Polar
RU Sign in
rin
Public Open-source lightweight git hosting.
Code Issues Pull requests Releases 9 Activity

Initial commit: Polar - lightweight self-hosted Git server

99db92d Browse files
R rin · 2026-10-16 15:30 UTC
95 files changed +17314 -0
.gitattributes
+1 -0
... ... @@ -0,0 +1 @@
1 +* text=auto eol=lf
.gitignore
+23 -0
... ... @@ -0,0 +1,23 @@
1 +# Binaries and build output
2 +/dist/
3 +/polar
4 +/polar.exe
5 +*.exe
6 +*.test
7 +
8 +# Runtime data and local configuration
9 +/data/
10 +/polar.toml
11 +*.local.toml
12 +
13 +# Development scratch
14 +/.shots/
15 +/tmpdbg/
16 +/.tmp_*
17 +
18 +# Editors and OS
19 +.DS_Store
20 +Thumbs.db
21 +.idea/
22 +.vscode/
23 +*.swp
Dockerfile
+24 -0
... ... @@ -0,0 +1,24 @@
1 +# Stage 1: Build static Go binary
2 +FROM golang:1.23-alpine AS builder
3 +WORKDIR /src
4 +COPY go.mod go.sum ./
5 +RUN go mod download
6 +COPY . .
7 +RUN CGO_ENABLED=0 GOOS=linux go build -trimpath -ldflags="-s -w" -o /out/polar ./cmd/polar
8 +
9 +# Stage 2: Minimal runtime image with git
10 +FROM alpine:3.20
11 +RUN apk add --no-cache git ca-certificates tzdata && \
12 + adduser -D -u 10001 polar
13 +WORKDIR /app
14 +COPY --from=builder /out/polar /app/polar
15 +RUN mkdir -p /app/data && chown -R polar:polar /app
16 +
17 +USER polar
18 +EXPOSE 3000
19 +VOLUME ["/app/data"]
20 +
21 +HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
22 + CMD wget -qO- http://127.0.0.1:3000/healthz || exit 1
23 +
24 +ENTRYPOINT ["/app/polar"]
Makefile
+32 -0
... ... @@ -0,0 +1,32 @@
1 +.PHONY: build run dev css test lint build-all clean
2 +
3 +BINARY ?= polar
4 +TAILWIND_CLI ?= tailwindcss
5 +
6 +build:
7 + CGO_ENABLED=0 go build -trimpath -ldflags="-s -w" -o $(BINARY) ./cmd/polar
8 +
9 +run: build
10 + ./$(BINARY)
11 +
12 +dev:
13 + CGO_ENABLED=0 go run ./cmd/polar
14 +
15 +css:
16 + $(TAILWIND_CLI) -i ./assets/input.css -o ./internal/web/static/css/app.css --minify
17 +
18 +test:
19 + CGO_ENABLED=0 go test -v -race=false ./...
20 +
21 +lint:
22 + go vet ./...
23 +
24 +build-all:
25 + CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -trimpath -ldflags="-s -w" -o dist/polar-linux-amd64 ./cmd/polar
26 + CGO_ENABLED=0 GOOS=linux GOARCH=arm64 go build -trimpath -ldflags="-s -w" -o dist/polar-linux-arm64 ./cmd/polar
27 + CGO_ENABLED=0 GOOS=darwin GOARCH=amd64 go build -trimpath -ldflags="-s -w" -o dist/polar-darwin-amd64 ./cmd/polar
28 + CGO_ENABLED=0 GOOS=darwin GOARCH=arm64 go build -trimpath -ldflags="-s -w" -o dist/polar-darwin-arm64 ./cmd/polar
29 + CGO_ENABLED=0 GOOS=windows GOARCH=amd64 go build -trimpath -ldflags="-s -w" -o dist/polar-windows-amd64.exe ./cmd/polar
30 +
31 +clean:
32 + rm -rf $(BINARY) $(BINARY).exe dist/
README.md
+220 -0
... ... @@ -0,0 +1,220 @@
1 +# Polar
2 +
3 +**Lightweight self-hosted Git hosting in a single Go binary.**
4 +
5 +Polar is a small, fast alternative to heavyweight Git servers: push over HTTP, browse code, file issues, open pull requests, and publish releases — all served from one static binary with an embedded SQLite database and no external runtime dependencies.
6 +
7 +## Highlights
8 +
9 +- **One binary, zero dependencies** — `CGO_ENABLED=0` build, pure-Go SQLite (`modernc.org/sqlite`) in WAL mode, bare repositories stored on disk.
10 +- **Git Smart HTTP** — anonymous read access for public repositories, token-authenticated push, per-user personal access tokens, and browser-assisted sign-in via the OAuth 2.0 Device Authorization Grant (RFC 8628).
11 +- **Code browsing** — file tree, blob viewer with server-side syntax highlighting (Chroma), commit history, diffs, branches, tags, and zip archives.
12 +- **Collaboration** — issues with comments and open/close state; pull requests with comments, approvals and change requests; forks with cross-fork pull requests; per-repository collaborators with read/write roles; and releases with changelogs.
13 +- **Polished UI** — `html/template` + htmx, no SPA build step; Markdown rendered with Goldmark and sanitized with bluemonday; Hugeicons outline sprite; self-hosted Inter and JetBrains Mono fonts (Cyrillic subsets included).
14 +- **Command palette** — press `Ctrl+K` / `Cmd+K` for quick navigation and actions.
15 +- **Three themes** — Light (`#fff` background, `#111` foreground), Dark (`#111` background, `#fff` foreground), and System (follows the OS `prefers-color-scheme`). The choice is persisted in a `polar_theme` cookie so the server renders the correct `data-theme` on first paint — no flash of the wrong theme.
16 +- **Bilingual interface** — Russian and English, with a configurable default language.
17 +- **Practical security** — Argon2id password hashing, CSRF protection, rate-limited login and registration, session cookies, and revocable access tokens.
18 +
19 +## Quick Start
20 +
21 +### Build from source
22 +
23 +Requirements: Go (version per `go.mod`) and `git` available on the host.
24 +
25 +```bash
26 +CGO_ENABLED=0 go build -trimpath -ldflags="-s -w" -o polar ./cmd/polar
27 +./polar
28 +```
29 +
30 +Polar starts on `0.0.0.0:3000` and keeps its data in `./data`. Open http://localhost:3000 and register — **the first registered account becomes the administrator**. After that you can disable public registration or manage users from the admin panel.
31 +
32 +### Docker
33 +
34 +```bash
35 +docker compose up -d
36 +```
37 +
38 +Or without Compose:
39 +
40 +```bash
41 +docker build -t polar .
42 +docker run -d --name polar -p 3000:3000 -v "$PWD/data:/app/data" polar
43 +```
44 +
45 +### systemd
46 +
47 +```ini
48 +# /etc/systemd/system/polar.service
49 +[Unit]
50 +Description=Polar Self-Hosted Git Server
51 +After=network.target
52 +
53 +[Service]
54 +Type=simple
55 +User=polar
56 +Group=polar
57 +WorkingDirectory=/var/lib/polar
58 +ExecStart=/usr/local/bin/polar -config /etc/polar/polar.toml
59 +Environment=POLAR_STORAGE_DATA_DIR=/var/lib/polar/data
60 +Restart=on-failure
61 +
62 +[Install]
63 +WantedBy=multi-user.target
64 +```
65 +
66 +## Configuration
67 +
68 +Polar runs with sensible defaults and no config file. To customize, copy `polar.example.toml` to `polar.toml` (auto-detected in the working directory) or pass `-config /path/to/polar.toml`. Every setting can also be provided through environment variables, which take precedence over the file.
69 +
70 +```toml
71 +[server]
72 +host = "0.0.0.0"
73 +port = 3000
74 +base_url = "http://localhost:3000"
75 +
76 +[storage]
77 +data_dir = "./data"
78 +
79 +[auth]
80 +registration_enabled = true
81 +
82 +[landing]
83 +enabled = true
84 +default_lang = "en" # "en" or "ru"
85 +```
86 +
87 +| Environment variable | Description | Default |
88 +|---|---|---|
89 +| `POLAR_SERVER_HOST` | HTTP listen host | `0.0.0.0` |
90 +| `POLAR_SERVER_PORT` | HTTP listen port | `3000` |
91 +| `POLAR_SERVER_BASE_URL` | Public URL used for clone links | `http://localhost:3000` |
92 +| `POLAR_STORAGE_DATA_DIR` | Directory for the database and bare repositories | `./data` |
93 +| `POLAR_AUTH_REGISTRATION_ENABLED` | Allow public registration | `true` |
94 +| `POLAR_LANDING_ENABLED` | Serve the landing page at `/` | `true` |
95 +| `POLAR_LANDING_DEFAULT_LANG` | Default UI language (`ru` or `en`) | `ru` |
96 +| `POLAR_CONFIG` | Path to the configuration file | `polar.toml` if present |
97 +
98 +Short aliases are also accepted: `POLAR_HOST`, `POLAR_PORT`, `POLAR_BASE_URL`, `POLAR_DATA_DIR`.
99 +
100 +## Git over HTTP
101 +
102 +Clone a public repository:
103 +
104 +```bash
105 +git clone http://localhost:3000/rin/demo.git
106 +```
107 +
108 +Push using a personal access token (create one in **Settings → Access tokens**; it is shown once and looks like `polar_...`):
109 +
110 +```bash
111 +git clone http://localhost:3000/rin/demo.git
112 +cd demo
113 +git remote set-url origin http://rin:polar_XXXXXXXXXX@localhost:3000/rin/demo.git
114 +git push
115 +```
116 +
117 +When git asks for credentials, use your username as the login and the token as the password. Tokens can be revoked at any time from the settings page.
118 +
119 +### Browser-assisted sign-in (device flow)
120 +
121 +Instead of pasting a token, let the bundled credential helper obtain one through your browser. Polar implements the OAuth 2.0 Device Authorization Grant (RFC 8628):
122 +
123 +1. `git push` asks for credentials; the helper requests a device code from `POST /api/v1/device/code`.
124 +2. It opens `{base_url}/login/device?user_code=XXXX-XXXX` in your browser — sign in and approve (or deny) the request.
125 +3. The helper polls `POST /api/v1/device/token`, receives a personal access token, and caches it in `~/.polar/credentials.json`.
126 +
127 +Register the helper once, pointing the path at your Polar checkout:
128 +
129 +```bash
130 +# Linux / macOS
131 +git config --global credential.helper '!sh /path/to/polar/scripts/git-credential-polar.sh'
132 +
133 +# Windows (PowerShell)
134 +git config --global credential.helper "!powershell -NoProfile -ExecutionPolicy Bypass -File C:/path/to/polar/scripts/git-credential-polar.ps1"
135 +```
136 +
137 +Device codes expire after 15 minutes, are single-use, and the issued token can be revoked like any other. Set `POLAR_URL` to override the server address detected from the git remote.
138 +
139 +## Forks, Collaborators and Reviews
140 +
141 +**Forks.** The **Fork** button on any repository page copies the project to your account. Forking a fork re-roots the copy to the upstream repository, and every fork records its origin — the repository page shows a `forked from` line linking back. If you already have a fork, the button takes you to it instead of creating a duplicate.
142 +
143 +**Cross-fork pull requests.** Open a pull request from any branch of your fork into the base repository. The PR page marks the head repository, and merging a cross-fork pull request first fetches the head commits into the base repository, so no commits are lost.
144 +
145 +**Collaborators.** Repository owners and instance administrators manage access in **Settings → Collaborators**: add any registered account with a `read` or `write` role, change roles, or remove access at any time.
146 +
147 +**Reviews.** On an open pull request, reviewers submit an **Approve** or **Request changes** verdict — reviewing your own pull request is not allowed. Each reviewer has one current verdict, and the review panel lists them all.
148 +
149 +## Themes
150 +
151 +Polar ships exactly three themes, selectable from the theme switcher (or the command palette):
152 +
153 +| Theme | Background | Foreground |
154 +|---|---|---|
155 +| Light | `#fff` | `#111` |
156 +| Dark | `#111` | `#fff` |
157 +| System | follows the OS `prefers-color-scheme` | — |
158 +
159 +The active theme is saved to `localStorage` and a `polar_theme` cookie, so the server renders `<html data-theme="...">` immediately and there is no flash of the wrong theme on load.
160 +
161 +## Project Layout
162 +
163 +```
164 +polar/
165 +├── cmd/polar/main.go # Entry point, dependency wiring, graceful shutdown
166 +├── internal/
167 +│ ├── config/ # polar.toml + POLAR_* environment overrides
168 +│ ├── db/ # SQLite connection and migrations
169 +│ ├── auth/ # Sessions, CSRF, Argon2id, access tokens
170 +│ ├── user/ # User accounts and profiles
171 +│ ├── repo/ # Repositories, issues, pull requests, releases
172 +│ ├── git/ # Git plumbing (bare repos, commits, diffs)
173 +│ ├── i18n/ # Russian and English message catalogs
174 +│ └── web/
175 +│ ├── handlers/ # HTTP and Git Smart HTTP handlers
176 +│ ├── middleware/ # Auth, CSRF, rate limiting, i18n
177 +│ ├── views/ # html/template views
178 +│ └── static/ # go:embed assets (CSS, JS, fonts, icons)
179 +├── assets/input.css # Tailwind source for the generated stylesheet
180 +├── scripts/ # git credential helpers (device-flow sign-in)
181 +├── polar.example.toml
182 +├── Makefile
183 +├── Dockerfile
184 +└── docker-compose.yml
185 +```
186 +
187 +## Development
188 +
189 +```bash
190 +make dev # run locally
191 +make test # go test ./...
192 +make lint # go vet ./...
193 +make build # static binary with -trimpath -ldflags="-s -w"
194 +make build-all # cross-compile Linux/macOS/Windows binaries into dist/
195 +make css # rebuild internal/web/static/css/app.css (requires the Tailwind CLI)
196 +```
197 +
198 +All runtime assets are embedded with `go:embed` — the binary needs no external CDN or asset directory. See `THIRD_PARTY.md` for licenses of bundled assets (Hugeicons icons, Inter and JetBrains Mono fonts, htmx) and Go dependencies.
199 +
200 +## Data and Backups
201 +
202 +```
203 +data/
204 +├── polar.db # SQLite database (WAL mode)
205 +└── repos/ # Bare Git repositories, e.g. repos/rin/demo.git
206 +```
207 +
208 +Safe backup while Polar is running:
209 +
210 +```bash
211 +sqlite3 data/polar.db "VACUUM INTO 'data/polar-backup.db';"
212 +tar -czf polar-backup-$(date +%F).tar.gz data/polar-backup.db data/repos/
213 +rm data/polar-backup.db
214 +```
215 +
216 +To restore, stop Polar, replace `data/polar.db` and `data/repos/` with the backup contents, and start it again.
217 +
218 +## Health Check
219 +
220 +`GET /healthz` returns JSON with the database status — handy for Docker health checks and load balancers.
THIRD_PARTY.md
+56 -0
... ... @@ -0,0 +1,56 @@
1 +# Third-Party Licenses & Attributions
2 +
3 +Polar embeds all runtime assets into a single binary without external CDN requests. Below is the license information for all bundled third-party assets and libraries.
4 +
5 +---
6 +
7 +## 1. Hugeicons Free Icons (`@hugeicons/core-free-icons`)
8 +
9 +- **Source:** https://github.com/hugeicons/hugeicons-react / `@hugeicons/core-free-icons` (https://hugeicons.com)
10 +- **Usage in Polar:** Selected stroke icons exported as an inline SVG `<symbol>` sprite in `internal/web/static/icons/hugeicons-sprite.svg`.
11 +- **License:** MIT License
12 +
13 +```text
14 +MIT License
15 +
16 +Copyright (c) Hugeicons (https://hugeicons.com)
17 +
18 +Permission is hereby granted, free of charge, to any person obtaining a copy
19 +of this software and associated documentation files (the "Software"), to deal
20 +in the Software without restriction, including without limitation the rights
21 +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
22 +copies of the Software, and to permit persons to whom the Software is
23 +furnished to do so, subject to the following conditions:
24 +
25 +The above copyright notice and this permission notice shall be included in all
26 +copies or substantial portions of the Software.
27 +
28 +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
29 +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
30 +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
31 +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
32 +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
33 +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
34 +SOFTWARE.
35 +```
36 +
37 +---
38 +
39 +## 2. Fonts (Inter & JetBrains Mono)
40 +
41 +- **Inter** — Copyright (c) The Inter Project Authors (Rasmus Andersson), licensed under the **SIL Open Font License 1.1 (OFL-1.1)**.
42 +- **JetBrains Mono** — Copyright (c) JetBrains s.r.o., licensed under the **SIL Open Font License 1.1 (OFL-1.1)**.
43 +
44 +---
45 +
46 +## 3. Go Dependencies
47 +
48 +| Package | License | Purpose |
49 +|---|---|---|
50 +| `github.com/gofiber/fiber/v2` | MIT | HTTP router, middleware, static server |
51 +| `modernc.org/sqlite` | BSD-3-Clause | Pure-Go SQLite driver (no CGO) |
52 +| `github.com/BurntSushi/toml` | MIT | Configuration file (`polar.toml`) parser |
53 +| `golang.org/x/crypto` | BSD-3-Clause | Argon2id password hashing |
54 +| `github.com/yuin/goldmark` | MIT | CommonMark / GFM Markdown parser |
55 +| `github.com/microcosm-cc/bluemonday` | BSD-3-Clause | HTML sanitizer for rendered Markdown |
56 +| `github.com/alecthomas/chroma/v2` | MIT | Server-side syntax highlighting |
assets/input.css
+1354 -0
... ... @@ -0,0 +1,1354 @@
1 +/* Polar Design System — Minimalist Sidebar Layout, 3 Themes (light, dark, system) */
2 +
3 +@font-face {
4 + font-family: 'Inter';
5 + font-style: normal;
6 + font-weight: 400 600;
7 + font-display: swap;
8 + src: url('/static/fonts/Inter-Regular.woff2') format('woff2');
9 +}
10 +
11 +@font-face {
12 + font-family: 'Inter';
13 + font-style: normal;
14 + font-weight: 400 600;
15 + font-display: swap;
16 + src: url('/static/fonts/Inter-Cyrillic.woff2') format('woff2');
17 + unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
18 +}
19 +
20 +@font-face {
21 + font-family: 'JetBrains Mono';
22 + font-style: normal;
23 + font-weight: 400 600;
24 + font-display: swap;
25 + src: url('/static/fonts/JetBrainsMono-Regular.woff2') format('woff2');
26 +}
27 +
28 +:root,
29 +html[data-theme="light"] {
30 + --background: 0 0% 100%;
31 + --foreground: 0 0% 6.7%;
32 + --card: 0 0% 98%;
33 + --card-foreground: 0 0% 6.7%;
34 + --popover: 0 0% 100%;
35 + --popover-foreground: 0 0% 6.7%;
36 + --primary: 0 0% 6.7%;
37 + --primary-foreground: 0 0% 100%;
38 + --secondary: 0 0% 95%;
39 + --secondary-foreground: 0 0% 6.7%;
40 + --muted: 0 0% 95%;
41 + --muted-foreground: 0 0% 45%;
42 + --accent: 0 0% 93%;
43 + --accent-foreground: 0 0% 6.7%;
44 + --destructive: 0 72% 46%;
45 + --destructive-foreground: 0 0% 100%;
46 + --border: 0 0% 90%;
47 + --input: 0 0% 89%;
48 + --ring: 0 0% 6.7%;
49 + --radius: 0.45rem;
50 +
51 + --diff-add-bg: 142 70% 94%;
52 + --diff-add-fg: 142 76% 22%;
53 + --diff-del-bg: 0 86% 95%;
54 + --diff-del-fg: 0 72% 35%;
55 +
56 + --syntax-kw: 262 72% 42%;
57 + --syntax-str: 142 68% 28%;
58 + --syntax-cmt: 0 0% 46%;
59 + --syntax-fn: 215 80% 42%;
60 + --syntax-num: 24 85% 38%;
61 + --syntax-type: 190 78% 32%;
62 + --syntax-op: 0 0% 25%;
63 + color-scheme: light;
64 +}
65 +
66 +html[data-theme="dark"] {
67 + --background: 0 0% 6.7%;
68 + --foreground: 0 0% 100%;
69 + --card: 0 0% 9%;
70 + --card-foreground: 0 0% 100%;
71 + --popover: 0 0% 9.5%;
72 + --popover-foreground: 0 0% 100%;
73 + --primary: 0 0% 100%;
74 + --primary-foreground: 0 0% 6.7%;
75 + --secondary: 0 0% 13%;
76 + --secondary-foreground: 0 0% 100%;
77 + --muted: 0 0% 12%;
78 + --muted-foreground: 0 0% 65%;
79 + --accent: 0 0% 15%;
80 + --accent-foreground: 0 0% 100%;
81 + --destructive: 0 72% 58%;
82 + --destructive-foreground: 0 0% 98%;
83 + --border: 0 0% 16%;
84 + --input: 0 0% 17%;
85 + --ring: 0 0% 85%;
86 +
87 + --diff-add-bg: 142 50% 12%;
88 + --diff-add-fg: 142 70% 75%;
89 + --diff-del-bg: 0 55% 14%;
90 + --diff-del-fg: 0 80% 78%;
91 +
92 + --syntax-kw: 265 85% 78%;
93 + --syntax-str: 142 65% 70%;
94 + --syntax-cmt: 0 0% 54%;
95 + --syntax-fn: 210 90% 74%;
96 + --syntax-num: 32 90% 72%;
97 + --syntax-type: 188 80% 68%;
98 + --syntax-op: 0 0% 78%;
99 + color-scheme: dark;
100 +}
101 +
102 +@media (prefers-color-scheme: dark) {
103 + html[data-theme="system"] {
104 + --background: 0 0% 6.7%;
105 + --foreground: 0 0% 100%;
106 + --card: 0 0% 9%;
107 + --card-foreground: 0 0% 100%;
108 + --popover: 0 0% 9.5%;
109 + --popover-foreground: 0 0% 100%;
110 + --primary: 0 0% 100%;
111 + --primary-foreground: 0 0% 6.7%;
112 + --secondary: 0 0% 13%;
113 + --secondary-foreground: 0 0% 100%;
114 + --muted: 0 0% 12%;
115 + --muted-foreground: 0 0% 65%;
116 + --accent: 0 0% 15%;
117 + --accent-foreground: 0 0% 100%;
118 + --destructive: 0 72% 58%;
119 + --destructive-foreground: 0 0% 98%;
120 + --border: 0 0% 16%;
121 + --input: 0 0% 17%;
122 + --ring: 0 0% 85%;
123 + --diff-add-bg: 142 50% 12%;
124 + --diff-add-fg: 142 70% 75%;
125 + --diff-del-bg: 0 55% 14%;
126 + --diff-del-fg: 0 80% 78%;
127 + --syntax-kw: 265 85% 78%;
128 + --syntax-str: 142 65% 70%;
129 + --syntax-cmt: 0 0% 54%;
130 + --syntax-fn: 210 90% 74%;
131 + --syntax-num: 32 90% 72%;
132 + --syntax-type: 188 80% 68%;
133 + --syntax-op: 0 0% 78%;
134 + color-scheme: dark;
135 + }
136 +}
137 +
138 +*, *::before, *::after {
139 + box-sizing: border-box;
140 + border-color: hsl(var(--border));
141 +}
142 +
143 +html {
144 + font-family: 'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
145 + font-size: 13.5px;
146 + line-height: 1.5;
147 + -webkit-font-smoothing: antialiased;
148 + background-color: hsl(var(--background));
149 + color: hsl(var(--foreground));
150 + overflow-y: scroll;
151 +}
152 +
153 +body {
154 + margin: 0;
155 + min-height: 100vh;
156 + background-color: hsl(var(--background));
157 + color: hsl(var(--foreground));
158 +}
159 +
160 +code, pre, kbd, .font-mono {
161 + font-family: 'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
162 +}
163 +
164 +a {
165 + color: inherit;
166 + text-decoration: none;
167 +}
168 +
169 +@media (prefers-reduced-motion: reduce) {
170 + *, *::before, *::after {
171 + animation-duration: 0.01ms !important;
172 + transition-duration: 0.01ms !important;
173 + }
174 +}
175 +
176 +:focus-visible {
177 + outline: 2px solid hsl(var(--ring));
178 + outline-offset: 2px;
179 +}
180 +
181 +/* App Shell: Left Sidebar + Right Main Content */
182 +.app-shell {
183 + display: flex;
184 + flex-direction: row;
185 + align-items: stretch;
186 + min-height: 100vh;
187 + width: 100%;
188 +}
189 +
190 +.app-sidebar {
191 + width: 236px;
192 + min-width: 236px;
193 + max-width: 236px;
194 + flex: 0 0 236px;
195 + border-right: 1px solid hsl(var(--border));
196 + background-color: hsl(var(--card));
197 + display: none;
198 + flex-direction: column;
199 + justify-content: space-between;
200 + position: sticky;
201 + top: 0;
202 + height: 100vh;
203 + overflow-y: auto;
204 + overflow-x: hidden;
205 + padding: 0.85rem 0.75rem;
206 + user-select: none;
207 + transition:
208 + width 200ms cubic-bezier(0.16, 1, 0.3, 1),
209 + min-width 200ms cubic-bezier(0.16, 1, 0.3, 1),
210 + max-width 200ms cubic-bezier(0.16, 1, 0.3, 1),
211 + flex-basis 200ms cubic-bezier(0.16, 1, 0.3, 1),
212 + padding 200ms cubic-bezier(0.16, 1, 0.3, 1),
213 + border-color 200ms cubic-bezier(0.16, 1, 0.3, 1);
214 +}
215 +
216 +.sidebar-inner {
217 + width: 218px;
218 + min-width: 218px;
219 + height: 100%;
220 + display: flex;
221 + flex-direction: column;
222 + justify-content: space-between;
223 + transition:
224 + opacity 150ms cubic-bezier(0.16, 1, 0.3, 1),
225 + transform 200ms cubic-bezier(0.16, 1, 0.3, 1);
226 +}
227 +
228 +html[data-sidebar="collapsed"] .app-sidebar {
229 + width: 0;
230 + min-width: 0;
231 + max-width: 0;
232 + flex-basis: 0;
233 + padding-left: 0;
234 + padding-right: 0;
235 + border-right-color: transparent;
236 +}
237 +
238 +html[data-sidebar="collapsed"] .sidebar-inner {
239 + opacity: 0;
240 + transform: translateX(-8px);
241 + pointer-events: none;
242 +}
243 +
244 +.sidebar-expand-btn {
245 + position: fixed;
246 + top: 0.85rem;
247 + left: 0.85rem;
248 + z-index: 50;
249 + display: none;
250 + align-items: center;
251 + justify-content: center;
252 + width: 2rem;
253 + height: 2rem;
254 + border-radius: var(--radius);
255 + border: 1px solid hsl(var(--border));
256 + background-color: hsl(var(--card));
257 + color: hsl(var(--muted-foreground));
258 + box-shadow: 0 2px 8px rgba(0, 0, 0, 0.12);
259 + cursor: pointer;
260 + opacity: 0;
261 + transform: translateX(-6px) scale(0.95);
262 + pointer-events: none;
263 + transition:
264 + opacity 160ms cubic-bezier(0.16, 1, 0.3, 1),
265 + transform 160ms cubic-bezier(0.16, 1, 0.3, 1),
266 + background-color 120ms ease,
267 + color 120ms ease;
268 +}
269 +
270 +.sidebar-expand-btn:hover {
271 + background-color: hsl(var(--accent));
272 + color: hsl(var(--foreground));
273 +}
274 +
275 +.mobile-topbar {
276 + display: flex;
277 + align-items: center;
278 + justify-content: space-between;
279 + height: 2.75rem;
280 + padding: 0 0.85rem;
281 + border-bottom: 1px solid hsl(var(--border));
282 + background-color: hsl(var(--card));
283 +}
284 +
285 +.app-col {
286 + flex: 1 1 0%;
287 + min-width: 0;
288 + width: 100%;
289 + display: flex;
290 + flex-direction: column;
291 + min-height: 100vh;
292 +}
293 +
294 +.app-main {
295 + flex: 1 1 auto;
296 + width: 100%;
297 + padding: 1.5rem 1.25rem 3rem;
298 +}
299 +
300 +@keyframes pageFadeIn {
301 + from {
302 + opacity: 0;
303 + transform: translateY(4px);
304 + }
305 + to {
306 + opacity: 1;
307 + transform: translateY(0);
308 + }
309 +}
310 +
311 +.app-main > .container,
312 +.app-main > .container-narrow {
313 + animation: pageFadeIn 160ms cubic-bezier(0.16, 1, 0.3, 1);
314 +}
315 +
316 +@media (min-width: 640px) {
317 + .app-sidebar {
318 + display: flex;
319 + }
320 + .sidebar-expand-btn {
321 + display: inline-flex;
322 + }
323 + html[data-sidebar="collapsed"] .sidebar-expand-btn {
324 + opacity: 1;
325 + transform: translateX(0) scale(1);
326 + pointer-events: auto;
327 + }
328 + .mobile-topbar {
329 + display: none;
330 + }
331 + .app-main {
332 + padding: 2rem 2.5rem 3.5rem;
333 + }
334 +}
335 +
336 +/* Unified Container Width — identical across Code, Commits, and Settings */
337 +.container,
338 +.container-narrow {
339 + width: 100%;
340 + max-width: 960px;
341 + margin-left: auto;
342 + margin-right: auto;
343 +}
344 +
345 +/* Sidebar Navigation */
346 +.nav-item {
347 + display: flex;
348 + align-items: center;
349 + justify-content: space-between;
350 + gap: 0.5rem;
351 + height: 1.95rem;
352 + padding: 0 0.55rem;
353 + border-radius: var(--radius);
354 + font-size: 0.85rem;
355 + color: hsl(var(--muted-foreground));
356 + transition: background-color 140ms ease, color 140ms ease, transform 120ms cubic-bezier(0.16, 1, 0.3, 1);
357 + cursor: pointer;
358 + border: 0;
359 + background: transparent;
360 + width: 100%;
361 + text-align: left;
362 + overflow: hidden;
363 +}
364 +.nav-item:hover,
365 +.nav-item.active {
366 + background-color: hsl(var(--accent));
367 + color: hsl(var(--foreground));
368 +}
369 +.nav-item:active {
370 + transform: scale(0.985);
371 +}
372 +.nav-section-label {
373 + display: flex;
374 + align-items: center;
375 + justify-content: space-between;
376 + padding: 0.45rem 0.55rem 0.25rem;
377 + font-size: 0.7rem;
378 + font-weight: 600;
379 + text-transform: uppercase;
380 + letter-spacing: 0.04em;
381 + color: hsl(var(--muted-foreground));
382 +}
383 +
384 +/* Segmented Theme Control in Sidebar */
385 +.segmented {
386 + display: grid;
387 + grid-template-columns: repeat(3, minmax(0, 1fr));
388 + gap: 2px;
389 + padding: 2px;
390 + width: 100%;
391 + background-color: hsl(var(--muted));
392 + border: 1px solid hsl(var(--border));
393 + border-radius: var(--radius);
394 +}
395 +.segmented-btn {
396 + display: inline-flex;
397 + align-items: center;
398 + justify-content: center;
399 + gap: 0.25rem;
400 + height: 1.65rem;
401 + padding: 0 0.2rem;
402 + border: 0;
403 + border-radius: calc(var(--radius) - 2px);
404 + background: transparent;
405 + color: hsl(var(--muted-foreground));
406 + font-size: 0.72rem;
407 + font-weight: 500;
408 + cursor: pointer;
409 + overflow: hidden;
410 + text-overflow: ellipsis;
411 + white-space: nowrap;
412 + transition: background-color 150ms cubic-bezier(0.16, 1, 0.3, 1), color 150ms ease, box-shadow 150ms ease, transform 120ms ease;
413 +}
414 +.segmented-btn:hover {
415 + color: hsl(var(--foreground));
416 +}
417 +.segmented-btn:active {
418 + transform: scale(0.96);
419 +}
420 +.segmented-btn.active {
421 + background-color: hsl(var(--background));
422 + color: hsl(var(--foreground));
423 + box-shadow: 0 1px 2px rgba(0, 0, 0, 0.08);
424 +}
425 +
426 +/* Icons */
427 +.icon {
428 + display: inline-block;
429 + vertical-align: middle;
430 + flex-shrink: 0;
431 + stroke: currentColor;
432 +}
433 +.size-3 { width: 0.75rem; height: 0.75rem; }
434 +.size-3\.5 { width: 0.875rem; height: 0.875rem; }
435 +.size-4 { width: 1rem; height: 1rem; }
436 +.size-5 { width: 1.25rem; height: 1.25rem; }
437 +.size-6 { width: 1.5rem; height: 1.5rem; }
438 +
439 +/* Buttons */
440 +.btn {
441 + display: inline-flex;
442 + align-items: center;
443 + justify-content: center;
444 + gap: 0.4rem;
445 + white-space: nowrap;
446 + border-radius: var(--radius);
447 + font-size: 0.85rem;
448 + font-weight: 500;
449 + line-height: 1;
450 + height: 1.95rem;
451 + padding: 0 0.7rem;
452 + border: 1px solid transparent;
453 + cursor: pointer;
454 + transition: background-color 140ms ease, border-color 140ms ease, color 140ms ease, opacity 140ms ease, transform 120ms cubic-bezier(0.16, 1, 0.3, 1);
455 + user-select: none;
456 +}
457 +.btn:active:not(:disabled) {
458 + transform: scale(0.97);
459 +}
460 +.btn:disabled {
461 + opacity: 0.5;
462 + pointer-events: none;
463 +}
464 +.btn-sm {
465 + height: 1.7rem;
466 + padding: 0 0.5rem;
467 + font-size: 0.78rem;
468 +}
469 +.btn-lg {
470 + height: 2.3rem;
471 + padding: 0 1rem;
472 + font-size: 0.92rem;
473 +}
474 +.btn-icon {
475 + width: 1.9rem;
476 + height: 1.9rem;
477 + padding: 0;
478 +}
479 +.btn-default, .btn-primary {
480 + background-color: hsl(var(--primary));
481 + color: hsl(var(--primary-foreground));
482 +}
483 +.btn-default:hover, .btn-primary:hover {
484 + opacity: 0.9;
485 +}
486 +.btn-secondary {
487 + background-color: hsl(var(--secondary));
488 + color: hsl(var(--secondary-foreground));
489 + border-color: hsl(var(--border));
490 +}
491 +.btn-secondary:hover {
492 + background-color: hsl(var(--accent));
493 +}
494 +.btn-outline {
495 + background-color: transparent;
496 + color: hsl(var(--foreground));
497 + border-color: hsl(var(--border));
498 +}
499 +.btn-outline:hover {
500 + background-color: hsl(var(--accent));
501 + color: hsl(var(--accent-foreground));
502 +}
503 +.btn-ghost {
504 + background-color: transparent;
505 + color: hsl(var(--muted-foreground));
506 +}
507 +.btn-ghost:hover {
508 + background-color: hsl(var(--accent));
509 + color: hsl(var(--foreground));
510 +}
511 +.btn-destructive {
512 + background-color: hsl(var(--destructive));
513 + color: hsl(var(--destructive-foreground));
514 +}
515 +.btn-destructive:hover {
516 + opacity: 0.9;
517 +}
518 +
519 +/* Inputs, Selects, Textareas */
520 +.input, .select, .textarea {
521 + display: block;
522 + width: 100%;
523 + border-radius: var(--radius);
524 + border: 1px solid hsl(var(--input));
525 + background-color: hsl(var(--background));
526 + color: hsl(var(--foreground));
527 + font-size: 0.85rem;
528 + padding: 0.35rem 0.6rem;
529 + transition: border-color 100ms ease;
530 +}
531 +.input, .select {
532 + height: 2.05rem;
533 +}
534 +.textarea {
535 + min-height: 4rem;
536 + resize: vertical;
537 +}
538 +.input:focus, .select:focus, .textarea:focus {
539 + outline: none;
540 + border-color: hsl(var(--ring));
541 +}
542 +.input::placeholder, .textarea::placeholder {
543 + color: hsl(var(--muted-foreground));
544 +}
545 +.label {
546 + display: block;
547 + font-size: 0.8rem;
548 + font-weight: 500;
549 + margin-bottom: 0.3rem;
550 + color: hsl(var(--foreground));
551 +}
552 +.field-hint {
553 + font-size: 0.74rem;
554 + color: hsl(var(--muted-foreground));
555 + margin-top: 0.25rem;
556 +}
557 +
558 +/* Switch */
559 +.switch {
560 + position: relative;
561 + display: inline-flex;
562 + width: 2.1rem;
563 + height: 1.2rem;
564 + flex-shrink: 0;
565 + cursor: pointer;
566 + align-items: center;
567 + border-radius: 9999px;
568 + border: 1px solid hsl(var(--border));
569 + background-color: hsl(var(--muted));
570 +}
571 +.switch input {
572 + opacity: 0;
573 + width: 0;
574 + height: 0;
575 + position: absolute;
576 +}
577 +.switch-thumb {
578 + pointer-events: none;
579 + display: block;
580 + width: 0.85rem;
581 + height: 0.85rem;
582 + border-radius: 9999px;
583 + background-color: hsl(var(--foreground));
584 + transform: translateX(0.15rem);
585 + transition: transform 100ms ease;
586 +}
587 +.switch input:checked ~ .switch-thumb {
588 + transform: translateX(0.95rem);
589 +}
590 +
591 +/* Cards */
592 +.card {
593 + border-radius: var(--radius);
594 + border: 1px solid hsl(var(--border));
595 + background-color: hsl(var(--card));
596 + color: hsl(var(--card-foreground));
597 +}
598 +.card-header {
599 + padding: 0.7rem 0.9rem;
600 + border-bottom: 1px solid hsl(var(--border));
601 + display: flex;
602 + align-items: center;
603 + justify-content: space-between;
604 + gap: 0.75rem;
605 +}
606 +.card-body {
607 + padding: 0.9rem;
608 +}
609 +.card-footer {
610 + padding: 0.65rem 0.9rem;
611 + border-top: 1px solid hsl(var(--border));
612 + background-color: hsl(var(--muted) / 0.3);
613 +}
614 +
615 +/* Badges */
616 +.badge {
617 + display: inline-flex;
618 + align-items: center;
619 + gap: 0.25rem;
620 + border-radius: 9999px;
621 + border: 1px solid hsl(var(--border));
622 + padding: 0.08rem 0.45rem;
623 + font-size: 0.72rem;
624 + font-weight: 500;
625 + line-height: 1.3;
626 + color: hsl(var(--foreground));
627 + background-color: hsl(var(--secondary));
628 +}
629 +.badge-outline {
630 + background-color: transparent;
631 + color: hsl(var(--muted-foreground));
632 +}
633 +.badge-primary {
634 + background-color: hsl(var(--primary));
635 + color: hsl(var(--primary-foreground));
636 + border-color: transparent;
637 +}
638 +.badge-destructive {
639 + background-color: hsl(var(--destructive) / 0.12);
640 + color: hsl(var(--destructive));
641 + border-color: hsl(var(--destructive) / 0.3);
642 +}
643 +
644 +/* Kbd */
645 +kbd, .kbd {
646 + display: inline-flex;
647 + align-items: center;
648 + justify-content: center;
649 + min-width: 1.25rem;
650 + height: 1.15rem;
651 + padding: 0 0.28rem;
652 + font-size: 0.68rem;
653 + font-weight: 500;
654 + line-height: 1;
655 + color: hsl(var(--muted-foreground));
656 + background-color: hsl(var(--muted));
657 + border: 1px solid hsl(var(--border));
658 + border-radius: 0.25rem;
659 +}
660 +
661 +/* Avatar */
662 +.avatar {
663 + display: inline-flex;
664 + align-items: center;
665 + justify-content: center;
666 + width: 1.45rem;
667 + height: 1.45rem;
668 + border-radius: 9999px;
669 + background-color: hsl(var(--secondary));
670 + border: 1px solid hsl(var(--border));
671 + font-size: 0.7rem;
672 + font-weight: 600;
673 + color: hsl(var(--foreground));
674 + text-transform: uppercase;
675 + flex-shrink: 0;
676 +}
677 +.avatar-lg {
678 + width: 2.2rem;
679 + height: 2.2rem;
680 + font-size: 0.9rem;
681 +}
682 +
683 +/* Separator */
684 +.separator {
685 + height: 1px;
686 + width: 100%;
687 + background-color: hsl(var(--border));
688 + margin: 0.85rem 0;
689 + border: 0;
690 +}
691 +
692 +/* Tabs */
693 +.tabs-nav {
694 + display: flex;
695 + align-items: center;
696 + gap: 0.15rem;
697 + padding: 0.2rem;
698 + border: 1px solid hsl(var(--border));
699 + border-radius: 999px;
700 + background: hsl(var(--muted) / 0.25);
701 + margin-bottom: 1rem;
702 + overflow-x: auto;
703 +}
704 +.tab-link {
705 + display: inline-flex;
706 + align-items: center;
707 + gap: 0.35rem;
708 + padding: 0.38rem 0.8rem;
709 + font-size: 0.82rem;
710 + font-weight: 500;
711 + color: hsl(var(--muted-foreground));
712 + border-radius: 999px;
713 + white-space: nowrap;
714 + transition: color 100ms ease, background-color 100ms ease;
715 +}
716 +.tab-link:hover {
717 + color: hsl(var(--foreground));
718 +}
719 +.tab-link.active {
720 + color: hsl(var(--foreground));
721 + background: hsl(var(--card));
722 + box-shadow: 0 1px 2px hsl(0 0% 0% / 0.08);
723 +}
724 +
725 +/* Dense File List & Tables */
726 +.dense-list {
727 + width: 100%;
728 +}
729 +.dense-row {
730 + display: flex;
731 + align-items: center;
732 + justify-content: space-between;
733 + gap: 0.75rem;
734 + min-height: 2.05rem;
735 + padding: 0.25rem 0.75rem;
736 + border-bottom: 1px solid hsl(var(--border));
737 + font-size: 0.85rem;
738 + transition: background-color 80ms ease;
739 +}
740 +.dense-row:last-child {
741 + border-bottom: none;
742 +}
743 +.dense-row:hover {
744 + background-color: hsl(var(--accent) / 0.5);
745 +}
746 +
747 +.table-wrap {
748 + width: 100%;
749 + overflow-x: auto;
750 + border: 1px solid hsl(var(--border));
751 + border-radius: var(--radius);
752 + background-color: hsl(var(--card));
753 +}
754 +.table {
755 + width: 100%;
756 + border-collapse: collapse;
757 + font-size: 0.85rem;
758 +}
759 +.table th {
760 + text-align: left;
761 + font-weight: 500;
762 + color: hsl(var(--muted-foreground));
763 + padding: 0.5rem 0.75rem;
764 + border-bottom: 1px solid hsl(var(--border));
765 + background-color: hsl(var(--muted) / 0.35);
766 + font-size: 0.75rem;
767 +}
768 +.table td {
769 + padding: 0.5rem 0.75rem;
770 + border-bottom: 1px solid hsl(var(--border));
771 + vertical-align: middle;
772 +}
773 +.table tr:last-child td {
774 + border-bottom: none;
775 +}
776 +
777 +/* Breadcrumb */
778 +.breadcrumb {
779 + display: flex;
780 + align-items: center;
781 + flex-wrap: wrap;
782 + gap: 0.25rem;
783 + font-size: 0.85rem;
784 +}
785 +.breadcrumb-sep {
786 + color: hsl(var(--muted-foreground));
787 +}
788 +
789 +/* Dropdown Menu */
790 +@keyframes dropdownIn {
791 + from {
792 + opacity: 0;
793 + transform: translateY(-4px) scale(0.98);
794 + }
795 + to {
796 + opacity: 1;
797 + transform: translateY(0) scale(1);
798 + }
799 +}
800 +.dropdown {
801 + position: relative;
802 + display: inline-block;
803 +}
804 +.dropdown-menu {
805 + position: absolute;
806 + left: 0;
807 + top: calc(100% + 0.3rem);
808 + min-width: 11rem;
809 + background-color: hsl(var(--popover));
810 + color: hsl(var(--popover-foreground));
811 + border: 1px solid hsl(var(--border));
812 + border-radius: var(--radius);
813 + padding: 0.25rem;
814 + box-shadow: 0 8px 24px -4px rgba(0, 0, 0, 0.22);
815 + z-index: 60;
816 + display: none;
817 + transform-origin: top left;
818 +}
819 +.dropdown-menu.open {
820 + display: block;
821 + animation: dropdownIn 140ms cubic-bezier(0.16, 1, 0.3, 1);
822 +}
823 +.dropdown-item {
824 + display: flex;
825 + width: 100%;
826 + align-items: center;
827 + justify-content: space-between;
828 + gap: 0.5rem;
829 + padding: 0.35rem 0.55rem;
830 + font-size: 0.8rem;
831 + border-radius: calc(var(--radius) - 2px);
832 + color: hsl(var(--popover-foreground));
833 + background: transparent;
834 + border: 0;
835 + cursor: pointer;
836 + text-align: left;
837 + transition: background-color 120ms ease, color 120ms ease;
838 +}
839 +.dropdown-item:hover, .dropdown-item.active {
840 + background-color: hsl(var(--accent));
841 + color: hsl(var(--accent-foreground));
842 +}
843 +
844 +/* Modal / Dialog & Command Palette */
845 +@keyframes backdropIn {
846 + from { opacity: 0; }
847 + to { opacity: 1; }
848 +}
849 +@keyframes dialogIn {
850 + from {
851 + opacity: 0;
852 + transform: translateY(-6px) scale(0.97);
853 + }
854 + to {
855 + opacity: 1;
856 + transform: translateY(0) scale(1);
857 + }
858 +}
859 +.backdrop {
860 + position: fixed;
861 + inset: 0;
862 + background-color: rgba(0, 0, 0, 0.55);
863 + backdrop-filter: blur(2px);
864 + z-index: 80;
865 + display: none;
866 + align-items: flex-start;
867 + justify-content: center;
868 + padding: 10vh 1rem 2rem;
869 +}
870 +.backdrop.open {
871 + display: flex;
872 + animation: backdropIn 140ms ease;
873 +}
874 +.dialog-box {
875 + width: 100%;
876 + max-width: 28rem;
877 + background-color: hsl(var(--popover));
878 + color: hsl(var(--popover-foreground));
879 + border: 1px solid hsl(var(--border));
880 + border-radius: var(--radius);
881 + box-shadow: 0 16px 40px -8px rgba(0, 0, 0, 0.35);
882 + overflow: hidden;
883 + animation: dialogIn 170ms cubic-bezier(0.16, 1, 0.3, 1);
884 +}
885 +.palette-box {
886 + width: 100%;
887 + max-width: 34rem;
888 + background-color: hsl(var(--popover));
889 + color: hsl(var(--popover-foreground));
890 + border: 1px solid hsl(var(--border));
891 + border-radius: var(--radius);
892 + box-shadow: 0 16px 48px -8px rgba(0, 0, 0, 0.4);
893 + overflow: hidden;
894 + animation: dialogIn 170ms cubic-bezier(0.16, 1, 0.3, 1);
895 +}
896 +.palette-input-wrap {
897 + display: flex;
898 + align-items: center;
899 + gap: 0.6rem;
900 + padding: 0.6rem 0.8rem;
901 + border-bottom: 1px solid hsl(var(--border));
902 +}
903 +.palette-input {
904 + width: 100%;
905 + border: 0;
906 + background: transparent;
907 + color: hsl(var(--foreground));
908 + font-size: 0.9rem;
909 + outline: none;
910 +}
911 +.palette-list {
912 + max-height: 20rem;
913 + overflow-y: auto;
914 + padding: 0.3rem;
915 +}
916 +.palette-group-title {
917 + padding: 0.3rem 0.5rem 0.15rem;
918 + font-size: 0.68rem;
919 + font-weight: 600;
920 + text-transform: uppercase;
921 + letter-spacing: 0.04em;
922 + color: hsl(var(--muted-foreground));
923 +}
924 +.palette-item {
925 + display: flex;
926 + width: 100%;
927 + align-items: center;
928 + justify-content: space-between;
929 + gap: 0.5rem;
930 + padding: 0.4rem 0.55rem;
931 + border-radius: calc(var(--radius) - 2px);
932 + font-size: 0.85rem;
933 + color: hsl(var(--foreground));
934 + cursor: pointer;
935 + border: 0;
936 + background: transparent;
937 + text-align: left;
938 + transition: background-color 100ms ease, color 100ms ease;
939 +}
940 +.palette-item:hover, .palette-item.selected {
941 + background-color: hsl(var(--accent));
942 + color: hsl(var(--accent-foreground));
943 +}
944 +
945 +/* Toast */
946 +@keyframes toastIn {
947 + from {
948 + opacity: 0;
949 + transform: translateY(8px) scale(0.97);
950 + }
951 + to {
952 + opacity: 1;
953 + transform: translateY(0) scale(1);
954 + }
955 +}
956 +.toast-container {
957 + position: fixed;
958 + bottom: 1rem;
959 + right: 1rem;
960 + z-index: 90;
961 + display: flex;
962 + flex-direction: column;
963 + gap: 0.4rem;
964 + max-width: 20rem;
965 +}
966 +.toast {
967 + display: flex;
968 + align-items: center;
969 + justify-content: space-between;
970 + gap: 0.65rem;
971 + padding: 0.5rem 0.75rem;
972 + border-radius: var(--radius);
973 + border: 1px solid hsl(var(--border));
974 + background-color: hsl(var(--popover));
975 + color: hsl(var(--popover-foreground));
976 + box-shadow: 0 8px 24px -4px rgba(0, 0, 0, 0.25);
977 + font-size: 0.8rem;
978 + animation: toastIn 180ms cubic-bezier(0.16, 1, 0.3, 1);
979 +}
980 +
981 +/* Skeleton */
982 +@keyframes pulse {
983 + 0%, 100% { opacity: 1; }
984 + 50% { opacity: 0.45; }
985 +}
986 +.skeleton {
987 + background-color: hsl(var(--muted));
988 + border-radius: calc(var(--radius) - 2px);
989 + animation: pulse 1.6s ease-in-out infinite;
990 +}
991 +
992 +/* Empty State */
993 +.empty-state {
994 + text-align: center;
995 + padding: 2rem 1rem;
996 + border: 1px dashed hsl(var(--border));
997 + border-radius: var(--radius);
998 + color: hsl(var(--muted-foreground));
999 +}
1000 +
1001 +/* Code Viewer & Chroma */
1002 +.code-table {
1003 + width: 100%;
1004 + border-collapse: collapse;
1005 + font-family: 'JetBrains Mono', monospace;
1006 + font-size: 0.8rem;
1007 + line-height: 1.5;
1008 +}
1009 +.code-ln {
1010 + width: 1%;
1011 + min-width: 2.75rem;
1012 + padding: 0 0.65rem;
1013 + text-align: right;
1014 + color: hsl(var(--muted-foreground) / 0.6);
1015 + user-select: none;
1016 + vertical-align: top;
1017 + border-right: 1px solid hsl(var(--border));
1018 +}
1019 +.code-line {
1020 + padding: 0 0.75rem;
1021 + white-space: pre;
1022 + overflow-x: auto;
1023 +}
1024 +.chroma .k, .chroma .kc, .chroma .kd, .chroma .kn, .chroma .kp, .chroma .kr { color: hsl(var(--syntax-kw)); font-weight: 500; }
1025 +.chroma .kt { color: hsl(var(--syntax-type)); }
1026 +.chroma .s, .chroma .sa, .chroma .sb, .chroma .sc, .chroma .dl, .chroma .sd, .chroma .s2, .chroma .se, .chroma .sh, .chroma .si, .chroma .sx, .chroma .sr, .chroma .s1, .chroma .ss { color: hsl(var(--syntax-str)); }
1027 +.chroma .c, .chroma .ch, .chroma .cm, .chroma .c1, .chroma .cs, .chroma .cp, .chroma .cpf { color: hsl(var(--syntax-cmt)); font-style: italic; }
1028 +.chroma .nf, .chroma .fm, .chroma .nx { color: hsl(var(--syntax-fn)); }
1029 +.chroma .m, .chroma .mb, .chroma .mf, .chroma .mh, .chroma .mi, .chroma .il, .chroma .mo { color: hsl(var(--syntax-num)); }
1030 +.chroma .o, .chroma .ow { color: hsl(var(--syntax-op)); }
1031 +
1032 +/* Diff Viewer */
1033 +.diff-table {
1034 + width: 100%;
1035 + border-collapse: collapse;
1036 + font-family: 'JetBrains Mono', monospace;
1037 + font-size: 0.78rem;
1038 + line-height: 1.5;
1039 +}
1040 +.diff-row-add {
1041 + background-color: hsl(var(--diff-add-bg));
1042 + color: hsl(var(--diff-add-fg));
1043 +}
1044 +.diff-row-del {
1045 + background-color: hsl(var(--diff-del-bg));
1046 + color: hsl(var(--diff-del-fg));
1047 +}
1048 +.diff-row-hunk {
1049 + background-color: hsl(var(--muted));
1050 + color: hsl(var(--muted-foreground));
1051 +}
1052 +.diff-num {
1053 + width: 2.75rem;
1054 + padding: 0 0.45rem;
1055 + text-align: right;
1056 + user-select: none;
1057 + opacity: 0.65;
1058 + border-right: 1px solid hsl(var(--border));
1059 +}
1060 +.diff-code {
1061 + padding: 0 0.65rem;
1062 + white-space: pre-wrap;
1063 + word-break: break-all;
1064 +}
1065 +
1066 +/* Markdown Body */
1067 +.markdown-body {
1068 + font-size: 0.9rem;
1069 + line-height: 1.6;
1070 + color: hsl(var(--foreground));
1071 +}
1072 +.markdown-body h1, .markdown-body h2, .markdown-body h3, .markdown-body h4 {
1073 + margin-top: 1.25em;
1074 + margin-bottom: 0.45em;
1075 + font-weight: 600;
1076 + line-height: 1.25;
1077 +}
1078 +.markdown-body h1 { font-size: 1.35rem; padding-bottom: 0.25rem; border-bottom: 1px solid hsl(var(--border)); }
1079 +.markdown-body h2 { font-size: 1.15rem; padding-bottom: 0.2rem; border-bottom: 1px solid hsl(var(--border)); }
1080 +.markdown-body h3 { font-size: 1rem; }
1081 +.markdown-body h1:first-child, .markdown-body h2:first-child { margin-top: 0; }
1082 +.markdown-body p, .markdown-body ul, .markdown-body ol, .markdown-body pre, .markdown-body blockquote {
1083 + margin-top: 0;
1084 + margin-bottom: 0.8rem;
1085 +}
1086 +.markdown-body code {
1087 + background-color: hsl(var(--muted));
1088 + padding: 0.12rem 0.3rem;
1089 + border-radius: 0.25rem;
1090 + font-size: 0.84em;
1091 +}
1092 +.markdown-body pre {
1093 + background-color: hsl(var(--muted) / 0.6);
1094 + border: 1px solid hsl(var(--border));
1095 + border-radius: var(--radius);
1096 + padding: 0.75rem 0.9rem;
1097 + overflow-x: auto;
1098 +}
1099 +.markdown-body pre code {
1100 + background: transparent;
1101 + padding: 0;
1102 +}
1103 +.markdown-body a {
1104 + text-decoration: underline;
1105 + text-underline-offset: 3px;
1106 +}
1107 +
1108 +/* Utility Helpers */
1109 +.flex { display: flex; }
1110 +.block { display: block; }
1111 +.inline-flex { display: inline-flex; }
1112 +.grid { display: grid; }
1113 +.hidden { display: none; }
1114 +.items-center { align-items: center; }
1115 +.items-start { align-items: flex-start; }
1116 +.items-baseline { align-items: baseline; }
1117 +.justify-between { justify-content: space-between; }
1118 +.justify-center { justify-content: center; }
1119 +.justify-end { justify-content: flex-end; }
1120 +.flex-col { flex-direction: column; }
1121 +.flex-wrap { flex-wrap: wrap; }
1122 +.flex-1 { flex: 1 1 0%; }
1123 +.flex-shrink-0 { flex-shrink: 0; }
1124 +.min-w-0 { min-width: 0; }
1125 +.gap-0\.5 { gap: 0.125rem; }
1126 +.gap-1 { gap: 0.25rem; }
1127 +.gap-1\.5 { gap: 0.375rem; }
1128 +.gap-2 { gap: 0.5rem; }
1129 +.gap-2\.5 { gap: 0.625rem; }
1130 +.gap-3 { gap: 0.75rem; }
1131 +.gap-4 { gap: 1rem; }
1132 +.gap-6 { gap: 1.5rem; }
1133 +.w-full { width: 100%; }
1134 +.text-xs { font-size: 0.75rem; }
1135 +.text-sm { font-size: 0.85rem; }
1136 +.text-base { font-size: 0.96rem; }
1137 +.text-lg { font-size: 1.1rem; }
1138 +.text-xl { font-size: 1.25rem; }
1139 +.text-2xl { font-size: 1.5rem; }
1140 +.font-medium { font-weight: 500; }
1141 +.font-semibold { font-weight: 600; }
1142 +.font-bold { font-weight: 700; }
1143 +.uppercase { text-transform: uppercase; }
1144 +.tracking-tight { letter-spacing: -0.015em; }
1145 +.text-muted { color: hsl(var(--muted-foreground)); }
1146 +.text-destructive { color: hsl(var(--destructive)); }
1147 +.text-foreground { color: hsl(var(--foreground)); }
1148 +.text-center { text-align: center; }
1149 +.truncate { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
1150 +.hover\:underline:hover { text-decoration: underline; }
1151 +.select-all { user-select: all; }
1152 +.cursor-pointer { cursor: pointer; }
1153 +.mt-0\.5 { margin-top: 0.125rem; }
1154 +.mt-1 { margin-top: 0.25rem; }
1155 +.mt-2 { margin-top: 0.5rem; }
1156 +.mt-3 { margin-top: 0.75rem; }
1157 +.mt-4 { margin-top: 1rem; }
1158 +.mt-6 { margin-top: 1.5rem; }
1159 +.mr-2 { margin-right: 0.5rem; }
1160 +.mb-1 { margin-bottom: 0.25rem; }
1161 +.mb-1\.5 { margin-bottom: 0.375rem; }
1162 +.mb-2 { margin-bottom: 0.5rem; }
1163 +.mb-3 { margin-bottom: 0.75rem; }
1164 +.mb-4 { margin-bottom: 1rem; }
1165 +.mb-6 { margin-bottom: 1.5rem; }
1166 +.p-2 { padding: 0.5rem; }
1167 +.p-3 { padding: 0.75rem; }
1168 +.p-4 { padding: 1rem; }
1169 +.px-3 { padding-left: 0.75rem; padding-right: 0.75rem; }
1170 +.py-2 { padding-top: 0.5rem; padding-bottom: 0.5rem; }
1171 +.pt-2 { padding-top: 0.5rem; }
1172 +.pt-3 { padding-top: 0.75rem; }
1173 +.pb-3 { padding-bottom: 0.75rem; }
1174 +
1175 +.grid-2 { display: grid; grid-template-columns: repeat(1, minmax(0, 1fr)); gap: 0.85rem; }
1176 +.grid-3 { display: grid; grid-template-columns: repeat(1, minmax(0, 1fr)); gap: 0.85rem; }
1177 +.grid-4 { display: grid; grid-template-columns: repeat(1, minmax(0, 1fr)); gap: 0.85rem; }
1178 +
1179 +@media (min-width: 768px) {
1180 + .grid-2 { grid-template-columns: repeat(2, minmax(0, 1fr)); }
1181 + .grid-3 { grid-template-columns: repeat(3, minmax(0, 1fr)); }
1182 + .grid-4 { grid-template-columns: repeat(2, minmax(0, 1fr)); }
1183 + .md-flex { display: flex !important; }
1184 + .md-hidden { display: none !important; }
1185 +}
1186 +
1187 +/* Mobile Drawer */
1188 +.mobile-drawer {
1189 + position: fixed;
1190 + inset: 0;
1191 + z-index: 75;
1192 + background-color: rgba(0, 0, 0, 0.5);
1193 + display: none;
1194 +}
1195 +.mobile-drawer.open {
1196 + display: block;
1197 +}
1198 +.mobile-drawer-panel {
1199 + width: 224px;
1200 + max-width: 85vw;
1201 + height: 100%;
1202 + background-color: hsl(var(--card));
1203 + border-right: 1px solid hsl(var(--border));
1204 + padding: 0.75rem 0.65rem;
1205 + display: flex;
1206 + flex-direction: column;
1207 + justify-content: space-between;
1208 +}
1209 +
1210 +@media (min-width: 1024px) {
1211 + .grid-4 { grid-template-columns: repeat(4, minmax(0, 1fr)); }
1212 +}
1213 +
1214 +/* ── Polar repository shell ─────────────────────────────────────────── */
1215 +.repo-banner {
1216 + position: relative;
1217 + display: flex;
1218 + align-items: flex-start;
1219 + justify-content: space-between;
1220 + gap: 1rem;
1221 + flex-wrap: wrap;
1222 + padding: 0.9rem 1rem 0.95rem;
1223 + background: hsl(var(--card));
1224 + border: 1px solid hsl(var(--border));
1225 + border-radius: calc(var(--radius) * 1.6);
1226 + overflow: hidden;
1227 +}
1228 +.repo-banner::before {
1229 + content: "";
1230 + position: absolute;
1231 + inset: 0 0 auto 0;
1232 + height: 2px;
1233 + background: linear-gradient(90deg, hsl(var(--primary)), hsl(var(--primary) / 0) 65%);
1234 +}
1235 +.repo-banner-main {
1236 + display: flex;
1237 + align-items: center;
1238 + gap: 0.7rem;
1239 + min-width: 0;
1240 + flex: 1 1 20rem;
1241 +}
1242 +.repo-banner-actions {
1243 + display: flex;
1244 + align-items: center;
1245 + gap: 0.4rem;
1246 + flex-wrap: wrap;
1247 +}
1248 +
1249 +.repo-stats {
1250 + display: flex;
1251 + align-items: center;
1252 + gap: 0.4rem;
1253 + flex-wrap: wrap;
1254 +}
1255 +.stat-chip {
1256 + display: inline-flex;
1257 + align-items: center;
1258 + gap: 0.4rem;
1259 + height: 1.85rem;
1260 + padding: 0 0.7rem;
1261 + border: 1px solid hsl(var(--border));
1262 + border-radius: 999px;
1263 + background: hsl(var(--card));
1264 + font-size: 0.78rem;
1265 + color: hsl(var(--muted-foreground));
1266 + white-space: nowrap;
1267 + transition: border-color 120ms ease, color 120ms ease;
1268 +}
1269 +.stat-chip b {
1270 + color: hsl(var(--foreground));
1271 + font-weight: 600;
1272 +}
1273 +.stat-chip:hover {
1274 + color: hsl(var(--foreground));
1275 + border-color: hsl(var(--primary) / 0.55);
1276 +}
1277 +
1278 +.repo-layout {
1279 + display: grid;
1280 + grid-template-columns: minmax(0, 1fr) 305px;
1281 + gap: 1.1rem;
1282 + align-items: start;
1283 +}
1284 +.repo-main {
1285 + min-width: 0;
1286 +}
1287 +.repo-side {
1288 + display: flex;
1289 + flex-direction: column;
1290 + gap: 0.9rem;
1291 + position: sticky;
1292 + top: 0.75rem;
1293 +}
1294 +.side-card {
1295 + border: 1px solid hsl(var(--border));
1296 + border-radius: calc(var(--radius) * 1.3);
1297 + background: hsl(var(--card));
1298 + overflow: hidden;
1299 +}
1300 +.side-card-header {
1301 + display: flex;
1302 + align-items: center;
1303 + gap: 0.4rem;
1304 + padding: 0.5rem 0.8rem;
1305 + font-size: 0.78rem;
1306 + font-weight: 600;
1307 + border-bottom: 1px solid hsl(var(--border));
1308 + background: hsl(var(--muted) / 0.3);
1309 +}
1310 +.side-card-body {
1311 + display: flex;
1312 + flex-direction: column;
1313 + gap: 0.55rem;
1314 + padding: 0.7rem 0.8rem;
1315 + font-size: 0.8rem;
1316 +}
1317 +.meta-row {
1318 + display: flex;
1319 + align-items: center;
1320 + justify-content: space-between;
1321 + gap: 0.5rem;
1322 + color: hsl(var(--muted-foreground));
1323 +}
1324 +.meta-row a,
1325 +.meta-row b {
1326 + color: hsl(var(--foreground));
1327 +}
1328 +.clone-box {
1329 + display: flex;
1330 + align-items: center;
1331 + gap: 0.35rem;
1332 + border: 1px solid hsl(var(--border));
1333 + border-radius: var(--radius);
1334 + background: hsl(var(--muted) / 0.25);
1335 + padding: 0.15rem 0.25rem 0.15rem 0.6rem;
1336 + min-width: 0;
1337 +}
1338 +.clone-box code {
1339 + flex: 1;
1340 + min-width: 0;
1341 + overflow: hidden;
1342 + text-overflow: ellipsis;
1343 + white-space: nowrap;
1344 + font-size: 0.72rem;
1345 +}
1346 +@media (max-width: 1000px) {
1347 + .repo-layout {
1348 + grid-template-columns: 1fr;
1349 + }
1350 + .repo-side {
1351 + position: static;
1352 + order: -1;
1353 + }
1354 +}
cmd/polar/main.go
+97 -0
... ... @@ -0,0 +1,97 @@
1 +package main
2 +
3 +import (
4 + "context"
5 + "flag"
6 + "log/slog"
7 + "os"
8 + "os/signal"
9 + "runtime/debug"
10 + "syscall"
11 + "time"
12 +
13 + "polar/internal/auth"
14 + "polar/internal/config"
15 + "polar/internal/db"
16 + "polar/internal/repo"
17 + "polar/internal/user"
18 + "polar/internal/web/handlers"
19 + "polar/internal/web/views"
20 +
21 + "github.com/gofiber/fiber/v2"
22 +)
23 +
24 +func main() {
25 + configPath := flag.String("config", "", "path to polar.toml configuration file")
26 + flag.Parse()
27 +
28 + logger := slog.New(slog.NewTextHandler(os.Stdout, &slog.HandlerOptions{
29 + Level: slog.LevelInfo,
30 + }))
31 + slog.SetDefault(logger)
32 +
33 + cfg, err := config.Load(*configPath)
34 + if err != nil {
35 + logger.Error("failed to load configuration", "err", err)
36 + os.Exit(1)
37 + }
38 +
39 + if err := os.MkdirAll(cfg.ReposDir(), 0o755); err != nil {
40 + logger.Error("failed to create repositories directory", "path", cfg.ReposDir(), "err", err)
41 + os.Exit(1)
42 + }
43 +
44 + ctx := context.Background()
45 + database, err := db.Open(ctx, cfg.DBPath(), cfg.Auth.RegistrationEnabled)
46 + if err != nil {
47 + logger.Error("failed to initialize database", "path", cfg.DBPath(), "err", err)
48 + os.Exit(1)
49 + }
50 + defer func() { _ = database.Close() }()
51 +
52 + authSvc := auth.NewService(database)
53 + userSvc := user.NewService(database)
54 + repoSvc := repo.NewService(database, cfg.ReposDir())
55 +
56 + viewsEngine, err := views.NewEngine()
57 + if err != nil {
58 + logger.Error("failed to initialize template engine", "err", err)
59 + os.Exit(1)
60 + }
61 +
62 + app := fiber.New(fiber.Config{
63 + AppName: "Polar Git Server",
64 + DisableStartupMessage: true,
65 + BodyLimit: 100 * 1024 * 1024, // 100 MB for git pack pushes
66 + ReadTimeout: 60 * time.Second,
67 + WriteTimeout: 120 * time.Second,
68 + })
69 +
70 + h := handlers.New(cfg, database, authSvc, userSvc, repoSvc, viewsEngine, logger)
71 + h.RegisterRoutes(app)
72 + debug.FreeOSMemory()
73 +
74 + errCh := make(chan error, 1)
75 + go func() {
76 + logger.Info("Polar server starting",
77 + "addr", cfg.Addr(),
78 + "base_url", cfg.Server.BaseURL,
79 + "data_dir", cfg.Storage.DataDir,
80 + )
81 + if err := app.Listen(cfg.Addr()); err != nil {
82 + errCh <- err
83 + }
84 + }()
85 +
86 + sigCh := make(chan os.Signal, 1)
87 + signal.Notify(sigCh, os.Interrupt, syscall.SIGTERM)
88 +
89 + select {
90 + case sig := <-sigCh:
91 + logger.Info("shutting down gracefully", "signal", sig.String())
92 + _ = app.ShutdownWithTimeout(10 * time.Second)
93 + case err := <-errCh:
94 + logger.Error("server exited with error", "err", err)
95 + os.Exit(1)
96 + }
97 +}
docker-compose.yml
+17 -0
... ... @@ -0,0 +1,17 @@
1 +services:
2 + polar:
3 + build: .
