ework-web 0.7.0 → 0.8.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ework-web",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "type": "module",
   "description": "ework-web — standalone multi-project issue tracker. Local SQLite-backed, no external API dependency. Bun + TypeScript + SSR HTML.",
   "license": "MIT",

package/src/coordination.ts

@@ -7,6 +7,16 @@ export interface DaemonInfo {
   endpoint: string;
 }
 
+export interface DaemonDetail {
+  id: number;
+  displayName: string;
+  endpoint: string;
+  capacity: number;
+  lastHeartbeat: string | null;
+  status: string;
+  registeredAt: string | null;
+}
+
 const HEARTBEAT_STALE_MS = 120_000;
 
 export async function getActiveDaemons(): Promise<DaemonInfo[]> {
@@ -30,3 +40,31 @@ export async function getActiveDaemons(): Promise<DaemonInfo[]> {
     return [];
   }
 }
+
+export async function listAllDaemons(): Promise<DaemonDetail[]> {
+  try {
+    const rows = await getDB().all<{
+      id: number;
+      display_name: string | null;
+      internal_endpoint: string;
+      capacity: number | null;
+      last_heartbeat: string | null;
+      status: string | null;
+      registered_at: string | null;
+    }>(
+      `SELECT id, display_name, internal_endpoint, capacity, last_heartbeat, status, registered_at FROM {{d_daemons}} ORDER BY id`,
+    );
+    return rows.map((r) => ({
+      id: r.id,
+      displayName: r.display_name ?? `daemon-${r.id}`,
+      endpoint: r.internal_endpoint,
+      capacity: r.capacity ?? 0,
+      lastHeartbeat: r.last_heartbeat,
+      status: r.status ?? "unknown",
+      registeredAt: r.registered_at,
+    }));
+  } catch (e) {
+    log.info(`coordination: list daemons failed (${e instanceof Error ? e.message : String(e)})`);
+    return [];
+  }
+}

package/src/index.ts

@@ -5,8 +5,8 @@ import { spawn } from "child_process";
 import { homedir } from "os";
 import { loadConfig, DB_OVERRIDABLE, parseOverride, resolveTtsBackend } from "./config";
 import type { Config } from "./config";
-import { setConfig, initDB } from "./db";
-import { getActiveDaemons } from "./coordination";
+import { setConfig, initDB, getDB } from "./db";
+import { getActiveDaemons, listAllDaemons } from "./coordination";
 import { testMysqlConnection, migrateSqliteToMysql, writeMysqlEnv, migrateMysqlToSqlite, writeSqliteEnv, migrateDaemonSqliteToMysql } from "./db-admin";
 import type { MysqlTargetOpts } from "./db-admin";
 import { checkAuth, makeAuthCookieHeader, clearAuthCookieHeader, loginHTML, sanitizeNext, ensureBootstrapAdmin, ensureBootstrapSystem, isReservedSystemLogin } from "./auth";
@@ -411,6 +411,7 @@ function chunkTextTTS(text: string, max = 120): string[] {
 async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean; user: UserRow | null }): Promise<Response> {
   if (url.pathname === "/static/app.js") return staticAsset("app.js", "text/javascript; charset=utf-8", req);
   if (url.pathname === "/static/db-wizard.js") return staticAsset("db-wizard.js", "text/javascript; charset=utf-8", req);
+  if (url.pathname === "/static/daemon-mgr.js") return staticAsset("daemon-mgr.js", "text/javascript; charset=utf-8", req);
   if (url.pathname === "/static/session.js") return staticAsset("session.js", "text/javascript; charset=utf-8", req);
   if (url.pathname === "/static/file.js") return staticAsset("file.js", "text/javascript; charset=utf-8", req);
   if (url.pathname === "/static/tts.js") return staticAsset("tts.js", "text/javascript; charset=utf-8", req);
@@ -831,6 +832,73 @@ async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean
     return json({ ...result, targetPath, restarting: true });
   }
 
