ework-web 0.10.64 → 0.10.66

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ework-web",
-  "version": "0.10.64",
+  "version": "0.10.66",
   "type": "module",
   "description": "ework-web — standalone multi-project issue tracker. Local SQLite-backed, no external API dependency. Bun + TypeScript + SSR HTML.",
   "license": "MIT",

package/src/giteaApi.ts

@@ -126,12 +126,13 @@ export async function handleGiteaApi(
     if (!(await canSudo(caller))) return giteaError(403, "sudo requires permission");
     if (!/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,63}$/.test(sudoLogin)) return giteaError(400, "invalid sudo login");
     const sudoKindRaw = req.headers.get("Sudo-Kind")?.trim();
+    const sudoDisplayName = req.headers.get("Sudo-Display-Name")?.trim() || null;
     const existing = await getUserByLogin(sudoLogin);
     if (existing) {
       user = existing;
     } else {
       const kind = sudoKindRaw === "bot" || sudoKindRaw === "system" ? sudoKindRaw : "human";
-      user = await ensureUser(sudoLogin, kind);
+      user = await ensureUser(sudoLogin, kind, sudoDisplayName);
     }
     if (!user.is_active) return giteaError(403, "sudo target inactive");
   }

package/src/index.ts

@@ -2189,7 +2189,9 @@ async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean
       const project = await getProject(owner, repo);
       if (!project) return html(errorPage("404", "项目不存在"), 404);
       if (!(await canReadProject(project.id, ctx.user))) return html(errorPage("404", "项目不存在"), 404);
-      const { html: body } = await buildIssueThread(cfg, owner, repo, number, ctx.user?.login);
+      const dispatchCfg = await getConfigAll();
+      const projectDispatchOff = dispatchCfg[`dispatchOff:${owner}/${repo}`] === "1";
+      const { html: body } = await buildIssueThread(cfg, owner, repo, number, ctx.user?.login, projectDispatchOff);
       return html(body);
     } catch (e) {
       const status = e instanceof StoreError ? e.status : 500;

package/src/render/components.ts

@@ -19,6 +19,7 @@ export interface CommentView {
   avatar: string;
   created_at: string;
   body_html: string;
+  display_name?: string | null;
   reactions?: { e: string; n: number }[];
 }
 
@@ -59,7 +60,8 @@ export function renderCommentCard(c: CommentView, cfg?: { translateUrl?: string;
     `<div class="item item-${esc(tag)}" id="comment-${c.id}" data-id="${c.id}">` +
     `<div class="card"><div class="card-h">` +
     `<span class="tag tag-${esc(tag)}">${label} ${esc(tag)}</span>` +
-    `<span class="who">${esc(c.login)}</span>` +
+    `<span class="who">${esc(c.display_name || c.login)}</span>` +
+    (c.display_name ? `<span class="who-login">${esc(c.login)}</span>` : "") +
     `<span class="when" data-ts="${esc(c.created_at)}" title="${esc(c.created_at)}">${relTime(c.created_at)}</span>` +
     rx +
     `<span class="card-actions">` + actionBarHTML({ cid: String(c.id), copy: true, link: true, translate: true, tts: true, translateEnabled, ttsEnabled }) + `</span>` +