4 + container_name: polar
5 + restart: unless-stopped
6 + ports:
7 + - "3000:3000"
8 + environment:
9 + POLAR_SERVER_HOST: "0.0.0.0"
10 + POLAR_SERVER_PORT: "3000"
11 + POLAR_SERVER_BASE_URL: "http://localhost:3000"
12 + POLAR_STORAGE_DATA_DIR: "/app/data"
13 + POLAR_AUTH_REGISTRATION_ENABLED: "true"
14 + POLAR_LANDING_ENABLED: "true"
15 + POLAR_LANDING_DEFAULT_LANG: "ru"
16 + volumes:
17 + - ./data:/app/data
go.mod
+37 -0
... ... @@ -0,0 +1,37 @@
1 +module polar
2 +
3 +go 1.27.1
4 +
5 +require (
6 + github.com/BurntSushi/toml v1.6.0
7 + github.com/alecthomas/chroma/v2 v2.27.0
8 + github.com/gofiber/fiber/v2 v2.52.15
9 + github.com/microcosm-cc/bluemonday v1.0.27
10 + github.com/yuin/goldmark v1.8.6
11 + golang.org/x/crypto v0.58.0
12 + modernc.org/sqlite v1.60.1
13 +)
14 +
15 +require (
16 + github.com/andybalholm/brotli v1.1.0 // indirect
17 + github.com/aymerick/douceur v0.2.0 // indirect
18 + github.com/dlclark/regexp2/v2 v2.2.1 // indirect
19 + github.com/dustin/go-humanize v1.0.1 // indirect
20 + github.com/google/uuid v1.6.0 // indirect
21 + github.com/gorilla/css v1.0.1 // indirect
22 + github.com/klauspost/compress v1.17.9 // indirect
23 + github.com/mattn/go-colorable v0.1.13 // indirect
24 + github.com/mattn/go-isatty v0.0.24 // indirect
25 + github.com/mattn/go-runewidth v0.0.16 // indirect
26 + github.com/ncruces/go-strftime v1.0.0 // indirect
27 + github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
28 + github.com/rivo/uniseg v0.2.0 // indirect
29 + github.com/valyala/bytebufferpool v1.0.0 // indirect
30 + github.com/valyala/fasthttp v1.51.0 // indirect
31 + github.com/valyala/tcplisten v1.0.0 // indirect
32 + golang.org/x/net v0.60.0 // indirect
33 + golang.org/x/sys v0.49.0 // indirect
34 + modernc.org/libc v1.77.1 // indirect
35 + modernc.org/mathutil v1.7.1 // indirect
36 + modernc.org/memory v1.12.1 // indirect
37 +)
go.sum
+94 -0
... ... @@ -0,0 +1,94 @@
1 +github.com/BurntSushi/toml v1.6.0 h1:dRaEfpa2VI55EwlIW72hMRHdWouJeRF7TPYhI+AUQjk=
2 +github.com/BurntSushi/toml v1.6.0/go.mod h1:ukJfTF/6rtPPRCnwkur4qwRxa8vTRFBF0uk2lLoLwho=
3 +github.com/alecthomas/assert/v2 v2.11.0 h1:2Q9r3ki8+JYXvGsDyBXwH3LcJ+WK5D0gc5E8vS6K3D0=
4 +github.com/alecthomas/assert/v2 v2.11.0/go.mod h1:Bze95FyfUr7x34QZrjL+XP+0qgp/zg8yS+TtBj1WA3k=
5 +github.com/alecthomas/chroma/v2 v2.27.0 h1:FodwmyOBgJULFYmDqibcp9pvfDLWdtPRh9v/r5BXYZs=
6 +github.com/alecthomas/chroma/v2 v2.27.0/go.mod h1:NjJ3ciIgrqBNeIkWZ4e46nseoLDslxU1LmfCoL+wcY8=
7 +github.com/alecthomas/repr v0.5.2 h1:SU73FTI9D1P5UNtvseffFSGmdNci/O6RsqzeXJtP0Qs=
8 +github.com/alecthomas/repr v0.5.2/go.mod h1:Fr0507jx4eOXV7AlPV6AVZLYrLIuIeSOWtW57eE/O/4=
9 +github.com/andybalholm/brotli v1.1.0 h1:eLKJA0d02Lf0mVpIDgYnqXcUn0GqVmEFny3VuID1U3M=
10 +github.com/andybalholm/brotli v1.1.0/go.mod h1:sms7XGricyQI9K10gOSf56VKKWS4oLer58Q+mhRPtnY=
11 +github.com/aymerick/douceur v0.2.0 h1:Mv+mAeH1Q+n9Fr+oyamOlAkUNPWPlA8PPGR0QAaYuPk=
12 +github.com/aymerick/douceur v0.2.0/go.mod h1:wlT5vV2O3h55X9m7iVYN0TBM0NH/MmbLnd30/FjWUq4=
13 +github.com/dlclark/regexp2/v2 v2.2.1 h1:mf4KkFUj0gJuarK8P+LgiS+Lit7m9N1yAwEfPbee7R0=
14 +github.com/dlclark/regexp2/v2 v2.2.1/go.mod h1:avUrQvPaLz2DrFNHJF0taWAFFX2C1GMSSoeiqFjcBmU=
15 +github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY=
16 +github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto=
17 +github.com/gofiber/fiber/v2 v2.52.15 h1:Cov1uKeVPyu9q0jSrN60W+A8XNX+/WK8J7cy5osHLIk=
18 +github.com/gofiber/fiber/v2 v2.52.15/go.mod h1:YEcBbO/FB+5M1IZNBP9FO3J9281zgPAreiI1oqg8nDw=
19 +github.com/google/pprof v0.0.0-20260802141513-ef3492d7dac3 h1:LMLX+LgTNWpfvCBdFebv6EsYotImrt/Ppc5cXIriCSo=
20 +github.com/google/pprof v0.0.0-20260802141513-ef3492d7dac3/go.mod h1:jl5iWTm0/hd5PjEYEOuwAJ57L/CibdZfrqZ5XA5GrCk=
21 +github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
22 +github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
23 +github.com/gorilla/css v1.0.1 h1:ntNaBIghp6JmvWnxbZKANoLyuXTPZ4cAMlo6RyhlbO8=
24 +github.com/gorilla/css v1.0.1/go.mod h1:BvnYkspnSzMmwRK+b8/xgNPLiIuNZr6vbZBTPQ2A3b0=
25 +github.com/hashicorp/golang-lru/v2 v2.0.7 h1:a+bsQ5rvGLjzHuww6tVxozPZFVghXaHOwFs4luLUK2k=
26 +github.com/hashicorp/golang-lru/v2 v2.0.7/go.mod h1:QeFd9opnmA6QUJc5vARoKUSoFhyfM2/ZepoAG6RGpeM=
27 +github.com/hexops/gotextdiff v1.0.3 h1:gitA9+qJrrTCsiCl7+kh75nPqQt1cx4ZkudSTLoUqJM=
28 +github.com/hexops/gotextdiff v1.0.3/go.mod h1:pSWU5MAI3yDq+fZBTazCSJysOMbxWL1BSow5/V2vxeg=
29 +github.com/klauspost/compress v1.17.9 h1:6KIumPrER1LHsvBVuDa0r5xaG0Es51mhhB9BQB2qeMA=
30 +github.com/klauspost/compress v1.17.9/go.mod h1:Di0epgTjJY877eYKx5yC51cX2A2Vl2ibi7bDH9ttBbw=
31 +github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=
32 +github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg=
33 +github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=
34 +github.com/mattn/go-isatty v0.0.24 h1:tGZZoVgT/KiqK1c8ocVLeDS8BSWMRd47J3Lbz7vsReI=
35 +github.com/mattn/go-isatty v0.0.24/go.mod h1:nMCL3Zebbrt45jsMDgnfIwz6ydEQApk5oEI3HqDio6A=
36 +github.com/mattn/go-runewidth v0.0.16 h1:E5ScNMtiwvlvB5paMFdw9p4kSQzbXFikJ5SQO6TULQc=
37 +github.com/mattn/go-runewidth v0.0.16/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w=
38 +github.com/microcosm-cc/bluemonday v1.0.27 h1:MpEUotklkwCSLeH+Qdx1VJgNqLlpY2KXwXFM08ygZfk=
39 +github.com/microcosm-cc/bluemonday v1.0.27/go.mod h1:jFi9vgW+H7c3V0lb6nR74Ib/DIB5OBs92Dimizgw2cA=
40 +github.com/ncruces/go-strftime v1.0.0 h1:HMFp8mLCTPp341M/ZnA4qaf7ZlsbTc+miZjCLOFAw7w=
41 +github.com/ncruces/go-strftime v1.0.0/go.mod h1:Fwc5htZGVVkseilnfgOVb9mKy6w1naJmn9CehxcKcls=
42 +github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec h1:W09IVJc94icq4NjY3clb7Lk8O1qJ8BdBEF8z0ibU0rE=
43 +github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec/go.mod h1:qqbHyh8v60DhA7CoWK5oRCqLrMHRGoxYCSS9EjAz6Eo=
44 +github.com/rivo/uniseg v0.2.0 h1:S1pD9weZBuJdFmowNwbpi7BJ8TNftyUImj/0WQi72jY=
45 +github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=
46 +github.com/valyala/bytebufferpool v1.0.0 h1:GqA5TC/0021Y/b9FG4Oi9Mr3q7XYx6KllzawFIhcdPw=
47 +github.com/valyala/bytebufferpool v1.0.0/go.mod h1:6bBcMArwyJ5K/AmCkWv1jt77kVWyCJ6HpOuEn7z0Csc=
48 +github.com/valyala/fasthttp v1.51.0 h1:8b30A5JlZ6C7AS81RsWjYMQmrZG6feChmgAolCl1SqA=
49 +github.com/valyala/fasthttp v1.51.0/go.mod h1:oI2XroL+lI7vdXyYoQk03bXBThfFl2cVdIA3Xl7cH8g=
50 +github.com/valyala/tcplisten v1.0.0 h1:rBHj/Xf+E1tRGZyWIWwJDiRY0zc1Js+CV5DqwacVSA8=
51 +github.com/valyala/tcplisten v1.0.0/go.mod h1:T0xQ8SeCZGxckz9qRXTfG43PvQ/mcWh7FwZEA7Ioqkc=
52 +github.com/yuin/goldmark v1.8.6 h1:d0VcaP1sx9GkFVkoW+KtggpGi2KZ965i14b0+bDQST4=
53 +github.com/yuin/goldmark v1.8.6/go.mod h1:ip/1k0VRfGynBgxOz0yCqHrbZXhcjxyuS66Brc7iBKg=
54 +golang.org/x/crypto v0.58.0 h1:COkYLr4k7nDI4r6QtMML2AfzeIswWHAJthLS6K/M/54=
55 +golang.org/x/crypto v0.58.0/go.mod h1:Xh+kl5A+M0gMiWDytH2Hhr5Z7WbNCpv/eB/EFgfSk+w=
56 +golang.org/x/mod v0.41.0 h1:qJmnOUb4YB+FsEuM3HcWucdZASCPGhsX6uljO6pog0c=
57 +golang.org/x/mod v0.41.0/go.mod h1:Ek9pY8RKWXwsWvd3rQiHYtMqkjSUV+s1Rj7j4H5Ur6o=
58 +golang.org/x/net v0.60.0 h1:79p50tfZlm0J9YfoDsSi639qSXNGVwEzOPLCxM2FsYU=
59 +golang.org/x/net v0.60.0/go.mod h1:2DA/G1UfVbCpQPeWTmMPGY7Cs2PkBkwu743bVX5PIVg=
60 +golang.org/x/sync v0.23.0 h1:KameEIfc1IkluZyXWLn39Wd4tURc6GbCiISGiZm2bQk=
61 +golang.org/x/sync v0.23.0/go.mod h1:sUUOizhqBxiL6pEWpqNLUiaJn1ShEbZ6BBqskPbjZm0=
62 +golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
63 +golang.org/x/sys v0.49.0 h1:XbzkgYJHdqh/8m2Uu0W/dQv8nktxx4BFHp1M0gROTXA=
64 +golang.org/x/sys v0.49.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og=
65 +golang.org/x/tools v0.50.0 h1:c2ifzfcuY7L90lZ2aKd8S4K2NpASF08SZx9ZuJkHmSU=
66 +golang.org/x/tools v0.50.0/go.mod h1:7ulVMw3831Mwi5EZD6RomGyffr4VFjuNYXf2BbCEAV0=
67 +modernc.org/cc/v4 v4.29.7 h1:q+NXGJ0bK3b4TXFYQQVr9pYETGnmwFWkrUzJnMya/Tg=
68 +modernc.org/cc/v4 v4.29.7/go.mod h1:OnovgIhbbMXMu1aISnJ0wvVD1KnW+cAUJkIrAWh+kVI=
69 +modernc.org/ccgo/v4 v4.36.1 h1:ZNIUZAryN0UgnJwtyxrdEzcFc3yD4Cu4AzjfPXsLsIE=
70 +modernc.org/ccgo/v4 v4.36.1/go.mod h1:rrtGc2QkS239nYb/mQNuBMyjq3/y3ZXWbBjPoV3wqzA=
71 +modernc.org/fileutil v1.4.0 h1:j6ZzNTftVS054gi281TyLjHPp6CPHr2KCxEXjEbD6SM=
72 +modernc.org/fileutil v1.4.0/go.mod h1:EqdKFDxiByqxLk8ozOxObDSfcVOv/54xDs/DUHdvCUU=
73 +modernc.org/gc/v2 v2.6.5 h1:nyqdV8q46KvTpZlsw66kWqwXRHdjIlJOhG6kxiV/9xI=
74 +modernc.org/gc/v2 v2.6.5/go.mod h1:YgIahr1ypgfe7chRuJi2gD7DBQiKSLMPgBQe9oIiito=
75 +modernc.org/gc/v3 v3.1.5 h1:21ldfPfRYE31Tb7B3mwAK8gy1AxP4+dKjrOQPfqakoc=
76 +modernc.org/gc/v3 v3.1.5/go.mod h1:HFK/6AGESC7Ex+EZJhJ2Gni6cTaYpSMmU/cT9RmlfYY=
77 +modernc.org/goabi0 v0.2.0 h1:HvEowk7LxcPd0eq6mVOAEMai46V+i7Jrj13t4AzuNks=
78 +modernc.org/goabi0 v0.2.0/go.mod h1:CEFRnnJhKvWT1c1JTI3Avm+tgOWbkOu5oPA8eH8LnMI=
79 +modernc.org/libc v1.77.1 h1:Ct8j47QtiZ1Enj2DtFXQtUqrPCAjdCmPjtCuvrYQ0Hs=
80 +modernc.org/libc v1.77.1/go.mod h1:87/pZ4L6nD1zqW4nItuS12YO7hN1igAah34xjnQo/W0=
81 +modernc.org/mathutil v1.7.1 h1:GCZVGXdaN8gTqB1Mf/usp1Y/hSqgI2vAGGP4jZMCxOU=
82 +modernc.org/mathutil v1.7.1/go.mod h1:4p5IwJITfppl0G4sUEDtCr4DthTaT47/N3aT6MhfgJg=
83 +modernc.org/memory v1.12.1 h1:nFMiWrpStgZczNl6XI9GnIk/rWhYIyHGUaR04pGbp9g=
84 +modernc.org/memory v1.12.1/go.mod h1:/JP4VbVC+K5sU2wZi9bHoq2MAkCnrt2r98UGeSK7Mjw=
85 +modernc.org/opt v0.2.0 h1:tGyef5ApycA7FSEOMraay9SaTk5zmbx7Tu+cJs4QKZg=
86 +modernc.org/opt v0.2.0/go.mod h1:03fq9lsNfvkYSfxrfUhZCWPk1lm4cq4N+Bh//bEtgns=
87 +modernc.org/sortutil v1.2.1 h1:+xyoGf15mM3NMlPDnFqrteY07klSFxLElE2PVuWIJ7w=
88 +modernc.org/sortutil v1.2.1/go.mod h1:7ZI3a3REbai7gzCLcotuw9AC4VZVpYMjDzETGsSMqJE=
89 +modernc.org/sqlite v1.60.1 h1:/blz53O951KWFOso4QQvEs/Fq6cDBKLtMVrYNSeJVKw=
90 +modernc.org/sqlite v1.60.1/go.mod h1:1dIoEagfDE72QytD5scH1lxARtaUgKgHC/NuApA27r0=
91 +modernc.org/strutil v1.2.1 h1:UneZBkQA+DX2Rp35KcM69cSsNES9ly8mQWD71HKlOA0=
92 +modernc.org/strutil v1.2.1/go.mod h1:EHkiggD70koQxjVdSBM3JKM7k6L0FbGE5eymy9i3B9A=
93 +modernc.org/token v1.1.0 h1:Xl7Ap9dKaEs5kLoOQeQmPWevfnk/DM5qcLcYlA8ys6Y=
94 +modernc.org/token v1.1.0/go.mod h1:UGzOrNV1mAFSEB63lOFHIpNRUVMvYTc6yu1SMY/XTDM=
internal/auth/auth.go
+280 -0
... ... @@ -0,0 +1,280 @@
1 +package auth
2 +
3 +import (
4 + "context"
5 + "crypto/rand"
6 + "crypto/sha256"
7 + "crypto/subtle"
8 + "database/sql"
9 + "encoding/base64"
10 + "encoding/hex"
11 + "errors"
12 + "fmt"
13 + "strings"
14 + "time"
15 +
16 + "polar/internal/db"
17 +
18 + "golang.org/x/crypto/argon2"
19 +)
20 +
21 +var (
22 + ErrInvalidCredentials = errors.New("invalid credentials")
23 + ErrSessionExpired = errors.New("session expired or not found")
24 + ErrInvalidToken = errors.New("invalid access token")
25 +)
26 +
27 +const (
28 + argonTime uint32 = 1
29 + argonMemory uint32 = 64 * 1024
30 + argonThreads uint8 = 4
31 + argonKeyLen uint32 = 32
32 + saltLen = 16
33 + SessionTTL = 30 * 24 * time.Hour
34 +)
35 +
36 +type Session struct {
37 + ID string
38 + UserID int64
39 + CSRFToken string
40 + ExpiresAt time.Time
41 + CreatedAt time.Time
42 +}
43 +
44 +type AccessToken struct {
45 + ID int64
46 + UserID int64
47 + Name string
48 + TokenPrefix string
49 + LastUsedAt *time.Time
50 + CreatedAt time.Time
51 +}
52 +
53 +type Service struct {
54 + db *db.DB
55 +}
56 +
57 +func NewService(database *db.DB) *Service {
58 + return &Service{db: database}
59 +}
60 +
61 +func HashPassword(password string) (string, error) {
62 + if len(password) < 8 {
63 + return "", errors.New("password must be at least 8 characters")
64 + }
65 + salt := make([]byte, saltLen)
66 + if _, err := rand.Read(salt); err != nil {
67 + return "", fmt.Errorf("generate salt: %w", err)
68 + }
69 + hash := argon2.IDKey([]byte(password), salt, argonTime, argonMemory, argonThreads, argonKeyLen)
70 + b64Salt := base64.RawStdEncoding.EncodeToString(salt)
71 + b64Hash := base64.RawStdEncoding.EncodeToString(hash)
72 + encoded := fmt.Sprintf("$argon2id$v=%d$m=%d,t=%d,p=%d$%s$%s",
73 + argon2.Version, argonMemory, argonTime, argonThreads, b64Salt, b64Hash)
74 + return encoded, nil
75 +}
76 +
77 +func VerifyPassword(password, encodedHash string) (bool, error) {
78 + parts := strings.Split(encodedHash, "$")
79 + if len(parts) != 6 || parts[1] != "argon2id" {
80 + return false, errors.New("invalid argon2id hash format")
81 + }
82 + var memory, timeCost uint32
83 + var threads uint8
84 + _, err := fmt.Sscanf(parts[3], "m=%d,t=%d,p=%d", &memory, &timeCost, &threads)
85 + if err != nil {
86 + return false, fmt.Errorf("parse argon2 params: %w", err)
87 + }
88 + salt, err := base64.RawStdEncoding.DecodeString(parts[4])
89 + if err != nil {
90 + return false, fmt.Errorf("decode salt: %w", err)
91 + }
92 + expectedHash, err := base64.RawStdEncoding.DecodeString(parts[5])
93 + if err != nil {
94 + return false, fmt.Errorf("decode hash: %w", err)
95 + }
96 + computed := argon2.IDKey([]byte(password), salt, timeCost, memory, threads, uint32(len(expectedHash)))
97 + return subtle.ConstantTimeCompare(computed, expectedHash) == 1, nil
98 +}
99 +
100 +func randomHex(bytesLen int) (string, error) {
101 + b := make([]byte, bytesLen)
102 + if _, err := rand.Read(b); err != nil {
103 + return "", err
104 + }
105 + return hex.EncodeToString(b), nil
106 +}
107 +
108 +func (s *Service) CreateSession(ctx context.Context, userID int64) (*Session, error) {
109 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
110 + defer cancel()
111 +
112 + id, err := randomHex(32)
113 + if err != nil {
114 + return nil, fmt.Errorf("generate session id: %w", err)
115 + }
116 + csrf, err := randomHex(24)
117 + if err != nil {
118 + return nil, fmt.Errorf("generate csrf token: %w", err)
119 + }
120 + now := time.Now().UTC()
121 + expires := now.Add(SessionTTL)
122 +
123 + _, err = s.db.ExecContext(cctx, `
124 + INSERT INTO sessions (id, user_id, csrf_token, expires_at, created_at)
125 + VALUES (?, ?, ?, ?, ?)
126 + `, id, userID, csrf, expires, now)
127 + if err != nil {
128 + return nil, fmt.Errorf("insert session: %w", err)
129 + }
130 +
131 + return &Session{
132 + ID: id,
133 + UserID: userID,
134 + CSRFToken: csrf,
135 + ExpiresAt: expires,
136 + CreatedAt: now,
137 + }, nil
138 +}
139 +
140 +func (s *Service) GetSession(ctx context.Context, sessionID string) (*Session, error) {
141 + if sessionID == "" {
142 + return nil, ErrSessionExpired
143 + }
144 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
145 + defer cancel()
146 +
147 + var sess Session
148 + err := s.db.QueryRowContext(cctx, `
149 + SELECT id, user_id, csrf_token, expires_at, created_at
150 + FROM sessions WHERE id = ?
151 + `, sessionID).Scan(&sess.ID, &sess.UserID, &sess.CSRFToken, &sess.ExpiresAt, &sess.CreatedAt)
152 + if err != nil {
153 + if errors.Is(err, sql.ErrNoRows) {
154 + return nil, ErrSessionExpired
155 + }
156 + return nil, fmt.Errorf("query session: %w", err)
157 + }
158 +
159 + if time.Now().UTC().After(sess.ExpiresAt) {
160 + _ = s.DeleteSession(ctx, sessionID)
161 + return nil, ErrSessionExpired
162 + }
163 + return &sess, nil
164 +}
165 +
166 +func (s *Service) DeleteSession(ctx context.Context, sessionID string) error {
167 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
168 + defer cancel()
169 + _, err := s.db.ExecContext(cctx, `DELETE FROM sessions WHERE id = ?`, sessionID)
170 + return err
171 +}
172 +
173 +func HashToken(rawToken string) string {
174 + sum := sha256.Sum256([]byte(rawToken))
175 + return hex.EncodeToString(sum[:])
176 +}
177 +
178 +func (s *Service) CreateToken(ctx context.Context, userID int64, name string) (string, *AccessToken, error) {
179 + name = strings.TrimSpace(name)
180 + if name == "" || len(name) > 64 {
181 + return "", nil, errors.New("token name must be between 1 and 64 characters")
182 + }
183 +
184 + secret, err := randomHex(20)
185 + if err != nil {
186 + return "", nil, fmt.Errorf("generate token secret: %w", err)
187 + }
188 + rawToken := "polar_" + secret
189 + tokenHash := HashToken(rawToken)
190 + prefix := rawToken[:10]
191 + now := time.Now().UTC()
192 +
193 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
194 + defer cancel()
195 +
196 + res, err := s.db.ExecContext(cctx, `
197 + INSERT INTO access_tokens (user_id, name, token_prefix, token_hash, created_at)
198 + VALUES (?, ?, ?, ?, ?)
199 + `, userID, name, prefix, tokenHash, now)
200 + if err != nil {
201 + return "", nil, fmt.Errorf("insert access token: %w", err)
202 + }
203 + id, _ := res.LastInsertId()
204 +
205 + return rawToken, &AccessToken{
206 + ID: id,
207 + UserID: userID,
208 + Name: name,
209 + TokenPrefix: prefix,
210 + CreatedAt: now,
211 + }, nil
212 +}
213 +
214 +func (s *Service) VerifyToken(ctx context.Context, rawToken string) (int64, error) {
215 + rawToken = strings.TrimSpace(rawToken)
216 + if !strings.HasPrefix(rawToken, "polar_") {
217 + return 0, ErrInvalidToken
218 + }
219 + tokenHash := HashToken(rawToken)
220 +
221 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
222 + defer cancel()
223 +
224 + var tokenID, userID int64
225 + err := s.db.QueryRowContext(cctx, `
226 + SELECT id, user_id FROM access_tokens WHERE token_hash = ?
227 + `, tokenHash).Scan(&tokenID, &userID)
228 + if err != nil {
229 + if errors.Is(err, sql.ErrNoRows) {
230 + return 0, ErrInvalidToken
231 + }
232 + return 0, fmt.Errorf("lookup token: %w", err)
233 + }
234 +
235 + now := time.Now().UTC()
236 + _, _ = s.db.ExecContext(cctx, `UPDATE access_tokens SET last_used_at = ? WHERE id = ?`, now, tokenID)
237 + return userID, nil
238 +}
239 +
240 +func (s *Service) ListTokens(ctx context.Context, userID int64) ([]AccessToken, error) {
241 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
242 + defer cancel()
243 +
244 + rows, err := s.db.QueryContext(cctx, `
245 + SELECT id, user_id, name, token_prefix, last_used_at, created_at
246 + FROM access_tokens
247 + WHERE user_id = ?
248 + ORDER BY created_at DESC
249 + `, userID)
250 + if err != nil {
251 + return nil, fmt.Errorf("list access tokens: %w", err)
252 + }
253 + defer rows.Close()
254 +
255 + var list []AccessToken
256 + for rows.Next() {
257 + var t AccessToken
258 + var lastUsed sql.NullTime
259 + if err := rows.Scan(&t.ID, &t.UserID, &t.Name, &t.TokenPrefix, &lastUsed, &t.CreatedAt); err != nil {
260 + return nil, fmt.Errorf("scan access token: %w", err)
261 + }
262 + if lastUsed.Valid {
263 + tm := lastUsed.Time
264 + t.LastUsedAt = &tm
265 + }
266 + list = append(list, t)
267 + }
268 + return list, rows.Err()
269 +}
270 +
271 +func (s *Service) RevokeToken(ctx context.Context, userID, tokenID int64) error {
272 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
273 + defer cancel()
274 +
275 + _, err := s.db.ExecContext(cctx, `DELETE FROM access_tokens WHERE id = ? AND user_id = ?`, tokenID, userID)
276 + if err != nil {
277 + return fmt.Errorf("revoke token: %w", err)
278 + }
279 + return nil
280 +}
internal/auth/auth_test.go
+101 -0
... ... @@ -0,0 +1,101 @@
1 +package auth
2 +
3 +import (
4 + "context"
5 + "path/filepath"
6 + "strings"
7 + "testing"
8 +
9 + "polar/internal/db"
10 +)
11 +
12 +func TestPasswordHashAndVerify(t *testing.T) {
13 + if _, err := HashPassword("short"); err == nil {
14 + t.Fatalf("expected error for short password")
15 + }
16 +
17 + hash, err := HashPassword("correct-horse-battery-staple")
18 + if err != nil {
19 + t.Fatalf("HashPassword failed: %v", err)
20 + }
21 + if !strings.HasPrefix(hash, "$argon2id$") {
22 + t.Fatalf("expected argon2id PHC format, got %q", hash)
23 + }
24 +
25 + ok, err := VerifyPassword("correct-horse-battery-staple", hash)
26 + if err != nil || !ok {
27 + t.Fatalf("VerifyPassword failed for valid password: %v", err)
28 + }
29 +
30 + ok, err = VerifyPassword("wrong-password", hash)
31 + if err != nil || ok {
32 + t.Fatalf("VerifyPassword should return false for wrong password")
33 + }
34 +}
35 +
36 +func TestSessionsAndTokens(t *testing.T) {
37 + ctx := context.Background()
38 + database, err := db.Open(ctx, filepath.Join(t.TempDir(), "auth.db"), true)
39 + if err != nil {
40 + t.Fatalf("open db: %v", err)
41 + }
42 + defer database.Close()
43 +
44 + _, err = database.ExecContext(ctx, `INSERT INTO users (id, username, email, password_hash, is_admin) VALUES (1, 'alice', 'alice@example.com', 'hash', 1)`)
45 + if err != nil {
46 + t.Fatalf("insert test user: %v", err)
47 + }
48 +
49 + svc := NewService(database)
50 +
51 + sess, err := svc.CreateSession(ctx, 1)
52 + if err != nil {
53 + t.Fatalf("CreateSession failed: %v", err)
54 + }
55 + if len(sess.ID) != 64 || len(sess.CSRFToken) < 32 {
56 + t.Fatalf("unexpected session ID or CSRF token length")
57 + }
58 +
59 + loaded, err := svc.GetSession(ctx, sess.ID)
60 + if err != nil || loaded.UserID != 1 {
61 + t.Fatalf("GetSession failed: %v", err)
62 + }
63 +
64 + if err := svc.DeleteSession(ctx, sess.ID); err != nil {
65 + t.Fatalf("DeleteSession failed: %v", err)
66 + }
67 + if _, err := svc.GetSession(ctx, sess.ID); err == nil {
68 + t.Fatalf("expected error after session deletion")
69 + }
70 +
71 + rawToken, tok, err := svc.CreateToken(ctx, 1, "Laptop CLI")
72 + if err != nil {
73 + t.Fatalf("CreateToken failed: %v", err)
74 + }
75 + if !strings.HasPrefix(rawToken, "polar_") {
76 + t.Fatalf("expected polar_ prefix, got %q", rawToken)
77 + }
78 + if tok.Name != "Laptop CLI" {
79 + t.Fatalf("unexpected token name: %q", tok.Name)
80 + }
81 +
82 + uid, err := svc.VerifyToken(ctx, rawToken)
83 + if err != nil || uid != 1 {
84 + t.Fatalf("VerifyToken failed: uid=%d err=%v", uid, err)
85 + }
86 +
87 + tokens, err := svc.ListTokens(ctx, 1)
88 + if err != nil || len(tokens) != 1 {
89 + t.Fatalf("ListTokens failed: len=%d err=%v", len(tokens), err)
90 + }
91 + if tokens[0].LastUsedAt == nil {
92 + t.Fatalf("expected LastUsedAt to be updated after VerifyToken")
93 + }
94 +
95 + if err := svc.RevokeToken(ctx, 1, tok.ID); err != nil {
96 + t.Fatalf("RevokeToken failed: %v", err)
97 + }
98 + if _, err := svc.VerifyToken(ctx, rawToken); err == nil {
99 + t.Fatalf("expected error for revoked token")
100 + }
101 +}
internal/auth/device.go
+195 -0
... ... @@ -0,0 +1,195 @@
1 +package auth
2 +
3 +import (
4 + "context"
5 + "crypto/rand"
6 + "database/sql"
7 + "errors"
8 + "fmt"
9 + "math/big"
10 + "strings"
11 + "time"
12 +)
13 +
14 +const (
15 + DeviceCodeTTL = 15 * time.Minute
16 + DeviceCodeInterval = 5 // seconds the client should wait between polls
17 +)
18 +
19 +// Status values for a device authorization grant.
20 +const (
21 + DeviceStatusPending = "pending"
22 + DeviceStatusApproved = "approved"
23 + DeviceStatusDenied = "denied"
24 +)
25 +
26 +var ErrDeviceCodeNotFound = errors.New("device code not found")
27 +
28 +// userCodeAlphabet avoids characters that are easy to confuse (0/O, 1/I/L).
29 +const userCodeAlphabet = "BCDFGHJKLMNPQRSTVWXZ23456789"
30 +
31 +type DeviceCode struct {
32 + Code string
33 + UserCode string
34 + ClientID string
35 + UserID *int64
36 + Status string
37 + ExpiresAt time.Time
38 +}
39 +
40 +func generateUserCode() (string, error) {
41 + letters := make([]byte, 8)
42 + for i := range letters {
43 + n, err := rand.Int(rand.Reader, big.NewInt(int64(len(userCodeAlphabet))))
44 + if err != nil {
45 + return "", err
46 + }
47 + letters[i] = userCodeAlphabet[n.Int64()]
48 + }
49 + return string(letters[:4]) + "-" + string(letters[4:]), nil
50 +}
51 +
52 +// NormalizeUserCode uppercases the entered code and restores the XXXX-XXXX shape.
53 +func NormalizeUserCode(code string) string {
54 + code = strings.ToUpper(strings.TrimSpace(code))
55 + code = strings.ReplaceAll(code, " ", "")
56 + code = strings.ReplaceAll(code, "-", "")
57 + if len(code) != 8 {
58 + return code
59 + }
60 + return code[:4] + "-" + code[4:]
61 +}
62 +
63 +// CreateDeviceCode starts a device authorization grant (RFC 8628).
64 +func (s *Service) CreateDeviceCode(ctx context.Context, clientID string) (*DeviceCode, error) {
65 + clientID = strings.TrimSpace(clientID)
66 + if len(clientID) > 120 {
67 + clientID = clientID[:120]
68 + }
69 +
70 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
71 + defer cancel()
72 +
73 + for attempt := 0; attempt < 5; attempt++ {
74 + deviceCode, err := randomHex(24)
75 + if err != nil {
76 + return nil, fmt.Errorf("generate device code: %w", err)
77 + }
78 + userCode, err := generateUserCode()
79 + if err != nil {
80 + return nil, fmt.Errorf("generate user code: %w", err)
81 + }
82 +
83 + expiresAt := time.Now().UTC().Add(DeviceCodeTTL)
84 + _, err = s.db.ExecContext(cctx, `
85 + INSERT INTO device_codes (device_code, user_code, client_id, status, created_at, expires_at)
86 + VALUES (?, ?, ?, ?, ?, ?)
87 + `, deviceCode, userCode, clientID, DeviceStatusPending, time.Now().UTC(), expiresAt)
88 + if err != nil {
89 + if strings.Contains(strings.ToLower(err.Error()), "unique") {
90 + continue
91 + }
92 + return nil, fmt.Errorf("insert device code: %w", err)
93 + }
94 + return &DeviceCode{Code: deviceCode, UserCode: userCode, ClientID: clientID, Status: DeviceStatusPending, ExpiresAt: expiresAt}, nil
95 + }
96 + return nil, errors.New("could not allocate a unique user code")
97 +}
98 +
99 +// GetDeviceCodeByUserCode looks up a grant by the human-friendly code.
100 +func (s *Service) GetDeviceCodeByUserCode(ctx context.Context, userCode string) (*DeviceCode, error) {
101 + userCode = NormalizeUserCode(userCode)
102 + if userCode == "" {
103 + return nil, ErrDeviceCodeNotFound
104 + }
105 +
106 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
107 + defer cancel()
108 +
109 + var dc DeviceCode
110 + var userID sql.NullInt64
111 + var expiresAt time.Time
112 + err := s.db.QueryRowContext(cctx, `
113 + SELECT device_code, user_code, client_id, user_id, status, expires_at
114 + FROM device_codes WHERE user_code = ?
115 + `, userCode).Scan(&dc.Code, &dc.UserCode, &dc.ClientID, &userID, &dc.Status, &expiresAt)
116 + if err != nil {
117 + if errors.Is(err, sql.ErrNoRows) {
118 + return nil, ErrDeviceCodeNotFound
119 + }
120 + return nil, fmt.Errorf("get device code: %w", err)
121 + }
122 + if userID.Valid {
123 + dc.UserID = &userID.Int64
124 + }
125 + dc.ExpiresAt = expiresAt
126 + return &dc, nil
127 +}
128 +
129 +// SetDeviceCodeStatus approves or denies a pending grant.
130 +func (s *Service) SetDeviceCodeStatus(ctx context.Context, userCode string, userID int64, status string) error {
131 + if status != DeviceStatusApproved && status != DeviceStatusDenied {
132 + return errors.New("invalid device code status")
133 + }
134 +
135 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
136 + defer cancel()
137 +
138 + res, err := s.db.ExecContext(cctx, `
139 + UPDATE device_codes
140 + SET status = ?, user_id = ?
141 + WHERE user_code = ? AND status = ? AND expires_at > ?
142 + `, status, userID, NormalizeUserCode(userCode), DeviceStatusPending, time.Now().UTC())
143 + if err != nil {
144 + return fmt.Errorf("update device code: %w", err)
145 + }
146 + if n, _ := res.RowsAffected(); n == 0 {
147 + return ErrDeviceCodeNotFound
148 + }
149 + return nil
150 +}
151 +
152 +// ConsumeDeviceCode marks an approved grant as exchanged so the device code
153 +// cannot be traded for a second token.
154 +func (s *Service) ConsumeDeviceCode(ctx context.Context, deviceCode string) {
155 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
156 + defer cancel()
157 +
158 + _, _ = s.db.ExecContext(cctx, `UPDATE device_codes SET status = 'exchanged' WHERE device_code = ?`, deviceCode)
159 +}
160 +
161 +// PollDeviceCode returns the current grant status and marks the poll time.
162 +func (s *Service) PollDeviceCode(ctx context.Context, deviceCode string) (*DeviceCode, error) {
163 + deviceCode = strings.TrimSpace(deviceCode)
164 + if deviceCode == "" {
165 + return nil, ErrDeviceCodeNotFound
166 + }
167 +
168 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
169 + defer cancel()
170 +
171 + var dc DeviceCode
172 + var userID sql.NullInt64
173 + var expiresAt time.Time
174 + err := s.db.QueryRowContext(cctx, `
175 + SELECT device_code, user_code, client_id, user_id, status, expires_at
176 + FROM device_codes WHERE device_code = ?
