ework-web 0.5.1 → 0.7.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ework-web",
-  "version": "0.5.1",
+  "version": "0.7.0",
   "type": "module",
   "description": "ework-web — standalone multi-project issue tracker. Local SQLite-backed, no external API dependency. Bun + TypeScript + SSR HTML.",
   "license": "MIT",

package/src/index.ts

@@ -82,10 +82,13 @@ import {
   setWebhookActive,
   getWebhook,
   listDeliveries,
+  listAllRecentDeliveries,
   type WebhookEventName,
 } from "./webhooks";
 import { classifyActor, type CommentView } from "./render/components";
 import { buildWebhooksPage } from "./views/webhooks";
+import { buildWebhookDeliveriesPage } from "./views/webhookDeliveries";
+import { browseRemoteFile, proxyFileSince, RemoteFileError } from "./remote-file";
 import { buildProjectMembersPage } from "./views/projectMembers";
 import { buildProjectUpstreamsPage, trySetUpstreamUrls } from "./views/projectUpstreams";
 import { buildProjectModelPage } from "./views/projectModel";
@@ -597,6 +600,18 @@ async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean
 
   if (url.pathname === "/file") {
     const rawPath = url.searchParams.get("path") ?? "";
+    const daemonParam = url.searchParams.get("daemon");
+    if (daemonParam && !isLocalhost(daemonParam)) {
+      try {
+        const mode = url.searchParams.get("mode") ?? "tail";
+        const order = url.searchParams.get("order") ?? "desc";
+        const { html: body } = await browseRemoteFile(daemonParam, rawPath, mode, order, ctx.user?.login);
+        return html(body);
+      } catch (e) {
+        const status = e instanceof RemoteFileError ? e.status : 500;
+        return html(errorPage(status === 404 ? "文件不存在" : "远程访问失败", errMsg(e)), status);
+      }
+    }
     const mode = url.searchParams.get("mode") ?? undefined;
     const order = url.searchParams.get("order") ?? undefined;
     try {
@@ -626,6 +641,15 @@ async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean
     const rawPath = url.searchParams.get("path") ?? "";
     const after = Number(url.searchParams.get("after") ?? "0");
     if (!Number.isFinite(after) || after < 0) return json({ error: "bad after" }, 400);
+    const daemonParam = url.searchParams.get("daemon");
+    if (daemonParam && !isLocalhost(daemonParam)) {
+      try {
+        return json(await proxyFileSince(daemonParam, rawPath, after));
+      } catch (e) {
+        const status = e instanceof RemoteFileError ? e.status : 500;
+        return json({ error: errMsg(e) }, status);
+      }
+    }
     try {
       const delta = readFileSince(cfg, rawPath, after);
       return json(delta);
@@ -939,6 +963,11 @@ async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean
     return html(buildAdminTokensPage(ctx.user!, await listAllPatsWithUsers(), flash));
   }
 
+  if (url.pathname === "/admin/deliveries") {
+    const deliveries = await listAllRecentDeliveries(100);
+    return html(buildWebhookDeliveriesPage(ctx.user!, deliveries));
+  }
+
   const adminPatRevoke = url.pathname.match(/^\/admin\/tokens\/(\d+)\/revoke$/);
   if (adminPatRevoke && req.method === "POST") {
     const id = Number(adminPatRevoke[1]);