package/src/render/layout.ts

@@ -18,6 +18,7 @@ export interface LayoutProps {
   labels?: { id: number; name: string; color: string }[];
   canEditLabels?: boolean;
   aiStatus?: string;
+  projectDispatchOff?: boolean;
   viewerLogin?: string;
   viewerIsAdmin?: boolean;
   customActions?: IssueAction[];
@@ -61,6 +62,7 @@ header.topbar .num{opacity:.7}
 .card{background:var(--bg-elev);border:1px solid var(--border);border-radius:8px;overflow:hidden;min-width:0}
 .card-h{display:flex;align-items:center;gap:.5rem;padding:.4rem .7rem;background:var(--bg-muted);font-size:13px;flex-wrap:wrap}
 .card-h .who{font-weight:600;color:var(--text)}
+.card-h .who-login{font-weight:400;color:var(--text-muted);font-size:.85em;margin-left:.25rem}
 .tag{font-size:11px;font-weight:600;padding:.05rem .4rem;border-radius:4px;line-height:1.5}
 .tag-human{background:color-mix(in srgb,var(--human) 18%,transparent);color:var(--human)}
 .tag-bot{background:color-mix(in srgb,var(--bot) 18%,transparent);color:var(--bot)}
@@ -191,9 +193,11 @@ export function renderLayout(props: LayoutProps, inner: string, initialItems: st
       : `<button type="button" class="action-btn" data-action-href="${escapeAttr(repoIssuesHref)}/${props.issueNumber}/halt" data-action-confirm="确认停止 AI 处理？" title="停止 AI 处理">⏹ 停止</button>`
     : "";
   const dispatchBtnHtml = showActions
-    ? props.aiStatus === "dispatch_off"
-      ? `<button type="button" class="action-btn dispatch-btn" data-action-href="${escapeAttr(repoIssuesHref)}/${props.issueNumber}/dispatch-on" title="允许自动接单">🔔 接单</button>`
-      : `<button type="button" class="action-btn dispatch-btn" data-action-href="${escapeAttr(repoIssuesHref)}/${props.issueNumber}/dispatch-off" data-action-confirm="设为不自动接单？" title="设为不自动接单">🔕 不接单</button>`
+    ? props.projectDispatchOff
+      ? `<span class="action-btn dispatch-btn" style="opacity:.5;cursor:not-allowed" title="项目已关闭自动接单">🔕 项目不接单</span>`
+      : props.aiStatus === "dispatch_off"
+        ? `<button type="button" class="action-btn dispatch-btn" data-action-href="${escapeAttr(repoIssuesHref)}/${props.issueNumber}/dispatch-on" title="允许自动接单">🔔 接单</button>`
+        : `<button type="button" class="action-btn dispatch-btn" data-action-href="${escapeAttr(repoIssuesHref)}/${props.issueNumber}/dispatch-off" data-action-confirm="设为不自动接单？" title="设为不自动接单">🔕 不接单</button>`
     : "";
   return `<!doctype html>
 <html lang="zh">

package/src/static/app.js

@@ -116,7 +116,8 @@
       `<div class="item item-${esc(tag)}${isNew}" id="comment-${c.id}" data-id="${c.id}">` +
       `<div class="card"><div class="card-h">` +
       `<span class="tag tag-${esc(tag)}">${label} ${esc(tag)}</span>` +
-      `<span class="who">${esc(c.login)}</span>` +
+      `<span class="who">${esc(c.display_name || c.login)}</span>` +
+      (c.display_name ? `<span class="who-login">${esc(c.login)}</span>` : "") +
       `<span class="when" data-ts="${esc(c.created_at)}" title="${esc(c.created_at)}">${relTime(c.created_at)}</span>` +
       rx +
       `<span class="card-actions">` +

package/src/store.ts

@@ -90,6 +90,7 @@ export interface CommentRow {
   created_at: string;
   updated_at: string;
   author_kind?: UserKind;
+  author_display_name?: string | null;
 }
 
 export interface LabelRow {
@@ -134,19 +135,24 @@ function now(): string {
   return new Date().toISOString();
 }
 
-export async function ensureUser(login: string, kind: UserKind = "human"): Promise<UserRow> {
+export async function ensureUser(login: string, kind: UserKind = "human", displayName?: string | null): Promise<UserRow> {
   const db = getDB();
   const existing = await db.get<UserRow>("SELECT * FROM {{users}} WHERE login = ?", [login]);
-  if (existing) return existing;
+  if (existing) {
+    if (displayName && displayName.trim() && existing.display_name !== displayName) {
+      await db.run("UPDATE {{users}} SET display_name = ?, updated_at = ? WHERE login = ?", [displayName, now(), login]);
+    }
+    return existing;
+  }
   const ts = now();
   await db.run(
-    "INSERT INTO {{users}} (login, kind, created_at, updated_at) VALUES (?, ?, ?, ?)",
-    [login, kind, ts, ts]
+    "INSERT INTO {{users}} (login, kind, display_name, created_at, updated_at) VALUES (?, ?, ?, ?, ?)",
+    [login, kind, displayName ?? null, ts, ts]
   );
   return {
     login,
     kind,
-    display_name: null,
+    display_name: displayName ?? null,
     password_hash: null,
     email: null,
     is_admin: 0,
@@ -570,7 +576,7 @@ export async function listCommentsPage(issueId: number, page: number, pageSize:
   const clamped = Math.min(Math.max(1, page), totalPages);
   const offset = (clamped - 1) * pageSize;
   const rows = await getDB().all<CommentRow>(
-    `SELECT c.*, u.kind AS author_kind
+    `SELECT c.*, u.kind AS author_kind, u.display_name AS author_display_name
      FROM {{comments}} c
      LEFT JOIN {{users}} u ON u.login = c.author
      WHERE c.issue_id = ?
@@ -583,7 +589,7 @@ export async function listCommentsPage(issueId: number, page: number, pageSize:
 
