ework-web 0.1.0

package/src/config.ts

@@ -0,0 +1,178 @@
+import { z } from "zod";
+import { getConfigAll } from "./db";
+
+export interface TtsBackend {
+  id: string;
+  label: string;
+  url: string;
+  voice: string;
+}
+export const DEFAULT_TTS_BACKENDS: TtsBackend[] = [
+  { id: "kokoro", label: "Kokoro（快）", url: "", voice: "zf_001" },
+  { id: "cosyvoice3", label: "CosyVoice3（自然）", url: "", voice: "default" },
+];
+
+export function parseTtsBackendsJSON(raw: string): TtsBackend[] | null {
+  let v: unknown;
+  try {
+    v = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  if (!Array.isArray(v)) return null;
+  const out: TtsBackend[] = [];
+  for (const item of v) {
+    if (typeof item !== "object" || item === null) return null;
+    const { id, label, url, voice } = item as Record<string, unknown>;
+    if (
+      typeof id !== "string" || typeof label !== "string" ||
+      typeof url !== "string" || typeof voice !== "string"
+    ) {
+      return null;
+    }
+    out.push({ id, label, url, voice });
+  }
+  return out;
+}
+
+export const configSchema = z.object({
+  port: z.coerce.number().default(3002),
+  host: z.string().default("127.0.0.1"),
+  authToken: z.string().min(8, "WORK_TOKEN must be set (>= 8 chars)"),
+  cookieSecret: z.string().min(8, "WORK_COOKIE_SECRET must be set (>= 8 chars)"),
+  operatorLogin: z
+    .string()
+    .regex(/^[A-Za-z0-9_-]+$/, "WORK_OPERATOR_LOGIN must be a plain login (alphanumeric)")
+    .default("op"),
+  systemLogin: z
+    .string()
+    .regex(/^[A-Za-z0-9_-]+$/, "WORK_SYSTEM_LOGIN must be a plain login (alphanumeric)")
+    .default("ework-actions"),
+  upstreamTimeoutMs: z.coerce.number().default(15000),
+  secureCookie: z.boolean().default(false),
+  // ework is human-facing; writes on by default. Flip off to use as a read-only mirror.
+  writesEnabled: z.boolean().default(true),
+  // Issue-thread comment order: 'desc' = newest first (top), 'asc' = oldest first.
+  // Drives both SSR initial render and app.js display order.
+  commentSort: z.enum(["desc", "asc"]).default("desc"),
+  accessLogPath: z.string().default("/tmp/ework-access.log"),
+  opencodeBin: z.string().default("opencode"),
+  opencodeDbPath: z.string().default(
+    `${process.env.XDG_DATA_HOME || `${process.env.HOME}/.local/share`}/opencode/opencode.db`
+  ),
+  contextBudget: z.coerce.number().int().positive().default(200000),
+  collapseLines: z.coerce.number().int().positive().default(16),
+  fileRoots: z
+    .string()
+    .transform((s) => s.split(",").map((x) => x.trim()).filter(Boolean))
+    .default("/tmp"),
+  fileMaxLines: z.coerce.number().int().positive().default(2000),
+  fileMaxBytes: z.coerce.number().int().positive().default(512 * 1024),
+  translateUrl: z.string().default(""),
+  translateModel: z.string().default("qwen2.5-7b"),
+  ttsBackends: z
+    .array(z.object({ id: z.string(), label: z.string(), url: z.string(), voice: z.string() }))
+    .default(DEFAULT_TTS_BACKENDS),
+  ttsDefaultBackend: z.string().default("kokoro"),
+  ttsSpeed: z.coerce.number().min(0.25).max(4).default(1.0),
+  daemonBotLogin: z.string().default(""),
+  daemonWebhookUrl: z.string().default(""),
+  daemonWebhookSecret: z.string().default(""),
+});
+
+export type Config = z.infer<typeof configSchema>;
+
+export type FieldType = "text" | "number" | "backend";
+export interface SettingField {
+  key: keyof Config;
+  label: string;
+  type: FieldType;
+}
+export interface SettingGroup {
+  title: string;
+  fields: SettingField[];
+}
+export const SETTINGS_GROUPS: SettingGroup[] = [
+  {
+    title: "翻译",
+    fields: [