177 + `, deviceCode).Scan(&dc.Code, &dc.UserCode, &dc.ClientID, &userID, &dc.Status, &expiresAt)
178 + if err != nil {
179 + if errors.Is(err, sql.ErrNoRows) {
180 + return nil, ErrDeviceCodeNotFound
181 + }
182 + return nil, fmt.Errorf("poll device code: %w", err)
183 + }
184 + if userID.Valid {
185 + dc.UserID = &userID.Int64
186 + }
187 + dc.ExpiresAt = expiresAt
188 +
189 + _, _ = s.db.ExecContext(cctx, `UPDATE device_codes SET last_polled_at = ? WHERE device_code = ?`, time.Now().UTC(), deviceCode)
190 +
191 + if time.Now().UTC().After(expiresAt) && dc.Status == DeviceStatusPending {
192 + dc.Status = "expired"
193 + }
194 + return &dc, nil
195 +}
internal/config/config.go
+154 -0
... ... @@ -0,0 +1,154 @@
1 +package config
2 +
3 +import (
4 + "fmt"
5 + "os"
6 + "path/filepath"
7 + "strconv"
8 + "strings"
9 +
10 + "github.com/BurntSushi/toml"
11 +)
12 +
13 +type Config struct {
14 + Server ServerConfig `toml:"server"`
15 + Storage StorageConfig `toml:"storage"`
16 + Auth AuthConfig `toml:"auth"`
17 + Landing LandingConfig `toml:"landing"`
18 +}
19 +
20 +type ServerConfig struct {
21 + Host string `toml:"host"`
22 + Port int `toml:"port"`
23 + BaseURL string `toml:"base_url"`
24 +}
25 +
26 +type StorageConfig struct {
27 + DataDir string `toml:"data_dir"`
28 +}
29 +
30 +type AuthConfig struct {
31 + RegistrationEnabled bool `toml:"registration_enabled"`
32 +}
33 +
34 +type LandingConfig struct {
35 + Enabled bool `toml:"enabled"`
36 + DefaultLang string `toml:"default_lang"`
37 +}
38 +
39 +func Default() Config {
40 + return Config{
41 + Server: ServerConfig{
42 + Host: "0.0.0.0",
43 + Port: 3000,
44 + BaseURL: "http://localhost:3000",
45 + },
46 + Storage: StorageConfig{
47 + DataDir: "./data",
48 + },
49 + Auth: AuthConfig{
50 + RegistrationEnabled: true,
51 + },
52 + Landing: LandingConfig{
53 + Enabled: true,
54 + DefaultLang: "ru",
55 + },
56 + }
57 +}
58 +
59 +func Load(configPath string) (Config, error) {
60 + cfg := Default()
61 +
62 + if envPath := os.Getenv("POLAR_CONFIG"); envPath != "" && configPath == "" {
63 + configPath = envPath
64 + }
65 + if configPath == "" {
66 + if _, err := os.Stat("polar.toml"); err == nil {
67 + configPath = "polar.toml"
68 + }
69 + }
70 +
71 + if configPath != "" {
72 + data, err := os.ReadFile(configPath)
73 + if err != nil {
74 + return cfg, fmt.Errorf("read config file %s: %w", configPath, err)
75 + }
76 + if err := toml.Unmarshal(data, &cfg); err != nil {
77 + return cfg, fmt.Errorf("parse config file %s: %w", configPath, err)
78 + }
79 + }
80 +
81 + applyEnv(&cfg)
82 +
83 + cfg.Server.BaseURL = strings.TrimRight(cfg.Server.BaseURL, "/")
84 + if cfg.Server.BaseURL == "" {
85 + host := cfg.Server.Host
86 + if host == "0.0.0.0" || host == "" {
87 + host = "localhost"
88 + }
89 + cfg.Server.BaseURL = fmt.Sprintf("http://%s:%d", host, cfg.Server.Port)
90 + }
91 + if cfg.Landing.DefaultLang != "en" && cfg.Landing.DefaultLang != "ru" {
92 + cfg.Landing.DefaultLang = "ru"
93 + }
94 +
95 + return cfg, nil
96 +}
97 +
98 +func applyEnv(cfg *Config) {
99 + getEnv := os.Getenv
100 +
101 + if v := getEnv("POLAR_SERVER_HOST"); v != "" {
102 + cfg.Server.Host = v
103 + }
104 + if v := getEnv("POLAR_HOST"); v != "" {
105 + cfg.Server.Host = v
106 + }
107 + if v := getEnv("POLAR_SERVER_PORT"); v != "" {
108 + if p, err := strconv.Atoi(v); err == nil && p > 0 {
109 + cfg.Server.Port = p
110 + }
111 + }
112 + if v := getEnv("POLAR_PORT"); v != "" {
113 + if p, err := strconv.Atoi(v); err == nil && p > 0 {
114 + cfg.Server.Port = p
115 + }
116 + }
117 + if v := getEnv("POLAR_SERVER_BASE_URL"); v != "" {
118 + cfg.Server.BaseURL = v
119 + }
120 + if v := getEnv("POLAR_BASE_URL"); v != "" {
121 + cfg.Server.BaseURL = v
122 + }
123 + if v := getEnv("POLAR_STORAGE_DATA_DIR"); v != "" {
124 + cfg.Storage.DataDir = v
125 + }
126 + if v := getEnv("POLAR_DATA_DIR"); v != "" {
127 + cfg.Storage.DataDir = v
128 + }
129 + if v := getEnv("POLAR_AUTH_REGISTRATION_ENABLED"); v != "" {
130 + if b, err := strconv.ParseBool(v); err == nil {
131 + cfg.Auth.RegistrationEnabled = b
132 + }
133 + }
134 + if v := getEnv("POLAR_LANDING_ENABLED"); v != "" {
135 + if b, err := strconv.ParseBool(v); err == nil {
136 + cfg.Landing.Enabled = b
137 + }
138 + }
139 + if v := getEnv("POLAR_LANDING_DEFAULT_LANG"); v != "" {
140 + cfg.Landing.DefaultLang = strings.ToLower(strings.TrimSpace(v))
141 + }
142 +}
143 +
144 +func (c Config) Addr() string {
145 + return fmt.Sprintf("%s:%d", c.Server.Host, c.Server.Port)
146 +}
147 +
148 +func (c Config) DBPath() string {
149 + return filepath.Join(c.Storage.DataDir, "polar.db")
150 +}
151 +
152 +func (c Config) ReposDir() string {
153 + return filepath.Join(c.Storage.DataDir, "repos")
154 +}
internal/config/config_test.go
+59 -0
... ... @@ -0,0 +1,59 @@
1 +package config
2 +
3 +import (
4 + "os"
5 + "path/filepath"
6 + "testing"
7 +)
8 +
9 +func TestLoadDefaultsAndOverrides(t *testing.T) {
10 + cfg, err := Load("")
11 + if err != nil {
12 + t.Fatalf("Load default failed: %v", err)
13 + }
14 + if cfg.Server.Port != 3000 || cfg.Landing.DefaultLang != "ru" {
15 + t.Fatalf("unexpected default config: %+v", cfg)
16 + }
17 +
18 + tmpFile := filepath.Join(t.TempDir(), "polar.toml")
19 + tomlData := `
20 +[server]
21 +host = "127.0.0.1"
22 +port = 4000
23 +base_url = "https://git.example.com/"
24 +
25 +[storage]
26 +data_dir = "/var/lib/polar"
27 +
28 +[auth]
29 +registration_enabled = false
30 +
31 +[landing]
32 +enabled = false
33 +default_lang = "en"
34 +`
35 + if err := os.WriteFile(tmpFile, []byte(tomlData), 0o644); err != nil {
36 + t.Fatalf("write temp toml: %v", err)
37 + }
38 +
39 + t.Setenv("POLAR_SERVER_PORT", "8080")
40 + loaded, err := Load(tmpFile)
41 + if err != nil {
42 + t.Fatalf("Load from file failed: %v", err)
43 + }
44 + if loaded.Server.Port != 8080 {
45 + t.Fatalf("expected env POLAR_SERVER_PORT=8080 to override file port 4000, got %d", loaded.Server.Port)
46 + }
47 + if loaded.Server.BaseURL != "https://git.example.com" {
48 + t.Fatalf("expected trailing slash trimmed from base_url, got %q", loaded.Server.BaseURL)
49 + }
50 + if loaded.Auth.RegistrationEnabled {
51 + t.Fatalf("expected registration_enabled = false")
52 + }
53 + if loaded.Landing.DefaultLang != "en" {
54 + t.Fatalf("expected default_lang = en, got %q", loaded.Landing.DefaultLang)
55 + }
56 + if loaded.DBPath() != filepath.Join(loaded.Storage.DataDir, "polar.db") {
57 + t.Fatalf("expected DBPath to default to polar.db, got %q", loaded.DBPath())
58 + }
59 +}
internal/db/db.go
+206 -0
... ... @@ -0,0 +1,206 @@
1 +package db
2 +
3 +import (
4 + "context"
5 + "database/sql"
6 + "embed"
7 + "errors"
8 + "fmt"
9 + "io/fs"
10 + "os"
11 + "path/filepath"
12 + "sort"
13 + "strconv"
14 + "strings"
15 + "time"
16 +
17 + _ "modernc.org/sqlite"
18 +)
19 +
20 +//go:embed migrations/*.sql
21 +var migrationsFS embed.FS
22 +
23 +type DB struct {
24 + *sql.DB
25 +}
26 +
27 +func Open(ctx context.Context, dbPath string, defaultRegEnabled bool) (*DB, error) {
28 + if dbPath != ":memory:" && !strings.HasPrefix(dbPath, "file::memory:") {
29 + if err := os.MkdirAll(filepath.Dir(dbPath), 0o755); err != nil {
30 + return nil, fmt.Errorf("create database directory: %w", err)
31 + }
32 + }
33 +
34 + dsn := dbPath
35 + if !strings.Contains(dsn, "?") {
36 + dsn += "?_pragma=busy_timeout(5000)&_pragma=journal_mode(WAL)&_pragma=foreign_keys(1)&_pragma=synchronous(NORMAL)"
37 + }
38 +
39 + sqlDB, err := sql.Open("sqlite", dsn)
40 + if err != nil {
41 + return nil, fmt.Errorf("open sqlite %s: %w", dbPath, err)
42 + }
43 +
44 + sqlDB.SetMaxOpenConns(1)
45 + sqlDB.SetMaxIdleConns(1)
46 + sqlDB.SetConnMaxLifetime(0)
47 +
48 + pingCtx, cancel := context.WithTimeout(ctx, 5*time.Second)
49 + defer cancel()
50 + if err := sqlDB.PingContext(pingCtx); err != nil {
51 + _ = sqlDB.Close()
52 + return nil, fmt.Errorf("ping sqlite: %w", err)
53 + }
54 +
55 + pragmas := []string{
56 + "PRAGMA journal_mode = WAL;",
57 + "PRAGMA foreign_keys = ON;",
58 + "PRAGMA busy_timeout = 5000;",
59 + "PRAGMA synchronous = NORMAL;",
60 + }
61 + for _, p := range pragmas {
62 + if _, err := sqlDB.ExecContext(pingCtx, p); err != nil {
63 + _ = sqlDB.Close()
64 + return nil, fmt.Errorf("exec pragma %q: %w", p, err)
65 + }
66 + }
67 +
68 + d := &DB{DB: sqlDB}
69 + if err := d.Migrate(pingCtx); err != nil {
70 + _ = sqlDB.Close()
71 + return nil, fmt.Errorf("run migrations: %w", err)
72 + }
73 +
74 + if _, err := d.GetSetting(pingCtx, "registration_enabled"); errors.Is(err, sql.ErrNoRows) {
75 + if err := d.SetSetting(pingCtx, "registration_enabled", strconv.FormatBool(defaultRegEnabled)); err != nil {
76 + _ = sqlDB.Close()
77 + return nil, fmt.Errorf("seed registration_enabled setting: %w", err)
78 + }
79 + }
80 +
81 + return d, nil
82 +}
83 +
84 +func (d *DB) Migrate(ctx context.Context) error {
85 + _, err := d.ExecContext(ctx, `
86 + CREATE TABLE IF NOT EXISTS schema_migrations (
87 + version TEXT PRIMARY KEY,
88 + applied_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
89 + );
90 + `)
91 + if err != nil {
92 + return fmt.Errorf("create schema_migrations table: %w", err)
93 + }
94 +
95 + entries, err := fs.ReadDir(migrationsFS, "migrations")
96 + if err != nil {
97 + return fmt.Errorf("read embedded migrations: %w", err)
98 + }
99 +
100 + var files []string
101 + for _, entry := range entries {
102 + if !entry.IsDir() && strings.HasSuffix(entry.Name(), ".sql") {
103 + files = append(files, entry.Name())
104 + }
105 + }
106 + sort.Strings(files)
107 +
108 + for _, name := range files {
109 + var exists int
110 + err := d.QueryRowContext(ctx, `SELECT 1 FROM schema_migrations WHERE version = ?`, name).Scan(&exists)
111 + if err == nil {
112 + continue
113 + }
114 + if !errors.Is(err, sql.ErrNoRows) {
115 + return fmt.Errorf("check migration %s: %w", name, err)
116 + }
117 +
118 + content, err := migrationsFS.ReadFile("migrations/" + name)
119 + if err != nil {
120 + return fmt.Errorf("read migration %s: %w", name, err)
121 + }
122 +
123 + tx, err := d.BeginTx(ctx, nil)
124 + if err != nil {
125 + return fmt.Errorf("begin migration tx %s: %w", name, err)
126 + }
127 +
128 + if _, err := tx.ExecContext(ctx, string(content)); err != nil {
129 + _ = tx.Rollback()
130 + return fmt.Errorf("execute migration %s: %w", name, err)
131 + }
132 + if _, err := tx.ExecContext(ctx, `INSERT INTO schema_migrations (version) VALUES (?)`, name); err != nil {
133 + _ = tx.Rollback()
134 + return fmt.Errorf("record migration %s: %w", name, err)
135 + }
136 + if err := tx.Commit(); err != nil {
137 + return fmt.Errorf("commit migration %s: %w", name, err)
138 + }
139 + }
140 +
141 + return nil
142 +}
143 +
144 +func (d *DB) GetSetting(ctx context.Context, key string) (string, error) {
145 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
146 + defer cancel()
147 + var val string
148 + err := d.QueryRowContext(cctx, `SELECT value FROM settings WHERE key = ?`, key).Scan(&val)
149 + if err != nil {
150 + return "", fmt.Errorf("get setting %s: %w", key, err)
151 + }
152 + return val, nil
153 +}
154 +
155 +func (d *DB) SetSetting(ctx context.Context, key, value string) error {
156 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
157 + defer cancel()
158 + _, err := d.ExecContext(cctx, `
159 + INSERT INTO settings (key, value) VALUES (?, ?)
160 + ON CONFLICT(key) DO UPDATE SET value = excluded.value
161 + `, key, value)
162 + if err != nil {
163 + return fmt.Errorf("set setting %s: %w", key, err)
164 + }
165 + return nil
166 +}
167 +
168 +func (d *DB) GetBoolSetting(ctx context.Context, key string, fallback bool) bool {
169 + val, err := d.GetSetting(ctx, key)
170 + if err != nil {
171 + return fallback
172 + }
173 + b, err := strconv.ParseBool(val)
174 + if err != nil {
175 + return fallback
176 + }
177 + return b
178 +}
179 +
180 +func (d *DB) SetBoolSetting(ctx context.Context, key string, enabled bool) error {
181 + return d.SetSetting(ctx, key, strconv.FormatBool(enabled))
182 +}
183 +
184 +func (d *DB) IsRegistrationEnabled(ctx context.Context, fallback bool) bool {
185 + return d.GetBoolSetting(ctx, "registration_enabled", fallback)
186 +}
187 +
188 +func (d *DB) SetRegistrationEnabled(ctx context.Context, enabled bool) error {
189 + return d.SetBoolSetting(ctx, "registration_enabled", enabled)
190 +}
191 +
192 +func (d *DB) IsExploreEnabled(ctx context.Context) bool {
193 + return d.GetBoolSetting(ctx, "explore_enabled", true)
194 +}
195 +
196 +func (d *DB) IsLandingEnabled(ctx context.Context, fallback bool) bool {
197 + return d.GetBoolSetting(ctx, "landing_enabled", fallback)
198 +}
199 +
200 +func (d *DB) IsAnonymousReadEnabled(ctx context.Context) bool {
201 + return d.GetBoolSetting(ctx, "anonymous_read_enabled", true)
202 +}
203 +
204 +func (d *DB) IsIssuesEnabled(ctx context.Context) bool {
205 + return d.GetBoolSetting(ctx, "issues_enabled", true)
206 +}
internal/db/db_test.go
+42 -0
... ... @@ -0,0 +1,42 @@
1 +package db
2 +
3 +import (
4 + "context"
5 + "path/filepath"
6 + "testing"
7 +)
8 +
9 +func TestOpenAndMigrate(t *testing.T) {
10 + ctx := context.Background()
11 + dbPath := filepath.Join(t.TempDir(), "test_ada.db")
12 +
13 + database, err := Open(ctx, dbPath, true)
14 + if err != nil {
15 + t.Fatalf("Open failed: %v", err)
16 + }
17 + defer database.Close()
18 +
19 + // Re-running Migrate must be idempotent
20 + if err := database.Migrate(ctx); err != nil {
21 + t.Fatalf("second Migrate failed: %v", err)
22 + }
23 +
24 + if !database.IsRegistrationEnabled(ctx, false) {
25 + t.Fatalf("expected registration_enabled to be seeded as true")
26 + }
27 +
28 + if err := database.SetRegistrationEnabled(ctx, false); err != nil {
29 + t.Fatalf("SetRegistrationEnabled failed: %v", err)
30 + }
31 + if database.IsRegistrationEnabled(ctx, true) {
32 + t.Fatalf("expected registration_enabled to be false after update")
33 + }
34 +
35 + var fk int
36 + if err := database.QueryRowContext(ctx, "PRAGMA foreign_keys;").Scan(&fk); err != nil {
37 + t.Fatalf("query foreign_keys pragma: %v", err)
38 + }
39 + if fk != 1 {
40 + t.Fatalf("expected foreign_keys = 1, got %d", fk)
41 + }
42 +}
internal/db/migrations/001_init.sql
+54 -0
... ... @@ -0,0 +1,54 @@
1 +CREATE TABLE IF NOT EXISTS users (
2 + id INTEGER PRIMARY KEY AUTOINCREMENT,
3 + username TEXT NOT NULL UNIQUE COLLATE NOCASE,
4 + email TEXT NOT NULL UNIQUE COLLATE NOCASE,
5 + password_hash TEXT NOT NULL,
6 + bio TEXT NOT NULL DEFAULT '',
7 + is_admin INTEGER NOT NULL DEFAULT 0,
8 + created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
9 +);
10 +
11 +CREATE INDEX IF NOT EXISTS idx_users_username ON users(username);
12 +
13 +CREATE TABLE IF NOT EXISTS sessions (
14 + id TEXT PRIMARY KEY,
15 + user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
16 + csrf_token TEXT NOT NULL,
17 + expires_at DATETIME NOT NULL,
18 + created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
19 +);
20 +
21 +CREATE INDEX IF NOT EXISTS idx_sessions_user_id ON sessions(user_id);
22 +CREATE INDEX IF NOT EXISTS idx_sessions_expires_at ON sessions(expires_at);
23 +
24 +CREATE TABLE IF NOT EXISTS access_tokens (
25 + id INTEGER PRIMARY KEY AUTOINCREMENT,
26 + user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
27 + name TEXT NOT NULL,
28 + token_prefix TEXT NOT NULL DEFAULT '',
29 + token_hash TEXT NOT NULL UNIQUE,
30 + last_used_at DATETIME,
31 + created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
32 +);
33 +
34 +CREATE INDEX IF NOT EXISTS idx_access_tokens_user_id ON access_tokens(user_id);
35 +CREATE INDEX IF NOT EXISTS idx_access_tokens_hash ON access_tokens(token_hash);
36 +
37 +CREATE TABLE IF NOT EXISTS repositories (
38 + id INTEGER PRIMARY KEY AUTOINCREMENT,
39 + owner_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
40 + name TEXT NOT NULL COLLATE NOCASE,
41 + description TEXT NOT NULL DEFAULT '',
42 + is_private INTEGER NOT NULL DEFAULT 0,
43 + default_branch TEXT NOT NULL DEFAULT 'main',
44 + created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
45 + updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
46 + UNIQUE(owner_id, name)
47 +);
48 +
49 +CREATE INDEX IF NOT EXISTS idx_repositories_owner_id ON repositories(owner_id);
50 +
51 +CREATE TABLE IF NOT EXISTS settings (
52 + key TEXT PRIMARY KEY,
53 + value TEXT NOT NULL
54 +);
internal/db/migrations/002_features.sql
+29 -0
... ... @@ -0,0 +1,29 @@
1 +ALTER TABLE users ADD COLUMN full_name TEXT NOT NULL DEFAULT '';
2 +ALTER TABLE users ADD COLUMN avatar_url TEXT NOT NULL DEFAULT '';
3 +ALTER TABLE users ADD COLUMN location TEXT NOT NULL DEFAULT '';
4 +ALTER TABLE users ADD COLUMN website TEXT NOT NULL DEFAULT '';
5 +
6 +CREATE TABLE IF NOT EXISTS issues (
7 + id INTEGER PRIMARY KEY AUTOINCREMENT,
8 + repo_id INTEGER NOT NULL REFERENCES repositories(id) ON DELETE CASCADE,
9 + number INTEGER NOT NULL,
10 + author_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
11 + title TEXT NOT NULL,
12 + body TEXT NOT NULL DEFAULT '',
13 + is_closed INTEGER NOT NULL DEFAULT 0,
14 + created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
15 + updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
16 + UNIQUE(repo_id, number)
17 +);
18 +
19 +CREATE INDEX IF NOT EXISTS idx_issues_repo_id ON issues(repo_id, is_closed, number DESC);
20 +
21 +CREATE TABLE IF NOT EXISTS issue_comments (
22 + id INTEGER PRIMARY KEY AUTOINCREMENT,
23 + issue_id INTEGER NOT NULL REFERENCES issues(id) ON DELETE CASCADE,
24 + author_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
25 + body TEXT NOT NULL,
26 + created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
27 +);
28 +
29 +CREATE INDEX IF NOT EXISTS idx_issue_comments_issue_id ON issue_comments(issue_id, created_at ASC);
internal/db/migrations/003_pulls_releases_repo_settings.sql
+49 -0
... ... @@ -0,0 +1,49 @@
1 +ALTER TABLE repositories ADD COLUMN enable_issues INTEGER NOT NULL DEFAULT 1;
2 +ALTER TABLE repositories ADD COLUMN enable_pulls INTEGER NOT NULL DEFAULT 1;
3 +ALTER TABLE repositories ADD COLUMN enable_releases INTEGER NOT NULL DEFAULT 1;
4 +ALTER TABLE repositories ADD COLUMN enable_activity INTEGER NOT NULL DEFAULT 1;
5 +
6 +CREATE TABLE IF NOT EXISTS pull_requests (
7 + id INTEGER PRIMARY KEY AUTOINCREMENT,
8 + repo_id INTEGER NOT NULL REFERENCES repositories(id) ON DELETE CASCADE,
9 + number INTEGER NOT NULL,
10 + author_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
11 + title TEXT NOT NULL,
12 + body TEXT NOT NULL DEFAULT '',
13 + base_branch TEXT NOT NULL,
14 + head_branch TEXT NOT NULL,
15 + status TEXT NOT NULL DEFAULT 'open',
16 + merged_by_id INTEGER REFERENCES users(id),
17 + merged_at DATETIME,
18 + created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
19 + updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
20 + UNIQUE(repo_id, number)
21 +);
22 +
23 +CREATE INDEX IF NOT EXISTS idx_pulls_repo_id ON pull_requests(repo_id, status, number DESC);
24 +
25 +CREATE TABLE IF NOT EXISTS pull_request_comments (
26 + id INTEGER PRIMARY KEY AUTOINCREMENT,
27 + pull_id INTEGER NOT NULL REFERENCES pull_requests(id) ON DELETE CASCADE,
28 + author_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
29 + body TEXT NOT NULL,
30 + created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
31 +);
32 +
33 +CREATE INDEX IF NOT EXISTS idx_pull_comments_pull_id ON pull_request_comments(pull_id, created_at ASC);
34 +
35 +CREATE TABLE IF NOT EXISTS releases (
36 + id INTEGER PRIMARY KEY AUTOINCREMENT,
37 + repo_id INTEGER NOT NULL REFERENCES repositories(id) ON DELETE CASCADE,
38 + author_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
39 + tag_name TEXT NOT NULL,
40 + title TEXT NOT NULL,
41 + body TEXT NOT NULL DEFAULT '',
42 + is_draft INTEGER NOT NULL DEFAULT 0,
43 + is_prerelease INTEGER NOT NULL DEFAULT 0,
44 + created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
45 + published_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
46 + UNIQUE(repo_id, tag_name)
47 +);
48 +
49 +CREATE INDEX IF NOT EXISTS idx_releases_repo_id ON releases(repo_id, published_at DESC);
internal/db/migrations/004_social.sql
+41 -0
... ... @@ -0,0 +1,41 @@
1 +-- Collaborators: per-repository access grants for other users.
2 +CREATE TABLE IF NOT EXISTS collaborators (
3 + id INTEGER PRIMARY KEY AUTOINCREMENT,
4 + repo_id INTEGER NOT NULL REFERENCES repositories(id) ON DELETE CASCADE,
5 + user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
6 + role TEXT NOT NULL DEFAULT 'write',
7 + created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
8 + UNIQUE(repo_id, user_id)
9 +);
10 +CREATE INDEX IF NOT EXISTS idx_collaborators_user ON collaborators(user_id);
11 +
12 +-- Forks.
13 +ALTER TABLE repositories ADD COLUMN forked_from_repo_id INTEGER REFERENCES repositories(id) ON DELETE SET NULL;
14 +
15 +-- Fork-based (cross-repository) pull requests.
16 +ALTER TABLE pull_requests ADD COLUMN head_repo_id INTEGER REFERENCES repositories(id) ON DELETE CASCADE;
17 +
18 +-- Pull request reviews (approve / request changes).
19 +CREATE TABLE IF NOT EXISTS pull_request_reviews (
20 + id INTEGER PRIMARY KEY AUTOINCREMENT,
21 + pull_id INTEGER NOT NULL REFERENCES pull_requests(id) ON DELETE CASCADE,
22 + reviewer_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
23 + state TEXT NOT NULL,
24 + body TEXT NOT NULL DEFAULT '',
25 + created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
26 + updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
27 + UNIQUE(pull_id, reviewer_id)
28 +);
29 +
30 +-- Device authorization grants (RFC 8628) used by the git credential helper.
31 +CREATE TABLE IF NOT EXISTS device_codes (
32 + device_code TEXT PRIMARY KEY,
33 + user_code TEXT NOT NULL UNIQUE,
34 + client_id TEXT NOT NULL DEFAULT '',
35 + user_id INTEGER REFERENCES users(id) ON DELETE CASCADE,
36 + status TEXT NOT NULL DEFAULT 'pending',
37 + created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
38 + expires_at DATETIME NOT NULL,
39 + last_polled_at DATETIME
40 +);
41 +CREATE INDEX IF NOT EXISTS idx_device_codes_expires ON device_codes(expires_at);
internal/git/git.go
+1040 -0
... ... @@ -0,0 +1,1040 @@
1 +package git
2 +
3 +import (
4 + "bytes"
5 + "context"
6 + "encoding/binary"
7 + "errors"
8 + "fmt"
9 + "os"
10 + "os/exec"
11 + "path"
12 + "path/filepath"
13 + "sort"
14 + "strconv"
15 + "strings"
16 + "time"
17 + "unicode"
18 + "unicode/utf16"
19 + "unicode/utf8"
20 +)
21 +
22 +var (
23 + ErrInvalidRef = errors.New("invalid git reference")
24 + ErrInvalidPath = errors.New("invalid repository file path")
25 + ErrNotFound = errors.New("git object not found")
26 + ErrEmptyRepo = errors.New("repository is empty")
27 +)
28 +
29 +type TreeEntry struct {
30 + Mode string
31 + Type string // "tree" or "blob"
32 + Hash string
33 + Size int64
34 + Name string
35 + Path string
36 + CommitHash string
37 + CommitMsg string
38 + CommitTime time.Time
39 +}
40 +
41 +type Blob struct {
42 + Name string
43 + Path string
44 + Size int64
45 + Data []byte
46 + IsBinary bool
47 + LineCount int
48 +}
49 +
50 +type Commit struct {
51 + Hash string
52 + ShortHash string
53 + AuthorName string
54 + AuthorEmail string
55 + AuthoredAt time.Time
56 + Subject string
57 + Body string
58 + Parents []string
59 +}
60 +
61 +type DiffLine struct {
62 + Type string // "add", "del", "ctx", "hunk"
63 + Content string
64 + OldNum int
65 + NewNum int
66 +}
67 +
68 +type FileDiff struct {
69 + OldPath string
70 + NewPath string
71 + Status string // "added", "deleted", "modified", "renamed"
72 + Additions int
73 + Deletions int
74 + IsBinary bool
75 + Lines []DiffLine
76 +}
77 +
78 +type CommitDetail struct {
79 + Commit Commit
80 + FilesChanged int
81 + TotalAdditions int
82 + TotalDeletions int
83 + Files []FileDiff
84 +}
85 +
86 +func ValidateRef(ref string) error {
87 + ref = strings.TrimSpace(ref)
88 + if ref == "" || len(ref) > 255 {
89 + return ErrInvalidRef
90 + }
91 + if strings.HasPrefix(ref, "-") || strings.Contains(ref, "..") ||
92 + strings.ContainsAny(ref, " \t\n\r~^:?*[\\`\x00") ||
93 + strings.HasSuffix(ref, ".lock") || strings.HasSuffix(ref, "/") {
94 + return ErrInvalidRef
95 + }
96 + return nil
97 +}
98 +
99 +func CleanSubPath(p string) (string, error) {
100 + p = strings.TrimSpace(strings.ReplaceAll(p, "\\", "/"))
101 + p = strings.TrimPrefix(p, "/")
102 + p = strings.TrimSuffix(p, "/")
103 + if p == "" || p == "." {
104 + return "", nil
105 + }
106 + if strings.Contains(p, "\x00") || strings.HasPrefix(p, "-") {
107 + return "", ErrInvalidPath
108 + }
109 + cleaned := path.Clean(p)
110 + if cleaned == "." {
111 + return "", nil
112 + }
113 + if strings.HasPrefix(cleaned, "..") || strings.Contains(cleaned, "/../") {
114 + return "", ErrInvalidPath
115 + }
116 + return cleaned, nil
117 +}
118 +
119 +func runGit(ctx context.Context, repoPath string, timeout time.Duration, args ...string) ([]byte, error) {
120 + cctx, cancel := context.WithTimeout(ctx, timeout)
121 + defer cancel()
122 +
123 + fullArgs := make([]string, 0, len(args)+2)
124 + if repoPath != "" {
125 + fullArgs = append(fullArgs, "-C", repoPath)
126 + }
127 + fullArgs = append(fullArgs, args...)
128 +
129 + cmd := exec.CommandContext(cctx, "git", fullArgs...)
130 + cmd.Env = append(os.Environ(),
131 + "GIT_TERMINAL_PROMPT=0",
132 + "LC_ALL=C",
133 + )
134 + var stdout, stderr bytes.Buffer
135 + cmd.Stdout = &stdout
136 + cmd.Stderr = &stderr
137 +
138 + if err := cmd.Run(); err != nil {
139 + return nil, fmt.Errorf("git %v: %w (%s)", args, err, strings.TrimSpace(stderr.String()))
140 + }
141 + return stdout.Bytes(), nil
142 +}
143 +
144 +func InitBare(ctx context.Context, repoPath, defaultBranch string) error {
145 + if defaultBranch == "" {
146 + defaultBranch = "main"
147 + }
148 + if err := ValidateRef(defaultBranch); err != nil {
149 + defaultBranch = "main"
150 + }
151 + if err := os.MkdirAll(filepath.Dir(repoPath), 0o755); err != nil {
152 + return fmt.Errorf("mkdir repo parent: %w", err)
153 + }
154 +
155 + _, err := runGit(ctx, "", 10*time.Second, "init", "--bare", "--initial-branch="+defaultBranch, repoPath)
156 + if err != nil {
157 + if _, err2 := runGit(ctx, "", 10*time.Second, "init", "--bare", repoPath); err2 != nil {
158 + return fmt.Errorf("init bare repo: %w", err2)
159 + }
160 + }
161 + _, _ = runGit(ctx, repoPath, 5*time.Second, "symbolic-ref", "HEAD", "refs/heads/"+defaultBranch)
162 + _, _ = runGit(ctx, repoPath, 5*time.Second, "config", "http.receivepack", "true")
163 + _, _ = runGit(ctx, repoPath, 5*time.Second, "config", "http.uploadpack", "true")
164 + return nil
165 +}
166 +
167 +func EnsureDefaultBranch(ctx context.Context, repoPath, preferred string) (string, bool) {
168 + if preferred == "" {
169 + preferred = "main"
170 + }
171 + branches, err := ListBranches(ctx, repoPath)
172 + if err != nil || len(branches) == 0 {
173 + return preferred, true
174 + }
175 +
176 + out, err := runGit(ctx, repoPath, 3*time.Second, "symbolic-ref", "--short", "HEAD")
177 + headBranch := strings.TrimSpace(string(out))
178 + if err == nil && headBranch != "" {
179 + for _, b := range branches {
180 + if b == headBranch {
181 + return headBranch, false
182 + }
183 + }
184 + }
185 +
186 + chosen := branches[0]
187 + for _, b := range branches {
188 + if b == preferred {
189 + chosen = preferred
190 + break
191 + }
192 + }
193 + _, _ = runGit(ctx, repoPath, 3*time.Second, "symbolic-ref", "HEAD", "refs/heads/"+chosen)
194 + return chosen, false
195 +}
196 +
197 +func ListBranches(ctx context.Context, repoPath string) ([]string, error) {
198 + out, err := runGit(ctx, repoPath, 5*time.Second, "for-each-ref", "--format=%(refname:short)", "refs/heads/")
199 + if err != nil {
200 + return nil, err
201 + }
202 + return splitNonEmptyLines(string(out)), nil
203 +}
204 +
205 +func ListTags(ctx context.Context, repoPath string) ([]string, error) {
206 + out, err := runGit(ctx, repoPath, 5*time.Second, "for-each-ref", "--sort=-creatordate", "--format=%(refname:short)", "refs/tags/")
207 + if err != nil {
208 + return nil, err
209 + }
210 + return splitNonEmptyLines(string(out)), nil
211 +}
212 +
213 +func ListTree(ctx context.Context, repoPath, ref, subPath string) ([]TreeEntry, error) {
214 + if err := ValidateRef(ref); err != nil {
215 + return nil, err
216 + }
217 + cleanPath, err := CleanSubPath(subPath)
218 + if err != nil {
219 + return nil, err
220 + }
221 +
222 + target := ref
223 + if cleanPath != "" {
224 + target = ref + ":" + cleanPath
225 + }
226 +
227 + out, err := runGit(ctx, repoPath, 10*time.Second, "ls-tree", "-l", target)
228 + if err != nil {
229 + if strings.Contains(err.Error(), "Not a valid object name") || strings.Contains(err.Error(), "bad file") {
230 + return nil, ErrNotFound
231 + }
232 + return nil, err
233 + }
234 +
235 + lines := splitNonEmptyLines(string(out))
236 + entries := make([]TreeEntry, 0, len(lines))
237 + for _, line := range lines {
238 + // Format: <mode> <type> <object> <size>\t<file>
239 + tabIdx := strings.IndexByte(line, '\t')
240 + if tabIdx == -1 {
241 + continue
242 + }
243 + meta := strings.Fields(line[:tabIdx])
244 + name := line[tabIdx+1:]
245 + if len(meta) < 4 {
246 + continue
247 + }
248 + var size int64
249 + if meta[3] != "-" {
250 + size, _ = strconv.ParseInt(meta[3], 10, 64)
251 + }
252 + entryPath := name
253 + if cleanPath != "" {
254 + entryPath = cleanPath + "/" + name
255 + }
256 + entries = append(entries, TreeEntry{
257 + Mode: meta[0],
258 + Type: meta[1],
259 + Hash: meta[2],
260 + Size: size,
261 + Name: name,
262 + Path: entryPath,
263 + })
264 + }
265 +
266 + sort.Slice(entries, func(i, j int) bool {
267 + if entries[i].Type != entries[j].Type {
268 + return entries[i].Type == "tree"
269 + }
270 + return strings.ToLower(entries[i].Name) < strings.ToLower(entries[j].Name)
271 + })
272 +
273 + // Populate last commit summary for up to 50 entries
274 + if len(entries) <= 50 {
275 + for i := range entries {
276 + if c, err := GetLatestCommit(ctx, repoPath, ref, entries[i].Path); err == nil && c != nil {
277 + entries[i].CommitHash = c.ShortHash
278 + entries[i].CommitMsg = c.Subject
279 + entries[i].CommitTime = c.AuthoredAt
280 + }
281 + }
282 + }
283 +
284 + return entries, nil
285 +}
286 +
287 +func ListAllFiles(ctx context.Context, repoPath, ref string) ([]string, error) {
288 + if err := ValidateRef(ref); err != nil {
289 + return nil, err
290 + }
291 + out, err := runGit(ctx, repoPath, 10*time.Second, "ls-tree", "-r", "--name-only", ref)
292 + if err != nil {
293 + return nil, err
294 + }
295 + files := splitNonEmptyLines(string(out))
296 + if len(files) > 1000 {
297 + files = files[:1000]
298 + }
299 + return files, nil
300 +}
301 +
302 +func ReadBlob(ctx context.Context, repoPath, ref, filePath string) (*Blob, error) {
303 + if err := ValidateRef(ref); err != nil {
304 + return nil, err
305 + }
306 + cleanPath, err := CleanSubPath(filePath)
307 + if err != nil || cleanPath == "" {
308 + return nil, ErrInvalidPath
309 + }
310 +
311 + spec := ref + ":" + cleanPath
312 + typeOut, err := runGit(ctx, repoPath, 5*time.Second, "cat-file", "-t", spec)
313 + if err != nil {
314 + return nil, ErrNotFound
315 + }
316 + if strings.TrimSpace(string(typeOut)) != "blob" {
317 + return nil, ErrNotFound
318 + }
319 +
320 + data, err := runGit(ctx, repoPath, 10*time.Second, "cat-file", "-p", spec)
321 + if err != nil {
322 + return nil, ErrNotFound
323 + }
324 +
325 + data = normalizeTextEncoding(data)
326 +
327 + checkLen := len(data)
328 + if checkLen > 8000 {
329 + checkLen = 8000
330 + }
331 + isBinary := bytes.IndexByte(data[:checkLen], 0) != -1 || !utf8.Valid(data[:checkLen])
332 +
333 + lineCount := 0
334 + if !isBinary && len(data) > 0 {
335 + lineCount = bytes.Count(data, []byte{'\n'})
336 + if data[len(data)-1] != '\n' {
337 + lineCount++
338 + }
339 + }
340 +
341 + return &Blob{
342 + Name: path.Base(cleanPath),
343 + Path: cleanPath,
344 + Size: int64(len(data)),
345 + Data: data,
346 + IsBinary: isBinary,
347 + LineCount: lineCount,
348 + }, nil
349 +}
350 +
351 +func FindReadme(ctx context.Context, repoPath, ref, subPath string) (*Blob, error) {
352 + candidates := []string{"README.md", "readme.md", "Readme.md", "README.markdown", "README.txt", "README"}
353 + cleanSub, err := CleanSubPath(subPath)
354 + if err != nil {
355 + return nil, err
356 + }
357 + for _, name := range candidates {
358 + p := name
359 + if cleanSub != "" {
360 + p = cleanSub + "/" + name
361 + }
362 + if blob, err := ReadBlob(ctx, repoPath, ref, p); err == nil && !blob.IsBinary {
363 + return blob, nil
364 + }
365 + }
366 + return nil, ErrNotFound
367 +}
368 +
369 +// normalizeTextEncoding converts BOM-marked text (UTF-8/UTF-16) to UTF-8 so
370 +// files written by Windows tooling (e.g. PowerShell) render as text instead
371 +// of being misdetected as binary.
372 +func normalizeTextEncoding(data []byte) []byte {
373 + if len(data) >= 3 && data[0] == 0xEF && data[1] == 0xBB && data[2] == 0xBF {
374 + return data[3:]
375 + }
376 + if len(data) >= 2 && data[0] == 0xFF && data[1] == 0xFE {
377 + if len(data) >= 4 && data[2] == 0x00 && data[3] == 0x00 {
378 + return data // UTF-32LE is left untouched
379 + }
380 + return utf16ToUTF8(data[2:], binary.LittleEndian)
381 + }
382 + if len(data) >= 2 && data[0] == 0xFE && data[1] == 0xFF {
383 + return utf16ToUTF8(data[2:], binary.BigEndian)
384 + }
385 + return data
386 +}
387 +
388 +func utf16ToUTF8(data []byte, order binary.ByteOrder) []byte {
389 + runes := make([]rune, 0, len(data)/2)
390 + for i := 0; i+1 < len(data); i += 2 {
391 + unit := order.Uint16(data[i : i+2])
392 + if unit == 0 {
393 + break
394 + }
395 + if utf16.IsSurrogate(rune(unit)) && i+3 < len(data) {
396 + next := order.Uint16(data[i+2 : i+4])
397 + if combined := utf16.DecodeRune(rune(unit), rune(next)); combined != unicode.ReplacementChar {
398 + runes = append(runes, combined)
399 + i += 2
400 + continue
401 + }
402 + }
403 + runes = append(runes, rune(unit))
404 + }
405 + return []byte(string(runes))
406 +}
407 +
408 +const commitFormat = "%H%x1f%h%x1f%an%x1f%ae%x1f%at%x1f%s%x1f%b%x1f%P%x1e"
409 +
410 +func GetLatestCommit(ctx context.Context, repoPath, ref, subPath string) (*Commit, error) {
411 + if err := ValidateRef(ref); err != nil {
412 + return nil, err
413 + }
414 + args := []string{"log", "-n", "1", "--format=" + commitFormat, ref}
415 + if subPath != "" {
416 + cleanPath, err := CleanSubPath(subPath)
417 + if err != nil {
418 + return nil, err
419 + }
420 + if cleanPath != "" {
421 + args = append(args, "--", cleanPath)
422 + }
423 + }
424 + out, err := runGit(ctx, repoPath, 5*time.Second, args...)
425 + if err != nil {
426 + return nil, err
427 + }
428 + commits := parseCommits(string(out))
429 + if len(commits) == 0 {
430 + return nil, ErrNotFound
431 + }
432 + return &commits[0], nil
433 +}
434 +
435 +func ListCommits(ctx context.Context, repoPath, ref string, limit, offset int) ([]Commit, error) {
436 + if err := ValidateRef(ref); err != nil {
437 + return nil, err
438 + }
439 + if limit <= 0 || limit > 100 {
440 + limit = 30
441 + }
442 + if offset < 0 {
443 + offset = 0
444 + }
445 + out, err := runGit(ctx, repoPath, 10*time.Second,
446 + "log",
447 + "--max-count="+strconv.Itoa(limit),
448 + "--skip="+strconv.Itoa(offset),
449 + "--format="+commitFormat,
450 + ref,
451 + "--",
452 + )
453 + if err != nil {
454 + return nil, err
455 + }
456 + return parseCommits(string(out)), nil
457 +}
458 +
459 +func GetCommitDiff(ctx context.Context, repoPath, commitHash string) (*CommitDetail, error) {
460 + if err := ValidateRef(commitHash); err != nil {
461 + return nil, err
462 + }
463 +
464 + metaOut, err := runGit(ctx, repoPath, 5*time.Second, "show", "-s", "--format="+commitFormat, commitHash)
465 + if err != nil {
466 + return nil, ErrNotFound
467 + }
468 + commits := parseCommits(string(metaOut))
469 + if len(commits) == 0 {
470 + return nil, ErrNotFound
471 + }
472 + commit := commits[0]
473 +
474 + diffOut, err := runGit(ctx, repoPath, 15*time.Second, "show", "--patch", "--find-renames", "--format=", commitHash)
475 + if err != nil {
476 + return nil, err
477 + }
478 +
479 + files, adds, dels := parseUnifiedDiff(string(diffOut))
480 + return &CommitDetail{
481 + Commit: commit,
482 + FilesChanged: len(files),
483 + TotalAdditions: adds,
484 + TotalDeletions: dels,
485 + Files: files,
486 + }, nil
487 +}
488 +
489 +func parseCommits(raw string) []Commit {
490 + records := strings.Split(raw, "\x1e")
491 + var commits []Commit
492 + for _, rec := range records {
493 + rec = strings.TrimSpace(rec)
494 + if rec == "" {
495 + continue
496 + }
497 + fields := strings.Split(rec, "\x1f")
498 + if len(fields) < 7 {
499 + continue
500 + }
501 + ts, _ := strconv.ParseInt(strings.TrimSpace(fields[4]), 10, 64)
502 + var parents []string
503 + if len(fields) >= 8 && strings.TrimSpace(fields[7]) != "" {
504 + parents = strings.Fields(fields[7])
505 + }
506 + commits = append(commits, Commit{
507 + Hash: strings.TrimSpace(fields[0]),
508 + ShortHash: strings.TrimSpace(fields[1]),
509 + AuthorName: strings.TrimSpace(fields[2]),
510 + AuthorEmail: strings.TrimSpace(fields[3]),
511 + AuthoredAt: time.Unix(ts, 0).UTC(),
512 + Subject: strings.TrimSpace(fields[5]),
513 + Body: strings.TrimSpace(fields[6]),
514 + Parents: parents,
515 + })
516 + }
517 + return commits
518 +}
519 +
520 +func parseUnifiedDiff(raw string) ([]FileDiff, int, int) {
521 + var files []FileDiff
522 + var current *FileDiff
523 + totalAdds := 0
524 + totalDels := 0
525 +
526 + oldLine := 0
527 + newLine := 0
528 +
529 + lines := strings.Split(raw, "\n")
530 + for _, line := range lines {
531 + line = strings.TrimSuffix(line, "\r")
532 + if strings.HasPrefix(line, "diff --git ") {
533 + if current != nil {
534 + files = append(files, *current)
535 + }
536 + oldP, newP := parseDiffGitHeader(line)
537 + current = &FileDiff{
538 + OldPath: oldP,
539 + NewPath: newP,
540 + Status: "modified",
541 + }
542 + continue
543 + }
544 + if current == nil {
545 + continue
546 + }
547 +
548 + if strings.HasPrefix(line, "new file mode ") {
549 + current.Status = "added"
550 + continue
551 + }
552 + if strings.HasPrefix(line, "deleted file mode ") {
553 + current.Status = "deleted"
554 + continue
555 + }
556 + if strings.HasPrefix(line, "rename from ") {
557 + current.Status = "renamed"
558 + current.OldPath = strings.TrimPrefix(line, "rename from ")
559 + continue
560 + }
561 + if strings.HasPrefix(line, "rename to ") {
562 + current.Status = "renamed"
563 + current.NewPath = strings.TrimPrefix(line, "rename to ")
564 + continue
565 + }
566 + if strings.HasPrefix(line, "Binary files ") {
567 + current.IsBinary = true
568 + continue
569 + }
570 + if strings.HasPrefix(line, "index ") || strings.HasPrefix(line, "--- ") || strings.HasPrefix(line, "+++ ") {
571 + continue
572 + }
573 +
574 + if strings.HasPrefix(line, "@@ ") {
575 + oldLine, newLine = parseHunkHeader(line)
576 + current.Lines = append(current.Lines, DiffLine{
577 + Type: "hunk",
578 + Content: line,
579 + })
580 + continue
581 + }
582 +
583 + if len(current.Lines) == 0 {
584 + continue
585 + }
586 +
587 + if strings.HasPrefix(line, "+") {
588 + current.Additions++
589 + totalAdds++
590 + current.Lines = append(current.Lines, DiffLine{
591 + Type: "add",
592 + Content: line[1:],
593 + NewNum: newLine,
594 + })
595 + newLine++
596 + } else if strings.HasPrefix(line, "-") {
597 + current.Deletions++
598 + totalDels++
599 + current.Lines = append(current.Lines, DiffLine{
600 + Type: "del",
601 + Content: line[1:],
602 + OldNum: oldLine,
603 + })
604 + oldLine++
605 + } else if strings.HasPrefix(line, " ") {
606 + current.Lines = append(current.Lines, DiffLine{
607 + Type: "ctx",
608 + Content: line[1:],
609 + OldNum: oldLine,
610 + NewNum: newLine,
611 + })
612 + oldLine++
613 + newLine++
614 + }
615 + }
616 +
617 + if current != nil {
618 + files = append(files, *current)
619 + }
620 + return files, totalAdds, totalDels
621 +}
622 +
623 +func parseDiffGitHeader(line string) (string, string) {
624 + // diff --git a/foo b/foo
625 + rest := strings.TrimPrefix(line, "diff --git ")
626 + parts := strings.SplitN(rest, " b/", 2)
627 + if len(parts) == 2 {
628 + return strings.TrimPrefix(parts[0], "a/"), parts[1]
629 + }
630 + return rest, rest
631 +}
632 +
633 +func parseHunkHeader(line string) (int, int) {
634 + // @@ -oldStart,oldCount +newStart,newCount @@
635 + oldStart, newStart := 1, 1
636 + endIdx := strings.Index(line[3:], "@@")
637 + if endIdx == -1 {
638 + return oldStart, newStart
639 + }
640 + header := strings.TrimSpace(line[3 : 3+endIdx])
641 + fields := strings.Fields(header)
642 + for _, f := range fields {
643 + if strings.HasPrefix(f, "-") {
644 + nums := strings.SplitN(f[1:], ",", 2)
645 + if v, err := strconv.Atoi(nums[0]); err == nil {
646 + oldStart = v
647 + }
648 + } else if strings.HasPrefix(f, "+") {
649 + nums := strings.SplitN(f[1:], ",", 2)
650 + if v, err := strconv.Atoi(nums[0]); err == nil {
651 + newStart = v
652 + }
653 + }
654 + }
655 + return oldStart, newStart
656 +}
657 +
658 +func splitNonEmptyLines(s string) []string {
659 + raw := strings.Split(s, "\n")
660 + out := make([]string, 0, len(raw))
661 + for _, l := range raw {
662 + l = strings.TrimSpace(l)
663 + if l != "" {
664 + out = append(out, l)
665 + }
666 + }
667 + return out
668 +}
669 +
670 +type BranchInfo struct {
671 + Name string
672 + Hash string
673 + ShortHash string
674 + Subject string
675 + AuthorName string
676 + UpdatedAt time.Time
677 + IsDefault bool
678 +}
679 +
680 +type TagInfo struct {
681 + Name string
682 + Hash string
683 + ShortHash string
684 + Subject string
685 + CreatedAt time.Time
686 +}
687 +
688 +func ListBranchDetails(ctx context.Context, repoPath, defaultBranch string) ([]BranchInfo, error) {
689 + out, err := runGit(ctx, repoPath, 5*time.Second,
690 + "for-each-ref",
691 + "--sort=-committerdate",
692 + "--format=%(refname:short)%00%(objectname)%00%(objectname:short)%00%(contents:subject)%00%(authorname)%00%(committerdate:unix)",
693 + "refs/heads/",
694 + )
695 + if err != nil {
696 + return nil, err
697 + }
698 + lines := splitNonEmptyLines(string(out))
699 + res := make([]BranchInfo, 0, len(lines))
700 + for _, l := range lines {
701 + parts := strings.Split(l, "\x00")
702 + if len(parts) < 6 {
703 + continue
704 + }
705 + ts, _ := strconv.ParseInt(parts[5], 10, 64)
706 + var tm time.Time
707 + if ts > 0 {
708 + tm = time.Unix(ts, 0).UTC()
709 + }
710 + res = append(res, BranchInfo{
711 + Name: parts[0],
712 + Hash: parts[1],
713 + ShortHash: parts[2],
714 + Subject: parts[3],
715 + AuthorName: parts[4],
716 + UpdatedAt: tm,
717 + IsDefault: parts[0] == defaultBranch,
718 + })
719 + }
720 + sort.SliceStable(res, func(i, j int) bool {
721 + if res[i].IsDefault != res[j].IsDefault {
722 + return res[i].IsDefault
723 + }
724 + return res[i].UpdatedAt.After(res[j].UpdatedAt)
725 + })
726 + return res, nil
727 +}
728 +
729 +func ListTagDetails(ctx context.Context, repoPath string) ([]TagInfo, error) {
730 + out, err := runGit(ctx, repoPath, 5*time.Second,
731 + "for-each-ref",
732 + "--sort=-creatordate",
733 + "--format=%(refname:short)%00%(objectname)%00%(objectname:short)%00%(contents:subject)%00%(creatordate:unix)",
734 + "refs/tags/",
735 + )
736 + if err != nil {
737 + return nil, err
738 + }
739 + lines := splitNonEmptyLines(string(out))
740 + res := make([]TagInfo, 0, len(lines))
741 + for _, l := range lines {
742 + parts := strings.Split(l, "\x00")
743 + if len(parts) < 5 {
744 + continue
745 + }
746 + ts, _ := strconv.ParseInt(parts[4], 10, 64)
747 + var tm time.Time
748 + if ts > 0 {
749 + tm = time.Unix(ts, 0).UTC()
750 + }
751 + res = append(res, TagInfo{
752 + Name: parts[0],
753 + Hash: parts[1],
754 + ShortHash: parts[2],
755 + Subject: parts[3],
756 + CreatedAt: tm,
757 + })
758 + }
759 + return res, nil
760 +}
761 +
762 +func CreateBranch(ctx context.Context, repoPath, branchName, fromRef string) error {
763 + branchName = strings.TrimSpace(branchName)
764 + fromRef = strings.TrimSpace(fromRef)
765 + if err := ValidateRef(branchName); err != nil {
766 + return err
767 + }
768 + if err := ValidateRef(fromRef); err != nil {
769 + return err
770 + }
771 + _, err := runGit(ctx, repoPath, 5*time.Second, "branch", branchName, fromRef)
772 + return err
773 +}
774 +
775 +func DeleteBranch(ctx context.Context, repoPath, branchName string) error {
776 + branchName = strings.TrimSpace(branchName)
777 + if err := ValidateRef(branchName); err != nil {
778 + return err
779 + }
780 + _, err := runGit(ctx, repoPath, 5*time.Second, "branch", "-D", branchName)
781 + return err
782 +}
783 +
784 +func CreateTag(ctx context.Context, repoPath, tagName, fromRef, message string) error {
785 + tagName = strings.TrimSpace(tagName)
786 + fromRef = strings.TrimSpace(fromRef)
787 + message = strings.TrimSpace(message)
788 + if err := ValidateRef(tagName); err != nil {
789 + return err
790 + }
791 + if err := ValidateRef(fromRef); err != nil {
792 + return err
793 + }
794 + if message != "" {
795 + _, err := runGit(ctx, repoPath, 5*time.Second,
796 + "-c", "user.name=Polar",
797 + "-c", "user.email=polar@localhost",
798 + "tag", "-a", tagName, "-m", message, fromRef,
799 + )
800 + return err
801 + }
802 + _, err := runGit(ctx, repoPath, 5*time.Second, "tag", tagName, fromRef)
803 + return err
804 +}
805 +
806 +func DeleteTag(ctx context.Context, repoPath, tagName string) error {
807 + tagName = strings.TrimSpace(tagName)
808 + if err := ValidateRef(tagName); err != nil {
809 + return err
810 + }
811 + _, err := runGit(ctx, repoPath, 5*time.Second, "tag", "-d", tagName)
812 + return err
813 +}
814 +
815 +func ArchiveZip(ctx context.Context, repoPath, ref, prefix string) ([]byte, error) {
816 + ref = strings.TrimSpace(ref)
817 + if err := ValidateRef(ref); err != nil {
818 + return nil, err
819 + }
820 + prefix = strings.Trim(prefix, "/")
821 + if prefix == "" {
822 + prefix = "repo"
823 + }
824 + return runGit(ctx, repoPath, 30*time.Second, "archive", "--format=zip", "--prefix="+prefix+"/", ref)
825 +}
826 +
827 +func ArchiveTarGz(ctx context.Context, repoPath, ref, prefix string) ([]byte, error) {
828 + ref = strings.TrimSpace(ref)
829 + if err := ValidateRef(ref); err != nil {
830 + return nil, err
831 + }
832 + prefix = strings.Trim(prefix, "/")
833 + if prefix == "" {
834 + prefix = "repo"
835 + }
836 + return runGit(ctx, repoPath, 30*time.Second, "archive", "--format=tar.gz", "--prefix="+prefix+"/", ref)
837 +}
838 +
839 +func CompareBranches(ctx context.Context, repoPath, baseBranch, headBranch string) (*CommitDetail, []Commit, error) {
840 + if err := ValidateRef(baseBranch); err != nil {
841 + return nil, nil, err
842 + }
843 + if err := ValidateRef(headBranch); err != nil {
844 + return nil, nil, err
845 + }
846 + out, err := runGit(ctx, repoPath, 10*time.Second, "log", "--format="+commitFormat, baseBranch+".."+headBranch, "--")
847 + if err != nil {
848 + return nil, nil, fmt.Errorf("git log base..head: %w", err)
849 + }
850 + commits := parseCommits(string(out))
851 +
852 + diffOut, err := runGit(ctx, repoPath, 15*time.Second, "diff", "--patch", "--find-renames", baseBranch+"..."+headBranch)
853 + if err != nil {
854 + return nil, nil, fmt.Errorf("git diff base...head: %w", err)
855 + }
856 + files, adds, dels := parseUnifiedDiff(string(diffOut))
857 +
858 + detail := &CommitDetail{
859 + FilesChanged: len(files),
860 + TotalAdditions: adds,
861 + TotalDeletions: dels,
862 + Files: files,
863 + }
864 + return detail, commits, nil
865 +}
866 +
867 +func CanMergeBranches(ctx context.Context, repoPath, baseBranch, headBranch string) (canMerge bool, isFastForward bool, err error) {
868 + if err := ValidateRef(baseBranch); err != nil {
869 + return false, false, err
870 + }
871 + if err := ValidateRef(headBranch); err != nil {
872 + return false, false, err
873 + }
874 +
875 + _, err = runGit(ctx, repoPath, 5*time.Second, "merge-base", "--is-ancestor", headBranch, baseBranch)
876 + if err == nil {
877 + return true, true, nil
878 + }
879 +
880 + _, err = runGit(ctx, repoPath, 5*time.Second, "merge-base", "--is-ancestor", baseBranch, headBranch)
881 + if err == nil {
882 + return true, true, nil
883 + }
884 +
885 + baseCommit, err := runGit(ctx, repoPath, 5*time.Second, "merge-base", baseBranch, headBranch)
886 + if err != nil {
887 + return false, false, fmt.Errorf("find merge base: %w", err)
888 + }
889 + baseHash := strings.TrimSpace(string(baseCommit))
890 + if baseHash == "" {
891 + return false, false, errors.New("no common ancestor")
892 + }
893 +
894 + treeOut, err := runGit(ctx, repoPath, 5*time.Second, "merge-tree", baseHash, baseBranch, headBranch)
895 + if err != nil {
896 + return false, false, nil
897 + }
898 + if strings.Contains(string(treeOut), "+<<<<<<<") {
899 + return false, false, nil
900 + }
901 + return true, false, nil
902 +}
903 +
904 +func MergeBranches(ctx context.Context, repoPath, baseBranch, headBranch, commitMsg, authorName, authorEmail string) (string, error) {
905 + if err := ValidateRef(baseBranch); err != nil {
906 + return "", err
907 + }
908 + if err := ValidateRef(headBranch); err != nil {
909 + return "", err
910 + }
911 + return mergeRefs(ctx, repoPath, baseBranch, headBranch, commitMsg, authorName, authorEmail)
912 +}
913 +
914 +// MergeFromPath fetches headBranch from another local repository (a fork) and merges
915 +// it into baseBranch of repoPath. Used to merge cross-repository pull requests.
916 +func MergeFromPath(ctx context.Context, repoPath, forkPath, baseBranch, headBranch, tempRef, commitMsg, authorName, authorEmail string) (string, error) {
917 + if err := ValidateRef(baseBranch); err != nil {
918 + return "", err
919 + }
920 + if err := ValidateRef(headBranch); err != nil {
921 + return "", err
922 + }
923 + if tempRef == "" {
924 + tempRef = "refs/polar/tmp-merge"
925 + }
926 + if err := FetchToTemp(ctx, repoPath, forkPath, headBranch, tempRef); err != nil {
927 + return "", err
928 + }
929 + defer DeleteRef(context.WithoutCancel(ctx), repoPath, tempRef)
930 + return mergeRefs(ctx, repoPath, baseBranch, tempRef, commitMsg, authorName, authorEmail)
931 +}
932 +
933 +// FetchToTemp fetches a branch from another local repository into a temporary ref.
934 +func FetchToTemp(ctx context.Context, repoPath, srcPath, branch, tempRef string) error {
935 + if err := ValidateRef(branch); err != nil {
936 + return err
937 + }
938 + _, err := runGit(ctx, repoPath, 120*time.Second, "fetch", "--no-tags", "--quiet", srcPath, "+refs/heads/"+branch+":"+tempRef)
939 + if err != nil {
940 + return fmt.Errorf("fetch branch %s: %w", branch, err)
941 + }
942 + return nil
943 +}
944 +
945 +// DeleteRef removes a ref; missing refs are ignored.