+  if (req.method === "GET" && url.pathname === "/api/daemons") {
+    if (!ctx.user || ctx.user.is_admin !== 1) return json({ error: "admin required" }, 403);
+    return json(await listAllDaemons());
+  }
+
+  if (req.method === "POST" && url.pathname === "/api/daemons") {
+    if (!ctx.user || ctx.user.is_admin !== 1) return json({ error: "admin required" }, 403);
+    if (!rateLimit(`daemons-add:${ip}`, 5, 5 / 3600)) return json({ error: "rate limited" }, 429);
+    const payload = await req.json().catch(() => ({} as unknown));
+    const port = (payload && typeof payload === "object" && "port" in payload
+      ? (payload as { port?: unknown }).port
+      : undefined);
+    const args = ["add-daemon"];
+    if (typeof port === "number" && Number.isFinite(port) && port > 0 && port < 65536) {
+      args.push(String(Math.trunc(port)));
+    } else if (port !== undefined && port !== null) {
+      return json({ ok: false, error: "invalid port" }, 400);
+    }
+    let child: import("child_process").ChildProcessByStdio<null, import("stream").Readable, import("stream").Readable>;
+    try {
+      child = spawn("ework-aio", args, { stdio: ["ignore", "pipe", "pipe"] });
+    } catch {
+      return json({ ok: false, error: "ework-aio not found" });
+    }
+    const result = await new Promise<{ ok: boolean; output?: string; error?: string }>((resolve) => {
+      const ac = new AbortController();
+      const timer = setTimeout(() => {
+        ac.abort();
+        try { child.kill("SIGKILL"); } catch { /* already dead */ }
+      }, 30_000);
+      let stdout = "";
+      let stderr = "";
+      let settled = false;
+      const finish = (r: { ok: boolean; output?: string; error?: string }) => {
+        if (settled) return;
+        settled = true;
+        clearTimeout(timer);
+        resolve(r);
+      };
+      child.stdout.on("data", (b: Buffer) => { stdout += b.toString("utf-8"); });
+      child.stderr.on("data", (b: Buffer) => { stderr += b.toString("utf-8"); });
+      child.once("error", () => finish({ ok: false, error: "ework-aio not found" }));
+      child.once("exit", (code) => {
+        if (code === 0) finish({ ok: true, output: stdout });
+        else finish({ ok: false, error: stderr.trim() || `ework-aio add-daemon exited with code ${code}` });
+      });
+      ac.signal.addEventListener("abort", () => {
+        finish({ ok: false, error: "timeout: ework-aio add-daemon did not exit within 30s" });
+      });
+    });
+    return json(result, result.ok ? 200 : 422);
+  }
+
+  const daemonIdRe = /^\/api\/daemons\/(\d+)$/;
+  if (req.method === "DELETE" && daemonIdRe.test(url.pathname)) {
+    if (!ctx.user || ctx.user.is_admin !== 1) return json({ error: "admin required" }, 403);
+    const match = url.pathname.match(daemonIdRe);
+    const id = match ? Number(match[1]) : NaN;
+    if (!Number.isFinite(id)) return json({ error: "invalid id" }, 400);
+    try {
+      await getDB().run(`UPDATE {{d_daemons}} SET status = 'drained' WHERE id = ?`, [id]);
+    } catch (e) {
+      return json({ ok: false, error: errMsg(e) });
+    }
+    return json({ ok: true });
+  }
+
   if (url.pathname === "/settings") {
     if (req.method === "GET") {
       return html(buildSettingsPage(cfg, url.searchParams.get("saved") === "1", ctx.user!, await listCachedModels()).html);