 export async function listCommentsSince(issueId: number, sinceISO: string): Promise<CommentRow[]> {
   return await getDB().all<CommentRow>(
-    `SELECT c.*, u.kind AS author_kind
+    `SELECT c.*, u.kind AS author_kind, u.display_name AS author_display_name
      FROM {{comments}} c
      LEFT JOIN {{users}} u ON u.login = c.author
      WHERE c.issue_id = ? AND c.created_at > ?
@@ -594,7 +600,7 @@ export async function listCommentsSince(issueId: number, sinceISO: string): Prom
 
 export async function listCommentsForIssue(issueId: number): Promise<CommentRow[]> {
   return await getDB().all<CommentRow>(
-    `SELECT c.*, u.kind AS author_kind
+    `SELECT c.*, u.kind AS author_kind, u.display_name AS author_display_name
      FROM {{comments}} c
      LEFT JOIN {{users}} u ON u.login = c.author
      WHERE c.issue_id = ?
@@ -628,7 +634,7 @@ export async function postComment(
     const row = await getDB().get<{ project_id: number }>("SELECT project_id FROM {{issues}} WHERE id = ?", [issueId]);
     await getDB().run("UPDATE {{projects}} SET updated_at = ? WHERE id = ?", [updatedAt, row!.project_id]);
     return (await getDB().get<CommentRow>(
-      `SELECT c.*, u.kind AS author_kind
+      `SELECT c.*, u.kind AS author_kind, u.display_name AS author_display_name
        FROM {{comments}} c LEFT JOIN {{users}} u ON u.login = c.author
        WHERE c.id = ?`,
       [info.insertId]
@@ -638,7 +644,7 @@ export async function postComment(
 
 export async function getComment(commentId: number): Promise<CommentRow | null> {
   const row = await getDB().get<CommentRow>(
-    `SELECT c.*, u.kind AS author_kind
+    `SELECT c.*, u.kind AS author_kind, u.display_name AS author_display_name
      FROM {{comments}} c LEFT JOIN {{users}} u ON u.login = c.author
      WHERE c.id = ?`,
     [commentId]

package/src/views/issueThread.ts

@@ -44,6 +44,7 @@ function toView(c: CommentRow): CommentView {
     avatar: "",
     created_at: c.created_at,
     body_html: renderMarkdown(c.body),
+    display_name: c.author_display_name ?? null,
   };
 }
 
@@ -90,7 +91,8 @@ export async function buildIssueThread(
   owner: string,
   repo: string,
   number: number,
-  viewerLogin?: string
+  viewerLogin?: string,
+  projectDispatchOff?: boolean
 ): Promise<{ html: string }> {
   const project = await getProject(owner, repo);
   if (!project) throw new StoreError(404, `项目 ${owner}/${repo} 不存在`);
@@ -149,6 +151,7 @@ export async function buildIssueThread(
       labels: labels.map((l) => ({ id: l.id, name: l.name, color: l.color })),
       canEditLabels: cfg.writesEnabled !== false,
       aiStatus: issue.ai_status ?? "",
+      projectDispatchOff: projectDispatchOff ?? false,
       viewerLogin,
       viewerIsAdmin,
       customActions,

package/src/webhooks.ts

@@ -16,7 +16,7 @@
 //   the full retry trail rather than an opaque final status.
 
 import { createHmac, randomUUID } from "node:crypto";
-import { getDB, getConfigAll } from "./db";
+import { getDB } from "./db";
 import { log } from "./logger";
 import { loadConfig } from "./config";
 import {
@@ -28,7 +28,6 @@ import {
   resolveModel,
   listLabelsForIssue,
   getUserByLogin,
-  canWriteProject,
   type IssueRow,
   type ProjectRow,
   type CommentRow,
@@ -301,6 +300,7 @@ interface PayloadComment {
   created_at: string;
   updated_at: string;
   user: PayloadUser;
+  author_kind?: string;
 }
 