package/src/remote-file.ts

@@ -0,0 +1,206 @@
+import { THEME_CSS, escapeHtml, tabNavHTML } from "./render/layout";
+
+export class RemoteFileError extends Error {
+  status: number;
+  constructor(message: string, status: number) {
+    super(message);
+    this.name = "RemoteFileError";
+    this.status = status;
+  }
+}
+
+interface DirEntry {
+  name: string;
+  isDir: boolean;
+  size: number;
+  mtime: number;
+}
+
+interface DirListing {
+  path: string;
+  entries: DirEntry[];
+}
+
+interface FileContent {
+  path: string;
+  size: number;
+  rows: { n: number; t: string }[];
+  mode: string;
+  byteCapped: boolean;
+  note: string;
+}
+
+function fmtSize(n: number): string {
+  if (n < 1024) return `${n}B`;
+  if (n < 1024 * 1024) return `${(n / 1024).toFixed(1)}KB`;
+  return `${(n / (1024 * 1024)).toFixed(1)}MB`;
+}
+
+function fmtMtime(ms: number): string {
+  if (!ms) return "";
+  const diff = Date.now() - ms;
+  if (diff < 60000) return "刚刚";
+  if (diff < 3600000) return `${Math.floor(diff / 60000)}分前`;
+  if (diff < 86400000) return `${Math.floor(diff / 3600000)}时前`;
+  return new Date(ms).toISOString().slice(5, 16);
+}
+
+async function fetchDaemon(
+  endpoint: string,
+  apiPath: string,
+  params: Record<string, string>
+): Promise<Response> {
+  const url = new URL(`${endpoint}${apiPath}`);
+  for (const [k, v] of Object.entries(params)) url.searchParams.set(k, v);
+  const resp = await fetch(url.toString(), { signal: AbortSignal.timeout(10_000) });
+  return resp;
+}
+
+export async function browseRemoteFile(
+  endpoint: string,
+  rawPath: string,
+  mode: string,
+  order: string,
+  viewerLogin?: string
+): Promise<{ html: string }> {
+  const daemonLabel = escapeHtml(endpoint);
+
+  const listResp = await fetchDaemon(endpoint, "/api/files/list", { path: rawPath });
+  if (listResp.ok) {
+    const data = (await listResp.json()) as DirListing;
+    return { html: renderDirListing(data, endpoint, daemonLabel, viewerLogin) };
+  }
+  if (listResp.status !== 400) {
+    const err = await listResp.json().catch(() => ({ error: "unknown" })) as { error?: string };
+    throw new RemoteFileError(err.error ?? `daemon returned ${listResp.status}`, listResp.status);
+  }
+
+  const readResp = await fetchDaemon(endpoint, "/api/files/read", {
+    path: rawPath,
+    mode: mode === "head" ? "head" : "tail",
+    order: order === "asc" ? "asc" : "desc",
+  });
+  if (!readResp.ok) {
+    const err = await readResp.json().catch(() => ({ error: "unknown" })) as { error?: string };
+    throw new RemoteFileError(err.error ?? `daemon returned ${readResp.status}`, readResp.status);
+  }
+  const data = (await readResp.json()) as FileContent;
+  return { html: renderFileContent(data, endpoint, daemonLabel, viewerLogin) };
+}
+
+function renderDirListing(
+  data: DirListing,
+  endpoint: string,
+  daemonLabel: string,
+  viewerLogin?: string
+): string {
+  const enc = encodeURIComponent;
+  const daemonParam = `&daemon=${enc(endpoint)}`;
+  const parentPath = data.path.split("/").slice(0, -1).join("/") || "/";
+  const rows = data.entries.map((e) => {
+    const childPath = `${data.path.replace(/\/$/, "")}/${e.name}`;
+    const icon = e.isDir ? "📁" : "📄";
+    const size = e.isDir ? "—" : fmtSize(e.size);
+    return `<tr>
+      <td><a href="/file?path=${enc(childPath)}${daemonParam}">${icon} ${escapeHtml(e.name)}</a></td>
+      <td class="ms">${size}</td>
+      <td class="ts">${fmtMtime(e.mtime)}</td>
+    </tr>`;
+  }).join("") || `<tr><td colspan="3" class="empty">空目录</td></tr>`;
+
+  const user = viewerLogin ? { login: viewerLogin, is_admin: 0 } : undefined;
+  return `<!doctype html>
+<html lang="zh"><head><meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<link rel="icon" type="image/svg+xml" href="/favicon.svg">
+<title>ework-web · ${escapeHtml(data.path)}</title>
+<style>${THEME_CSS}
+.nav{display:flex;align-items:center;gap:.5rem;padding:.55rem 1rem;background:var(--header-bg);color:var(--header-text);font-size:13px}
+.nav a{color:var(--header-text);opacity:.95}
+.wrap{max-width:900px;margin:0 auto;padding:1rem}
+h1{font-size:15px;margin:0 0 .3rem;font-family:ui-monospace,monospace;word-break:break-all}
+.remote-badge{display:inline-block;background:#1f6feb33;color:#58a6ff;padding:2px 8px;border-radius:10px;font-size:11px;font-weight:600;margin-left:.5rem}