946 +func DeleteRef(ctx context.Context, repoPath, ref string) {
947 + _, _ = runGit(ctx, repoPath, 10*time.Second, "update-ref", "-d", ref)
948 +}
949 +
950 +// CloneBare copies a bare repository to a new location (used when creating forks).
951 +func CloneBare(ctx context.Context, srcPath, dstPath string) error {
952 + if _, err := runGit(ctx, "", 180*time.Second, "clone", "--bare", "--quiet", srcPath, dstPath); err != nil {
953 + return fmt.Errorf("clone bare repository: %w", err)
954 + }
955 + _, _ = runGit(ctx, dstPath, 10*time.Second, "remote", "remove", "origin")
956 + return nil
957 +}
958 +
959 +// BranchExists reports whether a local branch exists in a bare repository.
960 +func BranchExists(ctx context.Context, repoPath, branch string) bool {
961 + if err := ValidateRef(branch); err != nil {
962 + return false
963 + }
964 + _, err := runGit(ctx, repoPath, 5*time.Second, "show-ref", "--verify", "--quiet", "refs/heads/"+branch)
965 + return err == nil
966 +}
967 +
968 +// CountCommits returns the number of commits reachable from ref (0 on error).
969 +func CountCommits(ctx context.Context, repoPath, ref string) int {
970 + if err := ValidateRef(ref); err != nil {
971 + return 0
972 + }
973 + out, err := runGit(ctx, repoPath, 10*time.Second, "rev-list", "--count", ref)
974 + if err != nil {
975 + return 0
976 + }
977 + n, _ := strconv.Atoi(strings.TrimSpace(string(out)))
978 + return n
979 +}
980 +
981 +func mergeRefs(ctx context.Context, repoPath, baseRef, headRef, commitMsg, authorName, authorEmail string) (string, error) {
982 + canMerge, isFF, err := CanMergeBranches(ctx, repoPath, baseRef, headRef)
983 + if err != nil {
984 + return "", err
985 + }
986 + if !canMerge {
987 + return "", errors.New("cannot merge: conflicting changes detected")
988 + }
989 +
990 + headCommit, err := runGit(ctx, repoPath, 5*time.Second, "rev-parse", headRef)
991 + if err != nil {
992 + return "", fmt.Errorf("rev-parse head: %w", err)
993 + }
994 + headHash := strings.TrimSpace(string(headCommit))
995 +
996 + if isFF {
997 + _, err = runGit(ctx, repoPath, 5*time.Second, "update-ref", "refs/heads/"+baseRef, headHash)
998 + if err != nil {
999 + return "", fmt.Errorf("update-ref fast-forward: %w", err)
1000 + }
1001 + return headHash, nil
1002 + }
1003 +
1004 + wtOut, err := runGit(ctx, repoPath, 5*time.Second, "merge-tree", "--write-tree", baseRef, headRef)
1005 + var treeHash string
1006 + if err == nil && len(strings.TrimSpace(string(wtOut))) == 40 {
1007 + treeHash = strings.TrimSpace(string(wtOut))
1008 + } else {
1009 + headTree, _ := runGit(ctx, repoPath, 5*time.Second, "rev-parse", headRef+"^{tree}")
1010 + treeHash = strings.TrimSpace(string(headTree))
1011 + }
1012 +
1013 + baseHeadHash, _ := runGit(ctx, repoPath, 5*time.Second, "rev-parse", baseRef)
1014 + baseHashStr := strings.TrimSpace(string(baseHeadHash))
1015 +
1016 + if commitMsg == "" {
1017 + commitMsg = fmt.Sprintf("Merge branch '%s' into %s", headRef, baseRef)
1018 + }
1019 +
1020 + commitArgs := []string{"commit-tree", treeHash, "-p", baseHashStr, "-p", headHash, "-m", commitMsg}
1021 + cmd := exec.CommandContext(ctx, "git", commitArgs...)
1022 + cmd.Dir = repoPath
1023 + cmd.Env = append(os.Environ(),
1024 + "GIT_AUTHOR_NAME="+authorName,
1025 + "GIT_AUTHOR_EMAIL="+authorEmail,
1026 + "GIT_COMMITTER_NAME="+authorName,
1027 + "GIT_COMMITTER_EMAIL="+authorEmail,
1028 + )
1029 + out, err := cmd.CombinedOutput()
1030 + if err != nil {
1031 + return "", fmt.Errorf("commit-tree failed: %s (%w)", string(out), err)
1032 + }
1033 + mergeHash := strings.TrimSpace(string(out))
1034 +
1035 + _, err = runGit(ctx, repoPath, 5*time.Second, "update-ref", "refs/heads/"+baseRef, mergeHash)
1036 + if err != nil {
1037 + return "", fmt.Errorf("update-ref: %w", err)
1038 + }
1039 + return mergeHash, nil
1040 +}
internal/git/git_test.go
+105 -0
... ... @@ -0,0 +1,105 @@
1 +package git
2 +
3 +import (
4 + "context"
5 + "os"
6 + "os/exec"
7 + "path/filepath"
8 + "testing"
9 +)
10 +
11 +func TestValidateRefAndCleanSubPath(t *testing.T) {
12 + if err := ValidateRef("main"); err != nil {
13 + t.Fatalf("expected 'main' to be valid ref: %v", err)
14 + }
15 + if err := ValidateRef("feature/ui-kit"); err != nil {
16 + t.Fatalf("expected 'feature/ui-kit' to be valid ref: %v", err)
17 + }
18 + for _, bad := range []string{"", "-flag", "a..b", "ref.lock", "ref with space"} {
19 + if err := ValidateRef(bad); err == nil {
20 + t.Fatalf("expected ref %q to be rejected", bad)
21 + }
22 + }
23 +
24 + if p, err := CleanSubPath("internal/web/views.go"); err != nil || p != "internal/web/views.go" {
25 + t.Fatalf("CleanSubPath failed: p=%q err=%v", p, err)
26 + }
27 + for _, badPath := range []string{"../secret", "a/../../b", "-flag"} {
28 + if _, err := CleanSubPath(badPath); err == nil {
29 + t.Fatalf("expected path %q to be rejected", badPath)
30 + }
31 + }
32 +}
33 +
34 +func TestBareRepoReadAndDiff(t *testing.T) {
35 + ctx := context.Background()
36 + tmp := t.TempDir()
37 + barePath := filepath.Join(tmp, "repo.git")
38 +
39 + if err := InitBare(ctx, barePath, "main"); err != nil {
40 + t.Fatalf("InitBare failed: %v", err)
41 + }
42 +
43 + _, isEmpty := EnsureDefaultBranch(ctx, barePath, "main")
44 + if !isEmpty {
45 + t.Fatalf("expected newly initialized bare repo to be empty")
46 + }
47 +
48 + // Create a working repo and push a commit into barePath
49 + work := filepath.Join(tmp, "work")
50 + if err := os.MkdirAll(filepath.Join(work, "pkg"), 0o755); err != nil {
51 + t.Fatalf("mkdir work: %v", err)
52 + }
53 +
54 + run := func(args ...string) {
55 + t.Helper()
56 + cmd := exec.CommandContext(ctx, "git", args...)
57 + cmd.Dir = work
58 + if out, err := cmd.CombinedOutput(); err != nil {
59 + t.Fatalf("git %v: %v (%s)", args, err, string(out))
60 + }
61 + }
62 +
63 + run("init", "-b", "main")
64 + run("config", "user.name", "Alice")
65 + run("config", "user.email", "alice@example.com")
66 + _ = os.WriteFile(filepath.Join(work, "README.md"), []byte("# Test Repo\n"), 0o644)
67 + _ = os.WriteFile(filepath.Join(work, "pkg", "hello.go"), []byte("package pkg\n\nfunc Hello() string { return \"hi\" }\n"), 0o644)
68 + run("add", ".")
69 + run("commit", "-m", "Add README and hello.go")
70 + run("push", barePath, "main")
71 +
72 + branch, isEmpty := EnsureDefaultBranch(ctx, barePath, "main")
73 + if isEmpty || branch != "main" {
74 + t.Fatalf("expected non-empty repo on branch main, got branch=%q isEmpty=%v", branch, isEmpty)
75 + }
76 +
77 + entries, err := ListTree(ctx, barePath, "main", "")
78 + if err != nil || len(entries) != 2 {
79 + t.Fatalf("ListTree failed: len=%d err=%v", len(entries), err)
80 + }
81 + // Directory "pkg" should be sorted before file "README.md"
82 + if entries[0].Type != "tree" || entries[0].Name != "pkg" {
83 + t.Fatalf("expected directory 'pkg' first, got %+v", entries[0])
84 + }
85 +
86 + readme, err := FindReadme(ctx, barePath, "main", "")
87 + if err != nil || readme.Name != "README.md" {
88 + t.Fatalf("FindReadme failed: %v", err)
89 + }
90 +
91 + blob, err := ReadBlob(ctx, barePath, "main", "pkg/hello.go")
92 + if err != nil || blob.IsBinary || blob.LineCount != 3 {
93 + t.Fatalf("ReadBlob failed: %+v err=%v", blob, err)
94 + }
95 +
96 + commits, err := ListCommits(ctx, barePath, "main", 10, 0)
97 + if err != nil || len(commits) != 1 {
98 + t.Fatalf("ListCommits failed: len=%d err=%v", len(commits), err)
99 + }
100 +
101 + detail, err := GetCommitDiff(ctx, barePath, commits[0].Hash)
102 + if err != nil || detail.FilesChanged != 2 || detail.TotalAdditions < 4 {
103 + t.Fatalf("GetCommitDiff failed: %+v err=%v", detail, err)
104 + }
105 +}
internal/git/http.go
+85 -0
... ... @@ -0,0 +1,85 @@
1 +package git
2 +
3 +import (
4 + "bytes"
5 + "context"
6 + "errors"
7 + "fmt"
8 + "io"
9 + "os"
10 + "os/exec"
11 + "strings"
12 + "time"
13 +)
14 +
15 +var ErrUnsupportedService = errors.New("unsupported git service")
16 +
17 +func subcommandForService(service string) (string, error) {
18 + switch service {
19 + case "git-upload-pack":
20 + return "upload-pack", nil
21 + case "git-receive-pack":
22 + return "receive-pack", nil
23 + default:
24 + return "", ErrUnsupportedService
25 + }
26 +}
27 +
28 +func pktLine(payload string) string {
29 + return fmt.Sprintf("%04x%s", len(payload)+4, payload)
30 +}
31 +
32 +func AdvertiseRefs(ctx context.Context, repoPath, service string, out io.Writer) error {
33 + subcmd, err := subcommandForService(service)
34 + if err != nil {
35 + return err
36 + }
37 +
38 + cctx, cancel := context.WithTimeout(ctx, 30*time.Second)
39 + defer cancel()
40 +
41 + var stdout, stderr bytes.Buffer
42 + cmd := exec.CommandContext(cctx, "git", subcmd, "--stateless-rpc", "--advertise-refs", repoPath)
43 + cmd.Env = append(os.Environ(), "GIT_TERMINAL_PROMPT=0", "LC_ALL=C")
44 + cmd.Stdout = &stdout
45 + cmd.Stderr = &stderr
46 +
47 + if err := cmd.Run(); err != nil {
48 + return fmt.Errorf("git %s advertise-refs: %w (%s)", subcmd, err, strings.TrimSpace(stderr.String()))
49 + }
50 +
51 + header := pktLine(fmt.Sprintf("# service=%s\n", service)) + "0000"
52 + if _, err := io.WriteString(out, header); err != nil {
53 + return err
54 + }
55 + _, err = out.Write(stdout.Bytes())
56 + return err
57 +}
58 +
59 +func ServiceRPC(ctx context.Context, repoPath, service string, in io.Reader, out io.Writer) error {
60 + subcmd, err := subcommandForService(service)
61 + if err != nil {
62 + return err
63 + }
64 +
65 + cctx, cancel := context.WithTimeout(ctx, 2*time.Minute)
66 + defer cancel()
67 +
68 + var stderr bytes.Buffer
69 + cmd := exec.CommandContext(cctx, "git", subcmd, "--stateless-rpc", repoPath)
70 + cmd.Env = append(os.Environ(), "GIT_TERMINAL_PROMPT=0", "LC_ALL=C")
71 + cmd.Stdin = in
72 + cmd.Stdout = out
73 + cmd.Stderr = &stderr
74 +
75 + if err := cmd.Run(); err != nil {
76 + return fmt.Errorf("git %s stateless-rpc: %w (%s)", subcmd, err, strings.TrimSpace(stderr.String()))
77 + }
78 +
79 + if service == "git-receive-pack" {
80 + _, _ = EnsureDefaultBranch(ctx, repoPath, "main")
81 + _, _ = runGit(ctx, repoPath, 5*time.Second, "update-server-info")
82 + }
83 +
84 + return nil
85 +}
internal/git/merge_test.go
+80 -0
... ... @@ -0,0 +1,80 @@
1 +package git
2 +
3 +import (
4 + "context"
5 + "os"
6 + "os/exec"
7 + "path/filepath"
8 + "strings"
9 + "testing"
10 +)
11 +
12 +// TestMergeFromPath verifies cross-repository (fork) merging through a
13 +// temporary ref fetched from another local repository.
14 +func TestMergeFromPath(t *testing.T) {
15 + ctx := context.Background()
16 + tmp := t.TempDir()
17 +
18 + basePath := filepath.Join(tmp, "base.git")
19 + if err := InitBare(ctx, basePath, "main"); err != nil {
20 + t.Fatalf("InitBare: %v", err)
21 + }
22 +
23 + work := filepath.Join(tmp, "work")
24 + if err := os.MkdirAll(work, 0o755); err != nil {
25 + t.Fatalf("mkdir: %v", err)
26 + }
27 + run := func(dir string, args ...string) {
28 + t.Helper()
29 + cmd := exec.CommandContext(ctx, "git", args...)
30 + cmd.Dir = dir
31 + if out, err := cmd.CombinedOutput(); err != nil {
32 + t.Fatalf("git %v: %v (%s)", args, err, string(out))
33 + }
34 + }
35 +
36 + run(work, "init", "-b", "main")
37 + run(work, "config", "user.name", "Alice")
38 + run(work, "config", "user.email", "alice@example.com")
39 + if err := os.WriteFile(filepath.Join(work, "file.txt"), []byte("base\n"), 0o644); err != nil {
40 + t.Fatalf("write: %v", err)
41 + }
42 + run(work, "add", ".")
43 + run(work, "commit", "-m", "base commit")
44 + run(work, "push", basePath, "main")
45 +
46 + forkPath := filepath.Join(tmp, "fork.git")
47 + if err := CloneBare(ctx, basePath, forkPath); err != nil {
48 + t.Fatalf("CloneBare: %v", err)
49 + }
50 +
51 + // Add a feature branch on the fork.
52 + run(work, "checkout", "-b", "feature")
53 + if err := os.WriteFile(filepath.Join(work, "feature.txt"), []byte("feature\n"), 0o644); err != nil {
54 + t.Fatalf("write: %v", err)
55 + }
56 + run(work, "add", ".")
57 + run(work, "commit", "-m", "add feature")
58 + run(work, "push", forkPath, "feature")
59 +
60 + hash, err := MergeFromPath(ctx, basePath, forkPath, "main", "feature", "refs/polar/tmp-merge-test", "Merge PR #1", "Alice", "alice@example.com")
61 + if err != nil {
62 + t.Fatalf("MergeFromPath: %v", err)
63 + }
64 + if hash == "" {
65 + t.Fatalf("expected merge commit hash")
66 + }
67 +
68 + out, err := runGit(ctx, basePath, 10_000_000_000, "ls-tree", "-r", "--name-only", "main")
69 + if err != nil {
70 + t.Fatalf("ls-tree: %v", err)
71 + }
72 + if !strings.Contains(string(out), "feature.txt") {
73 + t.Fatalf("expected feature.txt on merged main, got: %s", string(out))
74 + }
75 +
76 + // The temporary ref must be gone after the merge.
77 + if out, err := runGit(ctx, basePath, 10_000_000_000, "show-ref", "--verify", "--quiet", "refs/polar/tmp-merge-test"); err == nil {
78 + t.Fatalf("expected temp ref to be deleted, got %s", string(out))
79 + }
80 +}
internal/git/text_encoding_test.go
+100 -0
... ... @@ -0,0 +1,100 @@
1 +package git
2 +
3 +import (
4 + "context"
5 + "encoding/binary"
6 + "os"
7 + "os/exec"
8 + "path/filepath"
9 + "testing"
10 + "unicode/utf16"
11 +)
12 +
13 +func utf16Bytes(s string, order binary.ByteOrder) []byte {
14 + units := utf16.Encode([]rune(s))
15 + out := make([]byte, 0, len(units)*2)
16 + for _, u := range units {
17 + var pair [2]byte
18 + order.PutUint16(pair[:], u)
19 + out = append(out, pair[:]...)
20 + }
21 + return out
22 +}
23 +
24 +func TestNormalizeTextEncoding(t *testing.T) {
25 + utf8BOM := append([]byte{0xEF, 0xBB, 0xBF}, []byte("# readme")...)
26 + if got := string(normalizeTextEncoding(utf8BOM)); got != "# readme" {
27 + t.Fatalf("utf-8 BOM: got %q", got)
28 + }
29 +
30 + le := append([]byte{0xFF, 0xFE}, utf16Bytes("# readme \u2713", binary.LittleEndian)...)
31 + if got := string(normalizeTextEncoding(le)); got != "# readme \u2713" {
32 + t.Fatalf("utf-16le: got %q", got)
33 + }
34 +
35 + be := append([]byte{0xFE, 0xFF}, utf16Bytes("# readme \u2713", binary.BigEndian)...)
36 + if got := string(normalizeTextEncoding(be)); got != "# readme \u2713" {
37 + t.Fatalf("utf-16be: got %q", got)
38 + }
39 +
40 + plain := []byte("# plain readme")
41 + if got := string(normalizeTextEncoding(plain)); got != "# plain readme" {
42 + t.Fatalf("plain text must stay untouched, got %q", got)
43 + }
44 +
45 + binaryData := []byte{0x00, 0x01, 0x02, 0x03}
46 + if got := normalizeTextEncoding(binaryData); len(got) != len(binaryData) {
47 + t.Fatalf("binary data must stay untouched")
48 + }
49 +}
50 +
51 +// TestReadBlobDecodesUTF16 mirrors README files written by Windows tooling
52 +// (PowerShell writes UTF-16LE by default) and expects them to render as text.
53 +func TestReadBlobDecodesUTF16(t *testing.T) {
54 + ctx := context.Background()
55 + tmp := t.TempDir()
56 + barePath := filepath.Join(tmp, "repo.git")
57 + if err := InitBare(ctx, barePath, "main"); err != nil {
58 + t.Fatalf("InitBare: %v", err)
59 + }
60 +
61 + work := filepath.Join(tmp, "work")
62 + if err := os.MkdirAll(work, 0o755); err != nil {
63 + t.Fatalf("mkdir: %v", err)
64 + }
65 + run := func(args ...string) {
66 + t.Helper()
67 + cmd := exec.CommandContext(ctx, "git", args...)
68 + cmd.Dir = work
69 + if out, err := cmd.CombinedOutput(); err != nil {
70 + t.Fatalf("git %v: %v (%s)", args, err, string(out))
71 + }
72 + }
73 + run("init", "-b", "main")
74 + run("config", "user.name", "Tester")
75 + run("config", "user.email", "tester@example.com")
76 +
77 + content := append([]byte{0xFF, 0xFE}, utf16Bytes("# Windows README\n", binary.LittleEndian)...)
78 + if err := os.WriteFile(filepath.Join(work, "README.md"), content, 0o644); err != nil {
79 + t.Fatalf("write README: %v", err)
80 + }
81 + run("add", ".")
82 + run("commit", "-m", "utf-16 readme")
83 + run("push", barePath, "main")
84 +
85 + blob, err := ReadBlob(ctx, barePath, "main", "README.md")
86 + if err != nil {
87 + t.Fatalf("ReadBlob: %v", err)
88 + }
89 + if blob.IsBinary {
90 + t.Fatalf("BOM-marked UTF-16 file must not be treated as binary")
91 + }
92 + if string(blob.Data) != "# Windows README\n" {
93 + t.Fatalf("unexpected decoded content %q", string(blob.Data))
94 + }
95 +
96 + readme, err := FindReadme(ctx, barePath, "main", "")
97 + if err != nil || readme == nil {
98 + t.Fatalf("FindReadme should find the UTF-16 README, err=%v", err)
99 + }
100 +}
internal/i18n/i18n.go
+963 -0
... ... @@ -0,0 +1,963 @@
1 +package i18n
2 +
3 +type Lang string
4 +
5 +const (
6 + RU Lang = "ru"
7 + EN Lang = "en"
8 +)
9 +
10 +func Normalize(code string) Lang {
11 + switch code {
12 + case "en", "EN":
13 + return EN
14 + default:
15 + return RU
16 + }
17 +}
18 +
19 +var translations = map[Lang]map[string]string{
20 + RU: {
21 + // Навигация и общее
22 + "app.tagline": "Лёгкий self-hosted Git-хостинг",
23 + "nav.home": "Главная",
24 + "nav.repositories": "Репозитории",
25 + "nav.explore": "Обзор",
26 + "nav.settings": "Настройки",
27 + "nav.admin": "Админка",
28 + "nav.login": "Войти",
29 + "nav.register": "Регистрация",
30 + "nav.logout": "Выйти",
31 + "nav.new_repo": "Создать",
32 + "nav.command_palette": "Поиск и команды",
33 + "nav.search_placeholder": "Поиск...",
34 + "nav.theme": "Тема",
35 + "nav.lang": "Язык",
36 + "common.copy": "Копировать",
37 + "common.copied": "Скопировано",
38 + "common.cancel": "Отмена",
39 + "common.save": "Сохранить",
40 + "common.delete": "Удалить",
41 + "common.close": "Закрыть",
42 + "common.never": "Никогда",
43 + "common.newer": "Новее",
44 + "common.older": "Старее",
45 + "common.up": "Наверх",
46 +
47 + // Темы (только 3)
48 + "theme.light": "Светлая",
49 + "theme.dark": "Тёмная",
50 + "theme.system": "Авто",
51 +
52 + // Лендинг
53 + "landing.badge": "Один бинарник · SQLite · Ноль зависимостей",
54 + "landing.hero.title": "Лёгкий self-hosted Git-хостинг",
55 + "landing.hero.subtitle": "Один бинарник на Go со встроенным SQLite. Поднимается за минуту, потребляет минимум памяти и не перегружен лишним.",
56 + "landing.hero.cta_start": "Начать",
57 + "landing.features.title": "Принципы",
58 + "landing.feat1.title": "Один бинарник",
59 + "landing.feat1.desc": "Шаблоны, стили, шрифты, миграции и иконки вшиты через go:embed.",
60 + "landing.feat2.title": "SQLite (WAL)",
61 + "landing.feat2.desc": "Вся база — один файл data/polar.db без CGO. Бэкап простым копированием.",
62 + "landing.feat3.title": "Быстрый отклик",
63 + "landing.feat3.desc": "Мгновенный старт, серверный рендеринг и < 30 МБ памяти в простое.",
64 + "landing.feat4.title": "Приватность",
65 + "landing.feat4.desc": "Публичные и приватные репозитории, Argon2id и токены доступа для Git HTTP.",
66 + // Авторизация
67 + "auth.login.title": "Вход",
68 + "auth.register.title": "Регистрация",
69 + "auth.register.disabled": "Публичная регистрация отключена администратором.",
70 + "auth.username": "Имя пользователя",
71 + "auth.username_hint": "2–32 символа: латиница, цифры, дефис, подчёркивание",
72 + "auth.username_or_email": "Логин или Email",
73 + "auth.email": "Email",
74 + "auth.password": "Пароль",
75 + "auth.password_hint": "Минимум 8 символов",
76 + "auth.submit_login": "Войти",
77 + "auth.submit_register": "Создать аккаунт",
78 + "auth.no_account": "Нет аккаунта?",
79 + "auth.have_account": "Уже есть аккаунт?",
80 + "auth.invalid_creds": "Неверный логин или пароль",
81 +
82 + // Репозитории
83 + "repo.new.title": "Новый репозиторий",
84 + "repo.name": "Название",
85 + "repo.name_hint": "Латинские буквы, цифры, точка, дефис, подчёркивание",
86 + "repo.description": "Описание",
87 + "repo.description_ph": "Краткое описание проекта (необязательно)",
88 + "repo.visibility": "Доступ",
89 + "repo.public": "Публичный",
90 + "repo.public_desc": "Виден всем, клонирование без авторизации",
91 + "repo.private": "Приватный",
92 + "repo.private_desc": "Доступен только владельцу",
93 + "repo.create_btn": "Создать репозиторий",
94 + "repo.filter_ph": "Фильтр репозиториев...",
95 + "repo.empty_list": "Репозиториев пока нет",
96 + "repo.empty_list_sub": "Создайте первый репозиторий, чтобы отправить код.",
97 + "repo.empty.title": "Репозиторий пуст",
98 + "repo.empty.new_cmd": "Создать новый репозиторий в командной строке",
99 + "repo.empty.push_cmd": "Отправить существующий репозиторий",
100 + "repo.tab.code": "Код",
101 + "repo.tab.commits": "Коммиты",
102 + "repo.tab.branches": "Ветки и теги",
103 + "repo.tab.issues": "Задачи",
104 + "repo.tab.pulls": "Пул-реквесты",
105 + "repo.tab.releases": "Релизы",
106 + "repo.tab.activity": "Активность",
107 + "repo.tab.settings": "Настройки",
108 + "repo.features": "Возможности репозитория",
109 + "repo.clone": "Клонировать",
110 + "repo.download_zip": "Скачать ZIP",
111 + "repo.branches": "Ветки",
112 + "repo.tags": "Теги",
113 + "repo.default_branch": "Ветка по умолчанию",
114 + "repo.find_file": "Поиск файла...",
115 + "repo.files": "Файлы",
116 + "repo.readme": "README",
117 + "repo.raw": "Raw",
118 + "repo.history": "История",
119 + "repo.lines": "строк",
120 + "repo.lines_one": "строка",
121 + "repo.lines_few": "строки",
122 + "repo.lines_many": "строк",
123 + "repo.binary_notice": "Бинарный файл — предпросмотр недоступен",
124 + "repo.download_raw": "Скачать файл",
125 + "repo.browse_at_commit": "Файлы на момент коммита",
126 + "repo.files_changed": "файлов изменено",
127 + "repo.files_changed_one": "файл изменён",
128 + "repo.files_changed_few": "файла изменено",
129 + "repo.files_changed_many": "файлов изменено",
130 + "repo.no_commits": "Коммитов пока нет",
131 + "repo.danger_zone": "Опасная зона",
132 + "repo.delete": "Удалить репозиторий",
133 + "repo.delete_desc": "Удаление необратимо: все файлы и история git будут стёрты.",
134 + "repo.delete_confirm": "Введите название репозитория для подтверждения",
135 + "repo.rename": "Переименовать",
136 + "repo.save": "Сохранить",
137 + "repo.branch.new": "Новая ветка",
138 + "repo.branch.name_ph": "Имя ветки (напр. feat/ui)",
139 + "repo.branch.from": "От ветки / коммита",
140 + "repo.branch.create": "Создать ветку",
141 + "repo.branch.default": "по умолчанию",
142 + "repo.tag.new": "Новый тег / релиз",
143 + "repo.tag.name_ph": "Тег (напр. v1.0.0)",
144 + "repo.tag.msg_ph": "Описание тега (необязательно)",
145 + "repo.tag.create": "Создать тег",
146 + "repo.tags.empty": "Тегов пока нет",
147 +
148 + // Pull Requests
149 + "pulls.title": "Пул-реквесты",
150 + "pulls.new": "Новый пул-реквест",
151 + "pulls.empty": "Пул-реквестов пока нет",
152 + "pulls.open": "Открыт",
153 + "pulls.closed": "Закрыт",
154 + "pulls.merged": "Слит",
155 + "pulls.compare": "Сравнение веток",
156 + "pulls.base": "Базовая ветка",
157 + "pulls.head": "Ветка изменений",
158 + "pulls.title_ph": "Заголовок пул-реквеста...",
159 + "pulls.desc_ph": "Опишите предлагаемые изменения (Markdown)...",
160 + "pulls.create_btn": "Создать пул-реквест",
161 + "pulls.merge_btn": "Слить пул-реквест",
162 + "pulls.can_merge": "Ветки можно объединить автоматически.",
163 + "pulls.cannot_merge": "Невозможно объединить автоматически: обнаружены конфликты.",
164 + "pulls.already_merged": "Ветка изменений уже объединена с базовой.",
165 + "pulls.close_btn": "Закрыть PR",
166 + "pulls.reopen_btn": "Открыть заново",
167 + "pulls.comment_btn": "Прокомментировать",
168 + "pulls.conversation": "Обсуждение",
169 + "pulls.files_changed": "Изменения",
170 + "pulls.commits": "Коммиты",
171 + "pulls.able_to_merge": "Можно слить автоматически",
172 + "pulls.body": "Описание",
173 + "pulls.body_ph": "Опишите предлагаемые изменения (Markdown)...",
174 + "pulls.branches_identical": "Ветки идентичны — сравнивать нечего",
175 + "pulls.cannot_merge_warning": "Обнаружены конфликты — автоматическое слияние невозможно",
176 + "pulls.closed_desc": "Ветка изменений не была объединена с базовой.",
177 + "pulls.closed_message": "Пул-реквест закрыт",
178 + "pulls.comment_ph": "Напишите комментарий (поддерживается Markdown)...",
179 + "pulls.compare_branches": "Сравнение веток",
180 + "pulls.conflicts_desc": "Разрешите конфликты локально и запушьте изменения в ветку.",
181 + "pulls.conflicts_title": "Есть конфликты слияния",
182 + "pulls.into": "в",
183 + "pulls.merge_clean": "Конфликтов нет — изменения можно объединить.",
184 + "pulls.merged_message": "Пул-реквест слит",
185 + "pulls.no_changes": "Файлы не изменены",
186 + "pulls.no_commits": "В этом пул-реквесте пока нет коммитов",
187 + "pulls.only_write_merge": "Сливать пул-реквесты могут только пользователи с правом записи.",
188 + "pulls.status.closed": "Закрыт",
189 + "pulls.status.merged": "Слит",
190 + "pulls.status.open": "Открыт",
191 + "pulls.wants_to_merge": "хочет слить",
192 +
193 + // Releases
194 + "releases.title": "Релизы",
195 + "releases.new": "Новый релиз",
196 + "releases.empty": "Релизов пока нет",
197 + "releases.tag_select": "Тег",
198 + "releases.title_ph": "Название релиза",
199 + "releases.desc_ph": "Описание релиза, список изменений (Markdown)...",
200 + "releases.prerelease": "Пре-релиз (нестабильная сборка)",
201 + "releases.publish": "Опубликовать релиз",
202 + "releases.delete": "Удалить релиз",
203 + "releases.assets": "Файлы",
204 + "releases.source_zip": "Исходный код (zip)",
205 + "releases.source_tar": "Исходный код (tar.gz)",
206 + "releases.body": "Описание",
207 + "releases.body_ph": "Опишите релиз, список изменений (Markdown)...",
208 + "releases.count": "релизов",
209 + "releases.count_one": "релиз",
210 + "releases.count_few": "релиза",
211 + "releases.count_many": "релизов",
212 + "releases.delete_confirm": "Удалить этот релиз? Действие необратимо.",
213 + "releases.is_prerelease": "Пре-релиз (нестабильная сборка)",
214 + "releases.publish_btn": "Опубликовать релиз",
215 + "releases.tag_desc": "Существующий тег или новый — он будет создан автоматически.",
216 + "releases.tag_name": "Тег",
217 + "releases.tags": "тегов",
218 + "releases.tags_one": "тег",
219 + "releases.tags_few": "тега",
220 + "releases.tags_many": "тегов",
221 + "releases.target": "Ветка",
222 + "releases.target_desc": "Ветка или коммит, на который будет указывать тег.",
223 +
224 + // Activity
225 + "activity.title": "Активность",
226 + "activity.pulse": "Сводка активности",
227 + "activity.empty": "Активности пока нет",
228 + "activity.commits": "коммитов",
229 + "activity.open_prs": "открытых PR",
230 + "activity.merged_prs": "слитых PR",
231 + "activity.open_issues": "открытых задач",
232 + "activity.releases": "релизов",
233 + "activity.issues": "открыто и закрыто",
234 + "activity.on_default_branch": "в ветке по умолчанию",
235 + "activity.published_releases": "опубликованные релизы",
236 + "activity.pull_requests": "открыто и слито",
237 + "activity.recent_feed": "Лента активности",
238 + "activity.badge_commit": "коммит",
239 + "activity.badge_release": "релиз",
240 +
241 + // Задачи (Issues)
242 + "issue.new": "Новая задача",
243 + "issue.title": "Заголовок",
244 + "issue.title_ph": "Кратко опишите задачу или проблему",
245 + "issue.body": "Описание",
246 + "issue.body_ph": "Подробное описание (поддерживается Markdown)...",
247 + "issue.create": "Создать задачу",
248 + "issue.open": "Открытые",
249 + "issue.closed": "Закрытые",
250 + "issue.status.open": "Открыта",
251 + "issue.status.closed": "Закрыта",
252 + "issue.close_btn": "Закрыть задачу",
253 + "issue.reopen_btn": "Переоткрыть",
254 + "issue.comment_ph": "Напишите комментарий (поддерживается Markdown)...",
255 + "issue.comment_btn": "Отправить",
256 + "issue.empty": "Задач в этом списке нет",
257 +
258 + // Настройки пользователя, профиль и токены
259 + "settings.title": "Настройки",
260 + "settings.profile": "Профиль",
261 + "settings.avatar": "Аватар",
262 + "settings.avatar_upload": "Выбрать изображение",
263 + "settings.avatar_remove": "Удалить аватар",
264 + "settings.avatar_hint": "PNG, JPG, WebP или GIF — автоматически кадрируется до 256×256",
265 + "settings.full_name": "Отображаемое имя",
266 + "settings.full_name_ph": "Ваше имя или ник",
267 + "settings.bio": "О себе",
268 + "settings.bio_ph": "Короткая подпись в профиле",
269 + "settings.location": "Локация",
270 + "settings.location_ph": "Город, страна",
271 + "settings.website": "Сайт",
272 + "settings.website_ph": "https://example.com",
273 + "profile.edit": "Редактировать профиль",
274 + "profile.joined": "Регистрация",
275 + "profile.public_repos": "Публичные",
276 + "profile.private_repos": "Приватные",
277 + "profile.total_repos": "Репозитории",
278 + "settings.tokens": "Токены доступа",
279 + "settings.tokens.desc": "Используйте токен вместо пароля для git clone и git push по HTTP.",
280 + "settings.token.name": "Название токена (например, Ноутбук)",
281 + "settings.token.create": "Создать",
282 + "settings.token.revoke": "Отозвать",
283 + "settings.token.created_once": "Скопируйте токен сейчас — он показывается только один раз:",
284 + "settings.token.col_name": "Название",
285 + "settings.token.col_prefix": "Префикс",
286 + "settings.token.col_created": "Создан",
287 + "settings.token.col_used": "Использован",
288 + "settings.token.empty": "Токенов доступа пока нет",
289 + "settings.password.current": "Текущий пароль",
290 + "settings.password.new": "Новый пароль",
291 + "settings.password.update": "Обновить пароль",
292 +
293 + // Админка
294 + "admin.title": "Администрирование",
295 + "admin.features": "Модули и доступ",
296 + "admin.users": "Пользователи",
297 + "admin.registration": "Публичная регистрация",
298 + "admin.registration.desc": "Разрешить самостоятельную регистрацию новых аккаунтов",
299 + "admin.explore": "Раздел «Обзор» (Explore)",
300 + "admin.explore.desc": "Показывать каталог публичных репозиториев в сайдбаре и по адресу /explore",
301 + "admin.landing": "Приветственная страница",
302 + "admin.landing.desc": "Показывать лендинг на главной странице (если отключено — переход сразу к репозиториям или входу)",
303 + "admin.anon_read": "Гостевой просмотр",
304 + "admin.anon_read.desc": "Разрешить неавторизованным пользователям просматривать публичные репозитории и профили",
305 + "admin.issues": "Трекер задач (Issues)",
306 + "admin.issues.desc": "Включить вкладку «Задачи» в репозиториях",
307 + "admin.enabled": "Включено",
308 + "admin.disabled": "Отключено",
309 + "admin.enable_btn": "Включить",
310 + "admin.disable_btn": "Отключить",
311 + "admin.col.user": "Пользователь",
312 + "admin.col.repos": "Репозитории",
313 + "admin.col.role": "Роль",
314 + "admin.col.joined": "Дата",
315 + "admin.role.admin": "Админ",
316 + "admin.role.user": "Участник",
317 +
318 + // Командная палитра и хоткеи
319 + "palette.placeholder": "Поиск репозитория, файла или команды...",
320 + "palette.group.nav": "Навигация",
321 + "palette.group.themes": "Тема оформления",
322 + "palette.group.repos": "Репозитории",
323 + "shortcuts.title": "Горячие клавиши",
324 + "shortcuts.palette": "Командная палитра",
325 + "shortcuts.search": "Фокус на поиск",
326 + "shortcuts.home": "На главную",
327 + "shortcuts.repos": "Мои репозитории",
328 + "shortcuts.files": "Фильтр файлов",
329 + "shortcuts.sidebar": "Скрыть / показать сайдбар",
330 + "nav.toggle_sidebar": "Сайдбар (Ctrl+B)",
331 +
332 + // Флеш-сообщения
333 + "flash.welcome": "Добро пожаловать в Polar, @%s!",
334 + "flash.profile_updated": "Профиль обновлён.",
335 + "flash.password_updated": "Пароль успешно изменён.",
336 + "flash.token_revoked": "Токен доступа отозван.",
337 + "flash.settings_updated": "Настройки сохранены.",
338 + "flash.error": "Ошибка: %s",
339 + "flash.comment_error": "Не удалось отправить комментарий: %s",
340 + "flash.pr_created": "Пул-реквест #%d создан.",
341 + "flash.pr_closed": "Пул-реквест #%d закрыт.",
342 + "flash.pr_reopened": "Пул-реквест #%d открыт заново.",
343 + "flash.pr_merged": "Пул-реквест #%d слит.",
344 + "flash.pr_merged_state": "Нельзя изменить состояние слитого пул-реквеста.",
345 + "flash.pr_merge_open_only": "Слить можно только открытый пул-реквест.",
346 + "flash.pr_merge_failed": "Не удалось слить: %s",
347 + "flash.release_tag_empty": "Имя тега не может быть пустым.",
348 + "flash.release_tag_failed": "Не удалось создать тег: %s",
349 + "flash.release_create_failed": "Не удалось создать релиз: %s",
350 + "flash.release_published": "Релиз %s опубликован.",
351 + "flash.release_delete_failed": "Не удалось удалить релиз: %s",
352 + "flash.release_deleted": "Релиз удалён.",
353 + "flash.repo_settings_saved": "Настройки репозитория сохранены.",
354 + "flash.repo_rename_failed": "Не удалось переименовать: %s",
355 + "flash.repo_renamed": "Репозиторий переименован в %s.",
356 + "flash.repo_confirm_mismatch": "Введённое имя не совпадает с названием репозитория.",
357 + "flash.repo_deleted": "Репозиторий %s удалён.",
358 + "flash.branch_created": "Ветка %s создана.",
359 + "flash.branch_create_failed": "Не удалось создать ветку: %s",
360 + "flash.branch_default_delete": "Нельзя удалить ветку по умолчанию.",
361 + "flash.branch_deleted": "Ветка %s удалена.",
362 + "flash.branch_delete_failed": "Не удалось удалить ветку: %s",
363 + "flash.tag_created": "Тег %s создан.",
364 + "flash.tag_create_failed": "Не удалось создать тег: %s",
365 + "flash.tag_deleted": "Тег %s удалён.",
366 + "flash.tag_delete_failed": "Не удалось удалить тег: %s",
367 + "flash.issue_closed": "Задача #%d закрыта.",
368 + "flash.issue_reopened": "Задача #%d открыта заново.",
369 +
370 + // Ошибочные страницы
371 + "err.not_found": "Не найдено",
372 + "err.forbidden": "Доступ запрещён",
373 + "err.session_error": "Ошибка сессии",
374 + "err.session_create": "Не удалось создать сессию.",
375 + "err.settings_error": "Ошибка настроек",
376 + "err.settings_save": "Не удалось сохранить настройку.",
377 + "err.explore_disabled": "Раздел «Обзор» отключён на этом сервере.",
378 + "err.activity_disabled": "Активность отключена для этого репозитория.",
379 + "err.pulls_disabled": "Пул-реквесты отключены для этого репозитория.",
380 + "err.releases_disabled": "Релизы отключены для этого репозитория.",
381 + "err.issues_disabled": "Задачи отключены для этого репозитория.",
382 + "err.repo_not_found": "Репозиторий не найден",
383 + "err.repo_not_found_desc": "Репозиторий не существует или у вас нет к нему доступа.",
384 + "err.repo_private_desc": "Репозиторий не существует или является приватным.",
385 + "err.access_denied": "Доступ запрещён",
386 + "err.repo_write_denied": "У вас нет прав на изменение этого репозитория.",
387 + "err.invalid_repo_path": "Некорректный путь репозитория",
388 + "err.path_not_found": "Путь не найден",
389 + "err.path_not_found_desc": "Не удалось найти путь в репозитории для ссылки %s",
390 + "err.file_not_found": "Файл не найден",
391 + "err.file_not_found_desc": "Запрошенный файл не найден в %s",
392 + "err.commit_not_found": "Коммит не найден",
393 + "err.commit_not_found_desc": "Не удалось найти коммит %s",
394 + "err.pr_not_found": "Пул-реквест не найден",
395 + "err.pr_not_found_desc": "Не удалось найти пул-реквест.",
396 + "err.pr_state_forbidden": "Вы не можете изменить состояние этого пул-реквеста.",
397 + "err.pr_merge_forbidden": "У вас нет прав на слияние пул-реквестов.",
398 + "err.issue_not_found": "Задача не найдена",
399 + "err.issue_not_found_desc": "Не удалось найти задачу.",
400 + "err.issue_state_forbidden": "Вы не можете изменить состояние этой задачи.",
401 + "err.delete_error": "Ошибка удаления",
402 + "err.repo_delete_failed": "Не удалось удалить репозиторий.",
403 + "err.user_not_found": "Пользователь @%s не существует.",
404 + "err.archive_error": "Ошибка архива",
405 + "err.archive_tar_failed": "Не удалось создать tar.gz архив для %s",
406 + "err.archive_zip_failed": "Не удалось создать zip архив для %s",
407 +
408 + // Форки
409 + "fork.forked_from": "форк от",
410 + "fork.forks": "Форки",
411 + "fork.forks_btn": "Форки",
412 + "fork.fork_btn": "Форк",
413 + "fork.fork_btn_desc": "Создать форк этого репозитория",
414 + "fork.your_fork": "Ваш форк",
415 + "fork.your_fork_desc": "Перейти к вашему форку",
416 + "forks.title": "Форки",
417 + "forks.empty": "Пока никто не форкал этот репозиторий.",
418 +
419 + // Коллабораторы
420 + "collab.title": "Коллабораторы",
421 + "collab.desc": "Люди с доступом к репозиторию",
422 + "collab.owner": "Владелец",
423 + "collab.role": "Роль",
424 + "collab.role_read": "Чтение",
425 + "collab.role_write": "Запись",
426 + "collab.username": "Пользователь",
427 + "collab.username_ph": "username",
428 + "collab.add": "Добавить",
429 + "collab.remove": "Убрать доступ",
430 + "collab.empty": "Коллабораторов пока нет.",
431 +
432 + // Ревью
433 + "reviews.title": "Ревью",
434 + "reviews.approved": "Одобрено",
435 + "reviews.changes_requested": "Запрошены изменения",
436 + "reviews.body_ph": "Комментарий к ревью (необязательно)",
437 + "reviews.approve": "Одобрить",
438 + "reviews.request_changes": "Запросить изменения",
439 +
440 + // Device flow (RFC 8628)
441 + "device.title": "Подключение устройства",
442 + "device.badge": "Git",
443 + "device.desc": "Введите код, который показал git или скрипт-помощник, чтобы выдать устройству доступ к вашему аккаунту.",
444 + "device.check": "Проверить",
445 + "device.authorize_for": "Выдать доступ по коду",
446 + "device.scope_hint": "Доступ даётся на чтение и запись репозиториев, к которым у вас есть права, и действует только для этого устройства.",
447 + "device.approve": "Разрешить",
448 + "device.deny": "Отклонить",
449 + "device.signin_to_approve": "Войдите, чтобы подтвердить доступ",
450 + "device.helper_hint": "Подсказка: настройте credential helper, чтобы код запрашивался автоматически — см. README.",
451 + "device.code_unknown": "Код не найден. Проверьте, что он введён верно.",
452 + "device.code_used": "Этот код уже использован или истёк.",
453 + "device.approved_now": "Готово! Устройство подключено — вернитесь в терминал.",
454 + "device.denied_now": "Запрос отклонён. Устройство не получит доступ.",
455 +
456 + // Flash: форки, коллабораторы, ревью, device flow
457 + "flash.fork_self": "Это ваш репозиторий — форк не нужен.",
458 + "flash.fork_exists": "У вас уже есть форк этого репозитория.",
459 + "flash.fork_created": "Форк создан.",
460 + "flash.fork_failed": "Не удалось создать форк: %s",
461 + "flash.collab_added": "@%s добавлен в коллабораторы.",
462 + "flash.collab_removed": "Доступ коллаборатора отозван.",
463 + "flash.collab_failed": "Не удалось изменить коллаборатора: %s",
464 + "flash.review_self": "Нельзя ревьюить собственный пул-реквест.",
465 + "flash.review_closed": "Ревью доступно только для открытых пул-реквестов.",
466 + "flash.review_failed": "Не удалось сохранить ревью: %s",
467 + "flash.review_approved": "Ревью сохранено: одобрено.",
468 + "flash.review_changes_requested": "Ревью сохранено: запрошены изменения.",
469 + "flash.device_code_required": "Введите код устройства.",
470 + "flash.device_code_invalid": "Код не найден, истёк или уже использован.",
471 + "flash.device_approved": "Устройство авторизовано — можно возвращаться к git.",
472 + "flash.device_denied": "Запрос отклонён.",
473 +
474 + // Прочее
475 + "issues.new": "Новая задача",
476 + "pulls.head_repo": "Из репозитория",
477 + "repo.about": "О репозитории",
478 + "repo.clone_title": "Клонирование",
479 + "repo.created": "Создан",
480 + "repo.updated": "Обновлён",
481 + "repo.view_file": "Открыть",
482 + "err.collab_forbidden": "Управлять коллабораторами может только владелец или администратор.",
483 + "err.pr_head_repo_invalid": "Выбран недопустимый репозиторий-источник."},
484 + EN: {
485 + // Navigation & Common
486 + "app.tagline": "Lightweight self-hosted Git hosting",
487 + "nav.home": "Home",
488 + "nav.repositories": "Repositories",
489 + "nav.explore": "Explore",
490 + "nav.settings": "Settings",
491 + "nav.admin": "Admin",
492 + "nav.login": "Sign in",
493 + "nav.register": "Sign up",
494 + "nav.logout": "Sign out",
495 + "nav.new_repo": "New",
496 + "nav.command_palette": "Search & commands",
497 + "nav.search_placeholder": "Search...",
498 + "nav.theme": "Theme",
499 + "nav.lang": "Language",
500 + "common.copy": "Copy",
501 + "common.copied": "Copied",
502 + "common.cancel": "Cancel",
503 + "common.save": "Save",
504 + "common.delete": "Delete",
505 + "common.close": "Close",
506 + "common.never": "Never",
507 + "common.newer": "Newer",
508 + "common.older": "Older",
509 + "common.up": "Up",
510 +
511 + // Themes (only 3)
512 + "theme.light": "Light",
513 + "theme.dark": "Dark",
514 + "theme.system": "System",
515 +
516 + // Landing
517 + "landing.badge": "Single Binary · SQLite · Zero Dependencies",
518 + "landing.hero.title": "Lightweight self-hosted Git hosting",
519 + "landing.hero.subtitle": "A single Go binary backed by SQLite. Deploys in a minute, uses minimal memory, and stays out of your way.",
520 + "landing.hero.cta_start": "Get Started",
521 + "landing.features.title": "Principles",
522 + "landing.feat1.title": "Single Binary",
523 + "landing.feat1.desc": "Templates, styles, fonts, migrations, and icons are compiled in via go:embed.",
524 + "landing.feat2.title": "SQLite (WAL)",
525 + "landing.feat2.desc": "Your entire database is a single data/polar.db file without CGO. Back up by copying.",
526 + "landing.feat3.title": "Fast & Quiet",
527 + "landing.feat3.desc": "Instant cold start, server-side rendering, and < 30 MB idle memory.",
528 + "landing.feat4.title": "Private by Default",
529 + "landing.feat4.desc": "Public and private repositories, Argon2id passwords, and Git HTTP access tokens.",
530 +
531 + // Auth
532 + "auth.login.title": "Sign in",
533 + "auth.register.title": "Create account",
534 + "auth.register.disabled": "Public registration is disabled by the administrator.",
535 + "auth.username": "Username",
536 + "auth.username_hint": "2–32 characters: letters, digits, hyphen, underscore",
537 + "auth.username_or_email": "Username or Email",
538 + "auth.email": "Email",
539 + "auth.password": "Password",
540 + "auth.password_hint": "At least 8 characters",
541 + "auth.submit_login": "Sign in",
542 + "auth.submit_register": "Create account",
543 + "auth.no_account": "No account?",
544 + "auth.have_account": "Have an account?",
545 + "auth.invalid_creds": "Invalid username/email or password",
546 +
547 + // Repositories
548 + "repo.new.title": "New repository",
549 + "repo.name": "Name",
550 + "repo.name_hint": "Letters, digits, '.', '-', '_'",
551 + "repo.description": "Description",
552 + "repo.description_ph": "Short description (optional)",
553 + "repo.visibility": "Visibility",
554 + "repo.public": "Public",
555 + "repo.public_desc": "Anyone can view and clone this repository",
556 + "repo.private": "Private",
557 + "repo.private_desc": "Accessible only to you",
558 + "repo.create_btn": "Create repository",
559 + "repo.filter_ph": "Filter repositories...",
560 + "repo.empty_list": "No repositories yet",
561 + "repo.empty_list_sub": "Create your first repository to push code.",
562 + "repo.empty.title": "Repository is empty",
563 + "repo.empty.new_cmd": "Create a new repository on the command line",
564 + "repo.empty.push_cmd": "Push an existing repository",
565 + "repo.tab.code": "Code",
566 + "repo.tab.commits": "Commits",
567 + "repo.tab.branches": "Branches & Tags",
568 + "repo.tab.issues": "Issues",
569 + "repo.tab.pulls": "Pull requests",
570 + "repo.tab.releases": "Releases",
571 + "repo.tab.activity": "Activity",
572 + "repo.tab.settings": "Settings",
573 + "repo.features": "Repository Features",
574 + "repo.clone": "Clone",
575 + "repo.download_zip": "Download ZIP",
576 + "repo.branches": "Branches",
577 + "repo.tags": "Tags",
578 + "repo.default_branch": "Default branch",
579 + "repo.find_file": "Filter files...",
580 + "repo.files": "Files",
581 + "repo.readme": "README",
582 + "repo.raw": "Raw",
583 + "repo.history": "History",
584 + "repo.lines": "lines",
585 + "repo.lines_one": "line",
586 + "repo.lines_few": "lines",
587 + "repo.lines_many": "lines",
588 + "repo.binary_notice": "Binary file — inline preview unavailable",
589 + "repo.download_raw": "Download file",
590 + "repo.browse_at_commit": "Browse files",
591 + "repo.files_changed": "files changed",
592 + "repo.files_changed_one": "file changed",
593 + "repo.files_changed_few": "files changed",
594 + "repo.files_changed_many": "files changed",
595 + "repo.no_commits": "No commits yet",
596 + "repo.danger_zone": "Danger Zone",
597 + "repo.delete": "Delete repository",
598 + "repo.delete_desc": "Once deleted, the repository and its git history cannot be recovered.",
599 + "repo.delete_confirm": "Type the repository name to confirm",
600 + "repo.rename": "Rename",
601 + "repo.save": "Save",
602 + "repo.branch.new": "New branch",
603 + "repo.branch.name_ph": "Branch name (e.g. feat/ui)",
604 + "repo.branch.from": "From branch / ref",
605 + "repo.branch.create": "Create branch",
606 + "repo.branch.default": "default",
607 + "repo.tag.new": "New tag / release",
608 + "repo.tag.name_ph": "Tag (e.g. v1.0.0)",
609 + "repo.tag.msg_ph": "Tag note (optional)",
610 + "repo.tag.create": "Create tag",
611 + "repo.tags.empty": "No tags yet",
612 +
613 + // Pull Requests
614 + "pulls.title": "Pull requests",
615 + "pulls.new": "New pull request",
616 + "pulls.empty": "No pull requests yet",
617 + "pulls.open": "Open",
618 + "pulls.closed": "Closed",
619 + "pulls.merged": "Merged",
620 + "pulls.compare": "Comparing changes",
621 + "pulls.base": "base",
622 + "pulls.head": "compare",
623 + "pulls.title_ph": "Pull request title...",
624 + "pulls.desc_ph": "Describe your changes (Markdown supported)...",
625 + "pulls.create_btn": "Create pull request",
626 + "pulls.merge_btn": "Merge pull request",
627 + "pulls.can_merge": "Able to merge automatically.",
628 + "pulls.cannot_merge": "Can't automatically merge: conflicts detected.",
629 + "pulls.already_merged": "The head branch is already merged into base.",
630 + "pulls.close_btn": "Close PR",
631 + "pulls.reopen_btn": "Reopen PR",
632 + "pulls.comment_btn": "Comment",
633 + "pulls.conversation": "Conversation",
634 + "pulls.files_changed": "Files changed",
635 + "pulls.commits": "Commits",
636 + "pulls.able_to_merge": "Able to merge automatically",
637 + "pulls.body": "Description",
638 + "pulls.body_ph": "Describe your changes (Markdown supported)...",
639 + "pulls.branches_identical": "Branches are identical — nothing to compare",
640 + "pulls.cannot_merge_warning": "Conflicts detected — automatic merge is not possible",
641 + "pulls.closed_desc": "The head branch was not merged into base.",
642 + "pulls.closed_message": "Pull request closed",
643 + "pulls.comment_ph": "Write a comment (Markdown supported)...",
644 + "pulls.compare_branches": "Comparing branches",
645 + "pulls.conflicts_desc": "Resolve the conflicts locally and push to the head branch.",
646 + "pulls.conflicts_title": "Merge conflicts detected",
647 + "pulls.into": "into",
648 + "pulls.merge_clean": "No conflicts — changes can be merged.",
649 + "pulls.merged_message": "Pull request merged",
650 + "pulls.no_changes": "No files changed",
651 + "pulls.no_commits": "No commits in this pull request yet",
652 + "pulls.only_write_merge": "Only users with write access can merge pull requests.",
653 + "pulls.status.closed": "Closed",
654 + "pulls.status.merged": "Merged",
655 + "pulls.status.open": "Open",
656 + "pulls.wants_to_merge": "wants to merge",
657 +
658 + // Releases
659 + "releases.title": "Releases",
660 + "releases.new": "Draft a new release",
661 + "releases.empty": "No releases yet",
662 + "releases.tag_select": "Tag",
663 + "releases.title_ph": "Release title",
664 + "releases.desc_ph": "Describe this release, release notes (Markdown)...",
665 + "releases.prerelease": "This is a pre-release",
666 + "releases.publish": "Publish release",
667 + "releases.delete": "Delete release",
668 + "releases.assets": "Assets",
669 + "releases.source_zip": "Source code (zip)",
670 + "releases.source_tar": "Source code (tar.gz)",
671 + "releases.body": "Description",
672 + "releases.body_ph": "Describe this release, release notes (Markdown)...",
673 + "releases.count": "releases",
674 + "releases.count_one": "release",
675 + "releases.count_few": "releases",
676 + "releases.count_many": "releases",
677 + "releases.delete_confirm": "Delete this release? This cannot be undone.",
678 + "releases.is_prerelease": "This is a pre-release",
679 + "releases.publish_btn": "Publish release",
680 + "releases.tag_desc": "An existing tag or a new one — it will be created automatically.",
681 + "releases.tag_name": "Tag",
682 + "releases.tags": "tags",
683 + "releases.tags_one": "tag",
684 + "releases.tags_few": "tags",
685 + "releases.tags_many": "tags",
686 + "releases.target": "Branch",
687 + "releases.target_desc": "Branch or commit the tag will point to.",
688 +
689 + // Activity
690 + "activity.title": "Activity",
691 + "activity.pulse": "Activity overview",
692 + "activity.empty": "No recent activity recorded.",
693 + "activity.commits": "commits",
694 + "activity.open_prs": "open PRs",
695 + "activity.merged_prs": "merged PRs",
696 + "activity.open_issues": "open issues",
697 + "activity.releases": "releases",
698 + "activity.issues": "opened and closed",
699 + "activity.on_default_branch": "on the default branch",
700 + "activity.published_releases": "published releases",
701 + "activity.pull_requests": "opened and merged",
702 + "activity.recent_feed": "Activity feed",
703 + "activity.badge_commit": "commit",
704 + "activity.badge_release": "release",
705 +
706 + // Issues
707 + "issue.new": "New issue",
708 + "issue.title": "Title",
709 + "issue.title_ph": "Brief summary of the issue",
710 + "issue.body": "Description",
711 + "issue.body_ph": "Detailed description (Markdown supported)...",
712 + "issue.create": "Create issue",
713 + "issue.open": "Open",
714 + "issue.closed": "Closed",
715 + "issue.status.open": "Open",
716 + "issue.status.closed": "Closed",
717 + "issue.close_btn": "Close issue",
718 + "issue.reopen_btn": "Reopen",
719 + "issue.comment_ph": "Write a comment (Markdown supported)...",
720 + "issue.comment_btn": "Comment",
721 + "issue.empty": "No issues in this list",
722 +
723 + // Settings, Profile & Tokens
724 + "settings.title": "Settings",
725 + "settings.profile": "Profile",
726 + "settings.avatar": "Avatar",
727 + "settings.avatar_upload": "Choose image",
728 + "settings.avatar_remove": "Remove avatar",
729 + "settings.avatar_hint": "PNG, JPG, WebP, or GIF — automatically cropped to 256×256",
730 + "settings.full_name": "Display name",
731 + "settings.full_name_ph": "Your name",
732 + "settings.bio": "Bio",
733 + "settings.bio_ph": "Short profile bio",
734 + "settings.location": "Location",
735 + "settings.location_ph": "City, Country",
736 + "settings.website": "Website",
737 + "settings.website_ph": "https://example.com",
738 + "profile.edit": "Edit profile",
739 + "profile.joined": "Joined",
740 + "profile.public_repos": "Public",
741 + "profile.private_repos": "Private",
742 + "profile.total_repos": "Repositories",
743 + "settings.tokens": "Access Tokens",
744 + "settings.tokens.desc": "Use a token instead of your password for git clone and git push over HTTP.",
745 + "settings.token.name": "Token name (e.g., Laptop)",
746 + "settings.token.create": "Create",
747 + "settings.token.revoke": "Revoke",
748 + "settings.token.created_once": "Copy this token now — it will only be shown once:",
749 + "settings.token.col_name": "Name",
750 + "settings.token.col_prefix": "Prefix",
751 + "settings.token.col_created": "Created",
752 + "settings.token.col_used": "Last used",
753 + "settings.token.empty": "No access tokens yet",
754 + "settings.password.current": "Current password",
755 + "settings.password.new": "New password",
756 + "settings.password.update": "Update password",
757 +
758 + // Admin
759 + "admin.title": "Administration",
760 + "admin.features": "Features & Access",
761 + "admin.users": "Users",
762 + "admin.registration": "Public registration",
763 + "admin.registration.desc": "Allow new users to create accounts",
764 + "admin.explore": "Explore page",
765 + "admin.explore.desc": "Show public repository directory in sidebar and at /explore",
766 + "admin.landing": "Landing page",
767 + "admin.landing.desc": "Show landing page on root URL (if disabled, redirects to repos or sign in)",
768 + "admin.anon_read": "Anonymous read access",
769 + "admin.anon_read.desc": "Allow unauthenticated guests to browse public repositories and profiles",
770 + "admin.issues": "Issue tracker",
771 + "admin.issues.desc": "Enable the Issues tab inside repositories",
772 + "admin.enabled": "Enabled",
773 + "admin.disabled": "Disabled",
774 + "admin.enable_btn": "Enable",
775 + "admin.disable_btn": "Disable",
776 + "admin.col.user": "User",
777 + "admin.col.repos": "Repos",
778 + "admin.col.role": "Role",
779 + "admin.col.joined": "Joined",
780 + "admin.role.admin": "Admin",
781 + "admin.role.user": "User",
782 +
783 + // Command Palette & Shortcuts
784 + "palette.placeholder": "Search repositories, files, or commands...",
785 + "palette.group.nav": "Navigation",
786 + "palette.group.themes": "Theme",
787 + "palette.group.repos": "Repositories",
788 + "shortcuts.title": "Keyboard shortcuts",
789 + "shortcuts.palette": "Command palette",
790 + "shortcuts.search": "Focus search",
791 + "shortcuts.home": "Go home",
792 + "shortcuts.repos": "Repositories",
793 + "shortcuts.files": "Filter files",
794 + "shortcuts.sidebar": "Toggle sidebar",
795 + "nav.toggle_sidebar": "Sidebar (Ctrl+B)",
796 +
797 + // Flash messages
798 + "flash.welcome": "Welcome to Polar, @%s!",
799 + "flash.profile_updated": "Profile updated.",
800 + "flash.password_updated": "Password changed successfully.",
801 + "flash.token_revoked": "Access token revoked.",
802 + "flash.settings_updated": "Settings saved.",
803 + "flash.error": "Error: %s",
804 + "flash.comment_error": "Could not post the comment: %s",
805 + "flash.pr_created": "Pull request #%d created.",
806 + "flash.pr_closed": "Pull request #%d closed.",
807 + "flash.pr_reopened": "Pull request #%d reopened.",
808 + "flash.pr_merged": "Pull request #%d merged.",
809 + "flash.pr_merged_state": "Cannot change the state of a merged pull request.",
810 + "flash.pr_merge_open_only": "Only an open pull request can be merged.",
811 + "flash.pr_merge_failed": "Could not merge: %s",
812 + "flash.release_tag_empty": "Tag name cannot be empty.",
813 + "flash.release_tag_failed": "Could not create the tag: %s",
814 + "flash.release_create_failed": "Could not create the release: %s",
815 + "flash.release_published": "Release %s published.",
816 + "flash.release_delete_failed": "Could not delete the release: %s",
817 + "flash.release_deleted": "Release deleted.",
818 + "flash.repo_settings_saved": "Repository settings saved.",
819 + "flash.repo_rename_failed": "Could not rename: %s",
820 + "flash.repo_renamed": "Repository renamed to %s.",
821 + "flash.repo_confirm_mismatch": "The name you typed does not match the repository name.",
822 + "flash.repo_deleted": "Repository %s deleted.",
823 + "flash.branch_created": "Branch %s created.",
824 + "flash.branch_create_failed": "Could not create the branch: %s",
825 + "flash.branch_default_delete": "The default branch cannot be deleted.",
826 + "flash.branch_deleted": "Branch %s deleted.",
827 + "flash.branch_delete_failed": "Could not delete the branch: %s",
828 + "flash.tag_created": "Tag %s created.",
829 + "flash.tag_create_failed": "Could not create the tag: %s",
830 + "flash.tag_deleted": "Tag %s deleted.",
831 + "flash.tag_delete_failed": "Could not delete the tag: %s",
832 + "flash.issue_closed": "Issue #%d closed.",
833 + "flash.issue_reopened": "Issue #%d reopened.",
834 +
835 + // Error pages
836 + "err.not_found": "Not found",
837 + "err.forbidden": "Access denied",
838 + "err.session_error": "Session error",
839 + "err.session_create": "Could not create a session.",
840 + "err.settings_error": "Settings error",
841 + "err.settings_save": "Could not save the setting.",
842 + "err.explore_disabled": "Explore is disabled on this server.",
843 + "err.activity_disabled": "Activity is disabled for this repository.",
844 + "err.pulls_disabled": "Pull requests are disabled for this repository.",
845 + "err.releases_disabled": "Releases are disabled for this repository.",
846 + "err.issues_disabled": "Issues are disabled for this repository.",
847 + "err.repo_not_found": "Repository not found",
848 + "err.repo_not_found_desc": "The repository does not exist or you do not have access to it.",
849 + "err.repo_private_desc": "The repository does not exist or is private.",
850 + "err.access_denied": "Access denied",
851 + "err.repo_write_denied": "You do not have permission to modify this repository.",
852 + "err.invalid_repo_path": "Invalid repository path",
853 + "err.path_not_found": "Path not found",
854 + "err.path_not_found_desc": "Could not find the path in the repository for ref %s",
855 + "err.file_not_found": "File not found",
856 + "err.file_not_found_desc": "The requested file was not found in %s",
857 + "err.commit_not_found": "Commit not found",
858 + "err.commit_not_found_desc": "Could not find commit %s",
859 + "err.pr_not_found": "Pull request not found",
860 + "err.pr_not_found_desc": "Could not find the pull request.",
861 + "err.pr_state_forbidden": "You cannot change the state of this pull request.",
862 + "err.pr_merge_forbidden": "You do not have permission to merge pull requests.",
863 + "err.issue_not_found": "Issue not found",
864 + "err.issue_not_found_desc": "Could not find the issue.",
865 + "err.issue_state_forbidden": "You cannot change the state of this issue.",
866 + "err.delete_error": "Delete error",
867 + "err.repo_delete_failed": "Could not delete the repository.",
868 + "err.user_not_found": "User @%s does not exist.",
869 + "err.archive_error": "Archive error",
870 + "err.archive_tar_failed": "Could not create a tar.gz archive for %s",
871 + "err.archive_zip_failed": "Could not create a zip archive for %s",
872 +
873 + // Forks
874 + "fork.forked_from": "forked from",
875 + "fork.forks": "Forks",
876 + "fork.forks_btn": "Forks",
877 + "fork.fork_btn": "Fork",
878 + "fork.fork_btn_desc": "Create a fork of this repository",
879 + "fork.your_fork": "Your fork",
880 + "fork.your_fork_desc": "Go to your fork",
881 + "forks.title": "Forks",
882 + "forks.empty": "Nobody has forked this repository yet.",
883 +
884 + // Collaborators
885 + "collab.title": "Collaborators",
886 + "collab.desc": "People with access to this repository",
887 + "collab.owner": "Owner",
888 + "collab.role": "Role",
889 + "collab.role_read": "Read",
890 + "collab.role_write": "Write",
891 + "collab.username": "User",
892 + "collab.username_ph": "username",
893 + "collab.add": "Add",
894 + "collab.remove": "Revoke access",
895 + "collab.empty": "No collaborators yet.",
896 +
897 + // Reviews
898 + "reviews.title": "Reviews",
899 + "reviews.approved": "Approved",
900 + "reviews.changes_requested": "Changes requested",
901 + "reviews.body_ph": "Review comment (optional)",
902 + "reviews.approve": "Approve",
903 + "reviews.request_changes": "Request changes",
904 +
905 + // Device flow (RFC 8628)
906 + "device.title": "Device authorization",
907 + "device.badge": "Git",
908 + "device.desc": "Enter the code shown by git or the credential helper to grant this device access to your account.",
909 + "device.check": "Check",
910 + "device.authorize_for": "Grant access to code",
911 + "device.scope_hint": "Access covers repositories you can already reach and is bound to this device only.",
912 + "device.approve": "Approve",
913 + "device.deny": "Deny",
914 + "device.signin_to_approve": "Sign in to approve access",
915 + "device.helper_hint": "Tip: configure the credential helper so the code is requested automatically — see the README.",
916 + "device.code_unknown": "Code not found. Double-check the code you entered.",
917 + "device.code_used": "This code has already been used or expired.",
918 + "device.approved_now": "All set! The device is authorized — return to your terminal.",
919 + "device.denied_now": "Request denied. The device will not get access.",
920 +
921 + // Flash: forks, collaborators, reviews, device flow
922 + "flash.fork_self": "This repository is yours — no fork needed.",
923 + "flash.fork_exists": "You already have a fork of this repository.",
924 + "flash.fork_created": "Fork created.",
925 + "flash.fork_failed": "Could not create fork: %s",
926 + "flash.collab_added": "@%s added as a collaborator.",
927 + "flash.collab_removed": "Collaborator access revoked.",
928 + "flash.collab_failed": "Could not update collaborator: %s",
929 + "flash.review_self": "You cannot review your own pull request.",
930 + "flash.review_closed": "Reviews are only available on open pull requests.",
931 + "flash.review_failed": "Could not save the review: %s",
932 + "flash.review_approved": "Review saved: approved.",
933 + "flash.review_changes_requested": "Review saved: changes requested.",
934 + "flash.device_code_required": "Enter the device code.",
935 + "flash.device_code_invalid": "Code not found, expired, or already used.",
936 + "flash.device_approved": "Device authorized — you can return to git.",
937 + "flash.device_denied": "Request denied.",
938 +
939 + // Misc
940 + "issues.new": "New issue",
941 + "pulls.head_repo": "From repository",
942 + "repo.about": "About",
943 + "repo.clone_title": "Clone",
944 + "repo.created": "Created",
945 + "repo.updated": "Updated",
946 + "repo.view_file": "Open",
947 + "err.collab_forbidden": "Only the owner or an administrator can manage collaborators.",
948 + "err.pr_head_repo_invalid": "The selected source repository is not allowed."},
949 +}
950 +
951 +func T(lang Lang, key string) string {
952 + dict, ok := translations[Normalize(string(lang))]
953 + if !ok {
954 + dict = translations[RU]
955 + }
956 + if val, ok := dict[key]; ok {
957 + return val
958 + }
959 + if val, ok := translations[RU][key]; ok {
960 + return val
961 + }
962 + return key
963 +}
internal/i18n/i18n_test.go
+21 -0
... ... @@ -0,0 +1,21 @@
1 +package i18n
2 +
3 +import "testing"
4 +
5 +// TestTranslationParity ensures both dictionaries expose the same keys.
