ework-web 0.10.56 → 0.10.57

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ework-web",
-  "version": "0.10.56",
+  "version": "0.10.57",
   "type": "module",
   "description": "ework-web — standalone multi-project issue tracker. Local SQLite-backed, no external API dependency. Bun + TypeScript + SSR HTML.",
   "license": "MIT",

package/src/index.ts

@@ -1279,6 +1279,32 @@ async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean
     return json({ ok: true, enabled });
   }
 
+  if (req.method === "GET" && url.pathname === "/api/wake-policy") {
+    if (!ctx.user || ctx.user.is_admin !== 1) return json({ error: "admin required" }, 403);
+    const cfg = await getConfigAll();
+    const appCfg = await loadConfig();
+    const list = (k: string, d: string) => (cfg[k] ?? d).split(",").map((s) => s.trim()).filter(Boolean);
+    return json({
+      wakeKinds: list("wakeKinds", "human"),
+      wakeLogins: list("wakeLogins", ""),
+      noWakeLogins: list("noWakeLogins", appCfg.daemonBotLogin),
+    });
+  }
+
+  if (req.method === "POST" && url.pathname === "/api/wake-policy") {
+    if (!ctx.user || ctx.user.is_admin !== 1) return json({ error: "admin required" }, 403);
+    const payload = await req.json().catch(() => ({} as Record<string, unknown>));
+    const p = payload as { wakeKinds?: unknown; wakeLogins?: unknown; noWakeLogins?: unknown };
+    const join = (v: unknown) => Array.isArray(v) ? v.filter((s) => typeof s === "string").join(",") : (typeof v === "string" ? v : "");
+    const wk = join(p.wakeKinds);
+    const wl = join(p.wakeLogins);
+    const nw = join(p.noWakeLogins);
+    if (wk) await setConfig("wakeKinds", wk); else await deleteConfig("wakeKinds");
+    if (wl) await setConfig("wakeLogins", wl); else await deleteConfig("wakeLogins");
+    if (nw) await setConfig("noWakeLogins", nw); else await deleteConfig("noWakeLogins");
+    return json({ ok: true });
+  }
+
   if (url.pathname === "/api/router/daemons" && req.method === "GET") {
     if (!ctx.user || ctx.user.is_admin !== 1) return json({ error: "admin required" }, 403);
     try {

package/src/webhooks.ts

@@ -695,8 +695,20 @@ export async function emitCommentEvent(
       log.info(`webhook: dispatch disabled but waking via comment_created (author=${comment.author}) for ${scopeKey}#${issue.number}`);
     }
     const authorUser = await getUserByLogin(comment.author);
-    if (authorUser && authorUser.kind !== "human") {
-      log.info(`webhook: comment wake denied (author=${comment.author} kind=${authorUser.kind}) for ${scopeKey}#${issue.number}`);
+    const appCfg = await loadConfig();
+    const cfgList = (k: string, d: string) =>
+      (cfg[k] ?? d).split(",").map((s) => s.trim()).filter(Boolean);
+    const noWake = cfgList("noWakeLogins", appCfg.daemonBotLogin);
+    const okLogins = cfgList("wakeLogins", "");
+    const okKinds = cfgList("wakeKinds", "human");
+    const author = comment.author;
+    const denied =
+      noWake.includes(author) ? "deny-list" :
+      okLogins.includes(author) ? null :
+      (authorUser && !okKinds.includes(authorUser.kind)) ? `kind=${authorUser.kind}` :
+      null;
+    if (denied) {
+      log.info(`webhook: comment wake denied (author=${author} reason=${denied}) for ${scopeKey}#${issue.number}`);
       return;
     }
     if (authorUser && !(await canWriteProject(projectId, { login: comment.author, is_admin: authorUser.is_admin }))) {