+      { key: "translateUrl", label: "API 地址", type: "text" },
+      { key: "translateModel", label: "模型", type: "text" },
+    ],
+  },
+  {
+    title: "朗读 (TTS)",
+    fields: [
+      { key: "ttsDefaultBackend", label: "默认引擎", type: "backend" },
+      { key: "ttsSpeed", label: "语速 (0.25–4)", type: "number" },
+    ],
+  },
+  {
+    title: "会话显示",
+    fields: [
+      { key: "contextBudget", label: "上下文窗口 (tokens)", type: "number" },
+      { key: "collapseLines", label: "折叠阈值 (行)", type: "number" },
+    ],
+  },
+  {
+    title: "Issue 评论排序",
+    fields: [
+      { key: "commentSort", label: "默认顺序（desc=最新在上 / asc=最老在上）", type: "text" },
+    ],
+  },
+  {
+    title: "文件查看",
+    fields: [
+      { key: "fileRoots", label: "可浏览根目录（逗号分隔）", type: "text" },
+      { key: "fileMaxLines", label: "最大行数", type: "number" },
+      { key: "fileMaxBytes", label: "最大字节", type: "number" },
+    ],
+  },
+];
+export const DB_OVERRIDABLE: (keyof Config)[] = SETTINGS_GROUPS.flatMap((g) => g.fields.map((f) => f.key));
+
+export function loadConfig(): Config {
+  const db = getConfigAll();
+  return configSchema.parse({
+    port: process.env.WORK_PORT,
+    host: process.env.WORK_HOST,
+    authToken: process.env.WORK_TOKEN,
+    cookieSecret: process.env.WORK_COOKIE_SECRET,
+    operatorLogin: process.env.WORK_OPERATOR_LOGIN,
+    systemLogin: process.env.WORK_SYSTEM_LOGIN,
+    upstreamTimeoutMs: process.env.WORK_UPSTREAM_TIMEOUT_MS,
+    secureCookie: process.env.WORK_SECURE_COOKIE === "true",
+    writesEnabled: (process.env.WORK_WRITES_ENABLED ?? "true") === "true",
+    commentSort: (db.commentSort as "desc" | "asc" | undefined) ?? process.env.WORK_COMMENT_SORT,
+    accessLogPath: process.env.WORK_ACCESS_LOG ?? "/tmp/ework-access.log",
+    opencodeBin: process.env.WORK_OPENCODE_BIN,
+    opencodeDbPath: process.env.WORK_OPENCODE_DB,
+    contextBudget: db.contextBudget ?? process.env.WORK_CONTEXT_BUDGET,
+    collapseLines: db.collapseLines ?? process.env.WORK_COLLAPSE_LINES,
+    fileRoots: db.fileRoots ?? process.env.WORK_FILE_ROOTS,
+    fileMaxLines: db.fileMaxLines ?? process.env.WORK_FILE_MAX_LINES,
+    fileMaxBytes: db.fileMaxBytes ?? process.env.WORK_FILE_MAX_BYTES,
+    translateUrl: db.translateUrl ?? process.env.WORK_TRANSLATE_URL,
+    translateModel: db.translateModel ?? process.env.WORK_TRANSLATE_MODEL,
+    ttsBackends: (db.ttsBackends && parseTtsBackendsJSON(db.ttsBackends)) ?? DEFAULT_TTS_BACKENDS,
+    ttsDefaultBackend: db.ttsDefaultBackend ?? process.env.WORK_TTS_DEFAULT_BACKEND,
+    ttsSpeed: db.ttsSpeed ?? process.env.WORK_TTS_SPEED,
+    daemonBotLogin: process.env.WORK_DAEMON_BOT_LOGIN ?? "",
+    daemonWebhookUrl: process.env.WORK_DAEMON_WEBHOOK_URL ?? "",
+    daemonWebhookSecret: process.env.WORK_DAEMON_WEBHOOK_SECRET ?? "",
+  });
+}
+
+export function resolveTtsBackend(cfg: Config, id?: string): TtsBackend | null {
+  const list = cfg.ttsBackends;
+  if (list.length === 0) return null;
+  return list.find((b) => b.id === id) ?? list.find((b) => b.id === cfg.ttsDefaultBackend) ?? list[0] ?? null;
+}
+
+export function parseOverride(key: keyof Config, raw: string): unknown | null {
+  const shape = configSchema.shape as Record<string, z.ZodTypeAny>;
+  const field = shape[key as string];
+  if (!field) return null;
+  const r = field.safeParse(raw);
+  return r.success ? r.data : null;
+}

package/src/db.ts

@@ -0,0 +1,106 @@
+// SQLite store. One DB file holds the runtime config table AND the ework schema
+// (projects/issues/comments/labels/reactions/attachments/users) so transactions
+// span them. Schema is applied on boot via schema.sql.
