n  flex: 1;\n}\n\n.sk-slot {\n  display: none;\n  padding: 18px;\n}\n.sk,\n.sk-row {\n  height: 12px;\n  background: #ededef;\n  border-radius: 4px;\n  margin-bottom: 10px;\n}\n.sk-row {\n  height: 36px;\n}\n[data-async].busy > :not(.sk-slot):not([data-fail]) {\n  visibility: hidden;\n}\n[data-async].busy > .sk-slot {\n  display: block !important;\n  visibility: visible;\n}\n\n@media (prefers-reduced-motion: reduce) {\n  *,\n  *::before,\n  *::after {\n    animation: none !important;\n    transition: none !important;\n  }\n}\n.bars {\n  display: flex;\n  align-items: flex-end;\n  gap: 2px;\n  height: 56px;\n}\n.bars i {\n  flex: 1 1 0;\n  min-width: 2px;\n  align-self: stretch;\n  background-image: linear-gradient(\n    to top,\n    var(--bar, var(--accent)) var(--h),\n    transparent var(--h)\n  );\n}\n.bars i:hover {\n  --bar: var(--accent-d);\n  background-color: var(--border2);\n}\n.trend {\n  font-size: 12px;\n  margin-top: 3px;\n}\n.trend.up {\n  color: var(--green);\n}\n.trend.down {\n  color: var(--red);\n}\n.kfig.wrap4 {\n  flex-wrap: wrap;\n  gap: 28px 44px;\n}\n";

package/dist/src/server/webhook/index.d.ts

@@ -0,0 +1 @@
+export declare function handleWebhookRequest(request: Request, secret?: string): Promise<Response>;

package/dist/src/server/webhook/index.js

@@ -0,0 +1,64 @@
+import { readConfig } from "../../config.js";
+import { errorResponse } from "../errors.js";
+import { hasDelivery, recordDelivery } from "../../store/deliveries.js";
+import { dispatchGithubEvent } from "../../services/webhook.js";
+import { verifySignature } from "./signature.js";
+function json(status, body) {
+    return Response.json(body, { status });
+}
+export async function handleWebhookRequest(request, secret) {
+    const raw = new Uint8Array(await request.arrayBuffer());
+    if (secret) {
+        const header = request.headers.get("x-hub-signature-256");
+        if (!(await verifySignature(secret, raw, header))) {
+            return errorResponse(401, "unauthorized", "bad webhook signature");
+        }
+    }
+    const deliveryId = request.headers.get("x-github-delivery");
+    const event = request.headers.get("x-github-event");
+    if (!deliveryId || !event) {
+        return errorResponse(400, "bad_request", "x-github-delivery and x-github-event are required");
+    }
+    if (hasDelivery(deliveryId)) {
+        return json(200, { outcome: "duplicate" });
+    }
+    let payload;
+    try {
+        payload = JSON.parse(new TextDecoder().decode(raw));
+    }
+    catch {
+        return errorResponse(400, "bad_request", "body is not JSON");
+    }
+    if (payload === null ||
+        typeof payload !== "object" ||
+        Array.isArray(payload)) {
+        return errorResponse(400, "bad_request", "body is not a JSON object");
+    }
+    const config = readConfig();
+    const repoFullName = payload.repository?.full_name;
+    const repoName = typeof repoFullName === "string" ? repoFullName : undefined;
+    const repoConfig = repoName ? config.repos?.[repoName] : undefined;
+    const maxDiffLines = repoConfig?.maxPullRequestChangeLines ??
+        config.defaults?.maxPullRequestChangeLines;
+    let result;
+    try {
+        result = dispatchGithubEvent(event, payload, deliveryId, maxDiffLines);
+    }
+    catch (error) {
+        result = { outcome: "error", reason: String(error) };
+    }
+    recordDelivery({
+        deliveryId,
+        event,
+        action: typeof payload.action === "string" ? payload.action : undefined,
+        repo: result.repo,
+        prNumber: result.prNumber,
+        outcome: result.outcome,
+        reason: result.reason,
+    });
+    return json(200, {
+        outcome: result.outcome,
+        ...(result.reason ? { reason: result.reason } : {}),
+        ...(result.jobId ? { jobId: result.jobId } : {}),
+    });
+}

package/dist/src/server/webhook/signature.d.ts

@@ -0,0 +1,7 @@
+/** GitHub's `x-hub-signature-256` is `sha256=` plus hex HMAC-SHA256 of the
+ * raw body. Compared in constant time so a mismatch does not leak which
+ * byte differed. */
+export declare function hmacSha256Hex(secret: string, body: Uint8Array): Promise<string>;
+/** `false` when the header is missing, malformed, or the digest does not
+ * match. Callers skip this entirely when no webhook secret is configured. */
+export declare function verifySignature(secret: string, body: Uint8Array, header: string | null): Promise<boolean>;

package/dist/src/server/webhook/signature.js

@@ -0,0 +1,41 @@
+/** GitHub's `x-hub-signature-256` is `sha256=` plus hex HMAC-SHA256 of the
+ * raw body. Compared in constant time so a mismatch does not leak which
+ * byte differed. */
+function hexToBytes(hex) {
+    if (hex.length % 2 !== 0)
+        return undefined;
+    const out = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < out.length; i++) {
+        const n = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+        if (Number.isNaN(n))
+            return undefined;
+        out[i] = n;
+    }
+    return out;
+}
+function timingSafeEqual(a, b) {
+    if (a.byteLength !== b.byteLength)
+        return false;
+    let diff = 0;
+    for (let i = 0; i < a.byteLength; i++)
+        diff |= a[i] ^ b[i];
+    return diff === 0;
+}
+export async function hmacSha256Hex(secret, body) {
+    const key = await crypto.subtle.importKey("raw", new TextEncoder().encode(secret), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+    const sig = new Uint8Array(await crypto.subtle.sign("HMAC", key, body));
+    return Array.from(sig, (byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+/** `false` when the header is missing, malformed, or the digest does not
+ * match. Callers skip this entirely when no webhook secret is configured. */
+export async function verifySignature(secret, body, header) {
+    if (!header?.startsWith("sha256="))
+        return false;
+    const expected = hexToBytes(header.slice("sha256=".length));
+    if (!expected)
+        return false;
+    const actual = hexToBytes(await hmacSha256Hex(secret, body));
+    if (!actual)
+        return false;
+    return timingSafeEqual(actual, expected);
+}

package/dist/src/services/credentials.d.ts

@@ -0,0 +1,19 @@
+export type AccessOk = {
+    ok: true;
+    login?: string;
+    installations?: number;
+};
+export type AccessFail = {
+    ok: false;
+    message: string;
+};
+export type AccessResult = AccessOk | AccessFail;
+export declare function missingAppPermissions(permissions: Record<string, string> | undefined): string[];
+export declare function testGithubAccess(opts: {
+    auth: "gh" | "pat";
+    githubPat?: string;
+}): Promise<AccessResult>;
+export declare function testAppAccess(opts: {
+    appId: string;
+    privateKeyPem: string;
+}): Promise<AccessResult>;