+.dtable{width:100%;border-collapse:collapse;font-size:13px;margin-top:.6rem}
+.dtable th,.dtable td{border:1px solid var(--border);padding:.3rem .5rem;text-align:left}
+.dtable th{background:var(--bg);color:var(--text-muted);font-weight:600}
+.dtable a{color:var(--accent);text-decoration:none}
+.dtable a:hover{text-decoration:underline}
+.dtable .ms,.dtable .ts{color:var(--text-muted);white-space:nowrap;font-size:12px}
+.empty{color:var(--text-muted);text-align:center;padding:.6rem}
+.parent-link{font-size:13px;margin-bottom:.4rem}
+.parent-link a{color:var(--text-muted)}
+.tabs{display:flex;gap:.3rem;padding:.5rem 1rem;border-bottom:1px solid var(--border);font-size:13px}
+.tab{padding:.3rem .7rem;border-radius:6px 6px 0 0;text-decoration:none;color:var(--text-muted)}
+.tab.active{background:var(--accent);color:#fff}
+</style></head><body>
+<header class="nav"><a href="/" style="color:var(--header-text)">🏠 ework-web</a></header>
+${tabNavHTML("sessions", user)}
+<main class="wrap">
+<div class="parent-link">📁 <a href="/file?path=${enc(parentPath)}${daemonParam}">..</a></div>
+<h1>${escapeHtml(data.path)}<span class="remote-badge">远程 ${daemonLabel}</span></h1>
+<table class="dtable"><thead><tr>
+  <th>名称</th><th>大小</th><th>修改时间</th>
+</tr></thead><tbody>${rows}</tbody></table>
+</main></body></html>`;
+}
+
+function renderFileContent(
+  data: FileContent,
+  endpoint: string,
+  daemonLabel: string,
+  viewerLogin?: string
+): string {
+  const enc = encodeURIComponent;
+  const daemonParam = `&daemon=${enc(endpoint)}`;
+  const user = viewerLogin ? { login: viewerLogin, is_admin: 0 } : undefined;
+  const lines = data.rows.map((r) =>
+    `<div class="l"><span class="ln">${r.n}</span><span class="lt">${escapeHtml(r.t)}</span></div>`
+  ).join("");
+
+  return `<!doctype html>
+<html lang="zh"><head><meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<link rel="icon" type="image/svg+xml" href="/favicon.svg">
+<title>ework-web · ${escapeHtml(data.path)}</title>
+<style>${THEME_CSS}
+.nav{display:flex;align-items:center;gap:.5rem;padding:.55rem 1rem;background:var(--header-bg);color:var(--header-text);font-size:13px}
+.nav a{color:var(--header-text);opacity:.95}
+.wrap{max-width:1000px;margin:0 auto;padding:1rem}
+h1{font-size:14px;margin:0 0 .3rem;font-family:ui-monospace,monospace;word-break:break-all}
+.remote-badge{display:inline-block;background:#1f6feb33;color:#58a6ff;padding:2px 8px;border-radius:10px;font-size:11px;font-weight:600;margin-left:.5rem}
+.note{color:var(--text-muted);font-size:12px;margin:0 0 .5rem}
+.parent-link{font-size:13px;margin-bottom:.4rem}
+.parent-link a{color:var(--text-muted)}
+.fview{background:var(--bg-elev);border:1px solid var(--border);border-radius:6px;overflow:auto;max-height:80vh;font-size:12.5px;font-family:ui-monospace,monospace}
+.l{display:flex}
+.ln{color:var(--text-muted);min-width:3.5rem;text-align:right;padding:0 .5rem;user-select:none;border-right:1px solid var(--border)}
+.lt{padding:0 .5rem;white-space:pre-wrap;word-break:break-all;flex:1}
+.tabs{display:flex;gap:.3rem;padding:.5rem 1rem;border-bottom:1px solid var(--border);font-size:13px}
+.tab{padding:.3rem .7rem;border-radius:6px 6px 0 0;text-decoration:none;color:var(--text-muted)}
+.tab.active{background:var(--accent);color:#fff}
+</style></head><body>
+<header class="nav"><a href="/" style="color:var(--header-text)">🏠 ework-web</a></header>
+${tabNavHTML("sessions", user)}
+<main class="wrap">
+<div class="parent-link">📁 <a href="/file?path=${enc(data.path.split("/").slice(0, -1).join("/") || "/")}${daemonParam}">..</a></div>
+<h1>${escapeHtml(data.path)}<span class="remote-badge">远程 ${daemonLabel}</span></h1>
+${data.note ? `<p class="note">${escapeHtml(data.note)}</p>` : ""}
+<div class="fview">${lines}</div>
+</main></body></html>`;
+}
+
+export async function proxyFileSince(
+  endpoint: string,
+  rawPath: string,
+  after: number
+): Promise<{ rows: { n: number; t: string }[]; size: number; rotated: boolean; capped: boolean }> {
+  const resp = await fetchDaemon(endpoint, "/api/files/since", {
+    path: rawPath,
+    after: String(after),
+  });
+  if (!resp.ok) {
+    const err = await resp.json().catch(() => ({ error: "unknown" })) as { error?: string };
+    throw new RemoteFileError(err.error ?? `daemon returned ${resp.status}`, resp.status);
+  }
+  return await resp.json();
+}