 interface IssueEventPayload {
@@ -636,25 +636,11 @@ export async function emitIssueEvent(
     const project = await getProjectById(projectId);
     if (!project) return;
     const issue = await getIssueById(issueId);
-    if (!issue) return;
-
-    if (action === "opened") {
-      const cfg = await getConfigAll();
-      const scopeKey = `${project.owner}/${project.name}`;
-      if (cfg["dispatchEnabled"] === "false") {
-        log.info(`webhook: global dispatch disabled — skipping opened for ${scopeKey}#${issue.number}`);
-        return;
-      }
-      if (cfg[`dispatchOff:${scopeKey}`] === "1") {
-        log.info(`webhook: project dispatch disabled — skipping opened for ${scopeKey}#${issue.number}`);
-        return;
-      }
-      if ((issue as IssueRow).ai_status === "dispatch_off") {
-        log.info(`webhook: issue dispatch disabled — skipping opened for ${scopeKey}#${issue.number}`);
-        return;
-      }
-    }
+    if (!issue) { log.warn(`emitIssueEvent: issue ${issueId} not found — silent skip prevented`); return; }
 
+    // Web is a dumb message bus — always fan out. Wake policy is enforced
+    // downstream (daemon handleEvent). Web only suppresses for subscription-
+    // level concerns (none currently).
     const commentCount = await countCommentsSafe(issueId);
     // Resolve model: project override > global default. Empty string = no
     // override (daemon omits --model, lets opencode pick). globalDefault
@@ -689,48 +675,16 @@ export async function emitCommentEvent(
     if (!issue) return;
     const comment = await getCommentByIdSafe(commentId);
     if (!comment) return;
-    const cfg = await getConfigAll();
-    const scopeKey = `${project.owner}/${project.name}`;
-    // Issue-level dispatch_off is a per-issue explicit close — block comments entirely (same as halted).
-    if ((issue as IssueRow).ai_status === "dispatch_off") {
-      log.info(`webhook: issue dispatch disabled — skipping comment_created (author=${comment.author}) for ${scopeKey}#${issue.number}`);
-      return;
-    }
+    // Web is a dumb message bus — always fan out. Wake policy is enforced
+    // downstream (daemon handleEvent checks author_kind, ai_status, env config).
     const authorUser = await getUserByLogin(comment.author);
-    const dispatchOff = cfg["dispatchEnabled"] === "false" || cfg[`dispatchOff:${scopeKey}`] === "1";
-    if (dispatchOff && authorUser && authorUser.kind !== "human") {
-      log.info(`webhook: dispatch disabled — non-human comment blocked (author=${comment.author} kind=${authorUser.kind}) for ${scopeKey}#${issue.number}`);
-      return;
-    }
-    if (dispatchOff) {
-      log.info(`webhook: dispatch disabled but human comment waking AI (author=${comment.author}) for ${scopeKey}#${issue.number}`);
-    }
-    const appCfg = await loadConfig();
-    const cfgList = (k: string, d: string) =>
-      (cfg[k] ?? d).split(",").map((s) => s.trim()).filter(Boolean);
-    const noWake = cfgList("noWakeLogins", appCfg.daemonBotLogin);
-    const okLogins = cfgList("wakeLogins", "");
-    const okKinds = cfgList("wakeKinds", "human");
-    const author = comment.author;
-    const denied =
-      noWake.includes(author) ? "deny-list" :
-      okLogins.includes(author) ? null :
-      (authorUser && !okKinds.includes(authorUser.kind)) ? `kind=${authorUser.kind}` :
-      null;
-    if (denied) {
-      log.info(`webhook: comment wake denied (author=${author} reason=${denied}) for ${scopeKey}#${issue.number}`);
-      return;
-    }
-    if (authorUser && !(await canWriteProject(projectId, { login: comment.author, is_admin: authorUser.is_admin }))) {
-      log.info(`webhook: comment wake denied (author=${comment.author} not project member) for ${scopeKey}#${issue.number}`);
-      return;
-    }
     const commentCount = await countCommentsSafe(issueId);
     const globalDefault = (await loadConfig()).defaultModel;
     const model = resolveModel(project.model, globalDefault);
     const labels = await toPayloadLabels(issueId);
     const payload = buildCommentPayload(issue, comment, project, commentCount, origin, model, labels);
     (payload as CommentEventPayload).event_id = randomUUID();
+    (payload as CommentEventPayload).comment.author_kind = authorUser?.kind ?? "human";
     const rawBody = JSON.stringify(payload);
     await fanOut(projectId, "issue_comment", rawBody);
   } catch (e) {