ework-web 0.10.27 → 0.10.29

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ework-web",
-  "version": "0.10.27",
+  "version": "0.10.29",
   "type": "module",
   "description": "ework-web — standalone multi-project issue tracker. Local SQLite-backed, no external API dependency. Bun + TypeScript + SSR HTML.",
   "license": "MIT",

package/src/coordination.ts

@@ -103,3 +103,18 @@ export async function getSessionDaemonMap(): Promise<Map<string, SessionDaemonIn
     return new Map();
   }
 }
+
+export async function resolveDaemonEndpoint(daemonId: number): Promise<string | null> {
+  try {
+    const rows = await getDB().all<{ internal_endpoint: string | null }>(
+      `SELECT internal_endpoint FROM {{d_daemons}} WHERE id = ?`,
+      [daemonId],
+    );
+    const ep = rows[0]?.internal_endpoint;
+    if (!ep) return null;
+    return ep;
+  } catch (e) {
+    log.info(`coordination: resolve daemon ${daemonId} failed (${e instanceof Error ? e.message : String(e)})`);
+    return null;
+  }
+}

package/src/index.ts

@@ -6,10 +6,11 @@ import { homedir } from "os";
 import { loadConfig, DB_OVERRIDABLE, parseOverride, resolveTtsBackend } from "./config";
 import type { Config } from "./config";
 import { setConfig, initDB, getDB } from "./db";
-import { getActiveDaemons, listAllDaemons, getSessionDaemonMap } from "./coordination";
+import { getActiveDaemons, listAllDaemons, getSessionDaemonMap, resolveDaemonEndpoint } from "./coordination";
 import { testMysqlConnection, migrateSqliteToMysql, writeMysqlEnv, migrateMysqlToSqlite, writeSqliteEnv, migrateDaemonSqliteToMysql, generateMysqlDDL } from "./db-admin";
 import type { MysqlTargetOpts } from "./db-admin";
 import { checkAuth, makeAuthCookieHeader, clearAuthCookieHeader, loginHTML, sanitizeNext, ensureBootstrapAdmin, ensureBootstrapSystem, isReservedSystemLogin } from "./auth";
+import { runAuthHook } from "./auth-hook";
 import { OpencodeError, createOpencodeClient, MultiDaemonOpencodeClient, RemoteOpencodeClient, isLocalhost, type OpencodeClientInterface } from "./opencode";
 import { renderMarkdown } from "./render/markdown";
 import { log, uptimeSeconds, version } from "./logger";
@@ -495,6 +496,14 @@ async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean
         if (u) resolvedLogin = u.login;
       }
 
+      if (!resolvedLogin && token && cfg.userAuthHook) {
+        const hookReq = new Request(url, {
+          headers: { authorization: `Bearer ${token}` },
+        });
+        const user = await runAuthHook(cfg.userAuthHook, hookReq);
+        if (user) resolvedLogin = user.login;
+      }
+
       if (resolvedLogin) {
         const setCookie = await makeAuthCookieHeader(cfg, resolvedLogin);
         return new Response(null, {
@@ -628,6 +637,18 @@ async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean
     const all = url.searchParams.get("all") === "1";
     const limit = Math.min(5000, Math.max(1, Number(url.searchParams.get("limit")) || 30));
     const daemonEp = url.searchParams.get("daemon");
+    const daemonIdParam = url.searchParams.get("daemon_id");
+    if (!daemonEp && daemonIdParam) {
+      const id = Number(daemonIdParam);
+      if (Number.isFinite(id) && id > 0) {
+        const ep = await resolveDaemonEndpoint(id);
+        if (ep) {
+          const client = new RemoteOpencodeClient(ep);
+          const { html: body } = await buildSessionView(client, sid, desc, cfg.collapseLines, limit, all);
+          return html(body);
+        }
+      }
+    }
     const client = daemonEp ? new RemoteOpencodeClient(daemonEp) : opencode;
     try {
       const { html: body } = await buildSessionView(client, sid, desc, cfg.collapseLines, limit, all);
@@ -651,7 +672,15 @@ async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean
 
   if (url.pathname === "/file") {
     const rawPath = url.searchParams.get("path") ?? "";
-    const daemonParam = url.searchParams.get("daemon");
+    let daemonParam = url.searchParams.get("daemon");
+    const daemonIdParam = url.searchParams.get("daemon_id");
+    if (!daemonParam && daemonIdParam) {
+      const id = Number(daemonIdParam);
+      if (Number.isFinite(id) && id > 0) {
+        const ep = await resolveDaemonEndpoint(id);
+        if (ep) daemonParam = ep;
+      }
+    }
     if (daemonParam && !isLocalhost(daemonParam)) {
       try {
         const mode = url.searchParams.get("mode") ?? "tail";