+
+import { Database } from "bun:sqlite";
+import { mkdirSync, readFileSync } from "fs";
+import { dirname, join } from "path";
+
+const DB_PATH =
+  process.env.WORK_DB_PATH ||
+  join(process.env.XDG_DATA_HOME || `${process.env.HOME}/.local/share`, "ework", "ework.db");
+
+let _db: Database | null = null;
+
+function userTableColumns(db: Database): Set<string> {
+  const rows = db.query("PRAGMA table_info(users)").all() as { name: string }[];
+  return new Set(rows.map((r) => r.name));
+}
+
+// schema.sql CREATE TABLE only applies full column list to fresh DBs;
+// existing DBs need these ALTERs to gain new columns. Idempotent via PRAGMA check.
+function migrateUsersTable(db: Database): void {
+  if (userTableColumns(db).size === 0) return; // users doesn't exist yet; schema.sql will create it
+  const have = userTableColumns(db);
+  const additions: { col: string; ddl: string }[] = [
+    { col: "password_hash", ddl: "ALTER TABLE users ADD COLUMN password_hash TEXT" },
+    { col: "email", ddl: "ALTER TABLE users ADD COLUMN email TEXT" },
+    { col: "is_admin", ddl: "ALTER TABLE users ADD COLUMN is_admin INTEGER NOT NULL DEFAULT 0" },
+    { col: "is_active", ddl: "ALTER TABLE users ADD COLUMN is_active INTEGER NOT NULL DEFAULT 1" },
+    { col: "updated_at", ddl: "ALTER TABLE users ADD COLUMN updated_at TEXT NOT NULL DEFAULT ''" },
+  ];
+  for (const m of additions) {
+    if (have.has(m.col)) continue;
+    db.exec(m.ddl);
+  }
+  db.exec("CREATE INDEX IF NOT EXISTS users_is_admin ON users (is_admin) WHERE is_admin = 1");
+}
+
+function tableColumns(db: Database, name: string): Set<string> {
+  const rows = db.query(`PRAGMA table_info(${name})`).all() as { name: string }[];
+  return new Set(rows.map((r) => r.name));
+}
+
+function migratePatTable(db: Database): void {
+  const have = tableColumns(db, "personal_access_tokens");
+  if (have.size === 0) return;
+  if (!have.has("ip_allowlist")) {
+    db.exec("ALTER TABLE personal_access_tokens ADD COLUMN ip_allowlist TEXT NOT NULL DEFAULT '[]'");
+  }
+}
+
+function migrateProjectsTable(db: Database): void {
+  const have = tableColumns(db, "projects");
+  if (have.size === 0) return;
+  if (!have.has("upstream_urls")) {
+    db.exec("ALTER TABLE projects ADD COLUMN upstream_urls TEXT NOT NULL DEFAULT '[]'");
+  }
+}
+
+function db(): Database {
+  if (_db) return _db;
+  mkdirSync(dirname(DB_PATH), { recursive: true });
+  _db = new Database(DB_PATH, { create: true, readwrite: true });
+  _db.exec("PRAGMA journal_mode = WAL");
+  _db.exec("PRAGMA foreign_keys = ON");
+  _db.exec(
+    "CREATE TABLE IF NOT EXISTS config (key TEXT PRIMARY KEY, value TEXT NOT NULL, updated_at TEXT NOT NULL)"
+  );
+  // Migration must run BEFORE schema.sql: schema.sql's CREATE TABLE for fresh
+  // DBs doesn't help legacy DBs, and any index that references a new column
+  // would fail if schema.sql ran first.
+  migrateUsersTable(_db);
+  migratePatTable(_db);
+  migrateProjectsTable(_db);
+  _db.exec(readFileSync(join(import.meta.dir, "schema.sql"), "utf8"));
+  return _db;
+}
+
+export function rawDB(): Database {
+  return db();
+}
+
+export function getConfigAll(): Record<string, string> {
+  try {
+    const rows = db().query("SELECT key, value FROM config").all() as { key: string; value: string }[];
+    const out: Record<string, string> = {};
+    for (const r of rows) out[r.key] = r.value;
+    return out;
+  } catch {
+    return {};
+  }
+}
+
+export function setConfig(key: string, value: string): void {
+  const now = new Date().toISOString();
+  db()
+    .query(
+      "INSERT INTO config (key, value, updated_at) VALUES (?, ?, ?) " +
+        "ON CONFLICT(key) DO UPDATE SET value = excluded.value, updated_at = excluded.updated_at"
+    )
+    .run(key, value, now);
+}
+
+export function deleteConfig(key: string): void {
+  db().query("DELETE FROM config WHERE key = ?").run(key);
+}