6 +func TestTranslationParity(t *testing.T) {
7 + ru, en := translations[RU], translations[EN]
8 + for k := range ru {
9 + if _, ok := en[k]; !ok {
10 + t.Errorf("EN is missing key %q", k)
11 + }
12 + }
13 + for k := range en {
14 + if _, ok := ru[k]; !ok {
15 + t.Errorf("RU is missing key %q", k)
16 + }
17 + }
18 + if len(ru) == 0 {
19 + t.Fatal("empty dictionary")
20 + }
21 +}
internal/repo/activity.go
+136 -0
... ... @@ -0,0 +1,136 @@
1 +package repo
2 +
3 +import (
4 + "context"
5 + "fmt"
6 + "sort"
7 + "time"
8 +
9 + "polar/internal/git"
10 +)
11 +
12 +type ActivityItem struct {
13 + Type string // "commit", "pull", "issue", "release"
14 + Title string
15 + Subtitle string
16 + AuthorUsername string
17 + AuthorAvatar string
18 + Link string
19 + Icon string
20 + Badge string
21 + CreatedAt time.Time
22 +}
23 +
24 +type ActivityStats struct {
25 + CommitCount int
26 + OpenIssues int
27 + ClosedIssues int
28 + OpenPRs int
29 + MergedPRs int
30 + ReleaseCount int
31 +}
32 +
33 +func (s *Service) GetRepoActivity(ctx context.Context, r *Repository, diskPath string) ([]ActivityItem, *ActivityStats, error) {
34 + var items []ActivityItem
35 +
36 + // 1. Recent commits from default branch
37 + commits, _ := git.ListCommits(ctx, diskPath, r.DefaultBranch, 25, 0)
38 + for _, c := range commits {
39 + items = append(items, ActivityItem{
40 + Type: "commit",
41 + Title: c.Subject,
42 + Subtitle: c.ShortHash,
43 + AuthorUsername: c.AuthorName,
44 + AuthorAvatar: "",
45 + Link: fmt.Sprintf("/%s/%s/commit/%s", r.OwnerUsername, r.Name, c.Hash),
46 + Icon: "git-commit",
47 + Badge: "commit",
48 + CreatedAt: c.AuthoredAt,
49 + })
50 + }
51 +
52 + // 2. Recent Pull Requests
53 + pulls, _ := s.ListPullRequests(ctx, r.ID, "all")
54 + var openPRs, mergedPRs int
55 + for _, pr := range pulls {
56 + switch pr.Status {
57 + case "open":
58 + openPRs++
59 + case "merged":
60 + mergedPRs++
61 + }
62 + badge := pr.Status
63 + icon := "git-pull-request"
64 + items = append(items, ActivityItem{
65 + Type: "pull",
66 + Title: fmt.Sprintf("#%d %s", pr.Number, pr.Title),
67 + Subtitle: fmt.Sprintf("%s → %s", pr.HeadBranch, pr.BaseBranch),
68 + AuthorUsername: pr.AuthorUsername,
69 + AuthorAvatar: pr.AuthorAvatar,
70 + Link: fmt.Sprintf("/%s/%s/pulls/%d", r.OwnerUsername, r.Name, pr.Number),
71 + Icon: icon,
72 + Badge: badge,
73 + CreatedAt: pr.CreatedAt,
74 + })
75 + }
76 +
77 + // 3. Recent Issues
78 + openIssList, _ := s.ListIssues(ctx, r.ID, false)
79 + closedIssList, _ := s.ListIssues(ctx, r.ID, true)
80 + openIssues := len(openIssList)
81 + closedIssues := len(closedIssList)
82 + allIssues := append(openIssList, closedIssList...)
83 + for _, iss := range allIssues {
84 + badge := "open"
85 + if iss.IsClosed {
86 + badge = "closed"
87 + }
88 + items = append(items, ActivityItem{
89 + Type: "issue",
90 + Title: fmt.Sprintf("#%d %s", iss.Number, iss.Title),
91 + Subtitle: "",
92 + AuthorUsername: iss.AuthorUsername,
93 + AuthorAvatar: iss.AuthorAvatar,
94 + Link: fmt.Sprintf("/%s/%s/issues/%d", r.OwnerUsername, r.Name, iss.Number),
95 + Icon: "issue",
96 + Badge: badge,
97 + CreatedAt: iss.CreatedAt,
98 + })
99 + }
100 +
101 + // 4. Recent Releases
102 + releases, _ := s.ListReleases(ctx, r.ID)
103 + for _, rel := range releases {
104 + items = append(items, ActivityItem{
105 + Type: "release",
106 + Title: fmt.Sprintf("%s (%s)", rel.Title, rel.TagName),
107 + Subtitle: "",
108 + AuthorUsername: rel.AuthorUsername,
109 + AuthorAvatar: rel.AuthorAvatar,
110 + Link: fmt.Sprintf("/%s/%s/releases#%s", r.OwnerUsername, r.Name, rel.TagName),
111 + Icon: "tag",
112 + Badge: "release",
113 + CreatedAt: rel.PublishedAt,
114 + })
115 + }
116 +
117 + // Sort combined timeline in reverse chronological order
118 + sort.Slice(items, func(i, j int) bool {
119 + return items[i].CreatedAt.After(items[j].CreatedAt)
120 + })
121 +
122 + if len(items) > 50 {
123 + items = items[:50]
124 + }
125 +
126 + stats := &ActivityStats{
127 + CommitCount: len(commits),
128 + OpenIssues: openIssues,
129 + ClosedIssues: closedIssues,
130 + OpenPRs: openPRs,
131 + MergedPRs: mergedPRs,
132 + ReleaseCount: len(releases),
133 + }
134 +
135 + return items, stats, nil
136 +}
internal/repo/collab.go
+152 -0
... ... @@ -0,0 +1,152 @@
1 +package repo
2 +
3 +import (
4 + "context"
5 + "database/sql"
6 + "errors"
7 + "fmt"
8 + "strings"
9 + "time"
10 +
11 + "polar/internal/user"
12 +)
13 +
14 +const (
15 + RoleRead = "read"
16 + RoleWrite = "write"
17 +)
18 +
19 +var (
20 + ErrCollabUserNotFound = errors.New("user not found")
21 + ErrCannotAddOwner = errors.New("repository owner cannot be added as a collaborator")
22 +)
23 +
24 +type Collaborator struct {
25 + UserID int64
26 + Username string
27 + FullName string
28 + AvatarURL string
29 + Role string
30 + CreatedAt time.Time
31 +}
32 +
33 +func normalizeRole(role string) string {
34 + if strings.TrimSpace(role) == RoleRead {
35 + return RoleRead
36 + }
37 + return RoleWrite
38 +}
39 +
40 +func (s *Service) AddCollaborator(ctx context.Context, r *Repository, username, role string) error {
41 + username = strings.TrimSpace(strings.TrimPrefix(strings.TrimSpace(username), "@"))
42 + if username == "" {
43 + return ErrCollabUserNotFound
44 + }
45 +
46 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
47 + defer cancel()
48 +
49 + var userID int64
50 + err := s.db.QueryRowContext(cctx, `SELECT id FROM users WHERE LOWER(username) = LOWER(?)`, username).Scan(&userID)
51 + if err != nil {
52 + if errors.Is(err, sql.ErrNoRows) {
53 + return ErrCollabUserNotFound
54 + }
55 + return fmt.Errorf("lookup collaborator user: %w", err)
56 + }
57 + if userID == r.OwnerID {
58 + return ErrCannotAddOwner
59 + }
60 +
61 + now := time.Now().UTC()
62 + _, err = s.db.ExecContext(cctx, `
63 + INSERT INTO collaborators (repo_id, user_id, role, created_at)
64 + VALUES (?, ?, ?, ?)
65 + ON CONFLICT(repo_id, user_id) DO UPDATE SET role = excluded.role
66 + `, r.ID, userID, normalizeRole(role), now)
67 + if err != nil {
68 + return fmt.Errorf("upsert collaborator: %w", err)
69 + }
70 + return nil
71 +}
72 +
73 +func (s *Service) RemoveCollaborator(ctx context.Context, repoID, userID int64) error {
74 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
75 + defer cancel()
76 +
77 + _, err := s.db.ExecContext(cctx, `DELETE FROM collaborators WHERE repo_id = ? AND user_id = ?`, repoID, userID)
78 + if err != nil {
79 + return fmt.Errorf("remove collaborator: %w", err)
80 + }
81 + return nil
82 +}
83 +
84 +func (s *Service) ListCollaborators(ctx context.Context, repoID int64) ([]Collaborator, error) {
85 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
86 + defer cancel()
87 +
88 + rows, err := s.db.QueryContext(cctx, `
89 + SELECT c.user_id, u.username, u.full_name, u.avatar_url, c.role, c.created_at
90 + FROM collaborators c
91 + JOIN users u ON u.id = c.user_id
92 + WHERE c.repo_id = ?
93 + ORDER BY c.created_at ASC
94 + `, repoID)
95 + if err != nil {
96 + return nil, fmt.Errorf("list collaborators: %w", err)
97 + }
98 + defer rows.Close()
99 +
100 + var list []Collaborator
101 + for rows.Next() {
102 + var c Collaborator
103 + if err := rows.Scan(&c.UserID, &c.Username, &c.FullName, &c.AvatarURL, &c.Role, &c.CreatedAt); err != nil {
104 + return nil, fmt.Errorf("scan collaborator: %w", err)
105 + }
106 + list = append(list, c)
107 + }
108 + return list, rows.Err()
109 +}
110 +
111 +func (s *Service) GetCollaboratorRole(ctx context.Context, repoID, userID int64) string {
112 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
113 + defer cancel()
114 +
115 + var role string
116 + err := s.db.QueryRowContext(cctx, `SELECT role FROM collaborators WHERE repo_id = ? AND user_id = ?`, repoID, userID).Scan(&role)
117 + if err != nil {
118 + return ""
119 + }
120 + return role
121 +}
122 +
123 +// CanRead reports whether the user may read the repository (owner, admin,
124 +// collaborator of any role, or anyone for public repositories).
125 +func (s *Service) CanRead(ctx context.Context, r *Repository, u *user.User) bool {
126 + if r == nil {
127 + return false
128 + }
129 + if !r.IsPrivate {
130 + return true
131 + }
132 + if u == nil {
133 + return false
134 + }
135 + if u.ID == r.OwnerID || u.IsAdmin {
136 + return true
137 + }
138 + role := s.GetCollaboratorRole(ctx, r.ID, u.ID)
139 + return role == RoleRead || role == RoleWrite
140 +}
141 +
142 +// CanWrite reports whether the user may push to the repository (owner, admin
143 +// or a collaborator with the write role).
144 +func (s *Service) CanWrite(ctx context.Context, r *Repository, u *user.User) bool {
145 + if r == nil || u == nil {
146 + return false
147 + }
148 + if u.ID == r.OwnerID || u.IsAdmin {
149 + return true
150 + }
151 + return s.GetCollaboratorRole(ctx, r.ID, u.ID) == RoleWrite
152 +}
internal/repo/issues.go
+234 -0
... ... @@ -0,0 +1,234 @@
1 +package repo
2 +
3 +import (
4 + "context"
5 + "database/sql"
6 + "errors"
7 + "fmt"
8 + "strings"
9 + "time"
10 +)
11 +
12 +var (
13 + ErrIssueNotFound = errors.New("issue not found")
14 + ErrEmptyTitle = errors.New("issue title cannot be empty")
15 + ErrEmptyComment = errors.New("comment cannot be empty")
16 +)
17 +
18 +type Issue struct {
19 + ID int64
20 + RepoID int64
21 + Number int
22 + AuthorID int64
23 + AuthorUsername string
24 + AuthorAvatar string
25 + Title string
26 + Body string
27 + IsClosed bool
28 + CommentCount int
29 + CreatedAt time.Time
30 + UpdatedAt time.Time
31 +}
32 +
33 +type IssueComment struct {
34 + ID int64
35 + IssueID int64
36 + AuthorID int64
37 + AuthorUsername string
38 + AuthorAvatar string
39 + Body string
40 + CreatedAt time.Time
41 +}
42 +
43 +func (s *Service) CreateIssue(ctx context.Context, repoID, authorID int64, title, body string) (*Issue, error) {
44 + title = strings.TrimSpace(title)
45 + body = strings.TrimSpace(body)
46 + if title == "" {
47 + return nil, ErrEmptyTitle
48 + }
49 + if len(title) > 200 {
50 + title = title[:200]
51 + }
52 + if len(body) > 20000 {
53 + body = body[:20000]
54 + }
55 +
56 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
57 + defer cancel()
58 +
59 + tx, err := s.db.BeginTx(cctx, nil)
60 + if err != nil {
61 + return nil, fmt.Errorf("begin create issue tx: %w", err)
62 + }
63 + defer func() { _ = tx.Rollback() }()
64 +
65 + var nextNum int
66 + err = tx.QueryRowContext(cctx, `SELECT COALESCE(MAX(number), 0) + 1 FROM issues WHERE repo_id = ?`, repoID).Scan(&nextNum)
67 + if err != nil {
68 + return nil, fmt.Errorf("next issue number: %w", err)
69 + }
70 +
71 + now := time.Now().UTC()
72 + res, err := tx.ExecContext(cctx, `
73 + INSERT INTO issues (repo_id, number, author_id, title, body, is_closed, created_at, updated_at)
74 + VALUES (?, ?, ?, ?, ?, 0, ?, ?)
75 + `, repoID, nextNum, authorID, title, body, now, now)
76 + if err != nil {
77 + return nil, fmt.Errorf("insert issue: %w", err)
78 + }
79 +
80 + id, _ := res.LastInsertId()
81 + if err := tx.Commit(); err != nil {
82 + return nil, fmt.Errorf("commit issue tx: %w", err)
83 + }
84 +
85 + return &Issue{
86 + ID: id,
87 + RepoID: repoID,
88 + Number: nextNum,
89 + AuthorID: authorID,
90 + Title: title,
91 + Body: body,
92 + IsClosed: false,
93 + CreatedAt: now,
94 + UpdatedAt: now,
95 + }, nil
96 +}
97 +
98 +func (s *Service) ListIssues(ctx context.Context, repoID int64, isClosed bool) ([]Issue, error) {
99 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
100 + defer cancel()
101 +
102 + closedInt := 0
103 + if isClosed {
104 + closedInt = 1
105 + }
106 +
107 + rows, err := s.db.QueryContext(cctx, `
108 + SELECT i.id, i.repo_id, i.number, i.author_id, u.username, u.avatar_url,
109 + i.title, i.body, i.is_closed,
110 + (SELECT COUNT(*) FROM issue_comments ic WHERE ic.issue_id = i.id) AS comment_count,
111 + i.created_at, i.updated_at
112 + FROM issues i
113 + JOIN users u ON u.id = i.author_id
114 + WHERE i.repo_id = ? AND i.is_closed = ?
115 + ORDER BY i.number DESC
116 + `, repoID, closedInt)
117 + if err != nil {
118 + return nil, fmt.Errorf("list issues: %w", err)
119 + }
120 + defer rows.Close()
121 +
122 + var issues []Issue
123 + for rows.Next() {
124 + var iss Issue
125 + var closed int
126 + if err := rows.Scan(&iss.ID, &iss.RepoID, &iss.Number, &iss.AuthorID, &iss.AuthorUsername, &iss.AuthorAvatar,
127 + &iss.Title, &iss.Body, &closed, &iss.CommentCount, &iss.CreatedAt, &iss.UpdatedAt); err != nil {
128 + return nil, fmt.Errorf("scan issue: %w", err)
129 + }
130 + iss.IsClosed = closed == 1
131 + issues = append(issues, iss)
132 + }
133 + return issues, rows.Err()
134 +}
135 +
136 +func (s *Service) CountIssues(ctx context.Context, repoID int64) (openCount int, closedCount int, err error) {
137 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
138 + defer cancel()
139 +
140 + _ = s.db.QueryRowContext(cctx, `SELECT COUNT(*) FROM issues WHERE repo_id = ? AND is_closed = 0`, repoID).Scan(&openCount)
141 + _ = s.db.QueryRowContext(cctx, `SELECT COUNT(*) FROM issues WHERE repo_id = ? AND is_closed = 1`, repoID).Scan(&closedCount)
142 + return openCount, closedCount, nil
143 +}
144 +
145 +func (s *Service) GetIssue(ctx context.Context, repoID int64, number int) (*Issue, error) {
146 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
147 + defer cancel()
148 +
149 + var iss Issue
150 + var closed int
151 + err := s.db.QueryRowContext(cctx, `
152 + SELECT i.id, i.repo_id, i.number, i.author_id, u.username, u.avatar_url,
153 + i.title, i.body, i.is_closed,
154 + (SELECT COUNT(*) FROM issue_comments ic WHERE ic.issue_id = i.id) AS comment_count,
155 + i.created_at, i.updated_at
156 + FROM issues i
157 + JOIN users u ON u.id = i.author_id
158 + WHERE i.repo_id = ? AND i.number = ?
159 + `, repoID, number).Scan(&iss.ID, &iss.RepoID, &iss.Number, &iss.AuthorID, &iss.AuthorUsername, &iss.AuthorAvatar,
160 + &iss.Title, &iss.Body, &closed, &iss.CommentCount, &iss.CreatedAt, &iss.UpdatedAt)
161 + if err != nil {
162 + if errors.Is(err, sql.ErrNoRows) {
163 + return nil, ErrIssueNotFound
164 + }
165 + return nil, fmt.Errorf("get issue: %w", err)
166 + }
167 + iss.IsClosed = closed == 1
168 + return &iss, nil
169 +}
170 +
171 +func (s *Service) SetIssueClosed(ctx context.Context, issueID int64, closed bool) error {
172 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
173 + defer cancel()
174 +
175 + val := 0
176 + if closed {
177 + val = 1
178 + }
179 + _, err := s.db.ExecContext(cctx, `
180 + UPDATE issues SET is_closed = ?, updated_at = ? WHERE id = ?
181 + `, val, time.Now().UTC(), issueID)
182 + return err
183 +}
184 +
185 +func (s *Service) CreateIssueComment(ctx context.Context, issueID, authorID int64, body string) error {
186 + body = strings.TrimSpace(body)
187 + if body == "" {
188 + return ErrEmptyComment
189 + }
190 + if len(body) > 20000 {
191 + body = body[:20000]
192 + }
193 +
194 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
195 + defer cancel()
196 +
197 + now := time.Now().UTC()
198 + _, err := s.db.ExecContext(cctx, `
199 + INSERT INTO issue_comments (issue_id, author_id, body, created_at)
200 + VALUES (?, ?, ?, ?)
201 + `, issueID, authorID, body, now)
202 + if err != nil {
203 + return fmt.Errorf("insert comment: %w", err)
204 + }
205 + _, _ = s.db.ExecContext(cctx, `UPDATE issues SET updated_at = ? WHERE id = ?`, now, issueID)
206 + return nil
207 +}
208 +
209 +func (s *Service) ListIssueComments(ctx context.Context, issueID int64) ([]IssueComment, error) {
210 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
211 + defer cancel()
212 +
213 + rows, err := s.db.QueryContext(cctx, `
214 + SELECT ic.id, ic.issue_id, ic.author_id, u.username, u.avatar_url, ic.body, ic.created_at
215 + FROM issue_comments ic
216 + JOIN users u ON u.id = ic.author_id
217 + WHERE ic.issue_id = ?
218 + ORDER BY ic.created_at ASC
219 + `, issueID)
220 + if err != nil {
221 + return nil, fmt.Errorf("list issue comments: %w", err)
222 + }
223 + defer rows.Close()
224 +
225 + var list []IssueComment
226 + for rows.Next() {
227 + var c IssueComment
228 + if err := rows.Scan(&c.ID, &c.IssueID, &c.AuthorID, &c.AuthorUsername, &c.AuthorAvatar, &c.Body, &c.CreatedAt); err != nil {
229 + return nil, fmt.Errorf("scan issue comment: %w", err)
230 + }
231 + list = append(list, c)
232 + }
233 + return list, rows.Err()
234 +}
internal/repo/merge.go
+60 -0
... ... @@ -0,0 +1,60 @@
1 +package repo
2 +
3 +import (
4 + "context"
5 + "errors"
6 + "fmt"
7 +
8 + "polar/internal/git"
9 +)
10 +
11 +var ErrForkNotFound = errors.New("fork repository not found")
12 +
13 +// MergePullRequest merges an open pull request into its base branch and
14 +// records the merge. Same-repository pull requests merge local branches;
15 +// cross-repository (fork) pull requests are merged through a temporary ref
16 +// fetched from the fork.
17 +func (s *Service) MergePullRequest(ctx context.Context, base *Repository, pr *PullRequest, authorName, authorEmail string, mergedByID int64) error {
18 + if pr == nil || base == nil {
19 + return errors.New("pull request and repository are required")
20 + }
21 + if pr.Status != "open" {
22 + return errors.New("only open pull requests can be merged")
23 + }
24 +
25 + baseDisk, err := s.DiskPath(base.OwnerUsername, base.Name)
26 + if err != nil {
27 + return err
28 + }
29 +
30 + headLabel := pr.HeadBranch
31 + if pr.HeadRepoID != nil && *pr.HeadRepoID != base.ID {
32 + headLabel = fmt.Sprintf("%s/%s:%s", pr.HeadRepoOwner, pr.HeadRepoName, pr.HeadBranch)
33 + }
34 + msg := fmt.Sprintf("Merge pull request #%d from %s\n\n%s", pr.Number, headLabel, pr.Title)
35 +
36 + if pr.HeadRepoID != nil && *pr.HeadRepoID != base.ID {
37 + head, err := s.GetByID(ctx, *pr.HeadRepoID)
38 + if err != nil || head == nil {
39 + return ErrForkNotFound
40 + }
41 + forkDisk, err := s.DiskPath(head.OwnerUsername, head.Name)
42 + if err != nil {
43 + return err
44 + }
45 + tmpRef := fmt.Sprintf("refs/polar/tmp-merge-%d", pr.ID)
46 + if _, err := git.MergeFromPath(ctx, baseDisk, forkDisk, pr.BaseBranch, pr.HeadBranch, tmpRef, msg, authorName, authorEmail); err != nil {
47 + return err
48 + }
49 + } else {
50 + if _, err := git.MergeBranches(ctx, baseDisk, pr.BaseBranch, pr.HeadBranch, msg, authorName, authorEmail); err != nil {
51 + return err
52 + }
53 + }
54 +
55 + if err := s.SetPullRequestStatus(ctx, pr.ID, "merged", &mergedByID); err != nil {
56 + return err
57 + }
58 + s.TouchUpdatedAt(ctx, base.ID)
59 + return nil
60 +}
internal/repo/pulls.go
+331 -0
... ... @@ -0,0 +1,331 @@
1 +package repo
2 +
3 +import (
4 + "context"
5 + "database/sql"
6 + "errors"
7 + "fmt"
8 + "strings"
9 + "time"
10 +)
11 +
12 +var (
13 + ErrPullNotFound = errors.New("pull request not found")
14 + ErrEmptyPullTitle = errors.New("pull request title cannot be empty")
15 + ErrSameBranch = errors.New("base and head branches cannot be the same")
16 + ErrEmptyBranch = errors.New("branches must be specified")
17 + ErrPullAlreadyOpen = errors.New("a pull request for these branches is already open")
18 +)
19 +
20 +type PullRequest struct {
21 + ID int64
22 + RepoID int64
23 + Number int
24 + AuthorID int64
25 + AuthorUsername string
26 + AuthorAvatar string
27 + Title string
28 + Body string
29 + BaseBranch string
30 + HeadBranch string
31 + Status string // "open", "closed", "merged"
32 + MergedByID *int64
33 + HeadRepoID *int64
34 + HeadRepoOwner string
35 + HeadRepoName string
36 + MergedByUsername string
37 + MergedAt *time.Time
38 + CommentCount int
39 + CreatedAt time.Time
40 + UpdatedAt time.Time
41 +}
42 +
43 +type PullRequestComment struct {
44 + ID int64
45 + PullID int64
46 + AuthorID int64
47 + AuthorUsername string
48 + AuthorAvatar string
49 + Body string
50 + CreatedAt time.Time
51 +}
52 +
53 +func (s *Service) CreatePullRequest(ctx context.Context, repoID, authorID int64, title, body, baseBranch, headBranch string, headRepoID *int64) (*PullRequest, error) {
54 + title = strings.TrimSpace(title)
55 + body = strings.TrimSpace(body)
56 + baseBranch = strings.TrimSpace(baseBranch)
57 + headBranch = strings.TrimSpace(headBranch)
58 +
59 + if title == "" {
60 + return nil, ErrEmptyPullTitle
61 + }
62 + if len(title) > 200 {
63 + title = title[:200]
64 + }
65 + if len(body) > 20000 {
66 + body = body[:20000]
67 + }
68 + if baseBranch == "" || headBranch == "" {
69 + return nil, ErrEmptyBranch
70 + }
71 + if baseBranch == headBranch {
72 + return nil, ErrSameBranch
73 + }
74 +
75 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
76 + defer cancel()
77 +
78 + tx, err := s.db.BeginTx(cctx, nil)
79 + if err != nil {
80 + return nil, fmt.Errorf("begin create pr tx: %w", err)
81 + }
82 + defer func() { _ = tx.Rollback() }()
83 +
84 + var existingID int64
85 + err = tx.QueryRowContext(cctx, `
86 + SELECT id FROM pull_requests
87 + WHERE repo_id = ? AND base_branch = ? AND head_branch = ? AND status = 'open' AND head_repo_id IS ?
88 + `, repoID, baseBranch, headBranch, headRepoID).Scan(&existingID)
89 + if err == nil {
90 + return nil, ErrPullAlreadyOpen
91 + }
92 +
93 + var nextNum int
94 + err = tx.QueryRowContext(cctx, `SELECT COALESCE(MAX(number), 0) + 1 FROM pull_requests WHERE repo_id = ?`, repoID).Scan(&nextNum)
95 + if err != nil {
96 + return nil, fmt.Errorf("next pr number: %w", err)
97 + }
98 +
99 + now := time.Now().UTC()
100 + res, err := tx.ExecContext(cctx, `
101 + INSERT INTO pull_requests (repo_id, number, author_id, title, body, base_branch, head_branch, head_repo_id, status, created_at, updated_at)
102 + VALUES (?, ?, ?, ?, ?, ?, ?, ?, 'open', ?, ?)
103 + `, repoID, nextNum, authorID, title, body, baseBranch, headBranch, headRepoID, now, now)
104 + if err != nil {
105 + return nil, fmt.Errorf("insert pull request: %w", err)
106 + }
107 +
108 + _ = res
109 + if err := tx.Commit(); err != nil {
110 + return nil, fmt.Errorf("commit pull request tx: %w", err)
111 + }
112 +
113 + return s.GetPullRequest(ctx, repoID, nextNum)
114 +}
115 +
116 +func (s *Service) GetPullRequest(ctx context.Context, repoID int64, number int) (*PullRequest, error) {
117 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
118 + defer cancel()
119 +
120 + var pr PullRequest
121 + var mergedByID sql.NullInt64
122 + var mergedByUsername sql.NullString
123 + var mergedAt sql.NullTime
124 + var headRepoID sql.NullInt64
125 + var headRepoOwner, headRepoName sql.NullString
126 +
127 + err := s.db.QueryRowContext(cctx, `
128 + SELECT pr.id, pr.repo_id, pr.number, pr.author_id, u.username, u.avatar_url,
129 + pr.title, pr.body, pr.base_branch, pr.head_branch, pr.status,
130 + pr.merged_by_id, mu.username, pr.merged_at,
131 + pr.head_repo_id, hu.username, hr.name,
132 + (SELECT COUNT(*) FROM pull_request_comments prc WHERE prc.pull_id = pr.id) AS comment_count,
133 + pr.created_at, pr.updated_at
134 + FROM pull_requests pr
135 + JOIN users u ON u.id = pr.author_id
136 + LEFT JOIN users mu ON mu.id = pr.merged_by_id
137 + LEFT JOIN repositories hr ON hr.id = pr.head_repo_id
138 + LEFT JOIN users hu ON hu.id = hr.owner_id
139 + WHERE pr.repo_id = ? AND pr.number = ?
140 + `, repoID, number).Scan(
141 + &pr.ID, &pr.RepoID, &pr.Number, &pr.AuthorID, &pr.AuthorUsername, &pr.AuthorAvatar,
142 + &pr.Title, &pr.Body, &pr.BaseBranch, &pr.HeadBranch, &pr.Status,
143 + &mergedByID, &mergedByUsername, &mergedAt,
144 + &headRepoID, &headRepoOwner, &headRepoName,
145 + &pr.CommentCount, &pr.CreatedAt, &pr.UpdatedAt,
146 + )
147 + if err != nil {
148 + if errors.Is(err, sql.ErrNoRows) {
149 + return nil, ErrPullNotFound
150 + }
151 + return nil, fmt.Errorf("get pull request: %w", err)
152 + }
153 +
154 + if mergedByID.Valid {
155 + pr.MergedByID = &mergedByID.Int64
156 + }
157 + if mergedByUsername.Valid {
158 + pr.MergedByUsername = mergedByUsername.String
159 + }
160 + if mergedAt.Valid {
161 + t := mergedAt.Time
162 + pr.MergedAt = &t
163 + }
164 + if headRepoID.Valid {
165 + id := headRepoID.Int64
166 + pr.HeadRepoID = &id
167 + }
168 + pr.HeadRepoOwner = headRepoOwner.String
169 + pr.HeadRepoName = headRepoName.String
170 +
171 + return &pr, nil
172 +}
173 +
174 +func (s *Service) ListPullRequests(ctx context.Context, repoID int64, statusFilter string) ([]PullRequest, error) {
175 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
176 + defer cancel()
177 +
178 + query := `
179 + SELECT pr.id, pr.repo_id, pr.number, pr.author_id, u.username, u.avatar_url,
180 + pr.title, pr.body, pr.base_branch, pr.head_branch, pr.status,
181 + pr.merged_by_id, mu.username, pr.merged_at,
182 + pr.head_repo_id, hu.username, hr.name,
183 + (SELECT COUNT(*) FROM pull_request_comments prc WHERE prc.pull_id = pr.id) AS comment_count,
184 + pr.created_at, pr.updated_at
185 + FROM pull_requests pr
186 + JOIN users u ON u.id = pr.author_id
187 + LEFT JOIN users mu ON mu.id = pr.merged_by_id
188 + LEFT JOIN repositories hr ON hr.id = pr.head_repo_id
189 + LEFT JOIN users hu ON hu.id = hr.owner_id
190 + WHERE pr.repo_id = ?
191 + `
192 + var args []any
193 + args = append(args, repoID)
194 +
195 + switch statusFilter {
196 + case "open":
197 + query += ` AND pr.status = 'open'`
198 + case "closed":
199 + query += ` AND pr.status = 'closed'`
200 + case "merged":
201 + query += ` AND pr.status = 'merged'`
202 + }
203 + query += ` ORDER BY pr.created_at DESC`
204 +
205 + rows, err := s.db.QueryContext(cctx, query, args...)
206 + if err != nil {
207 + return nil, fmt.Errorf("list pull requests: %w", err)
208 + }
209 + defer rows.Close()
210 +
211 + var list []PullRequest
212 + for rows.Next() {
213 + var pr PullRequest
214 + var mergedByID sql.NullInt64
215 + var mergedByUsername sql.NullString
216 + var mergedAt sql.NullTime
217 + var headRepoID sql.NullInt64
218 + var headRepoOwner, headRepoName sql.NullString
219 +
220 + if err := rows.Scan(
221 + &pr.ID, &pr.RepoID, &pr.Number, &pr.AuthorID, &pr.AuthorUsername, &pr.AuthorAvatar,
222 + &pr.Title, &pr.Body, &pr.BaseBranch, &pr.HeadBranch, &pr.Status,
223 + &mergedByID, &mergedByUsername, &mergedAt,
224 + &headRepoID, &headRepoOwner, &headRepoName,
225 + &pr.CommentCount, &pr.CreatedAt, &pr.UpdatedAt,
226 + ); err != nil {
227 + return nil, fmt.Errorf("scan pull request: %w", err)
228 + }
229 + if mergedByID.Valid {
230 + pr.MergedByID = &mergedByID.Int64
231 + }
232 + if mergedByUsername.Valid {
233 + pr.MergedByUsername = mergedByUsername.String
234 + }
235 + if mergedAt.Valid {
236 + t := mergedAt.Time
237 + pr.MergedAt = &t
238 + }
239 + if headRepoID.Valid {
240 + id := headRepoID.Int64
241 + pr.HeadRepoID = &id
242 + }
243 + pr.HeadRepoOwner = headRepoOwner.String
244 + pr.HeadRepoName = headRepoName.String
245 + list = append(list, pr)
246 + }
247 + return list, rows.Err()
248 +}
249 +
250 +func (s *Service) CountPullRequests(ctx context.Context, repoID int64) (openCount int, closedCount int, mergedCount int, err error) {
251 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
252 + defer cancel()
253 +
254 + _ = s.db.QueryRowContext(cctx, `SELECT COUNT(*) FROM pull_requests WHERE repo_id = ? AND status = 'open'`, repoID).Scan(&openCount)
255 + _ = s.db.QueryRowContext(cctx, `SELECT COUNT(*) FROM pull_requests WHERE repo_id = ? AND status = 'closed'`, repoID).Scan(&closedCount)
256 + _ = s.db.QueryRowContext(cctx, `SELECT COUNT(*) FROM pull_requests WHERE repo_id = ? AND status = 'merged'`, repoID).Scan(&mergedCount)
257 + return openCount, closedCount, mergedCount, nil
258 +}
259 +
260 +func (s *Service) SetPullRequestStatus(ctx context.Context, pullID int64, status string, mergedByID *int64) error {
261 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
262 + defer cancel()
263 +
264 + now := time.Now().UTC()
265 + if status == "merged" {
266 + _, err := s.db.ExecContext(cctx, `
267 + UPDATE pull_requests
268 + SET status = 'merged', merged_by_id = ?, merged_at = ?, updated_at = ?
269 + WHERE id = ?
270 + `, mergedByID, now, now, pullID)
271 + return err
272 + }
273 +
274 + _, err := s.db.ExecContext(cctx, `
275 + UPDATE pull_requests
276 + SET status = ?, merged_by_id = NULL, merged_at = NULL, updated_at = ?
277 + WHERE id = ?
278 + `, status, now, pullID)
279 + return err
280 +}
281 +
282 +func (s *Service) CreatePullRequestComment(ctx context.Context, pullID, authorID int64, body string) error {
283 + body = strings.TrimSpace(body)
284 + if body == "" {
285 + return ErrEmptyComment
286 + }
287 + if len(body) > 20000 {
288 + body = body[:20000]
289 + }
290 +
291 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
292 + defer cancel()
293 +
294 + now := time.Now().UTC()
295 + _, err := s.db.ExecContext(cctx, `
296 + INSERT INTO pull_request_comments (pull_id, author_id, body, created_at)
297 + VALUES (?, ?, ?, ?)
298 + `, pullID, authorID, body, now)
299 + if err != nil {
300 + return fmt.Errorf("insert pr comment: %w", err)
301 + }
302 + _, _ = s.db.ExecContext(cctx, `UPDATE pull_requests SET updated_at = ? WHERE id = ?`, now, pullID)
303 + return nil
304 +}
305 +
306 +func (s *Service) ListPullRequestComments(ctx context.Context, pullID int64) ([]PullRequestComment, error) {
307 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
308 + defer cancel()
309 +
310 + rows, err := s.db.QueryContext(cctx, `
311 + SELECT prc.id, prc.pull_id, prc.author_id, u.username, u.avatar_url, prc.body, prc.created_at
312 + FROM pull_request_comments prc
313 + JOIN users u ON u.id = prc.author_id
314 + WHERE prc.pull_id = ?
315 + ORDER BY prc.created_at ASC
316 + `, pullID)
317 + if err != nil {
318 + return nil, fmt.Errorf("list pr comments: %w", err)
319 + }
320 + defer rows.Close()
321 +
322 + var list []PullRequestComment
323 + for rows.Next() {
324 + var c PullRequestComment
325 + if err := rows.Scan(&c.ID, &c.PullID, &c.AuthorID, &c.AuthorUsername, &c.AuthorAvatar, &c.Body, &c.CreatedAt); err != nil {
326 + return nil, fmt.Errorf("scan pr comment: %w", err)
327 + }
328 + list = append(list, c)
329 + }
330 + return list, rows.Err()
331 +}
internal/repo/releases.go
+198 -0
... ... @@ -0,0 +1,198 @@
1 +package repo
2 +
3 +import (
4 + "context"
5 + "database/sql"
6 + "errors"
7 + "fmt"
8 + "strings"
9 + "time"
10 +)
11 +
12 +var (
13 + ErrReleaseNotFound = errors.New("release not found")
14 + ErrEmptyReleaseTag = errors.New("release tag cannot be empty")
15 + ErrEmptyReleaseTitle = errors.New("release title cannot be empty")
16 + ErrReleaseAlreadyExist = errors.New("a release for this tag already exists")
17 +)
18 +
19 +type Release struct {
20 + ID int64
21 + RepoID int64
22 + AuthorID int64
23 + AuthorUsername string
24 + AuthorAvatar string
25 + TagName string
26 + Title string
27 + Body string
28 + IsDraft bool
29 + IsPrerelease bool
30 + CreatedAt time.Time
31 + PublishedAt time.Time
32 +}
33 +
34 +func (s *Service) CreateRelease(ctx context.Context, repoID, authorID int64, tagName, title, body string, isDraft, isPrerelease bool) (*Release, error) {
35 + tagName = strings.TrimSpace(tagName)
36 + title = strings.TrimSpace(title)
37 + body = strings.TrimSpace(body)
38 +
39 + if tagName == "" {
40 + return nil, ErrEmptyReleaseTag
41 + }
42 + if title == "" {
43 + title = tagName
44 + }
45 + if len(title) > 200 {
46 + title = title[:200]
47 + }
48 + if len(body) > 50000 {
49 + body = body[:50000]
50 + }
51 +
52 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
53 + defer cancel()
54 +
55 + b2i := func(b bool) int {
56 + if b {
57 + return 1
58 + }
59 + return 0
60 + }
61 +
62 + now := time.Now().UTC()
63 + res, err := s.db.ExecContext(cctx, `
64 + INSERT INTO releases (repo_id, author_id, tag_name, title, body, is_draft, is_prerelease, created_at, published_at)
65 + VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
66 + `, repoID, authorID, tagName, title, body, b2i(isDraft), b2i(isPrerelease), now, now)
67 + if err != nil {
68 + if strings.Contains(strings.ToLower(err.Error()), "unique") {
69 + return nil, ErrReleaseAlreadyExist
70 + }
71 + return nil, fmt.Errorf("insert release: %w", err)
72 + }
73 +
74 + id, _ := res.LastInsertId()
75 + return s.GetReleaseByID(ctx, repoID, id)
76 +}
77 +
78 +func (s *Service) GetRelease(ctx context.Context, repoID int64, tagName string) (*Release, error) {
79 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
80 + defer cancel()
81 +
82 + var rel Release
83 + var draft, prerelease int
84 + err := s.db.QueryRowContext(cctx, `
85 + SELECT r.id, r.repo_id, r.author_id, u.username, u.avatar_url,
86 + r.tag_name, r.title, r.body, r.is_draft, r.is_prerelease, r.created_at, r.published_at
87 + FROM releases r
88 + JOIN users u ON u.id = r.author_id
89 + WHERE r.repo_id = ? AND r.tag_name = ?
90 + `, repoID, tagName).Scan(
91 + &rel.ID, &rel.RepoID, &rel.AuthorID, &rel.AuthorUsername, &rel.AuthorAvatar,
92 + &rel.TagName, &rel.Title, &rel.Body, &draft, &prerelease, &rel.CreatedAt, &rel.PublishedAt,
93 + )
94 + if err != nil {
95 + if errors.Is(err, sql.ErrNoRows) {
96 + return nil, ErrReleaseNotFound
97 + }
98 + return nil, fmt.Errorf("get release: %w", err)
99 + }
100 + rel.IsDraft = draft == 1
101 + rel.IsPrerelease = prerelease == 1
102 + return &rel, nil
103 +}
104 +
105 +func (s *Service) GetReleaseByID(ctx context.Context, repoID, releaseID int64) (*Release, error) {
106 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
107 + defer cancel()
108 +
109 + var rel Release
110 + var draft, prerelease int
111 + err := s.db.QueryRowContext(cctx, `
112 + SELECT r.id, r.repo_id, r.author_id, u.username, u.avatar_url,
113 + r.tag_name, r.title, r.body, r.is_draft, r.is_prerelease, r.created_at, r.published_at
114 + FROM releases r
115 + JOIN users u ON u.id = r.author_id
116 + WHERE r.repo_id = ? AND r.id = ?
117 + `, repoID, releaseID).Scan(
118 + &rel.ID, &rel.RepoID, &rel.AuthorID, &rel.AuthorUsername, &rel.AuthorAvatar,
119 + &rel.TagName, &rel.Title, &rel.Body, &draft, &prerelease, &rel.CreatedAt, &rel.PublishedAt,
120 + )
121 + if err != nil {
122 + if errors.Is(err, sql.ErrNoRows) {
123 + return nil, ErrReleaseNotFound
124 + }
125 + return nil, fmt.Errorf("get release: %w", err)
126 + }
127 + rel.IsDraft = draft == 1
128 + rel.IsPrerelease = prerelease == 1
129 + return &rel, nil
130 +}
131 +
132 +func (s *Service) ListReleases(ctx context.Context, repoID int64) ([]Release, error) {
133 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
134 + defer cancel()
135 +
136 + rows, err := s.db.QueryContext(cctx, `
137 + SELECT r.id, r.repo_id, r.author_id, u.username, u.avatar_url,
138 + r.tag_name, r.title, r.body, r.is_draft, r.is_prerelease, r.created_at, r.published_at
139 + FROM releases r
140 + JOIN users u ON u.id = r.author_id
141 + WHERE r.repo_id = ?