package/src/views/users.ts

@@ -138,6 +138,7 @@ ${flashHtml}
 <div class="admin-nav">
   <a href="/admin/users">用户</a>
   <a href="/admin/tokens">所有 Token</a>
+  <a href="/admin/deliveries">Webhook 投递</a>
 </div>
 
 <form class="card" method="POST" action="/admin/users/create">

package/src/views/webhookDeliveries.ts

@@ -0,0 +1,92 @@
+import { type DeliveryWithWebhookRow } from "../webhooks";
+import { type UserRow } from "../store";
+import { THEME_CSS, escapeHtml, escapeAttr, tabNavHTML } from "../render/layout";
+
+function statusClass(status: number | null): string {
+  if (status === null) return "err";
+  if (status >= 200 && status < 300) return "ok";
+  if (status >= 400 && status < 500) return "warn";
+  return "err";
+}
+
+function deliveryRowHtml(d: DeliveryWithWebhookRow): string {
+  const status = d.response_status === null ? "—" : String(d.response_status);
+  const cls = statusClass(d.response_status);
+  const project = d.project_owner
+    ? `<a href="/${escapeAttr(d.project_owner)}/${escapeAttr(d.project_name ?? "")}">${escapeHtml(d.project_owner + "/" + (d.project_name ?? ""))}</a>`
+    : "<em>(deleted)</em>";
+  const url = d.webhook_url ? `<code class="url">${escapeHtml(d.webhook_url)}</code>` : "<em>(deleted)</em>";
+  const err = d.error ? `<div class="derr">${escapeHtml(d.error)}</div>` : "";
+  const body = d.response_body
+    ? `<details class="dbody"><summary>响应</summary><pre>${escapeHtml(d.response_body)}</pre></details>`
+    : "";
+  const payload = `<details class="dpl"><summary>payload</summary><pre>${escapeHtml(d.payload)}</pre></details>`;
+  return `<tr>
+    <td class="ts">${escapeHtml(d.created_at)}</td>
+    <td class="proj">${project}</td>
+    <td class="ev">${escapeHtml(d.event)}</td>
+    <td class="url">${url}</td>
+    <td class="st ${cls}">${status}</td>
+    <td class="ms">${d.duration_ms === null ? "—" : d.duration_ms + "ms"}</td>
+    <td class="act">${payload}${body}${err}</td>
+  </tr>`;
+}
+
+export function buildWebhookDeliveriesPage(viewer: UserRow, deliveries: DeliveryWithWebhookRow[]): string {
+  const rows = deliveries.length > 0
+    ? deliveries.map(deliveryRowHtml).join("")
+    : `<tr><td colspan="7" class="empty">暂无投递记录</td></tr>`;
+
+  const ok = deliveries.filter((d) => d.response_status !== null && d.response_status >= 200 && d.response_status < 300).length;
+  const fail = deliveries.filter((d) => d.response_status === null || d.response_status >= 400).length;
+  const summary = deliveries.length > 0
+    ? `<div class="summary"><span class="badge ok">${ok} 成功</span> <span class="badge ${fail > 0 ? "err" : ""}">${fail} 失败</span> <span class="muted">最近 ${deliveries.length} 条</span></div>`
+    : "";
+
+  return `<!doctype html>
+<html lang="zh"><head><meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<link rel="icon" type="image/svg+xml" href="/favicon.svg">
+<title>ework-web · Webhook 投递记录</title>
+<style>${THEME_CSS}
+.nav{display:flex;align-items:center;gap:.5rem;padding:.55rem 1rem;background:var(--header-bg);color:var(--header-text);font-size:13px}
+.nav a{color:var(--header-text);opacity:.95}
+.wrap{max-width:1100px;margin:0 auto;padding:1rem}