package/src/static/daemon-mgr.js

@@ -0,0 +1,145 @@
+// Daemon cluster manager (settings page). External file because CSP
+// script-src 'self' blocks inline scripts — see index.ts SEC_HEADERS.
+(function () {
+  "use strict";
+  var listEl = document.getElementById('daemon-list');
+  if (!listEl) return;
+  var resultEl = document.getElementById('daemon-result');
+  var addBtn = document.getElementById('daemon-add');
+  var portInput = document.getElementById('daemon-port');
+  var refreshTimer = null;
+  var inFlight = false;
+
+  function esc(s) {
+    return String(s == null ? '' : s).replace(/[&<>"']/g, function (c) {
+      return { '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c];
+    });
+  }
+
+  function fmtTime(s) {
+    if (!s) return '—';
+    var t = Date.parse(String(s).includes('T') ? s : String(s).replace(' ', 'T') + 'Z');
+    if (Number.isNaN(t)) return esc(s);
+    var d = new Date(t);
+    var pad = function (n) { return n < 10 ? '0' + n : '' + n; };
+    return esc(d.getFullYear() + '-' + pad(d.getMonth() + 1) + '-' + pad(d.getDate()) +
+      ' ' + pad(d.getHours()) + ':' + pad(d.getMinutes()) + ':' + pad(d.getSeconds()));
+  }
+
+  function statusPill(status) {
+    var raw = String(status || 'unknown').toLowerCase();
+    var cls = raw === 'active' ? 'active' : raw === 'drained' ? 'drained' : (raw === 'dead' ? 'dead' : 'unknown');
+    return '<span class="pill ' + cls + '">' + esc(raw) + '</span>';
+  }
+
+  function render(daemons) {
+    if (!Array.isArray(daemons) || daemons.length === 0) {
+      listEl.innerHTML = '<div class="daemon-empty">暂无 daemon 注册。可在下方启动新实例。</div>';
+      return;
+    }
+    var rows = daemons.map(function (d) {
+      var stopBtn = String(d.status || '').toLowerCase() === 'active'
+        ? '<button type="button" class="stop" data-id="' + d.id + '">停止</button>'
+        : '';
+      return '<tr>' +
+        '<td class="cap">' + d.id + '</td>' +
+        '<td class="endpoint">' + esc(d.endpoint || '') + '</td>' +
+        '<td class="cap">' + esc(d.capacity != null ? d.capacity : '') + '</td>' +
+        '<td class="heartbeat">' + fmtTime(d.lastHeartbeat) + '</td>' +
+        '<td class="registered">' + fmtTime(d.registeredAt) + '</td>' +
+        '<td>' + statusPill(d.status) + '</td>' +
+        '<td>' + stopBtn + '</td>' +
+        '</tr>';
+    }).join('');
+    listEl.innerHTML =
+      '<table><thead><tr>' +
+      '<th>ID</th><th>Endpoint</th><th>容量</th><th>心跳</th><th>注册于</th><th>状态</th><th></th>' +
+      '</tr></thead><tbody>' + rows + '</tbody></table>';
+    listEl.querySelectorAll('button.stop').forEach(function (b) {
+      b.addEventListener('click', function () { stopDaemon(Number(b.getAttribute('data-id'))); });
+    });
+  }
+
+  function setResult(text, kind) {
+    if (!resultEl) return;
+    resultEl.className = 'db-result db-' + (kind === 'ok' ? 'ok' : kind === 'err' ? 'err' : 'loading');
+    resultEl.textContent = text;
+  }
+
+  async function loadDaemons() {
+    if (inFlight) return;
+    inFlight = true;
+    try {
+      var res = await fetch('/api/daemons', { headers: { 'Accept': 'application/json' } });
+      if (!res.ok) {
+        var errBody = await res.json().catch(function () { return { error: 'HTTP ' + res.status }; });
+        listEl.innerHTML = '<div class="daemon-empty">加载失败：' + esc(errBody.error || res.status) + '</div>';
+        return;
+      }
+      render(await res.json());
+    } catch (e) {
+      listEl.innerHTML = '<div class="daemon-empty">加载失败：' + esc(e.message || String(e)) + '</div>';
+    } finally {
+      inFlight = false;
+    }
+  }
+
+  async function addDaemon() {
+    if (addBtn) addBtn.disabled = true;
+    setResult('正在启动 daemon…', 'loading');
+    var body = {};
+    var portVal = portInput && portInput.value ? Number(portInput.value) : NaN;
+    if (portInput && portInput.value.trim() !== '' && Number.isFinite(portVal)) {
+      body.port = portVal;
+    }
+    try {
+      var res = await fetch('/api/daemons', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify(body)
+      });
+      var data = await res.json();
+      if (data.ok) {
+        setResult('✓ daemon 启动成功' + (data.output ? ':\n' + data.output : ''), 'ok');
+        if (portInput) portInput.value = '';
+        await loadDaemons();
+      } else {
+        setResult('✗ ' + (data.error || '未知错误'), 'err');
+      }
+    } catch (e) {
+      setResult('✗ ' + (e.message || String(e)), 'err');
+    } finally {
+      if (addBtn) addBtn.disabled = false;
+    }
+  }
+
+  async function stopDaemon(id) {
+    if (!confirm('确认停止 daemon #' + id + '？\n只会标记为 drained（不再接新任务），需手动 kill 进程。')) return;
+    setResult('正在标记 daemon #' + id + ' 为 drained…', 'loading');
+    try {
+      var res = await fetch('/api/daemons/' + id, { method: 'DELETE' });
+      var data = await res.json();
+      if (data.ok) {
+        setResult('✓ daemon #' + id + ' 已标记为 drained', 'ok');
+        await loadDaemons();
+      } else {
+        setResult('✗ ' + (data.error || '未知错误'), 'err');
+      }
+    } catch (e) {
+      setResult('✗ ' + (e.message || String(e)), 'err');
+    }
+  }
+
+  if (addBtn) addBtn.addEventListener('click', addDaemon);
+  document.addEventListener('visibilitychange', function () {
+    if (document.hidden) {
+      if (refreshTimer) { clearInterval(refreshTimer); refreshTimer = null; }
+    } else if (!refreshTimer) {
+      loadDaemons();
+      refreshTimer = setInterval(loadDaemons, 10000);
+    }
+  });
+
+  loadDaemons();
+  refreshTimer = setInterval(loadDaemons, 10000);
+})();