142 + ORDER BY r.published_at DESC
143 + `, repoID)
144 + if err != nil {
145 + return nil, fmt.Errorf("list releases: %w", err)
146 + }
147 + defer rows.Close()
148 +
149 + var list []Release
150 + for rows.Next() {
151 + var rel Release
152 + var draft, prerelease int
153 + if err := rows.Scan(
154 + &rel.ID, &rel.RepoID, &rel.AuthorID, &rel.AuthorUsername, &rel.AuthorAvatar,
155 + &rel.TagName, &rel.Title, &rel.Body, &draft, &prerelease, &rel.CreatedAt, &rel.PublishedAt,
156 + ); err != nil {
157 + return nil, fmt.Errorf("scan release: %w", err)
158 + }
159 + rel.IsDraft = draft == 1
160 + rel.IsPrerelease = prerelease == 1
161 + list = append(list, rel)
162 + }
163 + return list, rows.Err()
164 +}
165 +
166 +func (s *Service) UpdateRelease(ctx context.Context, releaseID int64, title, body string, isPrerelease bool) error {
167 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
168 + defer cancel()
169 +
170 + title = strings.TrimSpace(title)
171 + body = strings.TrimSpace(body)
172 + if len(title) > 200 {
173 + title = title[:200]
174 + }
175 + if len(body) > 50000 {
176 + body = body[:50000]
177 + }
178 +
179 + preInt := 0
180 + if isPrerelease {
181 + preInt = 1
182 + }
183 +
184 + _, err := s.db.ExecContext(cctx, `
185 + UPDATE releases
186 + SET title = ?, body = ?, is_prerelease = ?
187 + WHERE id = ?
188 + `, title, body, preInt, releaseID)
189 + return err
190 +}
191 +
192 +func (s *Service) DeleteRelease(ctx context.Context, releaseID int64) error {
193 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
194 + defer cancel()
195 +
196 + _, err := s.db.ExecContext(cctx, `DELETE FROM releases WHERE id = ?`, releaseID)
197 + return err
198 +}
internal/repo/repo.go
+591 -0
... ... @@ -0,0 +1,591 @@
1 +package repo
2 +
3 +import (
4 + "context"
5 + "database/sql"
6 + "errors"
7 + "fmt"
8 + "os"
9 + "path/filepath"
10 + "regexp"
11 + "strings"
12 + "time"
13 +
14 + "polar/internal/db"
15 + "polar/internal/git"
16 + "polar/internal/user"
17 +)
18 +
19 +var (
20 + ErrRepoNotFound = errors.New("repository not found")
21 + ErrRepoAlreadyExists = errors.New("repository with this name already exists")
22 + ErrInvalidRepoName = errors.New("repository name must be 1–64 characters (letters, digits, '.', '-', '_')")
23 + ErrPathTraversal = errors.New("unsafe repository path")
24 +)
25 +
26 +var repoNameRegex = regexp.MustCompile(`^[a-zA-Z0-9][a-zA-Z0-9._-]{0,63}$`)
27 +
28 +var reservedRepoNames = map[string]struct{}{
29 + "settings": {}, "commits": {}, "commit": {}, "tree": {}, "blob": {},
30 + "raw": {}, "info": {}, "git-upload-pack": {}, "git-receive-pack": {},
31 + "new": {}, "delete": {}, "rename": {}, "branches": {}, "tags": {},
32 + "issues": {}, "archive": {}, "pulls": {}, "releases": {}, "activity": {},
33 +}
34 +
35 +type Repository struct {
36 + ID int64
37 + OwnerID int64
38 + OwnerUsername string
39 + OwnerAvatarURL string
40 + Name string
41 + Description string
42 + IsPrivate bool
43 + DefaultBranch string
44 + EnableIssues bool
45 + EnablePulls bool
46 + EnableReleases bool
47 + EnableActivity bool
48 +
49 + ForkedFromRepoID *int64
50 + ForkedFromOwner string
51 + ForkedFromName string
52 + ForkCount int
53 +
54 + OpenIssueCount int
55 + OpenPRCount int
56 + ReleaseCount int
57 + CreatedAt time.Time
58 + UpdatedAt time.Time
59 +}
60 +
61 +type Service struct {
62 + db *db.DB
63 + reposDir string
64 +}
65 +
66 +func NewService(database *db.DB, reposDir string) *Service {
67 + return &Service{
68 + db: database,
69 + reposDir: reposDir,
70 + }
71 +}
72 +
73 +func ValidateRepoName(name string) error {
74 + name = strings.TrimSpace(name)
75 + if !repoNameRegex.MatchString(name) {
76 + return ErrInvalidRepoName
77 + }
78 + lower := strings.ToLower(name)
79 + if _, reserved := reservedRepoNames[lower]; reserved {
80 + return ErrInvalidRepoName
81 + }
82 + if strings.Contains(lower, "..") ||
83 + strings.HasSuffix(lower, ".git") ||
84 + strings.HasSuffix(lower, ".lock") ||
85 + strings.HasSuffix(lower, ".") {
86 + return ErrInvalidRepoName
87 + }
88 + return nil
89 +}
90 +
91 +func (s *Service) DiskPath(ownerUsername, repoName string) (string, error) {
92 + if err := user.ValidateUsername(ownerUsername); err != nil {
93 + return "", err
94 + }
95 + if err := ValidateRepoName(repoName); err != nil {
96 + return "", err
97 + }
98 +
99 + baseAbs, err := filepath.Abs(s.reposDir)
100 + if err != nil {
101 + return "", fmt.Errorf("resolve repos dir: %w", err)
102 + }
103 + target := filepath.Join(baseAbs, strings.ToLower(ownerUsername), strings.ToLower(repoName)+".git")
104 + rel, err := filepath.Rel(baseAbs, target)
105 + if err != nil || strings.HasPrefix(rel, "..") || filepath.IsAbs(rel) {
106 + return "", ErrPathTraversal
107 + }
108 + return target, nil
109 +}
110 +
111 +func (s *Service) Create(ctx context.Context, owner *user.User, name, description string, isPrivate bool) (*Repository, error) {
112 + name = strings.TrimSpace(name)
113 + description = strings.TrimSpace(description)
114 + if len(description) > 500 {
115 + description = description[:500]
116 + }
117 +
118 + if err := ValidateRepoName(name); err != nil {
119 + return nil, err
120 + }
121 +
122 + diskPath, err := s.DiskPath(owner.Username, name)
123 + if err != nil {
124 + return nil, err
125 + }
126 +
127 + cctx, cancel := context.WithTimeout(ctx, 10*time.Second)
128 + defer cancel()
129 +
130 + var exists int
131 + err = s.db.QueryRowContext(cctx, `
132 + SELECT 1 FROM repositories WHERE owner_id = ? AND LOWER(name) = LOWER(?)
133 + `, owner.ID, name).Scan(&exists)
134 + if err == nil {
135 + return nil, ErrRepoAlreadyExists
136 + } else if !errors.Is(err, sql.ErrNoRows) {
137 + return nil, fmt.Errorf("check repo exists: %w", err)
138 + }
139 +
140 + defaultBranch := "main"
141 + if err := git.InitBare(cctx, diskPath, defaultBranch); err != nil {
142 + return nil, fmt.Errorf("init bare git repo: %w", err)
143 + }
144 +
145 + privInt := 0
146 + if isPrivate {
147 + privInt = 1
148 + }
149 + now := time.Now().UTC()
150 +
151 + res, err := s.db.ExecContext(cctx, `
152 + INSERT INTO repositories (owner_id, name, description, is_private, default_branch, created_at, updated_at)
153 + VALUES (?, ?, ?, ?, ?, ?, ?)
154 + `, owner.ID, name, description, privInt, defaultBranch, now, now)
155 + if err != nil {
156 + _ = os.RemoveAll(diskPath)
157 + if strings.Contains(strings.ToLower(err.Error()), "unique") {
158 + return nil, ErrRepoAlreadyExists
159 + }
160 + return nil, fmt.Errorf("insert repository: %w", err)
161 + }
162 +
163 + id, _ := res.LastInsertId()
164 + return &Repository{
165 + ID: id,
166 + OwnerID: owner.ID,
167 + OwnerUsername: owner.Username,
168 + OwnerAvatarURL: owner.AvatarURL,
169 + Name: name,
170 + Description: description,
171 + IsPrivate: isPrivate,
172 + DefaultBranch: defaultBranch,
173 + EnableIssues: true,
174 + EnablePulls: true,
175 + EnableReleases: true,
176 + EnableActivity: true,
177 + CreatedAt: now,
178 + UpdatedAt: now,
179 + }, nil
180 +}
181 +
182 +const repoSelectFields = `
183 + SELECT r.id, r.owner_id, u.username, u.avatar_url, r.name, r.description, r.is_private, r.default_branch,
184 + r.enable_issues, r.enable_pulls, r.enable_releases, r.enable_activity,
185 + r.forked_from_repo_id, fu.username AS forked_from_owner, fr.name AS forked_from_name,
186 + (SELECT COUNT(*) FROM repositories f WHERE f.forked_from_repo_id = r.id) AS fork_count,
187 + (SELECT COUNT(*) FROM issues i WHERE i.repo_id = r.id AND i.is_closed = 0) AS open_issues,
188 + (SELECT COUNT(*) FROM pull_requests pr WHERE pr.repo_id = r.id AND pr.status = 'open') AS open_prs,
189 + (SELECT COUNT(*) FROM releases rel WHERE rel.repo_id = r.id AND rel.is_draft = 0) AS release_count,
190 + r.created_at, r.updated_at
191 + FROM repositories r
192 + JOIN users u ON u.id = r.owner_id
193 + LEFT JOIN repositories fr ON fr.id = r.forked_from_repo_id
194 + LEFT JOIN users fu ON fu.id = fr.owner_id
195 +`
196 +
197 +func (s *Service) GetByOwnerAndName(ctx context.Context, ownerUsername, repoName string) (*Repository, error) {
198 + ownerUsername = strings.TrimSpace(ownerUsername)
199 + repoName = strings.TrimSuffix(strings.TrimSpace(repoName), ".git")
200 +
201 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
202 + defer cancel()
203 +
204 + row := s.db.QueryRowContext(cctx, repoSelectFields+`
205 + WHERE LOWER(u.username) = LOWER(?) AND LOWER(r.name) = LOWER(?)
206 + `, ownerUsername, repoName)
207 +
208 + return scanRepo(row)
209 +}
210 +
211 +// GetByID loads a repository by primary key.
212 +func (s *Service) GetByID(ctx context.Context, id int64) (*Repository, error) {
213 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
214 + defer cancel()
215 +
216 + row := s.db.QueryRowContext(cctx, repoSelectFields+` WHERE r.id = ? `, id)
217 + return scanRepo(row)
218 +}
219 +func (s *Service) ListByOwner(ctx context.Context, ownerID int64, includePrivate bool) ([]Repository, error) {
220 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
221 + defer cancel()
222 +
223 + query := repoSelectFields + ` WHERE r.owner_id = ?`
224 + if !includePrivate {
225 + query += ` AND r.is_private = 0`
226 + }
227 + query += ` ORDER BY r.updated_at DESC, r.created_at DESC`
228 +
229 + rows, err := s.db.QueryContext(cctx, query, ownerID)
230 + if err != nil {
231 + return nil, fmt.Errorf("list repos by owner: %w", err)
232 + }
233 + defer rows.Close()
234 + return scanRepos(rows)
235 +}
236 +
237 +func (s *Service) ListPublic(ctx context.Context, limit int) ([]Repository, error) {
238 + if limit <= 0 || limit > 200 {
239 + limit = 50
240 + }
241 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
242 + defer cancel()
243 +
244 + rows, err := s.db.QueryContext(cctx, repoSelectFields+`
245 + WHERE r.is_private = 0
246 + ORDER BY r.updated_at DESC, r.created_at DESC
247 + LIMIT ?
248 + `, limit)
249 + if err != nil {
250 + return nil, fmt.Errorf("list public repos: %w", err)
251 + }
252 + defer rows.Close()
253 + return scanRepos(rows)
254 +}
255 +
256 +func (s *Service) ListAccessible(ctx context.Context, viewer *user.User, limit int) ([]Repository, error) {
257 + if viewer == nil {
258 + return s.ListPublic(ctx, limit)
259 + }
260 + if limit <= 0 || limit > 200 {
261 + limit = 100
262 + }
263 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
264 + defer cancel()
265 +
266 + var (
267 + rows *sql.Rows
268 + err error
269 + )
270 + if viewer.IsAdmin {
271 + rows, err = s.db.QueryContext(cctx, repoSelectFields+`
272 + ORDER BY (r.owner_id = ?) DESC, r.updated_at DESC
273 + LIMIT ?
274 + `, viewer.ID, limit)
275 + } else {
276 + rows, err = s.db.QueryContext(cctx, repoSelectFields+`
277 + WHERE r.owner_id = ? OR r.is_private = 0
278 + ORDER BY (r.owner_id = ?) DESC, r.updated_at DESC
279 + LIMIT ?
280 + `, viewer.ID, viewer.ID, limit)
281 + }
282 + if err != nil {
283 + return nil, fmt.Errorf("list accessible repos: %w", err)
284 + }
285 + defer rows.Close()
286 + return scanRepos(rows)
287 +}
288 +
289 +func (s *Service) Update(ctx context.Context, r *Repository, description string, isPrivate bool, defaultBranch string, enableIssues, enablePulls, enableReleases, enableActivity bool) error {
290 + description = strings.TrimSpace(description)
291 + if len(description) > 500 {
292 + description = description[:500]
293 + }
294 + if defaultBranch == "" {
295 + defaultBranch = r.DefaultBranch
296 + }
297 + if err := git.ValidateRef(defaultBranch); err != nil {
298 + return err
299 + }
300 +
301 + privInt := 0
302 + if isPrivate {
303 + privInt = 1
304 + }
305 + b2i := func(b bool) int {
306 + if b {
307 + return 1
308 + }
309 + return 0
310 + }
311 + now := time.Now().UTC()
312 +
313 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
314 + defer cancel()
315 +
316 + _, err := s.db.ExecContext(cctx, `
317 + UPDATE repositories
318 + SET description = ?, is_private = ?, default_branch = ?,
319 + enable_issues = ?, enable_pulls = ?, enable_releases = ?, enable_activity = ?,
320 + updated_at = ?
321 + WHERE id = ?
322 + `, description, privInt, defaultBranch, b2i(enableIssues), b2i(enablePulls), b2i(enableReleases), b2i(enableActivity), now, r.ID)
323 + if err != nil {
324 + return fmt.Errorf("update repository: %w", err)
325 + }
326 + r.Description = description
327 + r.IsPrivate = isPrivate
328 + r.DefaultBranch = defaultBranch
329 + r.EnableIssues = enableIssues
330 + r.EnablePulls = enablePulls
331 + r.EnableReleases = enableReleases
332 + r.EnableActivity = enableActivity
333 + r.UpdatedAt = now
334 + return nil
335 +}
336 +
337 +func (s *Service) TouchUpdatedAt(ctx context.Context, repoID int64) {
338 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
339 + defer cancel()
340 + _, _ = s.db.ExecContext(cctx, `UPDATE repositories SET updated_at = ? WHERE id = ?`, time.Now().UTC(), repoID)
341 +}
342 +
343 +func (s *Service) Rename(ctx context.Context, r *Repository, newName string) error {
344 + newName = strings.TrimSpace(newName)
345 + if err := ValidateRepoName(newName); err != nil {
346 + return err
347 + }
348 + if strings.EqualFold(r.Name, newName) && r.Name == newName {
349 + return nil
350 + }
351 +
352 + oldPath, err := s.DiskPath(r.OwnerUsername, r.Name)
353 + if err != nil {
354 + return err
355 + }
356 + newPath, err := s.DiskPath(r.OwnerUsername, newName)
357 + if err != nil {
358 + return err
359 + }
360 +
361 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
362 + defer cancel()
363 +
364 + if !strings.EqualFold(r.Name, newName) {
365 + var exists int
366 + err := s.db.QueryRowContext(cctx, `
367 + SELECT 1 FROM repositories WHERE owner_id = ? AND LOWER(name) = LOWER(?) AND id != ?
368 + `, r.OwnerID, newName, r.ID).Scan(&exists)
369 + if err == nil {
370 + return ErrRepoAlreadyExists
371 + }
372 + }
373 +
374 + if oldPath != newPath {
375 + if err := os.Rename(oldPath, newPath); err != nil {
376 + return fmt.Errorf("rename repository directory: %w", err)
377 + }
378 + }
379 +
380 + now := time.Now().UTC()
381 + _, err = s.db.ExecContext(cctx, `
382 + UPDATE repositories SET name = ?, updated_at = ? WHERE id = ?
383 + `, newName, now, r.ID)
384 + if err != nil {
385 + if oldPath != newPath {
386 + _ = os.Rename(newPath, oldPath)
387 + }
388 + return fmt.Errorf("update repository name: %w", err)
389 + }
390 +
391 + r.Name = newName
392 + r.UpdatedAt = now
393 + return nil
394 +}
395 +
396 +func (s *Service) Delete(ctx context.Context, r *Repository) error {
397 + diskPath, err := s.DiskPath(r.OwnerUsername, r.Name)
398 + if err != nil {
399 + return err
400 + }
401 +
402 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
403 + defer cancel()
404 +
405 + if _, err := s.db.ExecContext(cctx, `DELETE FROM repositories WHERE id = ?`, r.ID); err != nil {
406 + return fmt.Errorf("delete repository record: %w", err)
407 + }
408 + if err := os.RemoveAll(diskPath); err != nil {
409 + return fmt.Errorf("remove repository directory: %w", err)
410 + }
411 + return nil
412 +}
413 +
414 +func boolInt(b bool) int {
415 + if b {
416 + return 1
417 + }
418 + return 0
419 +}
420 +
421 +// FindForkByOwner returns the owner's fork of the given repository, if any.
422 +func (s *Service) FindForkByOwner(ctx context.Context, srcRepoID, ownerID int64) (*Repository, error) {
423 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
424 + defer cancel()
425 +
426 + row := s.db.QueryRowContext(cctx, repoSelectFields+`
427 + WHERE r.forked_from_repo_id = ? AND r.owner_id = ?
428 + ORDER BY r.created_at ASC
429 + LIMIT 1
430 + `, srcRepoID, ownerID)
431 + r, err := scanRepo(row)
432 + if errors.Is(err, ErrRepoNotFound) {
433 + return nil, nil
434 + }
435 + return r, err
436 +}
437 +
438 +// Fork copies a repository into the owner's namespace.
439 +func (s *Service) Fork(ctx context.Context, src *Repository, owner *user.User, name string) (*Repository, error) {
440 + name = strings.TrimSpace(name)
441 + if name == "" {
442 + name = src.Name
443 + }
444 + if err := ValidateRepoName(name); err != nil {
445 + return nil, err
446 + }
447 +
448 + srcPath, err := s.DiskPath(src.OwnerUsername, src.Name)
449 + if err != nil {
450 + return nil, err
451 + }
452 + dstPath, err := s.DiskPath(owner.Username, name)
453 + if err != nil {
454 + return nil, err
455 + }
456 +
457 + cctx, cancel := context.WithTimeout(ctx, 120*time.Second)
458 + defer cancel()
459 +
460 + var exists int
461 + err = s.db.QueryRowContext(cctx, `
462 + SELECT 1 FROM repositories WHERE owner_id = ? AND LOWER(name) = LOWER(?)
463 + `, owner.ID, name).Scan(&exists)
464 + if err == nil {
465 + return nil, ErrRepoAlreadyExists
466 + } else if !errors.Is(err, sql.ErrNoRows) {
467 + return nil, fmt.Errorf("check fork name: %w", err)
468 + }
469 +
470 + if err := git.CloneBare(cctx, srcPath, dstPath); err != nil {
471 + return nil, fmt.Errorf("copy repository: %w", err)
472 + }
473 +
474 + now := time.Now().UTC()
475 + srcID := src.ID
476 + res, err := s.db.ExecContext(cctx, `
477 + INSERT INTO repositories (owner_id, name, description, is_private, default_branch,
478 + enable_issues, enable_pulls, enable_releases, enable_activity, forked_from_repo_id, created_at, updated_at)
479 + VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
480 + `, owner.ID, name, src.Description, boolInt(src.IsPrivate), src.DefaultBranch,
481 + boolInt(src.EnableIssues), boolInt(src.EnablePulls), boolInt(src.EnableReleases), boolInt(src.EnableActivity),
482 + srcID, now, now)
483 + if err != nil {
484 + _ = os.RemoveAll(dstPath)
485 + if strings.Contains(strings.ToLower(err.Error()), "unique") {
486 + return nil, ErrRepoAlreadyExists
487 + }
488 + return nil, fmt.Errorf("insert fork: %w", err)
489 + }
490 +
491 + id, _ := res.LastInsertId()
492 + return &Repository{
493 + ID: id,
494 + OwnerID: owner.ID,
495 + OwnerUsername: owner.Username,
496 + OwnerAvatarURL: owner.AvatarURL,
497 + Name: name,
498 + Description: src.Description,
499 + IsPrivate: src.IsPrivate,
500 + DefaultBranch: src.DefaultBranch,
501 + EnableIssues: src.EnableIssues,
502 + EnablePulls: src.EnablePulls,
503 + EnableReleases: src.EnableReleases,
504 + EnableActivity: src.EnableActivity,
505 + ForkedFromRepoID: &srcID,
506 + ForkedFromOwner: src.OwnerUsername,
507 + ForkedFromName: src.Name,
508 + CreatedAt: now,
509 + UpdatedAt: now,
510 + }, nil
511 +}
512 +
513 +// ListForks returns repositories forked from the given repository.
514 +func (s *Service) ListForks(ctx context.Context, srcRepoID int64, limit int) ([]Repository, error) {
515 + if limit <= 0 || limit > 100 {
516 + limit = 20
517 + }
518 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
519 + defer cancel()
520 +
521 + rows, err := s.db.QueryContext(cctx, repoSelectFields+`
522 + WHERE r.forked_from_repo_id = ?
523 + ORDER BY r.updated_at DESC
524 + LIMIT ?
525 + `, srcRepoID, limit)
526 + if err != nil {
527 + return nil, fmt.Errorf("list forks: %w", err)
528 + }
529 + defer rows.Close()
530 + return scanRepos(rows)
531 +}
532 +
533 +func scanRepo(row *sql.Row) (*Repository, error) {
534 + var r Repository
535 + var isPriv, enableIssues, enablePulls, enableReleases, enableActivity int
536 + var forkedFromID sql.NullInt64
537 + var forkedFromOwner, forkedFromName sql.NullString
538 + err := row.Scan(&r.ID, &r.OwnerID, &r.OwnerUsername, &r.OwnerAvatarURL, &r.Name, &r.Description, &isPriv, &r.DefaultBranch,
539 + &enableIssues, &enablePulls, &enableReleases, &enableActivity,
540 + &forkedFromID, &forkedFromOwner, &forkedFromName, &r.ForkCount,
541 + &r.OpenIssueCount, &r.OpenPRCount, &r.ReleaseCount,
542 + &r.CreatedAt, &r.UpdatedAt)
543 + if err != nil {
544 + if errors.Is(err, sql.ErrNoRows) {
545 + return nil, ErrRepoNotFound
546 + }
547 + return nil, fmt.Errorf("scan repository: %w", err)
548 + }
549 + r.IsPrivate = isPriv == 1
550 + r.EnableIssues = enableIssues == 1
551 + r.EnablePulls = enablePulls == 1
552 + r.EnableReleases = enableReleases == 1
553 + r.EnableActivity = enableActivity == 1
554 + if forkedFromID.Valid {
555 + id := forkedFromID.Int64
556 + r.ForkedFromRepoID = &id
557 + }
558 + r.ForkedFromOwner = forkedFromOwner.String
559 + r.ForkedFromName = forkedFromName.String
560 + return &r, nil
561 +}
562 +
563 +func scanRepos(rows *sql.Rows) ([]Repository, error) {
564 + var list []Repository
565 + for rows.Next() {
566 + var r Repository
567 + var isPriv, enableIssues, enablePulls, enableReleases, enableActivity int
568 + var forkedFromID sql.NullInt64
569 + var forkedFromOwner, forkedFromName sql.NullString
570 + if err := rows.Scan(&r.ID, &r.OwnerID, &r.OwnerUsername, &r.OwnerAvatarURL, &r.Name, &r.Description, &isPriv, &r.DefaultBranch,
571 + &enableIssues, &enablePulls, &enableReleases, &enableActivity,
572 + &forkedFromID, &forkedFromOwner, &forkedFromName, &r.ForkCount,
573 + &r.OpenIssueCount, &r.OpenPRCount, &r.ReleaseCount,
574 + &r.CreatedAt, &r.UpdatedAt); err != nil {
575 + return nil, fmt.Errorf("scan repository row: %w", err)
576 + }
577 + r.IsPrivate = isPriv == 1
578 + r.EnableIssues = enableIssues == 1
579 + r.EnablePulls = enablePulls == 1
580 + r.EnableReleases = enableReleases == 1
581 + r.EnableActivity = enableActivity == 1
582 + if forkedFromID.Valid {
583 + id := forkedFromID.Int64
584 + r.ForkedFromRepoID = &id
585 + }
586 + r.ForkedFromOwner = forkedFromOwner.String
587 + r.ForkedFromName = forkedFromName.String
588 + list = append(list, r)
589 + }
590 + return list, rows.Err()
591 +}
internal/repo/repo_test.go
+98 -0
... ... @@ -0,0 +1,98 @@
1 +package repo
2 +
3 +import (
4 + "context"
5 + "os"
6 + "path/filepath"
7 + "testing"
8 +
9 + "polar/internal/db"
10 + "polar/internal/user"
11 +)
12 +
13 +func TestValidateRepoName(t *testing.T) {
14 + valid := []string{"alice", "my-repo_1", "v1.0.0", "x", "core.go"}
15 + for _, n := range valid {
16 + if err := ValidateRepoName(n); err != nil {
17 + t.Errorf("expected repo name %q to be valid, got %v", n, err)
18 + }
19 + }
20 +
21 + invalid := []string{
22 + "", ".", "..", ".hidden", "-dash", "repo.git", "repo.lock",
23 + "repo.", "a..b", "foo/bar", `foo\bar`, "settings", "commits",
24 + "commit", "tree", "blob", "raw", "info", "git-upload-pack",
25 + }
26 + for _, n := range invalid {
27 + if err := ValidateRepoName(n); err == nil {
28 + t.Errorf("expected repo name %q to be rejected", n)
29 + }
30 + }
31 +}
32 +
33 +func TestRepoCRUDAndAccessControl(t *testing.T) {
34 + ctx := context.Background()
35 + tmp := t.TempDir()
36 + database, err := db.Open(ctx, filepath.Join(tmp, "repo.db"), true)
37 + if err != nil {
38 + t.Fatalf("open db: %v", err)
39 + }
40 + defer database.Close()
41 +
42 + userSvc := user.NewService(database)
43 + owner, err := userSvc.Register(ctx, "alice", "alice@example.com", "password123", true)
44 + if err != nil {
45 + t.Fatalf("register owner: %v", err)
46 + }
47 + stranger, err := userSvc.Register(ctx, "bob", "bob@example.com", "password123", true)
48 + if err != nil {
49 + t.Fatalf("register stranger: %v", err)
50 + }
51 +
52 + repoSvc := NewService(database, filepath.Join(tmp, "repos"))
53 +
54 + privRepo, err := repoSvc.Create(ctx, owner, "secret-notes", "Private repo", true)
55 + if err != nil {
56 + t.Fatalf("Create private repo failed: %v", err)
57 + }
58 +
59 + // Verify bare git repository exists on disk
60 + diskPath, err := repoSvc.DiskPath(owner.Username, privRepo.Name)
61 + if err != nil {
62 + t.Fatalf("DiskPath failed: %v", err)
63 + }
64 + if _, err := os.Stat(filepath.Join(diskPath, "HEAD")); err != nil {
65 + t.Fatalf("expected bare repo HEAD on disk: %v", err)
66 + }
67 +
68 + // Private repo access checks
69 + if repoSvc.CanRead(ctx, privRepo, nil) {
70 + t.Fatalf("anonymous user must NOT read private repo")
71 + }
72 + if repoSvc.CanRead(ctx, privRepo, stranger) {
73 + t.Fatalf("other regular user must NOT read private repo")
74 + }
75 + if !repoSvc.CanRead(ctx, privRepo, owner) {
76 + t.Fatalf("owner must read private repo")
77 + }
78 + if !repoSvc.CanWrite(ctx, privRepo, owner) || repoSvc.CanWrite(ctx, privRepo, stranger) {
79 + t.Fatalf("unexpected CanWrite result")
80 + }
81 +
82 + // Rename repository
83 + if err := repoSvc.Rename(ctx, privRepo, "renamed-notes"); err != nil {
84 + t.Fatalf("Rename failed: %v", err)
85 + }
86 + newDiskPath, _ := repoSvc.DiskPath(owner.Username, "renamed-notes")
87 + if _, err := os.Stat(filepath.Join(newDiskPath, "HEAD")); err != nil {
88 + t.Fatalf("expected renamed bare repo on disk: %v", err)
89 + }
90 +
91 + // Delete repository
92 + if err := repoSvc.Delete(ctx, privRepo); err != nil {
93 + t.Fatalf("Delete failed: %v", err)
94 + }
95 + if _, err := os.Stat(newDiskPath); !os.IsNotExist(err) {
96 + t.Fatalf("expected bare repo directory to be deleted from disk")
97 + }
98 +}
internal/repo/reviews.go
+117 -0
... ... @@ -0,0 +1,117 @@
1 +package repo
2 +
3 +import (
4 + "context"
5 + "errors"
6 + "fmt"
7 + "strings"
8 + "time"
9 +)
10 +
11 +const (
12 + ReviewApproved = "approved"
13 + ReviewChangesRequested = "changes_requested"
14 +)
15 +
16 +var ErrInvalidReviewState = errors.New("invalid review state")
17 +
18 +type Review struct {
19 + ID int64
20 + PullID int64
21 + ReviewerID int64
22 + ReviewerUsername string
23 + ReviewerAvatar string
24 + State string
25 + Body string
26 + CreatedAt time.Time
27 + UpdatedAt time.Time
28 +}
29 +
30 +// UpsertReview records or updates the reviewer's verdict on a pull request.
31 +func (s *Service) UpsertReview(ctx context.Context, pullID, reviewerID int64, state, body string) error {
32 + state = strings.TrimSpace(state)
33 + if state != ReviewApproved && state != ReviewChangesRequested {
34 + return ErrInvalidReviewState
35 + }
36 + body = strings.TrimSpace(body)
37 + if len(body) > 10000 {
38 + body = body[:10000]
39 + }
40 +
41 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
42 + defer cancel()
43 +
44 + now := time.Now().UTC()
45 + _, err := s.db.ExecContext(cctx, `
46 + INSERT INTO pull_request_reviews (pull_id, reviewer_id, state, body, created_at, updated_at)
47 + VALUES (?, ?, ?, ?, ?, ?)
48 + ON CONFLICT(pull_id, reviewer_id) DO UPDATE SET
49 + state = excluded.state,
50 + body = excluded.body,
51 + updated_at = excluded.updated_at
52 + `, pullID, reviewerID, state, body, now, now)
53 + if err != nil {
54 + return fmt.Errorf("upsert review: %w", err)
55 + }
56 + return nil
57 +}
58 +
59 +// ListReviews returns all reviews left on a pull request, oldest first.
60 +func (s *Service) ListReviews(ctx context.Context, pullID int64) ([]Review, error) {
61 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
62 + defer cancel()
63 +
64 + rows, err := s.db.QueryContext(cctx, `
65 + SELECT rv.id, rv.pull_id, rv.reviewer_id, u.username, u.avatar_url, rv.state, rv.body, rv.created_at, rv.updated_at
66 + FROM pull_request_reviews rv
67 + JOIN users u ON u.id = rv.reviewer_id
68 + WHERE rv.pull_id = ?
69 + ORDER BY rv.updated_at ASC
70 + `, pullID)
71 + if err != nil {
72 + return nil, fmt.Errorf("list reviews: %w", err)
73 + }
74 + defer rows.Close()
75 +
76 + var list []Review
77 + for rows.Next() {
78 + var rv Review
79 + if err := rows.Scan(&rv.ID, &rv.PullID, &rv.ReviewerID, &rv.ReviewerUsername, &rv.ReviewerAvatar,
80 + &rv.State, &rv.Body, &rv.CreatedAt, &rv.UpdatedAt); err != nil {
81 + return nil, fmt.Errorf("scan review: %w", err)
82 + }
83 + list = append(list, rv)
84 + }
85 + return list, rows.Err()
86 +}
87 +
88 +// GetReview returns the review left by a specific user, if any.
89 +func (s *Service) GetReview(ctx context.Context, pullID, reviewerID int64) (*Review, error) {
90 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
91 + defer cancel()
92 +
93 + var rv Review
94 + err := s.db.QueryRowContext(cctx, `
95 + SELECT rv.id, rv.pull_id, rv.reviewer_id, u.username, u.avatar_url, rv.state, rv.body, rv.created_at, rv.updated_at
96 + FROM pull_request_reviews rv
97 + JOIN users u ON u.id = rv.reviewer_id
98 + WHERE rv.pull_id = ? AND rv.reviewer_id = ?
99 + `, pullID, reviewerID).Scan(&rv.ID, &rv.PullID, &rv.ReviewerID, &rv.ReviewerUsername, &rv.ReviewerAvatar,
100 + &rv.State, &rv.Body, &rv.CreatedAt, &rv.UpdatedAt)
101 + if err != nil {
102 + return nil, err
103 + }
104 + return &rv, nil
105 +}
106 +
107 +// ReviewCounts returns how many reviewers approved and how many requested changes.
108 +func (s *Service) ReviewCounts(ctx context.Context, pullID int64) (approved int, changesRequested int) {
109 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
110 + defer cancel()
111 +
112 + _ = s.db.QueryRowContext(cctx, `SELECT COUNT(*) FROM pull_request_reviews WHERE pull_id = ? AND state = ?`,
113 + pullID, ReviewApproved).Scan(&approved)
114 + _ = s.db.QueryRowContext(cctx, `SELECT COUNT(*) FROM pull_request_reviews WHERE pull_id = ? AND state = ?`,
115 + pullID, ReviewChangesRequested).Scan(&changesRequested)
116 + return approved, changesRequested
117 +}
internal/user/user.go
+370 -0
... ... @@ -0,0 +1,370 @@
1 +package user
2 +
3 +import (
4 + "context"
5 + "database/sql"
6 + "errors"
7 + "fmt"
8 + "net/mail"
9 + "regexp"
10 + "strings"
11 + "time"
12 +
13 + "polar/internal/auth"
14 + "polar/internal/db"
15 +)
16 +
17 +var (
18 + ErrUserNotFound = errors.New("user not found")
19 + ErrUserAlreadyExists = errors.New("username or email already taken")
20 + ErrRegistrationDisabled = errors.New("public registration is disabled")
21 + ErrInvalidUsername = errors.New("username must be 2–32 alphanumeric characters or single hyphens/underscores")
22 + ErrReservedUsername = errors.New("this username is reserved by the system")
23 + ErrInvalidEmail = errors.New("invalid email address")
24 + ErrWeakPassword = errors.New("password must be at least 8 characters")
25 +)
26 +
27 +var usernameRegex = regexp.MustCompile(`^[a-zA-Z0-9](?:[a-zA-Z0-9]|[-_][a-zA-Z0-9]){1,31}$`)
28 +
29 +var reservedUsernames = map[string]struct{}{
30 + "login": {}, "register": {}, "logout": {}, "settings": {}, "admin": {},
31 + "new": {}, "explore": {}, "repos": {}, "api": {}, "static": {},
32 + "assets": {}, "healthz": {}, "_ui": {}, "git": {}, "raw": {},
33 + "tree": {}, "blob": {}, "commits": {}, "commit": {}, "branches": {},
34 + "tags": {}, "user": {}, "users": {}, "org": {}, "orgs": {},
35 + "help": {}, "about": {}, "pricing": {}, "security": {}, "terms": {},
36 + "privacy": {}, "favicon.ico": {}, "robots.txt": {}, "search": {},
37 + "avatars": {}, "issues": {}, "archive": {},
38 +}
39 +
40 +type User struct {
41 + ID int64
42 + Username string
43 + Email string
44 + PasswordHash string
45 + FullName string
46 + Bio string
47 + AvatarURL string
48 + Location string
49 + Website string
50 + IsAdmin bool
51 + RepoCount int
52 + CreatedAt time.Time
53 +}
54 +
55 +type Service struct {
56 + db *db.DB
57 +}
58 +
59 +func NewService(database *db.DB) *Service {
60 + return &Service{db: database}
61 +}
62 +
63 +func ValidateUsername(username string) error {
64 + username = strings.TrimSpace(username)
65 + if !usernameRegex.MatchString(username) {
66 + return ErrInvalidUsername
67 + }
68 + lower := strings.ToLower(username)
69 + if _, reserved := reservedUsernames[lower]; reserved {
70 + return ErrReservedUsername
71 + }
72 + if strings.HasSuffix(lower, ".git") || strings.Contains(lower, "..") {
73 + return ErrInvalidUsername
74 + }
75 + return nil
76 +}
77 +
78 +func ValidateEmail(email string) error {
79 + email = strings.TrimSpace(email)
80 + if len(email) < 3 || len(email) > 254 {
81 + return ErrInvalidEmail
82 + }
83 + addr, err := mail.ParseAddress(email)
84 + if err != nil || addr.Address != email || !strings.Contains(email, "@") {
85 + return ErrInvalidEmail
86 + }
87 + return nil
88 +}
89 +
90 +func (s *Service) Count(ctx context.Context) (int, error) {
91 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
92 + defer cancel()
93 + var count int
94 + if err := s.db.QueryRowContext(cctx, `SELECT COUNT(*) FROM users`).Scan(&count); err != nil {
95 + return 0, fmt.Errorf("count users: %w", err)
96 + }
97 + return count, nil
98 +}
99 +
100 +func (s *Service) Register(ctx context.Context, username, email, password string, regEnabled bool) (*User, error) {
101 + username = strings.TrimSpace(username)
102 + email = strings.ToLower(strings.TrimSpace(email))
103 +
104 + if err := ValidateUsername(username); err != nil {
105 + return nil, err
106 + }
107 + if err := ValidateEmail(email); err != nil {
108 + return nil, err
109 + }
110 + if len(password) < 8 {
111 + return nil, ErrWeakPassword
112 + }
113 +
114 + hash, err := auth.HashPassword(password)
115 + if err != nil {
116 + return nil, fmt.Errorf("hash password: %w", err)
117 + }
118 +
119 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
120 + defer cancel()
121 +
122 + tx, err := s.db.BeginTx(cctx, nil)
123 + if err != nil {
124 + return nil, fmt.Errorf("begin register tx: %w", err)
125 + }
126 + defer func() { _ = tx.Rollback() }()
127 +
128 + var userCount int
129 + if err := tx.QueryRowContext(cctx, `SELECT COUNT(*) FROM users`).Scan(&userCount); err != nil {
130 + return nil, fmt.Errorf("count existing users: %w", err)
131 + }
132 +
133 + if userCount > 0 && !regEnabled {
134 + return nil, ErrRegistrationDisabled
135 + }
136 +
137 + var existing int
138 + err = tx.QueryRowContext(cctx, `
139 + SELECT 1 FROM users WHERE LOWER(username) = LOWER(?) OR LOWER(email) = LOWER(?)
140 + `, username, email).Scan(&existing)
141 + if err == nil {
142 + return nil, ErrUserAlreadyExists
143 + } else if !errors.Is(err, sql.ErrNoRows) {
144 + return nil, fmt.Errorf("check existing user: %w", err)
145 + }
146 +
147 + isAdmin := userCount == 0
148 + isAdminInt := 0
149 + if isAdmin {
150 + isAdminInt = 1
151 + }
152 + now := time.Now().UTC()
153 +
154 + res, err := tx.ExecContext(cctx, `
155 + INSERT INTO users (username, email, password_hash, bio, is_admin, created_at)
156 + VALUES (?, ?, ?, '', ?, ?)
157 + `, username, email, hash, isAdminInt, now)
158 + if err != nil {
159 + if strings.Contains(strings.ToLower(err.Error()), "unique") {
160 + return nil, ErrUserAlreadyExists
161 + }
162 + return nil, fmt.Errorf("insert user: %w", err)
163 + }
164 +
165 + id, _ := res.LastInsertId()
166 + if err := tx.Commit(); err != nil {
167 + return nil, fmt.Errorf("commit register tx: %w", err)
168 + }
169 +
170 + return &User{
171 + ID: id,
172 + Username: username,
173 + Email: email,
174 + PasswordHash: hash,
175 + IsAdmin: isAdmin,
176 + CreatedAt: now,
177 + }, nil
178 +}
179 +
180 +func (s *Service) Authenticate(ctx context.Context, login, password string) (*User, error) {
181 + login = strings.TrimSpace(login)
182 + if login == "" || password == "" {
183 + return nil, auth.ErrInvalidCredentials
184 + }
185 +
186 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
187 + defer cancel()
188 +
189 + u, err := s.scanUser(s.db.QueryRowContext(cctx, `
190 + SELECT id, username, email, password_hash, full_name, bio, avatar_url, location, website, is_admin, created_at
191 + FROM users
192 + WHERE LOWER(username) = LOWER(?) OR LOWER(email) = LOWER(?)
193 + `, login, login))
194 + if err != nil {
195 + if errors.Is(err, ErrUserNotFound) {
196 + return nil, auth.ErrInvalidCredentials
197 + }
198 + return nil, err
199 + }
200 +
201 + ok, err := auth.VerifyPassword(password, u.PasswordHash)
202 + if err != nil || !ok {
203 + return nil, auth.ErrInvalidCredentials
204 + }
205 + return u, nil
206 +}
207 +
208 +func (s *Service) GetByID(ctx context.Context, id int64) (*User, error) {
209 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
210 + defer cancel()
211 +
212 + return s.scanUser(s.db.QueryRowContext(cctx, `
213 + SELECT id, username, email, password_hash, full_name, bio, avatar_url, location, website, is_admin, created_at
214 + FROM users WHERE id = ?
215 + `, id))
216 +}
217 +
218 +func (s *Service) GetByUsername(ctx context.Context, username string) (*User, error) {
219 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
220 + defer cancel()
221 +
222 + return s.scanUser(s.db.QueryRowContext(cctx, `
223 + SELECT id, username, email, password_hash, full_name, bio, avatar_url, location, website, is_admin, created_at
224 + FROM users WHERE LOWER(username) = LOWER(?)
225 + `, strings.TrimSpace(username)))
226 +}
227 +
228 +func (s *Service) UpdateProfile(ctx context.Context, userID int64, email, bio string) error {
229 + u, err := s.GetByID(ctx, userID)
230 + if err != nil {
231 + return err
232 + }
233 + return s.UpdateProfileDetails(ctx, userID, email, u.FullName, bio, u.Location, u.Website)
234 +}
235 +
236 +func (s *Service) UpdateProfileDetails(ctx context.Context, userID int64, email, fullName, bio, location, website string) error {
237 + email = strings.ToLower(strings.TrimSpace(email))
238 + fullName = strings.TrimSpace(fullName)
239 + bio = strings.TrimSpace(bio)
240 + location = strings.TrimSpace(location)
241 + website = strings.TrimSpace(website)
242 +
243 + if len(fullName) > 80 {
244 + fullName = fullName[:80]
245 + }
246 + if len(bio) > 280 {
247 + bio = bio[:280]
248 + }
249 + if len(location) > 80 {
250 + location = location[:80]
251 + }
252 + if len(website) > 200 {
253 + website = website[:200]
254 + }
255 + if website != "" && !strings.HasPrefix(website, "http://") && !strings.HasPrefix(website, "https://") {
256 + website = "https://" + website
257 + }
258 + if err := ValidateEmail(email); err != nil {
259 + return err
260 + }
261 +
262 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
263 + defer cancel()
264 +
265 + _, err := s.db.ExecContext(cctx, `
266 + UPDATE users SET email = ?, full_name = ?, bio = ?, location = ?, website = ? WHERE id = ?
267 + `, email, fullName, bio, location, website, userID)
268 + if err != nil {
269 + if strings.Contains(strings.ToLower(err.Error()), "unique") {
270 + return ErrUserAlreadyExists
271 + }
272 + return fmt.Errorf("update profile: %w", err)
273 + }
274 + return nil
275 +}
276 +
277 +func (s *Service) UpdateAvatar(ctx context.Context, userID int64, avatarURL string) error {
278 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
279 + defer cancel()
280 +
281 + _, err := s.db.ExecContext(cctx, `
282 + UPDATE users SET avatar_url = ? WHERE id = ?
283 + `, strings.TrimSpace(avatarURL), userID)
284 + if err != nil {
285 + return fmt.Errorf("update avatar: %w", err)
286 + }
287 + return nil
288 +}
289 +
290 +func (s *Service) UpdatePassword(ctx context.Context, userID int64, currentPassword, newPassword string) error {
291 + if len(newPassword) < 8 {
292 + return ErrWeakPassword
293 + }
294 + u, err := s.GetByID(ctx, userID)
295 + if err != nil {
296 + return err
297 + }
298 + ok, err := auth.VerifyPassword(currentPassword, u.PasswordHash)
299 + if err != nil || !ok {
300 + return auth.ErrInvalidCredentials
301 + }
302 + newHash, err := auth.HashPassword(newPassword)
303 + if err != nil {
304 + return fmt.Errorf("hash new password: %w", err)
305 + }
306 +
307 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
308 + defer cancel()
309 +
310 + _, err = s.db.ExecContext(cctx, `UPDATE users SET password_hash = ? WHERE id = ?`, newHash, userID)
311 + if err != nil {
312 + return fmt.Errorf("update password: %w", err)
313 + }
314 + return nil
315 +}
316 +
317 +func (s *Service) ListAll(ctx context.Context) ([]User, error) {
318 + cctx, cancel := context.WithTimeout(ctx, 5*time.Second)
319 + defer cancel()
320 +
321 + rows, err := s.db.QueryContext(cctx, `
322 + SELECT u.id, u.username, u.email, u.password_hash, u.full_name, u.bio, u.avatar_url, u.location, u.website, u.is_admin, u.created_at,
323 + COUNT(r.id) AS repo_count
324 + FROM users u
325 + LEFT JOIN repositories r ON r.owner_id = u.id
326 + GROUP BY u.id
327 + ORDER BY u.created_at ASC
328 + `)
329 + if err != nil {
330 + return nil, fmt.Errorf("list users: %w", err)
331 + }
332 + defer rows.Close()
333 +
334 + var users []User
335 + for rows.Next() {
336 + var u User
337 + var isAdmin int
338 + if err := rows.Scan(&u.ID, &u.Username, &u.Email, &u.PasswordHash, &u.FullName, &u.Bio, &u.AvatarURL, &u.Location, &u.Website, &isAdmin, &u.CreatedAt, &u.RepoCount); err != nil {
339 + return nil, fmt.Errorf("scan user: %w", err)
340 + }
341 + u.IsAdmin = isAdmin == 1
342 + users = append(users, u)
343 + }
344 + return users, rows.Err()
345 +}
346 +
347 +func (s *Service) SetAdmin(ctx context.Context, userID int64, isAdmin bool) error {
348 + cctx, cancel := context.WithTimeout(ctx, 3*time.Second)
349 + defer cancel()
350 + val := 0
351 + if isAdmin {
352 + val = 1
353 + }
354 + _, err := s.db.ExecContext(cctx, `UPDATE users SET is_admin = ? WHERE id = ?`, val, userID)
355 + return err
356 +}
357 +
358 +func (s *Service) scanUser(row *sql.Row) (*User, error) {
359 + var u User
360 + var isAdmin int
361 + err := row.Scan(&u.ID, &u.Username, &u.Email, &u.PasswordHash, &u.FullName, &u.Bio, &u.AvatarURL, &u.Location, &u.Website, &isAdmin, &u.CreatedAt)
362 + if err != nil {
363 + if errors.Is(err, sql.ErrNoRows) {
364 + return nil, ErrUserNotFound
365 + }
366 + return nil, fmt.Errorf("scan user: %w", err)
367 + }
368 + u.IsAdmin = isAdmin == 1
369 + return &u, nil
370 +}
internal/user/user_test.go
+76 -0
... ... @@ -0,0 +1,76 @@
1 +package user
2 +
3 +import (
4 + "context"
5 + "errors"
6 + "path/filepath"
7 + "testing"
8 +
9 + "polar/internal/db"
10 +)
11 +
12 +func TestValidateUsername(t *testing.T) {
13 + valid := []string{"alice", "rin", "dev_01", "git-user-99", "ab"}
14 + for _, u := range valid {
15 + if err := ValidateUsername(u); err != nil {
16 + t.Errorf("expected username %q to be valid, got %v", u, err)
17 + }
18 + }
19 +
20 + invalid := []string{
21 + "", "a", "-alice", "alice-", "alice..dev", "../etc", "foo/bar",
22 + `foo\bar`, "repo.git", "admin", "login", "register", "settings",
23 + "_ui", "healthz", "explore", "alice--user",
24 + }
25 + for _, u := range invalid {
26 + if err := ValidateUsername(u); err == nil {
27 + t.Errorf("expected username %q to be rejected", u)
28 + }
29 + }
30 +}
31 +
32 +func TestFirstUserAdminAndRegistrationToggle(t *testing.T) {
33 + ctx := context.Background()
34 + database, err := db.Open(ctx, filepath.Join(t.TempDir(), "users.db"), true)
35 + if err != nil {
36 + t.Fatalf("open db: %v", err)
37 + }
38 + defer database.Close()
39 +
40 + svc := NewService(database)
41 +
42 + // First user becomes admin even if regEnabled is false
43 + first, err := svc.Register(ctx, "alice", "alice@example.com", "supersecret123", false)
44 + if err != nil {
45 + t.Fatalf("Register first user failed: %v", err)
46 + }
47 + if !first.IsAdmin {
48 + t.Fatalf("expected first registered user to be admin")
49 + }
50 +
51 + // Second user when regEnabled is false must fail
52 + _, err = svc.Register(ctx, "bob", "bob@example.com", "supersecret123", false)
53 + if !errors.Is(err, ErrRegistrationDisabled) {
54 + t.Fatalf("expected ErrRegistrationDisabled, got %v", err)
55 + }
56 +
57 + // Second user when regEnabled is true succeeds and is NOT admin
58 + second, err := svc.Register(ctx, "bob", "bob@example.com", "supersecret123", true)
59 + if err != nil {
60 + t.Fatalf("Register second user failed: %v", err)
61 + }
62 + if second.IsAdmin {
63 + t.Fatalf("expected second user NOT to be admin")
64 + }
65 +
66 + // Authenticate by username and email
67 + if _, err := svc.Authenticate(ctx, "alice", "supersecret123"); err != nil {
68 + t.Fatalf("Authenticate by username failed: %v", err)
69 + }
70 + if _, err := svc.Authenticate(ctx, "ALICE@example.com", "supersecret123"); err != nil {
71 + t.Fatalf("Authenticate by email failed: %v", err)
72 + }
73 + if _, err := svc.Authenticate(ctx, "alice", "wrongpassword"); err == nil {
74 + t.Fatalf("expected error for wrong password")
75 + }
76 +}
internal/web/handlers/activity.go
+31 -0
... ... @@ -0,0 +1,31 @@
1 +package handlers
2 +
3 +import (
4 + "github.com/gofiber/fiber/v2"
5 +
6 + "polar/internal/web/middleware"
7 +)
8 +
9 +func (h *Handler) RepoActivityPage(c *fiber.Ctx) error {
10 + r, diskPath, err := h.loadAuthorizedRepo(c, false)
11 + if err != nil {
12 + return nil
13 + }
14 + if !r.EnableActivity {
15 + return h.renderErrorT(c, fiber.StatusNotFound, "err.not_found", "err.activity_disabled")
16 + }
17 +
18 + items, stats, _ := h.repoSvc.GetRepoActivity(c.UserContext(), r, diskPath)
19 +
20 + viewer := middleware.CurrentUser(c)
21 + data := h.baseData(c, h.tr(c, "activity.title")+" · "+r.OwnerUsername+"/"+r.Name)
22 + data["Repo"] = r
23 + data["Ref"] = r.DefaultBranch
24 + data["ActiveTab"] = "activity"
25 + data["CanWrite"] = h.repoSvc.CanWrite(c.UserContext(), r, viewer)
26 + data["CloneURL"] = h.cloneURL(c, r.OwnerUsername, r.Name)
27 + data["Items"] = items
28 + data["Stats"] = stats
29 +
30 + return h.render(c, fiber.StatusOK, "activity", data)
31 +}
internal/web/handlers/auth.go
+273 -0
... ... @@ -0,0 +1,273 @@
1 +package handlers
2 +
3 +import (
4 + "encoding/base64"
5 + "strconv"
6 + "strings"
7 +
8 + "polar/internal/auth"
9 + "polar/internal/i18n"
10 + "polar/internal/web/middleware"
11 +
12 + "github.com/gofiber/fiber/v2"
13 +)
14 +
15 +func (h *Handler) LoginPage(c *fiber.Ctx) error {
16 + if middleware.CurrentUser(c) != nil {
17 + return c.Redirect("/repos", fiber.StatusSeeOther)
18 + }
19 + lang, _ := c.Locals("lang").(i18n.Lang)
20 + data := h.baseData(c, i18n.T(lang, "nav.login"))
21 + data["Next"] = safeNextPath(c.Query("next"))
22 + return h.render(c, fiber.StatusOK, "login", data)
23 +}
24 +
25 +func (h *Handler) LoginSubmit(c *fiber.Ctx) error {
26 + lang, _ := c.Locals("lang").(i18n.Lang)
27 + login := strings.TrimSpace(c.FormValue("login"))
28 + password := c.FormValue("password")
29 +
30 + u, err := h.userSvc.Authenticate(c.UserContext(), login, password)
31 + if err != nil {
32 + data := h.baseData(c, i18n.T(lang, "nav.login"))
33 + data["FormLogin"] = login
34 + data["Next"] = safeNextPath(c.FormValue("next"))
35 + data["Error"] = i18n.T(lang, "auth.invalid_creds")
36 + return h.render(c, fiber.StatusUnauthorized, "login", data)
37 + }
38 +
39 + sess, err := h.authSvc.CreateSession(c.UserContext(), u.ID)
40 + if err != nil {
41 + h.logger.Error("create session failed", "err", err)
42 + return h.renderErrorT(c, fiber.StatusInternalServerError, "err.session_error", "err.session_create")
43 + }
44 +
45 + c.Cookie(&fiber.Cookie{
46 + Name: middleware.SessionCookieName,
47 + Value: sess.ID,
48 + Path: "/",
49 + Expires: sess.ExpiresAt,
50 + HTTPOnly: true,
51 + SameSite: "Lax",
52 + })
53 +
54 + if next := safeNextPath(c.FormValue("next")); next != "" {
55 + return c.Redirect(next, fiber.StatusSeeOther)
56 + }
57 + return c.Redirect("/repos", fiber.StatusSeeOther)
58 +}
59 +
60 +// safeNextPath returns a same-site path for post-login redirects.
