ework-web 0.10.56 → 0.10.58

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ework-web",
-  "version": "0.10.56",
+  "version": "0.10.58",
   "type": "module",
   "description": "ework-web — standalone multi-project issue tracker. Local SQLite-backed, no external API dependency. Bun + TypeScript + SSR HTML.",
   "license": "MIT",

package/src/index.ts

@@ -373,6 +373,8 @@ const REPO_MEMBERS_RE = /^\/([^/]+)\/([^/]+)\/settings\/members$/;
 const REPO_MEMBER_ACTION_RE = /^\/([^/]+)\/([^/]+)\/settings\/members\/([^/]+)\/(role|remove)$/;
 const REPO_MEMBER_ADD_RE = /^\/([^/]+)\/([^/]+)\/settings\/members\/add$/;
 const REPO_VISIBILITY_RE = /^\/([^/]+)\/([^/]+)\/settings\/visibility$/;
+const REPO_DISPATCH_RE = /^\/([^/]+)\/([^/]+)\/settings\/dispatch$/;
+const SETTINGS_DISPATCH_RE = /^\/settings\/dispatch$/;
 const REPO_UPSTREAMS_RE = /^\/([^/]+)\/([^/]+)\/settings\/upstreams$/;
 const REPO_MODEL_RE = /^\/([^/]+)\/([^/]+)\/settings\/model$/;
 const REPO_LABELS_RE = /^\/([^/]+)\/([^/]+)\/settings\/labels$/;
@@ -1279,6 +1281,32 @@ async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean
     return json({ ok: true, enabled });
   }
 
+  if (req.method === "GET" && url.pathname === "/api/wake-policy") {
+    if (!ctx.user || ctx.user.is_admin !== 1) return json({ error: "admin required" }, 403);
+    const cfg = await getConfigAll();
+    const appCfg = await loadConfig();
+    const list = (k: string, d: string) => (cfg[k] ?? d).split(",").map((s) => s.trim()).filter(Boolean);
+    return json({
+      wakeKinds: list("wakeKinds", "human"),
+      wakeLogins: list("wakeLogins", ""),
+      noWakeLogins: list("noWakeLogins", appCfg.daemonBotLogin),
+    });
+  }
+
+  if (req.method === "POST" && url.pathname === "/api/wake-policy") {
+    if (!ctx.user || ctx.user.is_admin !== 1) return json({ error: "admin required" }, 403);
+    const payload = await req.json().catch(() => ({} as Record<string, unknown>));
+    const p = payload as { wakeKinds?: unknown; wakeLogins?: unknown; noWakeLogins?: unknown };
+    const join = (v: unknown) => Array.isArray(v) ? v.filter((s) => typeof s === "string").join(",") : (typeof v === "string" ? v : "");
+    const wk = join(p.wakeKinds);
+    const wl = join(p.wakeLogins);
+    const nw = join(p.noWakeLogins);
+    if (wk) await setConfig("wakeKinds", wk); else await deleteConfig("wakeKinds");
+    if (wl) await setConfig("wakeLogins", wl); else await deleteConfig("wakeLogins");
+    if (nw) await setConfig("noWakeLogins", nw); else await deleteConfig("noWakeLogins");
+    return json({ ok: true });
+  }
+
   if (url.pathname === "/api/router/daemons" && req.method === "GET") {
     if (!ctx.user || ctx.user.is_admin !== 1) return json({ error: "admin required" }, 403);
     try {
@@ -1318,7 +1346,8 @@ async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean
 
   if (url.pathname === "/settings") {
     if (req.method === "GET") {
-      return html(buildSettingsPage(cfg, url.searchParams.get("saved") === "1", ctx.user!, await listCachedModels()).html);
+      const dispatchCfg = await getConfigAll();
+      return html(buildSettingsPage(cfg, url.searchParams.get("saved") === "1", ctx.user!, await listCachedModels(), dispatchCfg["dispatchEnabled"] === "false").html);
     }
     if (req.method === "POST") {
       if (!rateLimit(`settings:${ip}`, 10, 10 / 60)) return html(errorPage("太快了", "请稍后再试"), 429);
@@ -1917,6 +1946,33 @@ async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean
       return Response.redirect(`${back}?ok=1&ok_msg=${encodeURIComponent(`可见性已更新为 ${visibility === "public" ? "公开" : "私有"}`)}`, 303);
     }
 
