ework-web 0.10.36 → 0.10.38

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ework-web",
-  "version": "0.10.36",
+  "version": "0.10.38",
   "type": "module",
   "description": "ework-web — standalone multi-project issue tracker. Local SQLite-backed, no external API dependency. Bun + TypeScript + SSR HTML.",
   "license": "MIT",

package/src/config.ts

@@ -64,8 +64,8 @@ export const configSchema = z.object({
   collapseLines: z.coerce.number().int().positive().default(16),
   fileRoots: z
     .string()
-    .transform((s) => s.split(",").map((x) => x.trim()).filter(Boolean))
-    .default("/tmp"),
+    .default("/tmp")
+    .transform((s) => s.split(",").map((x) => x.trim()).filter(Boolean)),
   fileMaxLines: z.coerce.number().int().positive().default(2000),
   fileMaxBytes: z.coerce.number().int().positive().default(512 * 1024),
   translateUrl: z.string().default(""),

package/src/index.ts

@@ -693,13 +693,10 @@ async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean
       const status = e instanceof OpencodeError ? e.status : 500;
       if (status === 404 && /^ses_[0-9A-Za-z]{8,}/.test(sid)) {
         return html(errorPage(
-          "会话尚未写入数据库",
-          `会话 ID ${sid} 在 opencode.db 里找不到。\n\n` +
-          `常见原因：daemon 把尚未完成的 opencode run 的 session ID 写进了评论（早期捕获），\n` +
-          `但 opencode 进程因 LLM 鉴权失败 / git clone 失败 / 其他错误退出前没把这条 session\n` +
-          `持久化到 DB。\n\n` +
-          `排查：docker logs ework-aio 看 opencode 子进程的报错；确认 OPENCODE_AI_API_KEY 已配置\n` +
-          `或 ~/.config/opencode/auth.json 存在。`
+          "找不到会话",
+          `会话 ID ${sid} 在 opencode 数据库中不存在。\n\n` +
+          `可能原因：opencode 进程异常退出、session 尚未持久化、或 daemon 连接问题。\n\n` +
+          `请检查 daemon 日志或确认 session ID 正确。`
         ), 404);
       }
       return html(errorPage(status === 404 ? "找不到会话" : "加载失败", errMsg(e)), status);

package/src/opencode.ts

@@ -416,16 +416,16 @@ export class MultiDaemonOpencodeClient implements OpencodeClientInterface {
   async exportSession(id: string): Promise<SessionExport> {
     try {
       return await Promise.any(this.clients.map((c) => c.exportSession(id)));
-    } catch {
-      throw new OpencodeError(`session ${id} not found on any daemon`, 404);
+    } catch (e) {
+      throw pickErrorFromAggregate(e, id);
     }
   }
 
   async exportSessionRaw(id: string): Promise<string> {
     try {
       return await Promise.any(this.clients.map((c) => c.exportSessionRaw(id)));
-    } catch {
-      throw new OpencodeError(`session ${id} not found on any daemon`, 404);
+    } catch (e) {
+      throw pickErrorFromAggregate(e, id);
     }
   }
 
@@ -450,6 +450,18 @@ export function createOpencodeClient(cfg: Config, daemonEndpoint?: string): Open
   return new OpencodeClient(cfg);
 }
 
+function pickErrorFromAggregate(e: unknown, id: string): OpencodeError {
+  if (e instanceof AggregateError) {
+    const errors = e.errors as unknown[];
+    const non404 = errors.find(
+      (err) => err instanceof OpencodeError && err.status !== 404,
+    ) as OpencodeError | undefined;
+    if (non404) return non404;
+  }
+  if (e instanceof OpencodeError) return e;
+  return new OpencodeError(`session ${id} not found on any daemon`, 404);
+}
+
 async function readCapped(stream: ReadableStream<Uint8Array> | null, maxBytes: number): Promise<string> {
   if (!stream) return "";
   const reader = stream.getReader();

package/src/remote-file.ts

@@ -50,7 +50,8 @@ async function fetchDaemon(
   apiPath: string,
   params: Record<string, string>
 ): Promise<Response> {
-  const url = new URL(`${endpoint}${apiPath}`);
+  const base = /^https?:\/\//.test(endpoint) ? endpoint : `http://${endpoint}`;
+  const url = new URL(`${base}${apiPath}`);
   for (const [k, v] of Object.entries(params)) url.searchParams.set(k, v);
   const resp = await fetch(url.toString(), { signal: AbortSignal.timeout(10_000) });
   return resp;

package/src/store.ts

@@ -5,6 +5,22 @@
 import { getDB } from "./db";
 import { createHash } from "node:crypto";
 
+let _visibilityChecked = false;
+let _hasVisibilityColumn = true;
+
+async function visibilitySupported(): Promise<boolean> {
+  if (_visibilityChecked) return _hasVisibilityColumn;
+  _visibilityChecked = true;
+  try {
+    await getDB().get("SELECT visibility FROM {{projects}} LIMIT 0");
+    _hasVisibilityColumn = true;
+  } catch {
+    _hasVisibilityColumn = false;
+    console.warn("[store] projects.visibility column missing — treating all projects as public");
+  }
+  return _hasVisibilityColumn;
+}
+
 export type UserKind = "human" | "bot" | "system";
 
 export interface UserRow {
@@ -181,12 +197,15 @@ export async function listProjectsWithCounts(
 ): Promise<ProjectWithCounts[]> {
   const isAdmin = viewer?.is_admin === 1;
   const login = viewer?.login;
-  const visibilityFilter = isAdmin
+  const hasVis = isAdmin ? true : await visibilitySupported();
+  const visibilityFilter = !hasVis
     ? ""
-    : login
-      ? ` AND (p.visibility != 'private' OR EXISTS (SELECT 1 FROM {{project_members}} pm WHERE pm.project_id = p.id AND pm.user_login = ?))`
-      : ` AND p.visibility != 'private'`;
-  const args = !isAdmin && login ? [login] : [];
+    : isAdmin
+      ? ""
+      : login
+        ? ` AND (p.visibility != 'private' OR EXISTS (SELECT 1 FROM {{project_members}} pm WHERE pm.project_id = p.id AND pm.user_login = ?))`
+        : ` AND p.visibility != 'private'`;
+  const args = hasVis && !isAdmin && login ? [login] : [];
   return await getDB().all<ProjectWithCounts>(
     `SELECT p.*,
        COALESCE(SUM(CASE WHEN i.state = 'open' THEN 1 ELSE 0 END), 0) AS open_count,
@@ -404,7 +423,7 @@ export async function listAllIssues(opts: ListIssuesOpts = {}): Promise<IssueWit
     sql += " AND EXISTS (SELECT 1 FROM {{issue_labels}} il JOIN {{labels}} l ON l.id = il.label_id WHERE il.issue_id = i.id AND l.name = ?)";
     args.push(label);
   }
-  if (!opts.viewerIsAdmin) {
+  if (!opts.viewerIsAdmin && await visibilitySupported()) {
     sql += " AND (p.visibility != 'private'";
     if (opts.viewerLogin) {
       sql += " OR EXISTS (SELECT 1 FROM {{project_members}} pm WHERE pm.project_id = p.id AND pm.user_login = ?)";