package/src/views/settings.ts

@@ -67,6 +67,21 @@ ${isMysql ? `<hr style="border:0;border-top:1px solid var(--border);margin:1rem
 </section>`;
 }
 
+function buildDaemonSection(viewer: UserRow): string {
+  if (viewer.is_admin !== 1) return "";
+  return `<section class="sg daemon-section">
+<h2>Daemon 集群</h2>
+<p class="db-badge">运行中的 daemon 实例。新 daemon 通过 <code>ework-aio add-daemon</code> 启动；停止只标记为 drained，需手动结束进程。</p>
+<div id="daemon-list" class="daemon-list">加载中…</div>
+<div class="db-controls">
+<label class="sf" style="margin:0"><span>端口（可选）</span><input type="number" id="daemon-port" min="1" max="65535" placeholder="自动分配" autocomplete="off"></label>
+<button type="button" id="daemon-add">添加 Daemon</button>
+</div>
+<div id="daemon-result" class="db-result"></div>
+<script src="/static/daemon-mgr.js"></script>
+</section>`;
+}
+
 export function buildSettingsPage(cfg: Config, saved: boolean, viewer: UserRow, models: CachedModel[]): { html: string } {
   const groups = SETTINGS_GROUPS.map(
     (g) =>
@@ -109,6 +124,20 @@ button.secondary{background:transparent;color:var(--text-muted);border:1px solid
 .db-result.db-loading{background:var(--bg);color:var(--text-muted)}
 .db-result.db-ok{background:rgba(40,167,69,.15);color:#5eb88a}
 .db-result.db-err{background:rgba(220,53,69,.15);color:#e87c7c}
+.daemon-list{margin-bottom:.7rem}
+.daemon-list table{width:100%;border-collapse:collapse;font-size:12px}
+.daemon-list th,.daemon-list td{padding:.35rem .4rem;border-bottom:1px solid var(--border);text-align:left;vertical-align:top}
+.daemon-list th{color:var(--text-muted);font-weight:normal;font-size:11px;text-transform:uppercase;letter-spacing:.03em}
+.daemon-list td.endpoint{font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:11px;word-break:break-all}
+.daemon-list td.cap{text-align:right;font-variant-numeric:tabular-nums}
+.daemon-list td.heartbeat,.daemon-list td.registered{color:var(--text-muted);font-size:11px;white-space:nowrap}
+.daemon-list .pill{display:inline-block;padding:.12rem .5rem;border-radius:99px;font-size:11px;line-height:1.4}
+.daemon-list .pill.active{background:rgba(40,167,69,.18);color:#5eb88a}
+.daemon-list .pill.drained{background:rgba(255,193,7,.18);color:#d4a942}
+.daemon-list .pill.dead,.daemon-list .pill.unknown{background:rgba(220,53,69,.18);color:#e87c7c}
+.daemon-list button.stop{padding:.25rem .6rem;font-size:11px;background:transparent;color:#e87c7c;border:1px solid rgba(220,53,69,.4)}
+.daemon-list button.stop:hover{background:rgba(220,53,69,.12)}
+.daemon-empty{color:var(--text-muted);font-size:13px;padding:.5rem 0}
 </style></head><body>
 <header class="nav"><a href="/" style="color:var(--header-text)">🏠 ework-web</a><span style="opacity:.8"> · 设置</span></header>
 <main class="wrap">
@@ -121,6 +150,7 @@ ${banner}
 ${modelRefreshForm}
 ${ttsLink}
 ${buildDbSection(viewer)}
+${buildDaemonSection(viewer)}
 </main></body></html>`;
   return { html };
 }