+    const repoDispatchMatch = url.pathname.match(REPO_DISPATCH_RE);
+    if (repoDispatchMatch) {
+      const [, owner, repo] = repoDispatchMatch;
+      if (!(owner && repo)) return html(errorPage("bad path", ""), 400);
+      const project = await getProject(owner, repo);
+      if (!project) return html(errorPage("项目不存在", ""), 404);
+      const back = `${url.origin}/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/settings/members`;
+      if (!(await canAdminProject(project.id, ctx.user))) {
+        return Response.redirect(`${back}?err=${encodeURIComponent("无权限")}`, 303);
+      }
+      const cfg = await getConfigAll();
+      const key = `dispatchOff:${owner}/${repo}`;
+      const isOff = cfg[key] === "1";
+      if (isOff) { await deleteConfig(key); } else { await setConfig(key, "1"); }
+      return Response.redirect(`${back}?ok=1&ok_msg=${encodeURIComponent(isOff ? "已开启自动接单" : "已关闭自动接单")}`, 303);
+    }
+
+    const settingsDispatchMatch = url.pathname.match(SETTINGS_DISPATCH_RE);
+    if (settingsDispatchMatch) {
+      if (!ctx.user || ctx.user.is_admin !== 1) return html(errorPage("需要管理员权限", ""), 403);
+      const back = `${url.origin}/settings`;
+      const cfg = await getConfigAll();
+      const isOff = cfg["dispatchEnabled"] === "false";
+      if (isOff) { await deleteConfig("dispatchEnabled"); } else { await setConfig("dispatchEnabled", "false"); }
+      return Response.redirect(`${back}?ok=1&ok_msg=${encodeURIComponent(isOff ? "已开启全局自动接单" : "已关闭全局自动接单")}`, 303);
+    }
+
     const whAction = url.pathname.match(WH_ACTION_RE);
     if (whAction) {
       const [, idStr, action] = whAction;
@@ -2145,7 +2201,9 @@ async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean
     const flashKind = url.searchParams.get("ok") === "1" ? "ok" : url.searchParams.get("err") ? "err" : null;
     const flashMsg = flashKind === "ok" ? (url.searchParams.get("ok_msg") ?? "") : (url.searchParams.get("err") ?? "");
     const flash = flashKind ? { kind: flashKind as "ok" | "err", msg: flashMsg } : null;
-    return html(await buildProjectMembersPage(ctx.user!, project, flash));
+    const dispatchCfg = await getConfigAll();
+    const dispatchOff = dispatchCfg[`dispatchOff:${owner}/${repo}`] === "1";
+    return html(await buildProjectMembersPage(ctx.user!, project, flash, dispatchOff));
   }
 
   const upstreamsPage = url.pathname.match(REPO_UPSTREAMS_RE);

package/src/views/projectMembers.ts

@@ -26,6 +26,7 @@ export async function buildProjectMembersPage(
   viewer: UserRow,
   project: ProjectRow,
   flash: Flash | null,
+  dispatchOff: boolean,
 ): Promise<string> {
   const members = await listProjectMembersWithUsers(project.id);
   const users = await listUsers();
@@ -122,6 +123,12 @@ ${flashHtml}
 <button class="primary" type="submit">保存</button>
 </form>
 
+<form class="card" method="POST" action="${escapeAttr(`/${encodeURIComponent(project.owner)}/${encodeURIComponent(project.name)}/settings/dispatch`)}">
+<h2>AI 自动接单</h2>
+<div class="hint">关闭后，本项目新建 issue 不会自动派给 AI；评论仍可显式召唤。</div>
+<button type="submit" class="${dispatchOff ? "primary" : "secondary"}">${dispatchOff ? "🔔 开启自动接单" : "🔕 关闭自动接单"}</button>
+</form>
+
 <div class="card">
 <h2>当前成员（${members.length}）</h2>
 ${rowsHtml}

package/src/views/settings.ts

@@ -99,7 +99,7 @@ function buildDaemonSection(viewer: UserRow): string {
 </section>`;
 }
 