61 +func safeNextPath(next string) string {
62 + next = strings.TrimSpace(next)
63 + if next == "" || !strings.HasPrefix(next, "/") || strings.HasPrefix(next, "//") || strings.HasPrefix(next, "/\\") {
64 + return ""
65 + }
66 + return next
67 +}
68 +
69 +func (h *Handler) RegisterPage(c *fiber.Ctx) error {
70 + if middleware.CurrentUser(c) != nil {
71 + return c.Redirect("/repos", fiber.StatusSeeOther)
72 + }
73 + lang, _ := c.Locals("lang").(i18n.Lang)
74 + data := h.baseData(c, i18n.T(lang, "nav.register"))
75 + return h.render(c, fiber.StatusOK, "register", data)
76 +}
77 +
78 +func (h *Handler) RegisterSubmit(c *fiber.Ctx) error {
79 + lang, _ := c.Locals("lang").(i18n.Lang)
80 + username := strings.TrimSpace(c.FormValue("username"))
81 + email := strings.TrimSpace(c.FormValue("email"))
82 + password := c.FormValue("password")
83 +
84 + regAllowed := h.isRegistrationAllowed(c)
85 + u, err := h.userSvc.Register(c.UserContext(), username, email, password, regAllowed)
86 + if err != nil {
87 + data := h.baseData(c, i18n.T(lang, "nav.register"))
88 + data["FormUsername"] = username
89 + data["FormEmail"] = email
90 + data["Error"] = err.Error()
91 + return h.render(c, fiber.StatusBadRequest, "register", data)
92 + }
93 +
94 + sess, err := h.authSvc.CreateSession(c.UserContext(), u.ID)
95 + if err != nil {
96 + h.logger.Error("create session after register failed", "err", err)
97 + return c.Redirect("/login", fiber.StatusSeeOther)
98 + }
99 +
100 + c.Cookie(&fiber.Cookie{
101 + Name: middleware.SessionCookieName,
102 + Value: sess.ID,
103 + Path: "/",
104 + Expires: sess.ExpiresAt,
105 + HTTPOnly: true,
106 + SameSite: "Lax",
107 + })
108 +
109 + h.setFlashT(c, "flash.welcome", u.Username)
110 + return c.Redirect("/repos", fiber.StatusSeeOther)
111 +}
112 +
113 +func (h *Handler) LogoutSubmit(c *fiber.Ctx) error {
114 + sessID := c.Cookies(middleware.SessionCookieName)
115 + if sessID != "" {
116 + _ = h.authSvc.DeleteSession(c.UserContext(), sessID)
117 + }
118 + c.ClearCookie(middleware.SessionCookieName)
119 + return c.Redirect("/", fiber.StatusSeeOther)
120 +}
121 +
122 +func (h *Handler) SettingsPage(c *fiber.Ctx) error {
123 + u := middleware.CurrentUser(c)
124 + lang, _ := c.Locals("lang").(i18n.Lang)
125 + data := h.baseData(c, i18n.T(lang, "settings.title"))
126 +
127 + tokens, err := h.authSvc.ListTokens(c.UserContext(), u.ID)
128 + if err != nil {
129 + h.logger.Error("list tokens failed", "err", err)
130 + }
131 + data["Tokens"] = tokens
132 +
133 + newToken := c.Cookies("polar_new_token")
134 + if newToken != "" {
135 + c.ClearCookie("polar_new_token")
136 + data["NewRawToken"] = newToken
137 + }
138 +
139 + return h.render(c, fiber.StatusOK, "settings", data)
140 +}
141 +
142 +func (h *Handler) UpdateProfileSubmit(c *fiber.Ctx) error {
143 + u := middleware.CurrentUser(c)
144 + email := c.FormValue("email")
145 + fullName := c.FormValue("full_name")
146 + bio := c.FormValue("bio")
147 + location := c.FormValue("location")
148 + website := c.FormValue("website")
149 +
150 + if err := h.userSvc.UpdateProfileDetails(c.UserContext(), u.ID, email, fullName, bio, location, website); err != nil {
151 + lang, _ := c.Locals("lang").(i18n.Lang)
152 + data := h.baseData(c, i18n.T(lang, "settings.title"))
153 + tokens, _ := h.authSvc.ListTokens(c.UserContext(), u.ID)
154 + data["Tokens"] = tokens
155 + data["Error"] = err.Error()
156 + return h.render(c, fiber.StatusBadRequest, "settings", data)
157 + }
158 +
159 + if c.FormValue("remove_avatar") == "true" {
160 + _ = h.userSvc.UpdateAvatar(c.UserContext(), u.ID, "")
161 + } else if avatarData := strings.TrimSpace(c.FormValue("avatar_data")); avatarData != "" && strings.HasPrefix(avatarData, "data:image/") {
162 + _ = h.userSvc.UpdateAvatar(c.UserContext(), u.ID, avatarData)
163 + } else if file, err := c.FormFile("avatar_file"); err == nil && file != nil && file.Size > 0 && file.Size <= 2*1024*1024 {
164 + if f, err := file.Open(); err == nil {
165 + defer f.Close()
166 + buf := make([]byte, file.Size)
167 + if _, err := f.Read(buf); err == nil {
168 + mime := file.Header.Get("Content-Type")
169 + if mime == "" {
170 + mime = "image/png"
171 + }
172 + dataURI := "data:" + mime + ";base64," + base64.StdEncoding.EncodeToString(buf)
173 + _ = h.userSvc.UpdateAvatar(c.UserContext(), u.ID, dataURI)
174 + }
175 + }
176 + }
177 +
178 + h.setFlashT(c, "flash.profile_updated")
179 + return c.Redirect("/settings", fiber.StatusSeeOther)
180 +}
181 +
182 +func (h *Handler) UpdatePasswordSubmit(c *fiber.Ctx) error {
183 + u := middleware.CurrentUser(c)
184 + currentPwd := c.FormValue("current_password")
185 + newPwd := c.FormValue("new_password")
186 +
187 + if err := h.userSvc.UpdatePassword(c.UserContext(), u.ID, currentPwd, newPwd); err != nil {
188 + lang, _ := c.Locals("lang").(i18n.Lang)
189 + data := h.baseData(c, i18n.T(lang, "settings.title"))
190 + tokens, _ := h.authSvc.ListTokens(c.UserContext(), u.ID)
191 + data["Tokens"] = tokens
192 + data["Error"] = err.Error()
193 + return h.render(c, fiber.StatusBadRequest, "settings", data)
194 + }
195 +
196 + h.setFlashT(c, "flash.password_updated")
197 + return c.Redirect("/settings", fiber.StatusSeeOther)
198 +}
199 +
200 +func (h *Handler) CreateTokenSubmit(c *fiber.Ctx) error {
201 + u := middleware.CurrentUser(c)
202 + name := c.FormValue("name")
203 +
204 + rawToken, _, err := h.authSvc.CreateToken(c.UserContext(), u.ID, name)
205 + if err != nil {
206 + lang, _ := c.Locals("lang").(i18n.Lang)
207 + data := h.baseData(c, i18n.T(lang, "settings.title"))
208 + tokens, _ := h.authSvc.ListTokens(c.UserContext(), u.ID)
209 + data["Tokens"] = tokens
210 + data["Error"] = err.Error()
211 + return h.render(c, fiber.StatusBadRequest, "settings", data)
212 + }
213 +
214 + c.Cookie(&fiber.Cookie{
215 + Name: "polar_new_token",
216 + Value: rawToken,
217 + Path: "/settings",
218 + MaxAge: 60,
219 + HTTPOnly: true,
220 + SameSite: "Lax",
221 + })
222 + return c.Redirect("/settings#tokens", fiber.StatusSeeOther)
223 +}
224 +
225 +func (h *Handler) RevokeTokenSubmit(c *fiber.Ctx) error {
226 + u := middleware.CurrentUser(c)
227 + tokenID, err := strconv.ParseInt(c.Params("id"), 10, 64)
228 + if err != nil {
229 + return c.Redirect("/settings#tokens", fiber.StatusSeeOther)
230 + }
231 + _ = h.authSvc.RevokeToken(c.UserContext(), u.ID, tokenID)
232 + h.setFlashT(c, "flash.token_revoked")
233 + return c.Redirect("/settings#tokens", fiber.StatusSeeOther)
234 +}
235 +
236 +func (h *Handler) AdminPage(c *fiber.Ctx) error {
237 + lang, _ := c.Locals("lang").(i18n.Lang)
238 + data := h.baseData(c, i18n.T(lang, "admin.title"))
239 + users, err := h.userSvc.ListAll(c.UserContext())
240 + if err != nil {
241 + h.logger.Error("list users failed", "err", err)
242 + }
243 + data["Users"] = users
244 + return h.render(c, fiber.StatusOK, "admin", data)
245 +}
246 +
247 +func (h *Handler) AdminSettingsSubmit(c *fiber.Ctx) error {
248 + key := c.FormValue("setting_key")
249 + val := c.FormValue("setting_val")
250 +
251 + // Fallback for legacy registration_enabled direct form
252 + if key == "" {
253 + if rVal := c.FormValue("registration_enabled"); rVal != "" {
254 + key = "registration_enabled"
255 + val = rVal
256 + }
257 + }
258 +
259 + if key == "" {
260 + return c.Redirect("/admin", fiber.StatusSeeOther)
261 + }
262 +
263 + enabled := val == "true" || val == "1" || val == "on"
264 + if err := h.db.SetBoolSetting(c.UserContext(), key, enabled); err != nil {
265 + h.logger.Error("update admin setting failed", "key", key, "err", err)
266 + return h.renderErrorT(c, fiber.StatusInternalServerError, "err.settings_error", "err.settings_save")
267 + }
268 +
269 + h.setFlashT(c, "flash.settings_updated")
270 + return c.Redirect("/admin", fiber.StatusSeeOther)
271 +}
272 +
273 +var _ = auth.ErrInvalidCredentials
internal/web/handlers/collaborators.go
+55 -0
... ... @@ -0,0 +1,55 @@
1 +package handlers
2 +
3 +import (
4 + "fmt"
5 + "strconv"
6 + "strings"
7 +
8 + "github.com/gofiber/fiber/v2"
9 +
10 + "polar/internal/web/middleware"
11 +)
12 +
13 +// RepoCollaboratorAddSubmit grants a user access to the repository.
14 +func (h *Handler) RepoCollaboratorAddSubmit(c *fiber.Ctx) error {
15 + r, _, err := h.loadAuthorizedRepo(c, true)
16 + if err != nil {
17 + return nil
18 + }
19 + viewer := middleware.CurrentUser(c)
20 + if viewer == nil || (viewer.ID != r.OwnerID && !viewer.IsAdmin) {
21 + return h.renderErrorT(c, fiber.StatusForbidden, "err.forbidden", "err.collab_forbidden")
22 + }
23 +
24 + username := strings.TrimSpace(c.FormValue("username"))
25 + role := strings.TrimSpace(c.FormValue("role"))
26 +
27 + if err := h.repoSvc.AddCollaborator(c.UserContext(), r, username, role); err != nil {
28 + h.setFlashT(c, "flash.collab_failed", err.Error())
29 + } else {
30 + h.setFlashT(c, "flash.collab_added", username)
31 + }
32 + return c.Redirect(fmt.Sprintf("/%s/%s/settings#collaborators", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
33 +}
34 +
35 +// RepoCollaboratorRemoveSubmit revokes a user's access to the repository.
36 +func (h *Handler) RepoCollaboratorRemoveSubmit(c *fiber.Ctx) error {
37 + r, _, err := h.loadAuthorizedRepo(c, true)
38 + if err != nil {
39 + return nil
40 + }
41 + viewer := middleware.CurrentUser(c)
42 + if viewer == nil || (viewer.ID != r.OwnerID && !viewer.IsAdmin) {
43 + return h.renderErrorT(c, fiber.StatusForbidden, "err.forbidden", "err.collab_forbidden")
44 + }
45 +
46 + userID, _ := strconv.ParseInt(strings.TrimSpace(c.FormValue("user_id")), 10, 64)
47 + if userID > 0 {
48 + if err := h.repoSvc.RemoveCollaborator(c.UserContext(), r.ID, userID); err != nil {
49 + h.setFlashT(c, "flash.collab_failed", err.Error())
50 + } else {
51 + h.setFlashT(c, "flash.collab_removed")
52 + }
53 + }
54 + return c.Redirect(fmt.Sprintf("/%s/%s/settings#collaborators", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
55 +}
internal/web/handlers/device.go
+171 -0
... ... @@ -0,0 +1,171 @@
1 +package handlers
2 +
3 +import (
4 + "strings"
5 + "time"
6 +
7 + "github.com/gofiber/fiber/v2"
8 +
9 + "polar/internal/auth"
10 + "polar/internal/web/middleware"
11 +)
12 +
13 +func (h *Handler) siteURL(c *fiber.Ctx) string {
14 + base := strings.TrimRight(h.cfg.Server.BaseURL, "/")
15 + if base == "" || strings.Contains(base, "localhost:3000") {
16 + if reqBase := c.BaseURL(); reqBase != "" {
17 + base = strings.TrimRight(reqBase, "/")
18 + }
19 + }
20 + return base
21 +}
22 +
23 +// DeviceCodeAPI starts a device authorization grant (RFC 8628).
24 +// POST /api/v1/device/code
25 +func (h *Handler) DeviceCodeAPI(c *fiber.Ctx) error {
26 + clientID := strings.TrimSpace(c.FormValue("client_id"))
27 + if clientID == "" {
28 + var payload struct {
29 + ClientID string `json:"client_id"`
30 + }
31 + if err := c.BodyParser(&payload); err == nil {
32 + clientID = strings.TrimSpace(payload.ClientID)
33 + }
34 + }
35 + if clientID == "" {
36 + clientID = "polar-git"
37 + }
38 +
39 + dc, err := h.authSvc.CreateDeviceCode(c.UserContext(), clientID)
40 + if err != nil {
41 + return c.Status(fiber.StatusInternalServerError).JSON(fiber.Map{"error": "server_error"})
42 + }
43 +
44 + base := h.siteURL(c)
45 + return c.JSON(fiber.Map{
46 + "device_code": dc.Code,
47 + "user_code": dc.UserCode,
48 + "verification_uri": base + "/login/device",
49 + "verification_uri_complete": base + "/login/device?user_code=" + dc.UserCode,
50 + "expires_in": int(auth.DeviceCodeTTL.Seconds()),
51 + "interval": auth.DeviceCodeInterval,
52 + })
53 +}
54 +
55 +// DeviceTokenAPI exchanges an approved device code for an access token.
56 +// POST /api/v1/device/token
57 +func (h *Handler) DeviceTokenAPI(c *fiber.Ctx) error {
58 + deviceCode := strings.TrimSpace(c.FormValue("device_code"))
59 + if deviceCode == "" {
60 + var payload struct {
61 + DeviceCode string `json:"device_code"`
62 + }
63 + if err := c.BodyParser(&payload); err == nil {
64 + deviceCode = strings.TrimSpace(payload.DeviceCode)
65 + }
66 + }
67 +
68 + dc, err := h.authSvc.PollDeviceCode(c.UserContext(), deviceCode)
69 + if err != nil {
70 + return c.Status(fiber.StatusBadRequest).JSON(fiber.Map{"error": "invalid_grant"})
71 + }
72 +
73 + switch dc.Status {
74 + case auth.DeviceStatusPending:
75 + return c.Status(fiber.StatusTooManyRequests).JSON(fiber.Map{"error": "authorization_pending"})
76 + case auth.DeviceStatusDenied:
77 + return c.Status(fiber.StatusBadRequest).JSON(fiber.Map{"error": "access_denied"})
78 + case auth.DeviceStatusApproved:
79 + if dc.UserID == nil {
80 + return c.Status(fiber.StatusBadRequest).JSON(fiber.Map{"error": "invalid_grant"})
81 + }
82 + name := "Device flow"
83 + if dc.ClientID != "" {
84 + name = "Device flow (" + dc.ClientID + ")"
85 + }
86 + raw, _, err := h.authSvc.CreateToken(c.UserContext(), *dc.UserID, name)
87 + if err != nil {
88 + return c.Status(fiber.StatusInternalServerError).JSON(fiber.Map{"error": "server_error"})
89 + }
90 + h.authSvc.ConsumeDeviceCode(c.UserContext(), dc.Code)
91 + username := ""
92 + if u, err := h.userSvc.GetByID(c.UserContext(), *dc.UserID); err == nil && u != nil {
93 + username = u.Username
94 + }
95 + return c.JSON(fiber.Map{
96 + "access_token": raw,
97 + "token_type": "bearer",
98 + "username": username,
99 + "scope": "git",
100 + })
101 + default:
102 + return c.Status(fiber.StatusBadRequest).JSON(fiber.Map{"error": "expired_token"})
103 + }
104 +}
105 +
106 +// DeviceVerifyPage renders the device approval page.
107 +// GET /login/device
108 +func (h *Handler) DeviceVerifyPage(c *fiber.Ctx) error {
109 + viewer := middleware.CurrentUser(c)
110 + userCode := auth.NormalizeUserCode(c.Query("user_code"))
111 +
112 + data := h.baseData(c, h.tr(c, "device.title"))
113 + data["UserCode"] = userCode
114 + data["SignedIn"] = viewer != nil
115 +
116 + if userCode != "" && len(userCode) == 9 {
117 + dc, err := h.authSvc.GetDeviceCodeByUserCode(c.UserContext(), userCode)
118 + switch {
119 + case err != nil:
120 + data["CodeError"] = h.tr(c, "device.code_unknown")
121 + case dc.Status == auth.DeviceStatusApproved:
122 + data["CodeApproved"] = true
123 + case dc.Status == auth.DeviceStatusDenied:
124 + data["CodeDenied"] = true
125 + case dc.Status != auth.DeviceStatusPending || time.Now().UTC().After(dc.ExpiresAt):
126 + data["CodeError"] = h.tr(c, "device.code_used")
127 + default:
128 + data["CodePending"] = true
129 + if dc.ClientID != "" {
130 + data["ClientName"] = dc.ClientID
131 + }
132 + }
133 + }
134 +
135 + return h.render(c, fiber.StatusOK, "device", data)
136 +}
137 +
138 +// DeviceVerifySubmit approves or denies a pending grant.
139 +// POST /login/device
140 +func (h *Handler) DeviceVerifySubmit(c *fiber.Ctx) error {
141 + viewer := middleware.CurrentUser(c)
142 + if viewer == nil {
143 + return c.Redirect("/login?next=/login/device", fiber.StatusSeeOther)
144 + }
145 +
146 + userCode := auth.NormalizeUserCode(c.FormValue("user_code"))
147 + action := strings.TrimSpace(c.FormValue("action"))
148 + redirect := "/login/device?user_code=" + userCode
149 +
150 + if userCode == "" {
151 + h.setFlashT(c, "flash.device_code_required")
152 + return c.Redirect("/login/device", fiber.StatusSeeOther)
153 + }
154 +
155 + status := auth.DeviceStatusApproved
156 + if action == "deny" {
157 + status = auth.DeviceStatusDenied
158 + }
159 +
160 + if err := h.authSvc.SetDeviceCodeStatus(c.UserContext(), userCode, viewer.ID, status); err != nil {
161 + h.setFlashT(c, "flash.device_code_invalid")
162 + return c.Redirect("/login/device", fiber.StatusSeeOther)
163 + }
164 +
165 + if status == auth.DeviceStatusApproved {
166 + h.setFlashT(c, "flash.device_approved")
167 + } else {
168 + h.setFlashT(c, "flash.device_denied")
169 + }
170 + return c.Redirect(redirect, fiber.StatusSeeOther)
171 +}
internal/web/handlers/forks.go
+77 -0
... ... @@ -0,0 +1,77 @@
1 +package handlers
2 +
3 +import (
4 + "fmt"
5 + "strings"
6 +
7 + "github.com/gofiber/fiber/v2"
8 +
9 + "polar/internal/web/middleware"
10 +)
11 +
12 +// RepoForkSubmit creates a fork of the repository for the current user.
13 +func (h *Handler) RepoForkSubmit(c *fiber.Ctx) error {
14 + r, _, err := h.loadAuthorizedRepo(c, false)
15 + if err != nil {
16 + return nil
17 + }
18 +
19 + u := middleware.CurrentUser(c)
20 + if u == nil {
21 + return c.Redirect("/login", fiber.StatusSeeOther)
22 + }
23 +
24 + if u.ID == r.OwnerID {
25 + h.setFlashT(c, "flash.fork_self")
26 + return c.Redirect(fmt.Sprintf("/%s/%s", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
27 + }
28 +
29 + if existing, _ := h.repoSvc.FindForkByOwner(c.UserContext(), r.ID, u.ID); existing != nil {
30 + h.setFlashT(c, "flash.fork_exists")
31 + return c.Redirect(fmt.Sprintf("/%s/%s", existing.OwnerUsername, existing.Name), fiber.StatusSeeOther)
32 + }
33 +
34 + name := strings.TrimSpace(c.FormValue("name"))
35 + newFork := r
36 + if r.ForkedFromRepoID != nil {
37 + if parent, parentErr := h.repoSvc.GetByID(c.UserContext(), *r.ForkedFromRepoID); parentErr == nil && parent != nil {
38 + newFork = parent
39 + }
40 + }
41 +
42 + fork, err := h.repoSvc.Fork(c.UserContext(), newFork, u, name)
43 + if err != nil {
44 + h.setFlashT(c, "flash.fork_failed", err.Error())
45 + return c.Redirect(fmt.Sprintf("/%s/%s", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
46 + }
47 +
48 + h.setFlashT(c, "flash.fork_created")
49 + return c.Redirect(fmt.Sprintf("/%s/%s", fork.OwnerUsername, fork.Name), fiber.StatusSeeOther)
50 +}
51 +
52 +// RepoForksPage lists all forks of the repository.
53 +func (h *Handler) RepoForksPage(c *fiber.Ctx) error {
54 + r, _, err := h.loadAuthorizedRepo(c, false)
55 + if err != nil {
56 + return nil
57 + }
58 +
59 + forks, _ := h.repoSvc.ListForks(c.UserContext(), r.ID, 100)
60 +
61 + var upstream map[string]string
62 + if r.ForkedFromRepoID != nil {
63 + upstream = map[string]string{"Owner": r.ForkedFromOwner, "Name": r.ForkedFromName}
64 + }
65 +
66 + viewer := middleware.CurrentUser(c)
67 + data := h.baseData(c, h.tr(c, "forks.title")+" · "+r.OwnerUsername+"/"+r.Name)
68 + data["Repo"] = r
69 + data["Ref"] = r.DefaultBranch
70 + data["ActiveTab"] = "code"
71 + data["CanWrite"] = h.repoSvc.CanWrite(c.UserContext(), r, viewer)
72 + data["CloneURL"] = h.cloneURL(c, r.OwnerUsername, r.Name)
73 + data["Forks"] = forks
74 + data["Upstream"] = upstream
75 +
76 + return h.render(c, fiber.StatusOK, "forks", data)
77 +}
internal/web/handlers/git_http.go
+170 -0
... ... @@ -0,0 +1,170 @@
1 +package handlers
2 +
3 +import (
4 + "bytes"
5 + "compress/gzip"
6 + "encoding/base64"
7 + "io"
8 + "strings"
9 +
10 + "polar/internal/git"
11 + "polar/internal/repo"
12 + "polar/internal/user"
13 +
14 + "github.com/gofiber/fiber/v2"
15 +)
16 +
17 +func (h *Handler) authenticateGitBasic(c *fiber.Ctx) *user.User {
18 + authHeader := c.Get(fiber.HeaderAuthorization)
19 + if !strings.HasPrefix(authHeader, "Basic ") {
20 + return nil
21 + }
22 + decoded, err := base64.StdEncoding.DecodeString(strings.TrimPrefix(authHeader, "Basic "))
23 + if err != nil {
24 + return nil
25 + }
26 + parts := strings.SplitN(string(decoded), ":", 2)
27 + if len(parts) != 2 {
28 + return nil
29 + }
30 + username := strings.TrimSpace(parts[0])
31 + secret := strings.TrimSpace(parts[1])
32 + if secret == "" {
33 + return nil
34 + }
35 +
36 + // 1. Personal Access Token
37 + if strings.HasPrefix(secret, "polar_") {
38 + userID, err := h.authSvc.VerifyToken(c.UserContext(), secret)
39 + if err != nil {
40 + return nil
41 + }
42 + u, err := h.userSvc.GetByID(c.UserContext(), userID)
43 + if err != nil {
44 + return nil
45 + }
46 + if username != "" && !strings.EqualFold(u.Username, username) && !strings.EqualFold(u.Email, username) {
47 + return nil
48 + }
49 + return u
50 + }
51 +
52 + // 2. Fallback to username + password if provided
53 + if username != "" {
54 + if u, err := h.userSvc.Authenticate(c.UserContext(), username, secret); err == nil {
55 + return u
56 + }
57 + }
58 + return nil
59 +}
60 +
61 +func requestBasicAuth(c *fiber.Ctx) error {
62 + c.Set(fiber.HeaderWWWAuthenticate, `Basic realm="Polar Git"`)
63 + return c.Status(fiber.StatusUnauthorized).SendString("Authentication required")
64 +}
65 +
66 +func (h *Handler) authorizeGitRequest(c *fiber.Ctx, service string) (*repo.Repository, string, error) {
67 + owner := c.Params("owner")
68 + repoName := strings.TrimSuffix(c.Params("repo"), ".git")
69 +
70 + r, err := h.repoSvc.GetByOwnerAndName(c.UserContext(), owner, repoName)
71 + if err != nil {
72 + // If anonymous request to non-existent or private repo, prompt Basic Auth first so git clients send credentials
73 + if c.Get(fiber.HeaderAuthorization) == "" {
74 + return nil, "", requestBasicAuth(c)
75 + }
76 + return nil, "", c.Status(fiber.StatusNotFound).SendString("Repository not found")
77 + }
78 +
79 + authedUser := h.authenticateGitBasic(c)
80 +
81 + switch service {
82 + case "git-upload-pack":
83 + if r.IsPrivate {
84 + if authedUser == nil {
85 + return nil, "", requestBasicAuth(c)
86 + }
87 + if !h.repoSvc.CanRead(c.UserContext(), r, authedUser) {
88 + return nil, "", c.Status(fiber.StatusForbidden).SendString("Forbidden")
89 + }
90 + }
91 + case "git-receive-pack":
92 + if authedUser == nil {
93 + return nil, "", requestBasicAuth(c)
94 + }
95 + if !h.repoSvc.CanWrite(c.UserContext(), r, authedUser) {
96 + return nil, "", c.Status(fiber.StatusForbidden).SendString("Forbidden")
97 + }
98 + default:
99 + return nil, "", c.Status(fiber.StatusBadRequest).SendString("Unsupported git service")
100 + }
101 +
102 + diskPath, err := h.repoSvc.DiskPath(r.OwnerUsername, r.Name)
103 + if err != nil {
104 + return nil, "", c.Status(fiber.StatusBadRequest).SendString("Invalid repository path")
105 + }
106 +
107 + return r, diskPath, nil
108 +}
109 +
110 +func (h *Handler) GitInfoRefs(c *fiber.Ctx) error {
111 + service := c.Query("service")
112 + if service != "git-upload-pack" && service != "git-receive-pack" {
113 + return c.Status(fiber.StatusBadRequest).SendString("Smart HTTP service parameter required")
114 + }
115 +
116 + _, diskPath, err := h.authorizeGitRequest(c, service)
117 + if err != nil || diskPath == "" {
118 + return err
119 + }
120 +
121 + var buf bytes.Buffer
122 + if err := git.AdvertiseRefs(c.UserContext(), diskPath, service, &buf); err != nil {
123 + h.logger.Error("git advertise-refs failed", "service", service, "err", err)
124 + return c.Status(fiber.StatusInternalServerError).SendString("Git advertise-refs error")
125 + }
126 +
127 + c.Set(fiber.HeaderContentType, "application/x-"+service+"-advertisement")
128 + c.Set(fiber.HeaderCacheControl, "no-cache, max-age=0, must-revalidate")
129 + c.Set("Pragma", "no-cache")
130 + return c.Status(fiber.StatusOK).Send(buf.Bytes())
131 +}
132 +
133 +func (h *Handler) GitUploadPack(c *fiber.Ctx) error {
134 + return h.handleGitServiceRPC(c, "git-upload-pack")
135 +}
136 +
137 +func (h *Handler) GitReceivePack(c *fiber.Ctx) error {
138 + return h.handleGitServiceRPC(c, "git-receive-pack")
139 +}
140 +
141 +func (h *Handler) handleGitServiceRPC(c *fiber.Ctx, service string) error {
142 + r, diskPath, err := h.authorizeGitRequest(c, service)
143 + if err != nil || diskPath == "" {
144 + return err
145 + }
146 +
147 + var bodyReader io.Reader = bytes.NewReader(c.Body())
148 + if strings.EqualFold(c.Get(fiber.HeaderContentEncoding), "gzip") {
149 + gz, err := gzip.NewReader(bodyReader)
150 + if err != nil {
151 + return c.Status(fiber.StatusBadRequest).SendString("Invalid gzip body")
152 + }
153 + defer gz.Close()
154 + bodyReader = gz
155 + }
156 +
157 + var out bytes.Buffer
158 + if err := git.ServiceRPC(c.UserContext(), diskPath, service, bodyReader, &out); err != nil {
159 + h.logger.Error("git service rpc failed", "service", service, "err", err)
160 + return c.Status(fiber.StatusInternalServerError).SendString("Git RPC error")
161 + }
162 +
163 + if service == "git-receive-pack" {
164 + h.repoSvc.TouchUpdatedAt(c.UserContext(), r.ID)
165 + }
166 +
167 + c.Set(fiber.HeaderContentType, "application/x-"+service+"-result")
168 + c.Set(fiber.HeaderCacheControl, "no-cache, max-age=0, must-revalidate")
169 + return c.Status(fiber.StatusOK).Send(out.Bytes())
170 +}
internal/web/handlers/handlers.go
+351 -0
... ... @@ -0,0 +1,351 @@
1 +package handlers
2 +
3 +import (
4 + "bytes"
5 + "fmt"
6 + "log/slog"
7 + "net/http"
8 + "strings"
9 + "time"
10 +
11 + "polar/internal/auth"
12 + "polar/internal/config"
13 + "polar/internal/db"
14 + "polar/internal/i18n"
15 + "polar/internal/repo"
16 + "polar/internal/user"
17 + "polar/internal/web/middleware"
18 + "polar/internal/web/static"
19 + "polar/internal/web/views"
20 +
21 + "github.com/gofiber/fiber/v2"
22 + "github.com/gofiber/fiber/v2/middleware/filesystem"
23 +)
24 +
25 +type Handler struct {
26 + cfg config.Config
27 + db *db.DB
28 + authSvc *auth.Service
29 + userSvc *user.Service
30 + repoSvc *repo.Service
31 + views *views.Engine
32 + logger *slog.Logger
33 +}
34 +
35 +func New(
36 + cfg config.Config,
37 + database *db.DB,
38 + authSvc *auth.Service,
39 + userSvc *user.Service,
40 + repoSvc *repo.Service,
41 + viewsEngine *views.Engine,
42 + logger *slog.Logger,
43 +) *Handler {
44 + return &Handler{
45 + cfg: cfg,
46 + db: database,
47 + authSvc: authSvc,
48 + userSvc: userSvc,
49 + repoSvc: repoSvc,
50 + views: viewsEngine,
51 + logger: logger,
52 + }
53 +}
54 +
55 +func (h *Handler) RegisterRoutes(app *fiber.App) {
56 + app.Use(middleware.RecoverAndLog(h.logger))
57 + app.Use(middleware.SecurityHeaders())
58 +
59 + app.Get("/healthz", h.Healthz)
60 +
61 + app.Use("/static", filesystem.New(filesystem.Config{
62 + Root: http.FS(static.FS),
63 + Browse: false,
64 + MaxAge: 0,
65 + }))
66 +
67 + app.Use(middleware.LocaleAndTheme(h.cfg.Landing.DefaultLang))
68 + app.Use(middleware.SessionAuth(h.authSvc, h.userSvc))
69 + app.Use(middleware.CSRFProtection())
70 +
71 + authLimiter := middleware.NewRateLimiter(20, time.Minute)
72 +
73 + // Public & Root routes
74 + app.Get("/", h.Home)
75 + app.Get("/explore", h.Explore)
76 +
77 + // Auth routes
78 + app.Get("/login", h.LoginPage)
79 + app.Post("/login", authLimiter.Handler(), h.LoginSubmit)
80 + app.Get("/register", h.RegisterPage)
81 + app.Post("/register", authLimiter.Handler(), h.RegisterSubmit)
82 + app.Post("/logout", h.LogoutSubmit)
83 + app.Get("/login/device", h.DeviceVerifyPage)
84 + app.Post("/login/device", h.DeviceVerifySubmit)
85 + app.Post("/api/v1/device/code", h.DeviceCodeAPI)
86 + app.Post("/api/v1/device/token", h.DeviceTokenAPI)
87 +
88 + // Authenticated user routes
89 + app.Get("/repos", middleware.RequireAuth(), h.MyRepos)
90 + app.Get("/new", middleware.RequireAuth(), h.NewRepoPage)
91 + app.Post("/new", middleware.RequireAuth(), h.NewRepoSubmit)
92 + app.Get("/settings", middleware.RequireAuth(), h.SettingsPage)
93 + app.Post("/settings/profile", middleware.RequireAuth(), h.UpdateProfileSubmit)
94 + app.Post("/settings/password", middleware.RequireAuth(), h.UpdatePasswordSubmit)
95 + app.Post("/settings/tokens", middleware.RequireAuth(), h.CreateTokenSubmit)
96 + app.Post("/settings/tokens/:id/revoke", middleware.RequireAuth(), h.RevokeTokenSubmit)
97 +
98 + // Admin routes
99 + app.Get("/admin", middleware.RequireAdmin(), h.AdminPage)
100 + app.Post("/admin/settings", middleware.RequireAdmin(), h.AdminSettingsSubmit)
101 +
102 + // Git Smart HTTP endpoints (supports both /:owner/:repo.git/* and /:owner/:repo/*)
103 + app.Get("/:owner/:repo/info/refs", h.GitInfoRefs)
104 + app.Post("/:owner/:repo/git-upload-pack", h.GitUploadPack)
105 + app.Post("/:owner/:repo/git-receive-pack", h.GitReceivePack)
106 +
107 + // Repository Web UI routes
108 + app.Get("/:owner/:repo/settings", middleware.RequireAuth(), h.RepoSettingsPage)
109 + app.Post("/:owner/:repo/settings", middleware.RequireAuth(), h.RepoSettingsSubmit)
110 + app.Post("/:owner/:repo/settings/rename", middleware.RequireAuth(), h.RepoRenameSubmit)
111 + app.Post("/:owner/:repo/settings/delete", middleware.RequireAuth(), h.RepoDeleteSubmit)
112 + app.Post("/:owner/:repo/settings/collaborators/add", middleware.RequireAuth(), h.RepoCollaboratorAddSubmit)
113 + app.Post("/:owner/:repo/settings/collaborators/remove", middleware.RequireAuth(), h.RepoCollaboratorRemoveSubmit)
114 +
115 + app.Get("/:owner/:repo/branches", h.RepoBranchesPage)
116 + app.Post("/:owner/:repo/branches", middleware.RequireAuth(), h.RepoCreateBranchSubmit)
117 + app.Post("/:owner/:repo/branches/delete", middleware.RequireAuth(), h.RepoDeleteBranchSubmit)
118 + app.Post("/:owner/:repo/tags", middleware.RequireAuth(), h.RepoCreateTagSubmit)
119 + app.Post("/:owner/:repo/tags/delete", middleware.RequireAuth(), h.RepoDeleteTagSubmit)
120 + app.Get("/:owner/:repo/archive/*", h.RepoArchiveZip)
121 +
122 + app.Post("/:owner/:repo/fork", middleware.RequireAuth(), h.RepoForkSubmit)
123 + app.Get("/:owner/:repo/forks", h.RepoForksPage)
124 +
125 + app.Get("/:owner/:repo/issues", h.RepoIssuesPage)
126 + app.Get("/:owner/:repo/issues/new", middleware.RequireAuth(), h.RepoNewIssuePage)
127 + app.Post("/:owner/:repo/issues/new", middleware.RequireAuth(), h.RepoNewIssueSubmit)
128 + app.Get("/:owner/:repo/issues/:number", h.RepoIssueDetailPage)
129 + app.Post("/:owner/:repo/issues/:number/comments", middleware.RequireAuth(), h.RepoIssueCommentSubmit)
130 + app.Post("/:owner/:repo/issues/:number/state", middleware.RequireAuth(), h.RepoIssueStateSubmit)
131 +
132 + // Pull Requests
133 + app.Get("/:owner/:repo/pulls", h.RepoPullsPage)
134 + app.Get("/:owner/:repo/pulls/new", middleware.RequireAuth(), h.RepoNewPullPage)
135 + app.Post("/:owner/:repo/pulls/new", middleware.RequireAuth(), h.RepoNewPullSubmit)
136 + app.Get("/:owner/:repo/pulls/:number", h.RepoPullDetailPage)
137 + app.Post("/:owner/:repo/pulls/:number/comments", middleware.RequireAuth(), h.RepoPullCommentSubmit)
138 + app.Post("/:owner/:repo/pulls/:number/state", middleware.RequireAuth(), h.RepoPullStateSubmit)
139 + app.Post("/:owner/:repo/pulls/:number/merge", middleware.RequireAuth(), h.RepoPullMergeSubmit)
140 + app.Post("/:owner/:repo/pulls/:number/review", middleware.RequireAuth(), h.RepoPullReviewSubmit)
141 +
142 + // Releases
143 + app.Get("/:owner/:repo/releases", h.RepoReleasesPage)
144 + app.Get("/:owner/:repo/releases/new", middleware.RequireAuth(), h.RepoNewReleasePage)
145 + app.Post("/:owner/:repo/releases/new", middleware.RequireAuth(), h.RepoNewReleaseSubmit)
146 + app.Post("/:owner/:repo/releases/:id/delete", middleware.RequireAuth(), h.RepoDeleteReleaseSubmit)
147 +
148 + // Activity
149 + app.Get("/:owner/:repo/activity", h.RepoActivityPage)
150 +
151 + app.Get("/:owner/:repo/commits/:ref", h.RepoCommitsPage)
152 + app.Get("/:owner/:repo/commit/:hash", h.RepoCommitDetailPage)
153 + app.Get("/:owner/:repo/tree/:ref/*", h.RepoTreePage)
154 + app.Get("/:owner/:repo/tree/:ref", h.RepoTreePage)
155 + app.Get("/:owner/:repo/blob/:ref/*", h.RepoBlobPage)
156 + app.Get("/:owner/:repo/raw/:ref/*", h.RepoRawBlob)
157 + app.Get("/:owner/:repo", h.RepoHomePage)
158 +
159 + // User profile page
160 + app.Get("/:username", h.UserProfilePage)
161 +}
162 +
163 +func (h *Handler) Healthz(c *fiber.Ctx) error {
164 + if err := h.db.PingContext(c.UserContext()); err != nil {
165 + return c.Status(fiber.StatusServiceUnavailable).JSON(fiber.Map{
166 + "status": "error",
167 + "db": "unreachable",
168 + })
169 + }
170 + return c.Status(fiber.StatusOK).JSON(fiber.Map{
171 + "status": "ok",
172 + "service": "polar",
173 + })
174 +}
175 +
176 +func (h *Handler) baseData(c *fiber.Ctx, title string) map[string]any {
177 + u := middleware.CurrentUser(c)
178 + lang := h.langOf(c)
179 + theme, _ := c.Locals("theme").(string)
180 + if theme == "" {
181 + theme = "system"
182 + }
183 + csrf, _ := c.Locals("csrf_token").(string)
184 +
185 + flash := c.Cookies("polar_flash")
186 + if flash != "" {
187 + c.ClearCookie("polar_flash")
188 + }
189 +
190 + ctx := c.UserContext()
191 + anonRead := h.db.IsAnonymousReadEnabled(ctx)
192 + var paletteRepos []repo.Repository
193 + if u != nil || anonRead {
194 + paletteRepos, _ = h.repoSvc.ListAccessible(ctx, u, 25)
195 + }
196 +
197 + data := map[string]any{
198 + "Title": title,
199 + "Lang": lang,
200 + "Theme": theme,
201 + "CSRFToken": csrf,
202 + "CurrentUser": u,
203 + "Flash": flash,
204 + "RegistrationEnabled": h.isRegistrationAllowed(c),
205 + "ExploreEnabled": h.db.IsExploreEnabled(ctx),
206 + "LandingEnabled": h.db.IsLandingEnabled(ctx, h.cfg.Landing.Enabled),
207 + "AnonymousReadEnabled": anonRead,
208 + "IssuesEnabled": h.db.IsIssuesEnabled(ctx),
209 + "PaletteRepos": paletteRepos,
210 + }
211 + if extra := h.repoNavData(c); extra != nil {
212 + for k, v := range extra {
213 + data[k] = v
214 + }
215 + }
216 + return data
217 +}
218 +
219 +// repoNavData enriches template data for /:owner/:repo routes with fork
220 +// navigation state used by the repository header.
221 +func (h *Handler) repoNavData(c *fiber.Ctx) map[string]any {
222 + owner, name := c.Params("owner"), strings.TrimSuffix(c.Params("repo"), ".git")
223 + if owner == "" || name == "" {
224 + return nil
225 + }
226 + ctx := c.UserContext()
227 + nr, err := h.repoSvc.GetByOwnerAndName(ctx, owner, name)
228 + if err != nil || nr == nil {
229 + return nil
230 + }
231 + u := middleware.CurrentUser(c)
232 + data := map[string]any{"NavRepo": nr}
233 + data["IsRepoOwner"] = u != nil && u.ID == nr.OwnerID
234 + if u != nil && u.ID != nr.OwnerID {
235 + if fork, ferr := h.repoSvc.FindForkByOwner(ctx, nr.ID, u.ID); ferr == nil && fork != nil {
236 + data["ViewerFork"] = fork
237 + }
238 + }
239 + return data
240 +}
241 +
242 +func (h *Handler) setFlash(c *fiber.Ctx, msg string) {
243 + c.Cookie(&fiber.Cookie{
244 + Name: "polar_flash",
245 + Value: msg,
246 + Path: "/",
247 + MaxAge: 30,
248 + HTTPOnly: true,
249 + SameSite: "Lax",
250 + })
251 +}
252 +
253 +// langOf resolves the active UI language for the current request.
254 +func (h *Handler) langOf(c *fiber.Ctx) i18n.Lang {
255 + lang, _ := c.Locals("lang").(i18n.Lang)
256 + if lang == "" {
257 + lang = i18n.Normalize(h.cfg.Landing.DefaultLang)
258 + }
259 + return lang
260 +}
261 +
262 +// tr translates key for the current request and formats it with args.
263 +func (h *Handler) tr(c *fiber.Ctx, key string, args ...any) string {
264 + return fmt.Sprintf(i18n.T(h.langOf(c), key), args...)
265 +}
266 +
267 +// setFlashT stores a localized flash message.
268 +func (h *Handler) setFlashT(c *fiber.Ctx, key string, args ...any) {
269 + h.setFlash(c, h.tr(c, key, args...))
270 +}
271 +
272 +// renderErrorT renders an error page with localized title and message.
273 +func (h *Handler) renderErrorT(c *fiber.Ctx, status int, titleKey, msgKey string, args ...any) error {
274 + return h.renderError(c, status, i18n.T(h.langOf(c), titleKey), h.tr(c, msgKey, args...))
275 +}
276 +
277 +func (h *Handler) isRegistrationAllowed(c *fiber.Ctx) bool {
278 + if cnt, err := h.userSvc.Count(c.UserContext()); err == nil && cnt == 0 {
279 + return true
280 + }
281 + return h.db.IsRegistrationEnabled(c.UserContext(), h.cfg.Auth.RegistrationEnabled)
282 +}
283 +
284 +func (h *Handler) render(c *fiber.Ctx, status int, page string, data map[string]any) error {
285 + var buf bytes.Buffer
286 + if err := h.views.Render(&buf, page, data); err != nil {
287 + h.logger.Error("render template failed", "page", page, "err", err)
288 + return c.Status(fiber.StatusInternalServerError).SendString("Template render error")
289 + }
290 + c.Status(status)
291 + c.Set(fiber.HeaderContentType, fiber.MIMETextHTMLCharsetUTF8)
292 + return c.Send(buf.Bytes())
293 +}
294 +
295 +func (h *Handler) renderError(c *fiber.Ctx, status int, title, message string) error {
296 + data := h.baseData(c, title)
297 + data["StatusCode"] = status
298 + data["Title"] = title
299 + data["Message"] = message
300 + return h.render(c, status, "error", data)
301 +}
302 +
303 +func (h *Handler) Home(c *fiber.Ctx) error {
304 + if !h.db.IsLandingEnabled(c.UserContext(), h.cfg.Landing.Enabled) {
305 + if middleware.CurrentUser(c) != nil {
306 + return c.Redirect("/repos", fiber.StatusSeeOther)
307 + }
308 + return c.Redirect("/login", fiber.StatusSeeOther)
309 + }
310 + data := h.baseData(c, "")
311 + if h.db.IsExploreEnabled(c.UserContext()) && (middleware.CurrentUser(c) != nil || h.db.IsAnonymousReadEnabled(c.UserContext())) {
312 + repos, _ := h.repoSvc.ListPublic(c.UserContext(), 10)
313 + data["Repos"] = repos
314 + }
315 + return h.render(c, fiber.StatusOK, "landing", data)
316 +}
317 +
318 +func (h *Handler) Explore(c *fiber.Ctx) error {
319 + if !h.db.IsExploreEnabled(c.UserContext()) {
320 + return h.renderErrorT(c, fiber.StatusNotFound, "err.not_found", "err.explore_disabled")
321 + }
322 + if middleware.CurrentUser(c) == nil && !h.db.IsAnonymousReadEnabled(c.UserContext()) {
323 + return c.Redirect("/login", fiber.StatusSeeOther)
324 + }
325 + lang, _ := c.Locals("lang").(i18n.Lang)
326 + data := h.baseData(c, i18n.T(lang, "nav.explore"))
327 + repos, _ := h.repoSvc.ListPublic(c.UserContext(), 100)
328 + data["PageHeading"] = i18n.T(lang, "nav.explore")
329 + data["Repos"] = repos
330 + return h.render(c, fiber.StatusOK, "repos", data)
331 +}
332 +
333 +func (h *Handler) MyRepos(c *fiber.Ctx) error {
334 + u := middleware.CurrentUser(c)
335 + lang, _ := c.Locals("lang").(i18n.Lang)
336 + data := h.baseData(c, i18n.T(lang, "nav.repositories"))
337 + repos, _ := h.repoSvc.ListByOwner(c.UserContext(), u.ID, true)
338 + data["PageHeading"] = i18n.T(lang, "nav.repositories")
339 + data["Repos"] = repos
340 + return h.render(c, fiber.StatusOK, "repos", data)
341 +}
342 +
343 +func (h *Handler) cloneURL(c *fiber.Ctx, ownerUsername, repoName string) string {
344 + base := strings.TrimRight(h.cfg.Server.BaseURL, "/")
345 + if base == "" || strings.Contains(base, "localhost:3000") {
346 + if reqBase := c.BaseURL(); reqBase != "" {
347 + base = strings.TrimRight(reqBase, "/")
348 + }
349 + }
350 + return base + "/" + ownerUsername + "/" + repoName + ".git"
351 +}
internal/web/handlers/handlers_test.go
+328 -0
... ... @@ -0,0 +1,328 @@
1 +package handlers
2 +
3 +import (
4 + "context"
5 + "fmt"
6 + "io"
7 + "log/slog"
8 + "net"
9 + "net/http"
10 + "net/http/httptest"
11 + "os"
12 + "os/exec"
13 + "path/filepath"
14 + "strings"
15 + "testing"
16 + "time"
17 +
18 + "polar/internal/auth"
19 + "polar/internal/config"
20 + "polar/internal/db"
21 + "polar/internal/repo"
22 + "polar/internal/user"
23 + "polar/internal/web/views"
24 +
25 + "github.com/gofiber/fiber/v2"
26 +)
27 +
28 +func setupTestApp(t *testing.T) (*fiber.App, *auth.Service, *user.Service, *repo.Service) {
29 + t.Helper()
30 + tmp := t.TempDir()
31 +
32 + cfg := config.Default()
33 + cfg.Storage.DataDir = tmp
34 +
35 + ctx := context.Background()
36 + database, err := db.Open(ctx, cfg.DBPath(), true)
37 + if err != nil {
38 + t.Fatalf("open test db: %v", err)
39 + }
40 + t.Cleanup(func() { _ = database.Close() })
41 +
42 + authSvc := auth.NewService(database)
43 + userSvc := user.NewService(database)
44 + repoSvc := repo.NewService(database, cfg.ReposDir())
45 +
46 + viewsEngine, err := views.NewEngine()
47 + if err != nil {
48 + t.Fatalf("new views engine: %v", err)
49 + }
50 +
51 + logger := slog.New(slog.NewTextHandler(io.Discard, nil))
52 + app := fiber.New(fiber.Config{
53 + DisableStartupMessage: true,
54 + BodyLimit: 50 * 1024 * 1024,
55 + })
56 +
57 + h := New(cfg, database, authSvc, userSvc, repoSvc, viewsEngine, logger)
58 + h.RegisterRoutes(app)
59 +
60 + return app, authSvc, userSvc, repoSvc
61 +}
62 +
63 +func TestHealthzLandingAndStatic(t *testing.T) {
64 + app, _, _, _ := setupTestApp(t)
65 +
66 + // 1. /healthz
67 + req := httptest.NewRequest(http.MethodGet, "/healthz", nil)
68 + resp, err := app.Test(req, 5000)
69 + if err != nil {
70 + t.Fatalf("healthz request failed: %v", err)
71 + }
72 + if resp.StatusCode != http.StatusOK {
73 + t.Fatalf("expected 200 on /healthz, got %d", resp.StatusCode)
74 + }
75 + if resp.Header.Get("X-Content-Type-Options") != "nosniff" {
76 + t.Fatalf("missing security header X-Content-Type-Options")
77 + }
78 +
79 + // 2. Landing page (RU & EN) + verify zero external asset requests
80 + reqRU := httptest.NewRequest(http.MethodGet, "/?lang=ru", nil)
81 + respRU, err := app.Test(reqRU, 5000)
82 + if err != nil || respRU.StatusCode != http.StatusOK {
83 + t.Fatalf("landing RU failed: %v", err)
84 + }
85 + bodyRU, _ := io.ReadAll(respRU.Body)
86 + htmlRU := string(bodyRU)
87 + if !strings.Contains(htmlRU, "Polar") || !strings.Contains(htmlRU, "hi-git-branch") {
88 + t.Fatalf("landing RU missing expected content or Hugeicons sprite")
89 + }
90 + if strings.Contains(htmlRU, "https://fonts.googleapis.com") || strings.Contains(htmlRU, "https://unpkg.com") || strings.Contains(htmlRU, "https://cdn.") {
91 + t.Fatalf("landing page must not make external CDN requests")
92 + }
93 +
94 + reqEN := httptest.NewRequest(http.MethodGet, "/?lang=en", nil)
95 + respEN, err := app.Test(reqEN, 5000)
96 + if err != nil || respEN.StatusCode != http.StatusOK {
97 + t.Fatalf("landing EN failed: %v", err)
98 + }
99 + bodyEN, _ := io.ReadAll(respEN.Body)
100 + if !strings.Contains(string(bodyEN), "Lightweight self-hosted Git hosting") {
101 + t.Fatalf("landing EN missing translated hero title")
102 + }
103 +
104 + // 3. Static embedded CSS & JS
105 + for _, asset := range []string{"/static/css/app.css", "/static/js/app.js", "/static/js/htmx.min.js"} {
106 + r := httptest.NewRequest(http.MethodGet, asset, nil)
107 + res, err := app.Test(r, 5000)
108 + if err != nil || res.StatusCode != http.StatusOK {
109 + t.Fatalf("embedded static asset %s failed: status=%d err=%v", asset, res.StatusCode, err)
110 + }
111 + }
112 +}
113 +
114 +func TestEndToEndGitSmartHTTPAndPrivateRepos(t *testing.T) {
115 + app, authSvc, userSvc, repoSvc := setupTestApp(t)
116 + ctx := context.Background()
117 +
118 + // Start real TCP listener for system git CLI
119 + ln, err := net.Listen("tcp", "127.0.0.1:0")
120 + if err != nil {
121 + t.Fatalf("listen tcp: %v", err)
122 + }
123 + defer ln.Close()
124 +
125 + go func() {
126 + _ = app.Listener(ln)
127 + }()
128 +
129 + baseURL := "http://" + ln.Addr().String()
130 +
131 + // Create owner user + personal access token
132 + owner, err := userSvc.Register(ctx, "alice", "alice@example.com", "strongpassword", true)
133 + if err != nil {
134 + t.Fatalf("register owner: %v", err)
135 + }
136 + rawToken, _, err := authSvc.CreateToken(ctx, owner.ID, "E2E Token")
137 + if err != nil {
138 + t.Fatalf("create token: %v", err)
139 + }
140 +
141 + // Create a public repo and a private repo
142 + pubRepo, err := repoSvc.Create(ctx, owner, "engine", "Analytical Engine", false)
143 + if err != nil {
144 + t.Fatalf("create public repo: %v", err)
145 + }
146 + privRepo, err := repoSvc.Create(ctx, owner, "vault", "Secret Notes", true)
147 + if err != nil {
148 + t.Fatalf("create private repo: %v", err)
149 + }
150 +
151 + // 1. Verify private repo is blocked on Web UI and Git HTTP without credentials
152 + webPrivResp, err := http.Get(baseURL + "/alice/vault")
153 + if err != nil {
154 + t.Fatalf("GET /alice/vault: %v", err)
155 + }
156 + _ = webPrivResp.Body.Close()
157 + if webPrivResp.StatusCode != http.StatusNotFound {
158 + t.Fatalf("expected 404 for unauthenticated private repo web request, got %d", webPrivResp.StatusCode)
159 + }
160 +
161 + gitPrivResp, err := http.Get(baseURL + "/alice/vault.git/info/refs?service=git-upload-pack")
162 + if err != nil {
163 + t.Fatalf("GET private info/refs: %v", err)
164 + }
165 + _ = gitPrivResp.Body.Close()
166 + if gitPrivResp.StatusCode != http.StatusUnauthorized {
167 + t.Fatalf("expected 401 for unauthenticated private git info/refs, got %d", gitPrivResp.StatusCode)
168 + }
169 +
170 + // 2. Push commits to public repo over HTTP using Personal Access Token
171 + workDir := filepath.Join(t.TempDir(), "work")
172 + if err := os.MkdirAll(workDir, 0o755); err != nil {
173 + t.Fatalf("mkdir work: %v", err)
174 + }
175 +
176 + runGitCmd := func(dir string, args ...string) {
177 + t.Helper()
178 + cctx, cancel := context.WithTimeout(ctx, 20*time.Second)
179 + defer cancel()
180 + cmd := exec.CommandContext(cctx, "git", args...)