+h1{font-size:18px;margin:0 0 .3rem}
+.hint{color:var(--text-muted);font-size:13px;margin:0 0 1rem}
+.summary{margin-bottom:.8rem;display:flex;gap:.5rem;align-items:center}
+.badge{padding:2px 8px;border-radius:10px;font-size:12px;font-weight:600}
+.badge.ok{background:#3fb95033;color:#3fb950}
+.badge.err{background:#f8514933;color:#f85149}
+.muted{color:var(--text-muted);font-size:12px}
+.dtable{width:100%;border-collapse:collapse;font-size:12px}
+.dtable th,.dtable td{border:1px solid var(--border);padding:.3rem .4rem;text-align:left;vertical-align:top}
+.dtable th{background:var(--bg);color:var(--text-muted);font-weight:600;position:sticky;top:0}
+.dtable .ts{white-space:nowrap;font-family:ui-monospace,monospace}
+.dtable .proj{white-space:nowrap}
+.dtable .proj a{color:var(--accent)}
+.dtable .ev{white-space:nowrap;font-family:ui-monospace,monospace}
+.dtable .url{max-width:200px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.dtable .url code{font-family:ui-monospace,monospace;font-size:11px;color:var(--text-muted)}
+.dtable .st.ok{color:#3fb950;font-weight:600}
+.dtable .st.warn{color:#d29922;font-weight:600}
+.dtable .st.err{color:#f85149;font-weight:600}
+.dtable .ms{color:var(--text-muted);white-space:nowrap}
+.dbody pre,.dpl pre{font-size:11px;max-height:240px;overflow:auto;background:var(--bg);padding:.4rem;border-radius:5px;border:1px solid var(--border);white-space:pre-wrap;word-break:break-all}
+.derr{color:#f85149;font-size:11px;margin-top:.2rem}
+.empty{color:var(--text-muted);text-align:center;padding:.6rem}
+.tabs{display:flex;gap:.3rem;padding:.5rem 1rem;border-bottom:1px solid var(--border);font-size:13px}
+.tab{padding:.3rem .7rem;border-radius:6px 6px 0 0;text-decoration:none;color:var(--text-muted)}
+.tab.active{background:var(--accent);color:#fff}
+</style></head><body>
+<header class="nav"><a href="/" style="color:var(--header-text)">🏠 ework-web</a></header>
+${tabNavHTML("projects", viewer)}
+<main class="wrap">
+<h1>Webhook 投递记录</h1>
+<p class="hint">所有项目的 webhook 投递历史。用于排查 "AI 没回应" 类问题 — 如果投递失败（红色状态码），daemon 根本没收到事件。</p>
+${summary}
+<table class="dtable"><thead><tr>
+  <th>时间</th><th>项目</th><th>事件</th><th>目标 URL</th><th>状态</th><th>耗时</th><th>详情</th>
+</tr></thead><tbody>${rows}</tbody></table>
+</main></body></html>`;
+}

package/src/webhooks.ts

@@ -177,6 +177,23 @@ export async function listDeliveries(webhookId: number, limit = 50): Promise<Web
   );
 }
 
+export interface DeliveryWithWebhookRow extends WebhookDeliveryRow {
+  webhook_url: string;
+  project_owner: string;
+  project_name: string;
+}
+
+export async function listAllRecentDeliveries(limit = 100): Promise<DeliveryWithWebhookRow[]> {
+  return await getDB().all<DeliveryWithWebhookRow>(
+    `SELECT d.*, w.url AS webhook_url, p.owner AS project_owner, p.name AS project_name
+     FROM {{webhook_deliveries}} d
+     LEFT JOIN {{webhooks}} w ON w.id = d.webhook_id
+     LEFT JOIN {{projects}} p ON p.id = w.project_id
+     ORDER BY d.id DESC LIMIT ?`,
+    [limit]
+  );
+}
+
 // ─── Payload builders (Gitea-compatible shape) ───────────────
 //
 // We populate the fields downstream consumers actually read (see Gitea's