-export function buildSettingsPage(cfg: Config, saved: boolean, viewer: UserRow, models: CachedModel[]): { html: string } {
+export function buildSettingsPage(cfg: Config, saved: boolean, viewer: UserRow, models: CachedModel[], globalDispatchOff: boolean): { html: string } {
   const groups = SETTINGS_GROUPS.map(
     (g) =>
       `<section class="sg"><h2>${escapeHtml(g.title)}</h2>${fieldInput(g, cfg, models)}</section>`
@@ -109,6 +109,9 @@ export function buildSettingsPage(cfg: Config, saved: boolean, viewer: UserRow,
     ? `<p class="hint">要增删朗读后端（kokoro / cosyvoice3 等），去 <a href="/admin/tts-backends">朗读后端管理</a>。</p>`
     : "";
   const modelRefreshForm = `<section class="sg"><h2>opencode 模型列表</h2><p class="hint" style="margin:0 0 .6rem">从 <code>opencode models</code> 拉取可用模型并刷新上方下拉列表。刷新后自动选定一个具体模型作为默认（不会留空）。</p><form method="POST" action="/settings/models/refresh"><button type="submit" class="secondary">🔄 刷新 opencode 模型列表</button></form></section>`;
+  const dispatchToggle = viewer.is_admin === 1
+    ? `<section class="sg"><h2>全局 AI 自动接单</h2><p class="hint" style="margin:0 0 .6rem">关闭后，所有项目新建 issue 都不会自动派给 AI；评论仍可显式召唤。</p><form method="POST" action="/settings/dispatch"><button type="submit" class="${globalDispatchOff ? "primary" : "secondary"}">${globalDispatchOff ? "🔔 开启全局自动接单" : "🔕 关闭全局自动接单"}</button></form></section>`
+    : "";
   const html = `<!doctype html>
 <html lang="zh"><head><meta charset="utf-8">
 <meta name="viewport" content="width=device-width,initial-scale=1">
@@ -171,6 +174,7 @@ ${banner}
 <div class="bar"><button type="submit">保存</button><a class="a-back" href="/">返回</a></div>
 </form>
 ${modelRefreshForm}
+${dispatchToggle}
 ${ttsLink}
 ${buildDbSection(viewer)}
 ${buildDaemonSection(viewer)}

package/src/webhooks.ts

@@ -691,12 +691,30 @@ export async function emitCommentEvent(
     if (!comment) return;
     const cfg = await getConfigAll();
     const scopeKey = `${project.owner}/${project.name}`;
-    if (cfg["dispatchEnabled"] === "false" || cfg[`dispatchOff:${scopeKey}`] === "1" || (issue as IssueRow).ai_status === "dispatch_off") {
+    // Issue-level dispatch_off is a per-issue explicit close — block comments entirely (same as halted).
+    if ((issue as IssueRow).ai_status === "dispatch_off") {
+      log.info(`webhook: issue dispatch disabled — skipping comment_created (author=${comment.author}) for ${scopeKey}#${issue.number}`);
+      return;
+    }
+    // Global/project-level are "default no auto-dispatch" strategies — comments can still explicitly wake AI.
+    if (cfg["dispatchEnabled"] === "false" || cfg[`dispatchOff:${scopeKey}`] === "1") {
       log.info(`webhook: dispatch disabled but waking via comment_created (author=${comment.author}) for ${scopeKey}#${issue.number}`);
     }
     const authorUser = await getUserByLogin(comment.author);
-    if (authorUser && authorUser.kind !== "human") {
-      log.info(`webhook: comment wake denied (author=${comment.author} kind=${authorUser.kind}) for ${scopeKey}#${issue.number}`);
+    const appCfg = await loadConfig();
+    const cfgList = (k: string, d: string) =>
+      (cfg[k] ?? d).split(",").map((s) => s.trim()).filter(Boolean);
+    const noWake = cfgList("noWakeLogins", appCfg.daemonBotLogin);
+    const okLogins = cfgList("wakeLogins", "");
+    const okKinds = cfgList("wakeKinds", "human");
+    const author = comment.author;
+    const denied =
+      noWake.includes(author) ? "deny-list" :
+      okLogins.includes(author) ? null :
+      (authorUser && !okKinds.includes(authorUser.kind)) ? `kind=${authorUser.kind}` :
+      null;
+    if (denied) {
+      log.info(`webhook: comment wake denied (author=${author} reason=${denied}) for ${scopeKey}#${issue.number}`);
       return;
     }
     if (authorUser && !(await canWriteProject(projectId, { login: comment.author, is_admin: authorUser.is_admin }))) {