181 + cmd.Dir = dir
182 + cmd.Env = append(os.Environ(), "GIT_TERMINAL_PROMPT=0")
183 + out, err := cmd.CombinedOutput()
184 + if err != nil {
185 + t.Fatalf("git %v failed: %v\nOutput: %s", args, err, string(out))
186 + }
187 + }
188 +
189 + runGitCmd(workDir, "init", "-b", "main")
190 + runGitCmd(workDir, "config", "user.name", "Alice Lovelace")
191 + runGitCmd(workDir, "config", "user.email", "alice@example.com")
192 +
193 + if err := os.WriteFile(filepath.Join(workDir, "README.md"), []byte("# Analytical Engine\n\nHello from **Alice**!\n"), 0o644); err != nil {
194 + t.Fatalf("write README.md: %v", err)
195 + }
196 + if err := os.WriteFile(filepath.Join(workDir, "main.go"), []byte("package main\n\nimport \"fmt\"\n\nfunc main() {\n\tfmt.Println(\"Alice\")\n}\n"), 0o644); err != nil {
197 + t.Fatalf("write main.go: %v", err)
198 + }
199 +
200 + runGitCmd(workDir, "add", "README.md", "main.go")
201 + runGitCmd(workDir, "commit", "-m", "Initial commit with README and main.go")
202 +
203 + authedPubURL := fmt.Sprintf("http://%s:%s@%s/alice/%s.git", owner.Username, rawToken, ln.Addr().String(), pubRepo.Name)
204 + runGitCmd(workDir, "push", "-u", authedPubURL, "main")
205 +
206 + // Also push to private repo with token
207 + authedPrivURL := fmt.Sprintf("http://%s:%s@%s/alice/%s.git", owner.Username, rawToken, ln.Addr().String(), privRepo.Name)
208 + runGitCmd(workDir, "push", authedPrivURL, "main")
209 +
210 + // 3. Clone public repo anonymously and private repo with token
211 + clonePubDir := filepath.Join(t.TempDir(), "clone-pub")
212 + runGitCmd(t.TempDir(), "clone", baseURL+"/alice/engine.git", clonePubDir)
213 + if _, err := os.Stat(filepath.Join(clonePubDir, "main.go")); err != nil {
214 + t.Fatalf("cloned public repo missing main.go: %v", err)
215 + }
216 +
217 + clonePrivDir := filepath.Join(t.TempDir(), "clone-priv")
218 + runGitCmd(t.TempDir(), "clone", authedPrivURL, clonePrivDir)
219 + if _, err := os.Stat(filepath.Join(clonePrivDir, "README.md")); err != nil {
220 + t.Fatalf("cloned private repo missing README.md: %v", err)
221 + }
222 +
223 + // 4. Verify Web UI renders repository tree, README Markdown, syntax-highlighted blob, commits, and diff
224 + checkEndpoint := func(urlPath, expectedSubstring string) {
225 + t.Helper()
226 + resp, err := http.Get(baseURL + urlPath)
227 + if err != nil {
228 + t.Fatalf("GET %s failed: %v", urlPath, err)
229 + }
230 + defer resp.Body.Close()
231 + if resp.StatusCode != http.StatusOK {
232 + t.Fatalf("GET %s returned status %d", urlPath, resp.StatusCode)
233 + }
234 + b, _ := io.ReadAll(resp.Body)
235 + if !strings.Contains(string(b), expectedSubstring) {
236 + t.Fatalf("GET %s missing expected %q", urlPath, expectedSubstring)
237 + }
238 + }
239 +
240 + checkEndpoint("/alice/engine", "Analytical Engine")
241 + checkEndpoint("/alice/engine/blob/main/main.go", "Println")
242 + checkEndpoint("/alice/engine/raw/main/main.go", "package main")
243 + checkEndpoint("/alice/engine/commits/main", "Initial commit with README and main.go")
244 + checkEndpoint("/alice/engine/branches", "main")
245 + checkEndpoint("/alice", "alice")
246 +
247 + // 5. Verify ZIP archive download
248 + zipResp, err := http.Get(baseURL + "/alice/engine/archive/main.zip")
249 + if err != nil {
250 + t.Fatalf("GET archive zip failed: %v", err)
251 + }
252 + defer zipResp.Body.Close()
253 + if zipResp.StatusCode != http.StatusOK {
254 + t.Fatalf("GET archive zip status %d", zipResp.StatusCode)
255 + }
256 + zipBytes, _ := io.ReadAll(zipResp.Body)
257 + if len(zipBytes) < 4 || zipBytes[0] != 'P' || zipBytes[1] != 'K' {
258 + t.Fatalf("expected valid ZIP magic bytes, got len=%d", len(zipBytes))
259 + }
260 +}
261 +
262 +func TestFeaturesTogglesAndProfile(t *testing.T) {
263 + app, _, userSvc, repoSvc := setupTestApp(t)
264 + ctx := context.Background()
265 +
266 + // 1. Create a user
267 + u, err := userSvc.Register(ctx, "rin", "rin@example.com", "pass12345", true)
268 + if err != nil {
269 + t.Fatalf("register: %v", err)
270 + }
271 +
272 + // 2. Update user profile with avatar and details
273 + avatarData := "data:image/webp;base64,UklGRkAAAABXRUJQVlA4IDQAAADwAQCdASoBAAEAAQAcJaACdLoAAP7/2wAA"
274 + if err := userSvc.UpdateProfileDetails(ctx, u.ID, "rin@example.com", "Rin Tester", "Developer", "Tokyo", "https://example.com"); err != nil {
275 + t.Fatalf("update profile details: %v", err)
276 + }
277 + if err := userSvc.UpdateAvatar(ctx, u.ID, avatarData); err != nil {
278 + t.Fatalf("update avatar: %v", err)
279 + }
280 +
281 + // Check profile page
282 + reqProfile := httptest.NewRequest(http.MethodGet, "/rin", nil)
283 + respProfile, err := app.Test(reqProfile, 5000)
284 + if err != nil || respProfile.StatusCode != http.StatusOK {
285 + t.Fatalf("profile page failed: status=%d err=%v", respProfile.StatusCode, err)
286 + }
287 + profBody, _ := io.ReadAll(respProfile.Body)
288 + profHTML := string(profBody)
289 + if !strings.Contains(profHTML, "Rin Tester") || !strings.Contains(profHTML, "data:image/webp") {
290 + t.Fatalf("profile page missing updated name or avatar")
291 + }
292 +
293 + // 3. Create a repo and an issue
294 + r, err := repoSvc.Create(ctx, u, "test-repo", "A test repo", false)
295 + if err != nil {
296 + t.Fatalf("create repo: %v", err)
297 + }
298 + issue, err := repoSvc.CreateIssue(ctx, r.ID, u.ID, "First Bug", "Something went wrong")
299 + if err != nil {
300 + t.Fatalf("create issue: %v", err)
301 + }
302 + if issue.Number != 1 {
303 + t.Fatalf("expected issue number 1, got %d", issue.Number)
304 + }
305 + if err := repoSvc.CreateIssueComment(ctx, issue.ID, u.ID, "Fixed in commit 123"); err != nil {
306 + t.Fatalf("add issue comment: %v", err)
307 + }
308 +
309 + reqIssues := httptest.NewRequest(http.MethodGet, "/rin/test-repo/issues", nil)
310 + respIssues, err := app.Test(reqIssues, 5000)
311 + if err != nil || respIssues.StatusCode != http.StatusOK {
312 + t.Fatalf("issues list failed: status=%d err=%v", respIssues.StatusCode, err)
313 + }
314 + issBody, _ := io.ReadAll(respIssues.Body)
315 + if !strings.Contains(string(issBody), "First Bug") {
316 + t.Fatalf("issues list missing issue title")
317 + }
318 +
319 + reqIssueDetail := httptest.NewRequest(http.MethodGet, "/rin/test-repo/issues/1", nil)
320 + respIssueDetail, err := app.Test(reqIssueDetail, 5000)
321 + if err != nil || respIssueDetail.StatusCode != http.StatusOK {
322 + t.Fatalf("issue detail failed: status=%d err=%v", respIssueDetail.StatusCode, err)
323 + }
324 + issDetailBody, _ := io.ReadAll(respIssueDetail.Body)
325 + if !strings.Contains(string(issDetailBody), "Fixed in commit 123") {
326 + t.Fatalf("issue detail missing comment")
327 + }
328 +}
internal/web/handlers/pulls.go
+393 -0
... ... @@ -0,0 +1,393 @@
1 +package handlers
2 +
3 +import (
4 + "context"
5 + "fmt"
6 + "strconv"
7 + "strings"
8 +
9 + "github.com/gofiber/fiber/v2"
10 +
11 + "polar/internal/git"
12 + "polar/internal/repo"
13 + "polar/internal/user"
14 + "polar/internal/web/middleware"
15 + "polar/internal/web/views"
16 +)
17 +
18 +// headRepoCandidates lists repositories a viewer may open a pull request from:
19 +// the base repository itself plus the viewer's forks of it.
20 +func (h *Handler) headRepoCandidates(c *fiber.Ctx, r *repo.Repository, viewer *user.User) []*repo.Repository {
21 + candidates := []*repo.Repository{r}
22 + if viewer == nil {
23 + return candidates
24 + }
25 + forks, _ := h.repoSvc.ListForks(c.UserContext(), r.ID, 100)
26 + for _, f := range forks {
27 + if f.OwnerID == viewer.ID {
28 + fork := f
29 + candidates = append(candidates, &fork)
30 + }
31 + }
32 + return candidates
33 +}
34 +
35 +func (h *Handler) findHeadRepo(candidates []*repo.Repository, id int64) *repo.Repository {
36 + for _, cand := range candidates {
37 + if cand.ID == id {
38 + return cand
39 + }
40 + }
41 + return nil
42 +}
43 +
44 +// resolveHeadRef makes headBranch of headRepo visible inside baseDisk.
45 +// For same-repository PRs the branch name is returned unchanged. For
46 +// cross-repository (fork) PRs the branch is fetched into a temporary ref and
47 +// the returned cleanup removes it again.
48 +func (h *Handler) resolveHeadRef(c *fiber.Ctx, r *repo.Repository, baseDisk string, headRepoID int64, headBranch string) (ref string, headRepo *repo.Repository, cleanup func(), err error) {
49 + noop := func() {}
50 + if headRepoID == 0 || headRepoID == r.ID {
51 + return headBranch, r, noop, nil
52 + }
53 + hr, err := h.repoSvc.GetByID(c.UserContext(), headRepoID)
54 + if err != nil || hr == nil {
55 + return "", nil, noop, fmt.Errorf("head repository not found")
56 + }
57 + if hr.ForkedFromRepoID == nil || *hr.ForkedFromRepoID != r.ID {
58 + return "", nil, noop, fmt.Errorf("head repository is not a fork of this repository")
59 + }
60 + forkDisk, err := h.repoSvc.DiskPath(hr.OwnerUsername, hr.Name)
61 + if err != nil {
62 + return "", nil, noop, err
63 + }
64 + tmpRef := fmt.Sprintf("refs/polar/tmp-pr-%d", hr.ID)
65 + if err := git.FetchToTemp(c.UserContext(), baseDisk, forkDisk, headBranch, tmpRef); err != nil {
66 + return "", nil, noop, err
67 + }
68 + cleanup = func() { git.DeleteRef(context.WithoutCancel(c.UserContext()), baseDisk, tmpRef) }
69 + return tmpRef, hr, cleanup, nil
70 +}
71 +
72 +func (h *Handler) RepoPullsPage(c *fiber.Ctx) error {
73 + r, _, err := h.loadAuthorizedRepo(c, false)
74 + if err != nil {
75 + return nil
76 + }
77 + if !r.EnablePulls {
78 + return h.renderErrorT(c, fiber.StatusNotFound, "err.not_found", "err.pulls_disabled")
79 + }
80 +
81 + state := c.Query("state", "open")
82 + if state != "open" && state != "closed" && state != "merged" {
83 + state = "open"
84 + }
85 +
86 + pulls, _ := h.repoSvc.ListPullRequests(c.UserContext(), r.ID, state)
87 + openCount, closedCount, mergedCount, _ := h.repoSvc.CountPullRequests(c.UserContext(), r.ID)
88 +
89 + viewer := middleware.CurrentUser(c)
90 + data := h.baseData(c, h.tr(c, "pulls.title")+" · "+r.OwnerUsername+"/"+r.Name)
91 + data["Repo"] = r
92 + data["Ref"] = r.DefaultBranch
93 + data["ActiveTab"] = "pulls"
94 + data["CanWrite"] = h.repoSvc.CanWrite(c.UserContext(), r, viewer)
95 + data["CloneURL"] = h.cloneURL(c, r.OwnerUsername, r.Name)
96 + data["Pulls"] = pulls
97 + data["CurrentState"] = state
98 + data["OpenCount"] = openCount
99 + data["ClosedCount"] = closedCount
100 + data["MergedCount"] = mergedCount
101 +
102 + return h.render(c, fiber.StatusOK, "pulls", data)
103 +}
104 +
105 +func (h *Handler) RepoNewPullPage(c *fiber.Ctx) error {
106 + r, diskPath, err := h.loadAuthorizedRepo(c, false)
107 + if err != nil {
108 + return nil
109 + }
110 + if !r.EnablePulls {
111 + return h.renderErrorT(c, fiber.StatusNotFound, "err.not_found", "err.pulls_disabled")
112 + }
113 +
114 + viewer := middleware.CurrentUser(c)
115 + candidates := h.headRepoCandidates(c, r, viewer)
116 +
117 + headRepo := r
118 + if v := strings.TrimSpace(c.Query("head_repo")); v != "" {
119 + if id, convErr := strconv.ParseInt(v, 10, 64); convErr == nil {
120 + if found := h.findHeadRepo(candidates, id); found != nil {
121 + headRepo = found
122 + }
123 + }
124 + }
125 +
126 + headDisk, err := h.repoSvc.DiskPath(headRepo.OwnerUsername, headRepo.Name)
127 + if err != nil {
128 + headDisk = diskPath
129 + }
130 +
131 + branches, _ := git.ListBranches(c.UserContext(), headDisk)
132 + baseBranches, _ := git.ListBranches(c.UserContext(), diskPath)
133 + baseBranch := strings.TrimSpace(c.Query("base"))
134 + if baseBranch == "" {
135 + baseBranch = r.DefaultBranch
136 + }
137 + headBranch := strings.TrimSpace(c.Query("head"))
138 + if headBranch == "" && len(branches) > 1 {
139 + for _, b := range branches {
140 + if b != baseBranch || headRepo.ID != r.ID {
141 + headBranch = b
142 + break
143 + }
144 + }
145 + }
146 +
147 + data := h.baseData(c, h.tr(c, "pulls.new")+" · "+r.OwnerUsername+"/"+r.Name)
148 + data["Repo"] = r
149 + data["Ref"] = r.DefaultBranch
150 + data["ActiveTab"] = "pulls"
151 + data["CanWrite"] = h.repoSvc.CanWrite(c.UserContext(), r, viewer)
152 + data["CloneURL"] = h.cloneURL(c, r.OwnerUsername, r.Name)
153 + data["Branches"] = branches
154 + data["BaseBranches"] = baseBranches
155 + data["BaseBranch"] = baseBranch
156 + data["HeadBranch"] = headBranch
157 + data["HeadRepo"] = headRepo
158 + data["HeadRepos"] = candidates
159 +
160 + if baseBranch != "" && headBranch != "" && (baseBranch != headBranch || headRepo.ID != r.ID) {
161 + headRef, _, cleanup, refErr := h.resolveHeadRef(c, r, diskPath, headRepo.ID, headBranch)
162 + if refErr == nil {
163 + defer cleanup()
164 + diffDetail, cmpCommits, cmpErr := git.CompareBranches(c.UserContext(), diskPath, baseBranch, headRef)
165 + if cmpErr == nil {
166 + data["Compare"] = diffDetail
167 + data["CompareCommits"] = cmpCommits
168 + }
169 + canMerge, _, _ := git.CanMergeBranches(c.UserContext(), diskPath, baseBranch, headRef)
170 + data["CanMerge"] = canMerge
171 + } else {
172 + data["CompareError"] = refErr.Error()
173 + }
174 + }
175 +
176 + return h.render(c, fiber.StatusOK, "pull_new", data)
177 +}
178 +
179 +func (h *Handler) RepoNewPullSubmit(c *fiber.Ctx) error {
180 + r, _, err := h.loadAuthorizedRepo(c, false)
181 + if err != nil {
182 + return nil
183 + }
184 + if !r.EnablePulls {
185 + return h.renderErrorT(c, fiber.StatusNotFound, "err.not_found", "err.pulls_disabled")
186 + }
187 +
188 + u := middleware.CurrentUser(c)
189 + title := strings.TrimSpace(c.FormValue("title"))
190 + body := strings.TrimSpace(c.FormValue("body"))
191 + baseBranch := strings.TrimSpace(c.FormValue("base_branch"))
192 + headBranch := strings.TrimSpace(c.FormValue("head_branch"))
193 + headRepoRaw := strings.TrimSpace(c.FormValue("head_repo"))
194 +
195 + var headRepoID *int64
196 + if headRepoRaw != "" {
197 + if id, convErr := strconv.ParseInt(headRepoRaw, 10, 64); convErr == nil && id != r.ID {
198 + candidates := h.headRepoCandidates(c, r, u)
199 + if h.findHeadRepo(candidates, id) == nil {
200 + h.setFlashT(c, "flash.error", "err.pr_head_repo_invalid")
201 + return c.Redirect(fmt.Sprintf("/%s/%s/pulls/new", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
202 + }
203 + headRepoID = &id
204 + }
205 + }
206 +
207 + pr, err := h.repoSvc.CreatePullRequest(c.UserContext(), r.ID, u.ID, title, body, baseBranch, headBranch, headRepoID)
208 + if err != nil {
209 + h.setFlashT(c, "flash.error", err.Error())
210 + redirect := fmt.Sprintf("/%s/%s/pulls/new?base=%s&head=%s", r.OwnerUsername, r.Name, baseBranch, headBranch)
211 + if headRepoID != nil {
212 + redirect += fmt.Sprintf("&head_repo=%d", *headRepoID)
213 + }
214 + return c.Redirect(redirect, fiber.StatusSeeOther)
215 + }
216 +
217 + h.setFlashT(c, "flash.pr_created", pr.Number)
218 + return c.Redirect(fmt.Sprintf("/%s/%s/pulls/%d", r.OwnerUsername, r.Name, pr.Number), fiber.StatusSeeOther)
219 +}
220 +
221 +func (h *Handler) RepoPullDetailPage(c *fiber.Ctx) error {
222 + r, diskPath, err := h.loadAuthorizedRepo(c, false)
223 + if err != nil {
224 + return nil
225 + }
226 + if !r.EnablePulls {
227 + return h.renderErrorT(c, fiber.StatusNotFound, "err.not_found", "err.pulls_disabled")
228 + }
229 +
230 + num, _ := strconv.Atoi(c.Params("number"))
231 + pr, err := h.repoSvc.GetPullRequest(c.UserContext(), r.ID, num)
232 + if err != nil {
233 + return h.renderErrorT(c, fiber.StatusNotFound, "err.pr_not_found", "err.pr_not_found_desc")
234 + }
235 +
236 + comments, _ := h.repoSvc.ListPullRequestComments(c.UserContext(), pr.ID)
237 + reviews, _ := h.repoSvc.ListReviews(c.UserContext(), pr.ID)
238 + approved, changesRequested := h.repoSvc.ReviewCounts(c.UserContext(), pr.ID)
239 +
240 + var headRef string
241 + var cleanup func()
242 + if pr.HeadRepoID != nil && *pr.HeadRepoID != r.ID {
243 + ref, _, cl, refErr := h.resolveHeadRef(c, r, diskPath, *pr.HeadRepoID, pr.HeadBranch)
244 + if refErr == nil {
245 + headRef = ref
246 + cleanup = cl
247 + defer cleanup()
248 + }
249 + } else {
250 + headRef = pr.HeadBranch
251 + }
252 +
253 + var diffDetail *git.CommitDetail
254 + var cmpCommits []git.Commit
255 + canMerge := false
256 + if headRef != "" {
257 + diffDetail, cmpCommits, _ = git.CompareBranches(c.UserContext(), diskPath, pr.BaseBranch, headRef)
258 + canMerge, _, _ = git.CanMergeBranches(c.UserContext(), diskPath, pr.BaseBranch, headRef)
259 + }
260 +
261 + viewer := middleware.CurrentUser(c)
262 + canWrite := h.repoSvc.CanWrite(c.UserContext(), r, viewer)
263 + canToggle := viewer != nil && (viewer.ID == pr.AuthorID || canWrite)
264 + canMergeAction := viewer != nil && canWrite && pr.Status == "open" && canMerge
265 + canReview := viewer != nil && viewer.ID != pr.AuthorID && pr.Status == "open"
266 +
267 + subTab := c.Query("tab", "conversation")
268 + if subTab != "conversation" && subTab != "commits" && subTab != "files" {
269 + subTab = "conversation"
270 + }
271 +
272 + data := h.baseData(c, fmt.Sprintf("#%d: %s · %s/%s", pr.Number, pr.Title, r.OwnerUsername, r.Name))
273 + data["Repo"] = r
274 + data["Ref"] = r.DefaultBranch
275 + data["ActiveTab"] = "pulls"
276 + data["CanWrite"] = canWrite
277 + data["CloneURL"] = h.cloneURL(c, r.OwnerUsername, r.Name)
278 + data["PR"] = pr
279 + data["Comments"] = comments
280 + data["Reviews"] = reviews
281 + data["ApprovedCount"] = approved
282 + data["ChangesRequestedCount"] = changesRequested
283 + data["CanReview"] = canReview
284 + data["Compare"] = diffDetail
285 + data["CompareCommits"] = cmpCommits
286 + data["CanMerge"] = canMerge
287 + data["CanToggle"] = canToggle
288 + data["CanMergeAction"] = canMergeAction
289 + data["SubTab"] = subTab
290 + data["BodyHTML"] = views.RenderMarkdown([]byte(pr.Body))
291 +
292 + return h.render(c, fiber.StatusOK, "pull_detail", data)
293 +}
294 +
295 +func (h *Handler) RepoPullCommentSubmit(c *fiber.Ctx) error {
296 + r, _, err := h.loadAuthorizedRepo(c, false)
297 + if err != nil {
298 + return nil
299 + }
300 + if !r.EnablePulls {
301 + return h.renderErrorT(c, fiber.StatusNotFound, "err.not_found", "err.pulls_disabled")
302 + }
303 +
304 + num, _ := strconv.Atoi(c.Params("number"))
305 + pr, err := h.repoSvc.GetPullRequest(c.UserContext(), r.ID, num)
306 + if err != nil {
307 + return h.renderErrorT(c, fiber.StatusNotFound, "err.pr_not_found", "err.pr_not_found_desc")
308 + }
309 +
310 + u := middleware.CurrentUser(c)
311 + body := strings.TrimSpace(c.FormValue("body"))
312 + if err := h.repoSvc.CreatePullRequestComment(c.UserContext(), pr.ID, u.ID, body); err != nil {
313 + h.setFlashT(c, "flash.comment_error", err.Error())
314 + }
315 +
316 + return c.Redirect(fmt.Sprintf("/%s/%s/pulls/%d", r.OwnerUsername, r.Name, pr.Number), fiber.StatusSeeOther)
317 +}
318 +
319 +func (h *Handler) RepoPullStateSubmit(c *fiber.Ctx) error {
320 + r, _, err := h.loadAuthorizedRepo(c, false)
321 + if err != nil {
322 + return nil
323 + }
324 + if !r.EnablePulls {
325 + return h.renderErrorT(c, fiber.StatusNotFound, "err.not_found", "err.pulls_disabled")
326 + }
327 +
328 + num, _ := strconv.Atoi(c.Params("number"))
329 + pr, err := h.repoSvc.GetPullRequest(c.UserContext(), r.ID, num)
330 + if err != nil {
331 + return h.renderErrorT(c, fiber.StatusNotFound, "err.pr_not_found", "err.pr_not_found_desc")
332 + }
333 +
334 + viewer := middleware.CurrentUser(c)
335 + if viewer == nil || (viewer.ID != pr.AuthorID && !h.repoSvc.CanWrite(c.UserContext(), r, viewer)) {
336 + return h.renderErrorT(c, fiber.StatusForbidden, "err.forbidden", "err.pr_state_forbidden")
337 + }
338 +
339 + if pr.Status == "merged" {
340 + h.setFlashT(c, "flash.pr_merged_state")
341 + return c.Redirect(fmt.Sprintf("/%s/%s/pulls/%d", r.OwnerUsername, r.Name, pr.Number), fiber.StatusSeeOther)
342 + }
343 +
344 + targetState := strings.TrimSpace(c.FormValue("state"))
345 + if targetState == "closed" {
346 + _ = h.repoSvc.SetPullRequestStatus(c.UserContext(), pr.ID, "closed", nil)
347 + h.setFlashT(c, "flash.pr_closed", pr.Number)
348 + } else if targetState == "open" {
349 + _ = h.repoSvc.SetPullRequestStatus(c.UserContext(), pr.ID, "open", nil)
350 + h.setFlashT(c, "flash.pr_reopened", pr.Number)
351 + }
352 +
353 + return c.Redirect(fmt.Sprintf("/%s/%s/pulls/%d", r.OwnerUsername, r.Name, pr.Number), fiber.StatusSeeOther)
354 +}
355 +
356 +func (h *Handler) RepoPullMergeSubmit(c *fiber.Ctx) error {
357 + r, _, err := h.loadAuthorizedRepo(c, true)
358 + if err != nil {
359 + return nil
360 + }
361 + if !r.EnablePulls {
362 + return h.renderErrorT(c, fiber.StatusNotFound, "err.not_found", "err.pulls_disabled")
363 + }
364 +
365 + num, _ := strconv.Atoi(c.Params("number"))
366 + pr, err := h.repoSvc.GetPullRequest(c.UserContext(), r.ID, num)
367 + if err != nil {
368 + return h.renderErrorT(c, fiber.StatusNotFound, "err.pr_not_found", "err.pr_not_found_desc")
369 + }
370 +
371 + if pr.Status != "open" {
372 + h.setFlashT(c, "flash.pr_merge_open_only")
373 + return c.Redirect(fmt.Sprintf("/%s/%s/pulls/%d", r.OwnerUsername, r.Name, pr.Number), fiber.StatusSeeOther)
374 + }
375 +
376 + viewer := middleware.CurrentUser(c)
377 + if !h.repoSvc.CanWrite(c.UserContext(), r, viewer) {
378 + return h.renderErrorT(c, fiber.StatusForbidden, "err.forbidden", "err.pr_merge_forbidden")
379 + }
380 +
381 + authorName := viewer.FullName
382 + if authorName == "" {
383 + authorName = viewer.Username
384 + }
385 +
386 + if mergeErr := h.repoSvc.MergePullRequest(c.UserContext(), r, pr, authorName, viewer.Email, viewer.ID); mergeErr != nil {
387 + h.setFlashT(c, "flash.pr_merge_failed", mergeErr.Error())
388 + return c.Redirect(fmt.Sprintf("/%s/%s/pulls/%d", r.OwnerUsername, r.Name, pr.Number), fiber.StatusSeeOther)
389 + }
390 +
391 + h.setFlashT(c, "flash.pr_merged", pr.Number)
392 + return c.Redirect(fmt.Sprintf("/%s/%s/pulls/%d", r.OwnerUsername, r.Name, pr.Number), fiber.StatusSeeOther)
393 +}
internal/web/handlers/releases.go
+150 -0
... ... @@ -0,0 +1,150 @@
1 +package handlers
2 +
3 +import (
4 + "fmt"
5 + "html/template"
6 + "strconv"
7 + "strings"
8 +
9 + "github.com/gofiber/fiber/v2"
10 +
11 + "polar/internal/git"
12 + "polar/internal/repo"
13 + "polar/internal/web/middleware"
14 + "polar/internal/web/views"
15 +)
16 +
17 +type ReleaseViewItem struct {
18 + repo.Release
19 + BodyHTML template.HTML
20 +}
21 +
22 +func (h *Handler) RepoReleasesPage(c *fiber.Ctx) error {
23 + r, diskPath, err := h.loadAuthorizedRepo(c, false)
24 + if err != nil {
25 + return nil
26 + }
27 + if !r.EnableReleases {
28 + return h.renderErrorT(c, fiber.StatusNotFound, "err.not_found", "err.releases_disabled")
29 + }
30 +
31 + releases, _ := h.repoSvc.ListReleases(c.UserContext(), r.ID)
32 + tags, _ := git.ListTags(c.UserContext(), diskPath)
33 +
34 + var releaseItems []ReleaseViewItem
35 + for _, rel := range releases {
36 + rendered := views.RenderMarkdown([]byte(rel.Body))
37 + releaseItems = append(releaseItems, ReleaseViewItem{
38 + Release: rel,
39 + BodyHTML: rendered,
40 + })
41 + }
42 +
43 + viewer := middleware.CurrentUser(c)
44 + data := h.baseData(c, h.tr(c, "releases.title")+" · "+r.OwnerUsername+"/"+r.Name)
45 + data["Repo"] = r
46 + data["Ref"] = r.DefaultBranch
47 + data["ActiveTab"] = "releases"
48 + data["CanWrite"] = h.repoSvc.CanWrite(c.UserContext(), r, viewer)
49 + data["CloneURL"] = h.cloneURL(c, r.OwnerUsername, r.Name)
50 + data["Releases"] = releaseItems
51 + data["TagCount"] = len(tags)
52 +
53 + return h.render(c, fiber.StatusOK, "releases", data)
54 +}
55 +
56 +func (h *Handler) RepoNewReleasePage(c *fiber.Ctx) error {
57 + r, diskPath, err := h.loadAuthorizedRepo(c, true)
58 + if err != nil {
59 + return nil
60 + }
61 + if !r.EnableReleases {
62 + return h.renderErrorT(c, fiber.StatusNotFound, "err.not_found", "err.releases_disabled")
63 + }
64 +
65 + tags, _ := git.ListTags(c.UserContext(), diskPath)
66 + branches, _ := git.ListBranches(c.UserContext(), diskPath)
67 + selectedTag := strings.TrimSpace(c.Query("tag"))
68 +
69 + viewer := middleware.CurrentUser(c)
70 + data := h.baseData(c, h.tr(c, "releases.new")+" · "+r.OwnerUsername+"/"+r.Name)
71 + data["Repo"] = r
72 + data["Ref"] = r.DefaultBranch
73 + data["ActiveTab"] = "releases"
74 + data["CanWrite"] = h.repoSvc.CanWrite(c.UserContext(), r, viewer)
75 + data["CloneURL"] = h.cloneURL(c, r.OwnerUsername, r.Name)
76 + data["Tags"] = tags
77 + data["Branches"] = branches
78 + data["SelectedTag"] = selectedTag
79 +
80 + return h.render(c, fiber.StatusOK, "release_new", data)
81 +}
82 +
83 +func (h *Handler) RepoNewReleaseSubmit(c *fiber.Ctx) error {
84 + r, diskPath, err := h.loadAuthorizedRepo(c, true)
85 + if err != nil {
86 + return nil
87 + }
88 + if !r.EnableReleases {
89 + return h.renderErrorT(c, fiber.StatusNotFound, "err.not_found", "err.releases_disabled")
90 + }
91 +
92 + u := middleware.CurrentUser(c)
93 + tagName := strings.TrimSpace(c.FormValue("tag_name"))
94 + title := strings.TrimSpace(c.FormValue("title"))
95 + body := strings.TrimSpace(c.FormValue("body"))
96 + targetRef := strings.TrimSpace(c.FormValue("target_ref"))
97 + if targetRef == "" {
98 + targetRef = r.DefaultBranch
99 + }
100 + isPrerelease := c.FormValue("is_prerelease") == "true" || c.FormValue("is_prerelease") == "on" || c.FormValue("is_prerelease") == "1"
101 +
102 + if tagName == "" {
103 + h.setFlashT(c, "flash.release_tag_empty")
104 + return c.Redirect(fmt.Sprintf("/%s/%s/releases/new", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
105 + }
106 +
107 + // Create git tag if it doesn't exist yet
108 + existingTags, _ := git.ListTags(c.UserContext(), diskPath)
109 + tagExists := false
110 + for _, t := range existingTags {
111 + if t == tagName {
112 + tagExists = true
113 + break
114 + }
115 + }
116 + if !tagExists {
117 + if err := git.CreateTag(c.UserContext(), diskPath, tagName, targetRef, title); err != nil {
118 + h.setFlashT(c, "flash.release_tag_failed", err.Error())
119 + return c.Redirect(fmt.Sprintf("/%s/%s/releases/new", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
120 + }
121 + }
122 +
123 + if _, err := h.repoSvc.CreateRelease(c.UserContext(), r.ID, u.ID, tagName, title, body, false, isPrerelease); err != nil {
124 + h.setFlashT(c, "flash.release_create_failed", err.Error())
125 + return c.Redirect(fmt.Sprintf("/%s/%s/releases/new", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
126 + }
127 +
128 + h.repoSvc.TouchUpdatedAt(c.UserContext(), r.ID)
129 + h.setFlashT(c, "flash.release_published", tagName)
130 + return c.Redirect(fmt.Sprintf("/%s/%s/releases", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
131 +}
132 +
133 +func (h *Handler) RepoDeleteReleaseSubmit(c *fiber.Ctx) error {
134 + r, _, err := h.loadAuthorizedRepo(c, true)
135 + if err != nil {
136 + return nil
137 + }
138 + if !r.EnableReleases {
139 + return h.renderErrorT(c, fiber.StatusNotFound, "err.not_found", "err.releases_disabled")
140 + }
141 +
142 + relID, _ := strconv.ParseInt(c.Params("id"), 10, 64)
143 + if err := h.repoSvc.DeleteRelease(c.UserContext(), relID); err != nil {
144 + h.setFlashT(c, "flash.release_delete_failed", err.Error())
145 + } else {
146 + h.setFlashT(c, "flash.release_deleted")
147 + }
148 +
149 + return c.Redirect(fmt.Sprintf("/%s/%s/releases", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
150 +}
internal/web/handlers/repo.go
+721 -0
... ... @@ -0,0 +1,721 @@
1 +package handlers
2 +
3 +import (
4 + "fmt"
5 + "net/url"
6 + "path"
7 + "strconv"
8 + "strings"
9 +
10 + "polar/internal/git"
11 + "polar/internal/i18n"
12 + "polar/internal/repo"
13 + "polar/internal/web/middleware"
14 + "polar/internal/web/views"
15 +
16 + "github.com/gofiber/fiber/v2"
17 +)
18 +
19 +type BreadcrumbItem struct {
20 + Name string
21 + Path string
22 + IsLast bool
23 +}
24 +
25 +func buildBreadcrumbs(subPath string) []BreadcrumbItem {
26 + subPath = strings.Trim(subPath, "/")
27 + if subPath == "" {
28 + return nil
29 + }
30 + parts := strings.Split(subPath, "/")
31 + items := make([]BreadcrumbItem, 0, len(parts))
32 + var acc []string
33 + for idx, p := range parts {
34 + acc = append(acc, p)
35 + items = append(items, BreadcrumbItem{
36 + Name: p,
37 + Path: strings.Join(acc, "/"),
38 + IsLast: idx == len(parts)-1,
39 + })
40 + }
41 + return items
42 +}
43 +
44 +func (h *Handler) NewRepoPage(c *fiber.Ctx) error {
45 + lang, _ := c.Locals("lang").(i18n.Lang)
46 + data := h.baseData(c, i18n.T(lang, "repo.new.title"))
47 + return h.render(c, fiber.StatusOK, "repo_new", data)
48 +}
49 +
50 +func (h *Handler) NewRepoSubmit(c *fiber.Ctx) error {
51 + u := middleware.CurrentUser(c)
52 + lang, _ := c.Locals("lang").(i18n.Lang)
53 +
54 + name := strings.TrimSpace(c.FormValue("name"))
55 + desc := strings.TrimSpace(c.FormValue("description"))
56 + isPriv := c.FormValue("visibility") == "private"
57 +
58 + r, err := h.repoSvc.Create(c.UserContext(), u, name, desc, isPriv)
59 + if err != nil {
60 + data := h.baseData(c, i18n.T(lang, "repo.new.title"))
61 + data["FormName"] = name
62 + data["FormDescription"] = desc
63 + data["Error"] = err.Error()
64 + return h.render(c, fiber.StatusBadRequest, "repo_new", data)
65 + }
66 +
67 + return c.Redirect(fmt.Sprintf("/%s/%s", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
68 +}
69 +
70 +func (h *Handler) loadAuthorizedRepo(c *fiber.Ctx, requireWrite bool) (*repo.Repository, string, error) {
71 + owner := c.Params("owner")
72 + repoName := strings.TrimSuffix(c.Params("repo"), ".git")
73 + viewer := middleware.CurrentUser(c)
74 +
75 + if viewer == nil && !h.db.IsAnonymousReadEnabled(c.UserContext()) {
76 + _ = c.Redirect("/login", fiber.StatusSeeOther)
77 + return nil, "", fiber.ErrUnauthorized
78 + }
79 +
80 + r, err := h.repoSvc.GetByOwnerAndName(c.UserContext(), owner, repoName)
81 + if err != nil {
82 + _ = h.renderErrorT(c, fiber.StatusNotFound, "err.repo_not_found", "err.repo_not_found_desc")
83 + return nil, "", err
84 + }
85 +
86 + if requireWrite {
87 + if !h.repoSvc.CanWrite(c.UserContext(), r, viewer) {
88 + _ = h.renderErrorT(c, fiber.StatusForbidden, "err.access_denied", "err.repo_write_denied")
89 + return nil, "", fiber.ErrForbidden
90 + }
91 + } else {
92 + if !h.repoSvc.CanRead(c.UserContext(), r, viewer) {
93 + _ = h.renderErrorT(c, fiber.StatusNotFound, "err.repo_not_found", "err.repo_private_desc")
94 + return nil, "", fiber.ErrNotFound
95 + }
96 + }
97 +
98 + diskPath, err := h.repoSvc.DiskPath(r.OwnerUsername, r.Name)
99 + if err != nil {
100 + _ = h.renderError(c, fiber.StatusBadRequest, i18n.T(h.langOf(c), "err.invalid_repo_path"), err.Error())
101 + return nil, "", err
102 + }
103 +
104 + return r, diskPath, nil
105 +}
106 +
107 +func (h *Handler) RepoHomePage(c *fiber.Ctx) error {
108 + return h.renderRepoTree(c, "", "")
109 +}
110 +
111 +func (h *Handler) RepoTreePage(c *fiber.Ctx) error {
112 + ref, _ := url.PathUnescape(c.Params("ref"))
113 + subPath, _ := url.PathUnescape(c.Params("*"))
114 + return h.renderRepoTree(c, ref, subPath)
115 +}
116 +
117 +func (h *Handler) renderRepoTree(c *fiber.Ctx, ref, subPath string) error {
118 + r, diskPath, err := h.loadAuthorizedRepo(c, false)
119 + if err != nil {
120 + return nil
121 + }
122 + viewer := middleware.CurrentUser(c)
123 +
124 + headBranch, isEmpty := git.EnsureDefaultBranch(c.UserContext(), diskPath, r.DefaultBranch)
125 + if ref == "" {
126 + ref = headBranch
127 + }
128 +
129 + cloneURL := h.cloneURL(c, r.OwnerUsername, r.Name)
130 + data := h.baseData(c, r.OwnerUsername+"/"+r.Name)
131 + data["Repo"] = r
132 + data["Ref"] = ref
133 + data["SubPath"] = strings.Trim(subPath, "/")
134 + data["ActiveTab"] = "code"
135 + data["CanWrite"] = h.repoSvc.CanWrite(c.UserContext(), r, viewer)
136 + data["CloneURL"] = cloneURL
137 + data["IsEmpty"] = isEmpty
138 +
139 + if isEmpty {
140 + data["QuickStartNew"] = fmt.Sprintf(
141 + "echo \"# %s\" >> README.md\ngit init -b %s\ngit add README.md\ngit commit -m \"Initial commit\"\ngit remote add origin %s\ngit push -u origin %s",
142 + r.Name, r.DefaultBranch, cloneURL, r.DefaultBranch,
143 + )
144 + data["QuickStartExisting"] = fmt.Sprintf(
145 + "git remote add origin %s\ngit branch -M %s\ngit push -u origin %s",
146 + cloneURL, r.DefaultBranch, r.DefaultBranch,
147 + )
148 + return h.render(c, fiber.StatusOK, "repo", data)
149 + }
150 +
151 + branches, _ := git.ListBranches(c.UserContext(), diskPath)
152 + tags, _ := git.ListTags(c.UserContext(), diskPath)
153 + entries, err := git.ListTree(c.UserContext(), diskPath, ref, subPath)
154 + if err != nil {
155 + return h.renderErrorT(c, fiber.StatusNotFound, "err.path_not_found", "err.path_not_found_desc", ref)
156 + }
157 +
158 + latestCommit, _ := git.GetLatestCommit(c.UserContext(), diskPath, ref, subPath)
159 + allFiles, _ := git.ListAllFiles(c.UserContext(), diskPath, ref)
160 +
161 + data["Branches"] = branches
162 + data["Tags"] = tags
163 + data["Entries"] = entries
164 + data["LatestCommit"] = latestCommit
165 + data["PaletteFiles"] = allFiles
166 + data["Breadcrumbs"] = buildBreadcrumbs(subPath)
167 + if strings.Trim(subPath, "/") != "" {
168 + data["ParentPath"] = path.Dir(strings.Trim(subPath, "/"))
169 + }
170 +
171 + if readmeBlob, err := git.FindReadme(c.UserContext(), diskPath, ref, subPath); err == nil && readmeBlob != nil {
172 + data["ReadmeName"] = readmeBlob.Name
173 + data["ReadmeHTML"] = views.RenderMarkdown(readmeBlob.Data)
174 + }
175 +
176 + return h.render(c, fiber.StatusOK, "repo", data)
177 +}
178 +
179 +func (h *Handler) RepoBlobPage(c *fiber.Ctx) error {
180 + r, diskPath, err := h.loadAuthorizedRepo(c, false)
181 + if err != nil {
182 + return nil
183 + }
184 + viewer := middleware.CurrentUser(c)
185 +
186 + ref, _ := url.PathUnescape(c.Params("ref"))
187 + subPath, _ := url.PathUnescape(c.Params("*"))
188 +
189 + blob, err := git.ReadBlob(c.UserContext(), diskPath, ref, subPath)
190 + if err != nil {
191 + return h.renderErrorT(c, fiber.StatusNotFound, "err.file_not_found", "err.file_not_found_desc", ref)
192 + }
193 +
194 + branches, _ := git.ListBranches(c.UserContext(), diskPath)
195 + tags, _ := git.ListTags(c.UserContext(), diskPath)
196 + allFiles, _ := git.ListAllFiles(c.UserContext(), diskPath, ref)
197 +
198 + data := h.baseData(c, blob.Name+" · "+r.OwnerUsername+"/"+r.Name)
199 + data["Repo"] = r
200 + data["Ref"] = ref
201 + data["SubPath"] = blob.Path
202 + data["ActiveTab"] = "code"
203 + data["CanWrite"] = h.repoSvc.CanWrite(c.UserContext(), r, viewer)
204 + data["CloneURL"] = h.cloneURL(c, r.OwnerUsername, r.Name)
205 + data["Branches"] = branches
206 + data["Tags"] = tags
207 + data["Blob"] = blob
208 + data["Breadcrumbs"] = buildBreadcrumbs(blob.Path)
209 + data["PaletteFiles"] = allFiles
210 +
211 + if !blob.IsBinary {
212 + rawText := string(blob.Data)
213 + data["RawText"] = rawText
214 + data["HighlightedLines"] = views.HighlightCode(blob.Name, rawText)
215 + }
216 +
217 + return h.render(c, fiber.StatusOK, "blob", data)
218 +}
219 +
220 +func (h *Handler) RepoRawBlob(c *fiber.Ctx) error {
221 + _, diskPath, err := h.loadAuthorizedRepo(c, false)
222 + if err != nil {
223 + return nil
224 + }
225 +
226 + ref, _ := url.PathUnescape(c.Params("ref"))
227 + subPath, _ := url.PathUnescape(c.Params("*"))
228 +
229 + blob, err := git.ReadBlob(c.UserContext(), diskPath, ref, subPath)
230 + if err != nil {
231 + return c.Status(fiber.StatusNotFound).SendString("File not found")
232 + }
233 +
234 + if blob.IsBinary {
235 + c.Set(fiber.HeaderContentType, "application/octet-stream")
236 + } else {
237 + c.Set(fiber.HeaderContentType, "text/plain; charset=utf-8")
238 + }
239 + return c.Send(blob.Data)
240 +}
241 +
242 +func (h *Handler) RepoCommitsPage(c *fiber.Ctx) error {
243 + r, diskPath, err := h.loadAuthorizedRepo(c, false)
244 + if err != nil {
245 + return nil
246 + }
247 + viewer := middleware.CurrentUser(c)
248 +
249 + ref, _ := url.PathUnescape(c.Params("ref"))
250 + if ref == "" {
251 + ref, _ = git.EnsureDefaultBranch(c.UserContext(), diskPath, r.DefaultBranch)
252 + }
253 +
254 + page, _ := strconv.Atoi(c.Query("page", "1"))
255 + if page < 1 {
256 + page = 1
257 + }
258 + const perPage = 30
259 + offset := (page - 1) * perPage
260 +
261 + commits, _ := git.ListCommits(c.UserContext(), diskPath, ref, perPage+1, offset)
262 + hasMore := false
263 + if len(commits) > perPage {
264 + hasMore = true
265 + commits = commits[:perPage]
266 + }
267 + branches, _ := git.ListBranches(c.UserContext(), diskPath)
268 +
269 + data := h.baseData(c, h.tr(c, "repo.tab.commits")+" · "+r.OwnerUsername+"/"+r.Name)
270 + data["Repo"] = r
271 + data["Ref"] = ref
272 + data["ActiveTab"] = "commits"
273 + data["CanWrite"] = h.repoSvc.CanWrite(c.UserContext(), r, viewer)
274 + data["CloneURL"] = h.cloneURL(c, r.OwnerUsername, r.Name)
275 + data["Branches"] = branches
276 + data["Commits"] = commits
277 + data["Page"] = page
278 + data["HasMore"] = hasMore
279 +
280 + return h.render(c, fiber.StatusOK, "commits", data)
281 +}
282 +
283 +func (h *Handler) RepoCommitDetailPage(c *fiber.Ctx) error {
284 + r, diskPath, err := h.loadAuthorizedRepo(c, false)
285 + if err != nil {
286 + return nil
287 + }
288 + viewer := middleware.CurrentUser(c)
289 + hash := c.Params("hash")
290 +
291 + detail, err := git.GetCommitDiff(c.UserContext(), diskPath, hash)
292 + if err != nil {
293 + return h.renderErrorT(c, fiber.StatusNotFound, "err.commit_not_found", "err.commit_not_found_desc", hash)
294 + }
295 +
296 + data := h.baseData(c, detail.Commit.ShortHash+" · "+r.OwnerUsername+"/"+r.Name)
297 + data["Repo"] = r
298 + data["Ref"] = r.DefaultBranch
299 + data["ActiveTab"] = "commits"
300 + data["CanWrite"] = h.repoSvc.CanWrite(c.UserContext(), r, viewer)
301 + data["CloneURL"] = h.cloneURL(c, r.OwnerUsername, r.Name)
302 + data["Detail"] = detail
303 +
304 + return h.render(c, fiber.StatusOK, "commit", data)
305 +}
306 +
307 +func (h *Handler) RepoSettingsPage(c *fiber.Ctx) error {
308 + r, diskPath, err := h.loadAuthorizedRepo(c, true)
309 + if err != nil {
310 + return nil
311 + }
312 + branches, _ := git.ListBranches(c.UserContext(), diskPath)
313 +
314 + data := h.baseData(c, h.tr(c, "repo.tab.settings")+" · "+r.OwnerUsername+"/"+r.Name)
315 + data["Repo"] = r
316 + data["Ref"] = r.DefaultBranch
317 + data["ActiveTab"] = "settings"
318 + data["CanWrite"] = true
319 + data["CloneURL"] = h.cloneURL(c, r.OwnerUsername, r.Name)
320 + data["Branches"] = branches
321 +
322 + viewer := middleware.CurrentUser(c)
323 + collaborators, _ := h.repoSvc.ListCollaborators(c.UserContext(), r.ID)
324 + data["Collaborators"] = collaborators
325 + data["CanManageCollab"] = viewer != nil && (viewer.ID == r.OwnerID || viewer.IsAdmin)
326 +
327 + return h.render(c, fiber.StatusOK, "repo_settings", data)
328 +}
329 +
330 +func (h *Handler) RepoSettingsSubmit(c *fiber.Ctx) error {
331 + r, _, err := h.loadAuthorizedRepo(c, true)
332 + if err != nil {
333 + return nil
334 + }
335 +
336 + desc := c.FormValue("description")
337 + defaultBranch := c.FormValue("default_branch")
338 + isPriv := c.FormValue("visibility") == "private"
339 +
340 + enableIssues := c.FormValue("enable_issues") == "true" || c.FormValue("enable_issues") == "on" || c.FormValue("enable_issues") == "1"
341 + enablePulls := c.FormValue("enable_pulls") == "true" || c.FormValue("enable_pulls") == "on" || c.FormValue("enable_pulls") == "1"
342 + enableReleases := c.FormValue("enable_releases") == "true" || c.FormValue("enable_releases") == "on" || c.FormValue("enable_releases") == "1"
343 + enableActivity := c.FormValue("enable_activity") == "true" || c.FormValue("enable_activity") == "on" || c.FormValue("enable_activity") == "1"
344 +
345 + if err := h.repoSvc.Update(c.UserContext(), r, desc, isPriv, defaultBranch, enableIssues, enablePulls, enableReleases, enableActivity); err != nil {
346 + h.setFlashT(c, "flash.error", err.Error())
347 + return c.Redirect(fmt.Sprintf("/%s/%s/settings", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
348 + }
349 +
350 + h.setFlashT(c, "flash.repo_settings_saved")
351 + return c.Redirect(fmt.Sprintf("/%s/%s/settings", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
352 +}
353 +
354 +func (h *Handler) RepoRenameSubmit(c *fiber.Ctx) error {
355 + r, _, err := h.loadAuthorizedRepo(c, true)
356 + if err != nil {
357 + return nil
358 + }
359 +
360 + newName := strings.TrimSpace(c.FormValue("new_name"))
361 + if err := h.repoSvc.Rename(c.UserContext(), r, newName); err != nil {
362 + h.setFlashT(c, "flash.repo_rename_failed", err.Error())
363 + return c.Redirect(fmt.Sprintf("/%s/%s/settings", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
364 + }
365 +
366 + h.setFlashT(c, "flash.repo_renamed", r.Name)
367 + return c.Redirect(fmt.Sprintf("/%s/%s/settings", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
368 +}
369 +
370 +func (h *Handler) RepoDeleteSubmit(c *fiber.Ctx) error {
371 + r, _, err := h.loadAuthorizedRepo(c, true)
372 + if err != nil {
373 + return nil
374 + }
375 +
376 + confirmName := strings.TrimSpace(c.FormValue("confirm_name"))
377 + if !strings.EqualFold(confirmName, r.Name) {
378 + h.setFlashT(c, "flash.repo_confirm_mismatch")
379 + return c.Redirect(fmt.Sprintf("/%s/%s/settings", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
380 + }
381 +
382 + if err := h.repoSvc.Delete(c.UserContext(), r); err != nil {
383 + h.logger.Error("delete repo failed", "err", err)
384 + return h.renderErrorT(c, fiber.StatusInternalServerError, "err.delete_error", "err.repo_delete_failed")
385 + }
386 +
387 + h.setFlashT(c, "flash.repo_deleted", r.Name)
388 + return c.Redirect("/repos", fiber.StatusSeeOther)
389 +}
390 +
391 +func (h *Handler) UserProfilePage(c *fiber.Ctx) error {
392 + username := c.Params("username")
393 + profileUser, err := h.userSvc.GetByUsername(c.UserContext(), username)
394 + if err != nil {
395 + return h.renderErrorT(c, fiber.StatusNotFound, "err.not_found", "err.user_not_found", username)
396 + }
397 +
398 + viewer := middleware.CurrentUser(c)
399 + if viewer == nil && !h.db.IsAnonymousReadEnabled(c.UserContext()) {
400 + return c.Redirect("/login", fiber.StatusSeeOther)
401 + }
402 +
403 + includePrivate := viewer != nil && (viewer.ID == profileUser.ID || viewer.IsAdmin)
404 + repos, _ := h.repoSvc.ListByOwner(c.UserContext(), profileUser.ID, includePrivate)
405 +
406 + publicCount := 0
407 + privateCount := 0
408 + for _, rp := range repos {
409 + if rp.IsPrivate {
410 + privateCount++
411 + } else {
412 + publicCount++
413 + }
414 + }
415 +
416 + lang, _ := c.Locals("lang").(i18n.Lang)
417 + title := "@" + profileUser.Username
418 + if profileUser.FullName != "" {
419 + title = profileUser.FullName + " (@" + profileUser.Username + ")"
420 + }
421 + data := h.baseData(c, title)
422 + data["ProfileUser"] = profileUser
423 + data["PageHeading"] = i18n.T(lang, "nav.repositories")
424 + data["Repos"] = repos
425 + data["PublicRepoCount"] = publicCount
426 + data["PrivateRepoCount"] = privateCount
427 + data["ShowPrivateCount"] = includePrivate
428 + return h.render(c, fiber.StatusOK, "profile", data)
429 +}
430 +
431 +func (h *Handler) RepoBranchesPage(c *fiber.Ctx) error {
432 + r, diskPath, err := h.loadAuthorizedRepo(c, false)
433 + if err != nil {
434 + return nil
435 + }
436 + viewer := middleware.CurrentUser(c)
437 +
438 + branches, _ := git.ListBranchDetails(c.UserContext(), diskPath, r.DefaultBranch)
439 + tags, _ := git.ListTagDetails(c.UserContext(), diskPath)
440 +
441 + data := h.baseData(c, h.tr(c, "repo.tab.branches")+" · "+r.OwnerUsername+"/"+r.Name)
442 + data["Repo"] = r
443 + data["Ref"] = r.DefaultBranch
444 + data["ActiveTab"] = "branches"
445 + data["CanWrite"] = h.repoSvc.CanWrite(c.UserContext(), r, viewer)
446 + data["CloneURL"] = h.cloneURL(c, r.OwnerUsername, r.Name)
447 + data["BranchDetails"] = branches
448 + data["TagDetails"] = tags
449 + data["IsEmpty"] = len(branches) == 0
450 +
451 + return h.render(c, fiber.StatusOK, "branches", data)
452 +}
453 +
454 +func (h *Handler) RepoCreateBranchSubmit(c *fiber.Ctx) error {
455 + r, diskPath, err := h.loadAuthorizedRepo(c, true)
456 + if err != nil {
457 + return nil
458 + }
459 + branchName := strings.TrimSpace(c.FormValue("branch_name"))
460 + fromRef := strings.TrimSpace(c.FormValue("from_ref"))
461 + if fromRef == "" {
462 + fromRef = r.DefaultBranch
463 + }
464 +
465 + if err := git.CreateBranch(c.UserContext(), diskPath, branchName, fromRef); err != nil {
466 + h.setFlashT(c, "flash.branch_create_failed", err.Error())
467 + } else {
468 + h.setFlashT(c, "flash.branch_created", branchName)
469 + }
470 + return c.Redirect(fmt.Sprintf("/%s/%s/branches", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
471 +}
472 +
473 +func (h *Handler) RepoDeleteBranchSubmit(c *fiber.Ctx) error {
474 + r, diskPath, err := h.loadAuthorizedRepo(c, true)
475 + if err != nil {
476 + return nil
477 + }
478 + branchName := strings.TrimSpace(c.FormValue("branch_name"))
479 + if strings.EqualFold(branchName, r.DefaultBranch) {
480 + h.setFlashT(c, "flash.branch_default_delete")
481 + return c.Redirect(fmt.Sprintf("/%s/%s/branches", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
482 + }
483 +
484 + if err := git.DeleteBranch(c.UserContext(), diskPath, branchName); err != nil {
485 + h.setFlashT(c, "flash.branch_delete_failed", err.Error())
486 + } else {
487 + h.setFlashT(c, "flash.branch_deleted", branchName)
488 + }
489 + return c.Redirect(fmt.Sprintf("/%s/%s/branches", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
490 +}
491 +
492 +func (h *Handler) RepoCreateTagSubmit(c *fiber.Ctx) error {
493 + r, diskPath, err := h.loadAuthorizedRepo(c, true)
494 + if err != nil {
495 + return nil
496 + }
497 + tagName := strings.TrimSpace(c.FormValue("tag_name"))
498 + fromRef := strings.TrimSpace(c.FormValue("from_ref"))
499 + if fromRef == "" {
500 + fromRef = r.DefaultBranch
501 + }
502 + message := strings.TrimSpace(c.FormValue("message"))
503 +
504 + if err := git.CreateTag(c.UserContext(), diskPath, tagName, fromRef, message); err != nil {
505 + h.setFlashT(c, "flash.tag_create_failed", err.Error())
506 + } else {
507 + h.setFlashT(c, "flash.tag_created", tagName)
508 + }
509 + return c.Redirect(fmt.Sprintf("/%s/%s/branches", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
510 +}
511 +
512 +func (h *Handler) RepoDeleteTagSubmit(c *fiber.Ctx) error {
513 + r, diskPath, err := h.loadAuthorizedRepo(c, true)
514 + if err != nil {
515 + return nil
516 + }
517 + tagName := strings.TrimSpace(c.FormValue("tag_name"))
518 +
519 + if err := git.DeleteTag(c.UserContext(), diskPath, tagName); err != nil {
520 + h.setFlashT(c, "flash.tag_delete_failed", err.Error())
521 + } else {
522 + h.setFlashT(c, "flash.tag_deleted", tagName)
523 + }
524 + return c.Redirect(fmt.Sprintf("/%s/%s/branches", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
525 +}
526 +
527 +func (h *Handler) RepoArchiveZip(c *fiber.Ctx) error {
528 + r, diskPath, err := h.loadAuthorizedRepo(c, false)
529 + if err != nil {
530 + return nil
531 + }
532 +
533 + filename := c.Params("*")
534 + isTarGz := strings.HasSuffix(filename, ".tar.gz") || strings.HasSuffix(filename, ".tgz")
535 + ref := strings.TrimSuffix(strings.TrimSuffix(strings.TrimSuffix(filename, ".tar.gz"), ".tgz"), ".zip")
536 + ref, _ = url.PathUnescape(ref)
537 + if ref == "" {
538 + ref = r.DefaultBranch
539 + }
540 +
541 + prefix := r.Name + "-" + strings.ReplaceAll(ref, "/", "-")
542 + if isTarGz {
543 + tarBytes, err := git.ArchiveTarGz(c.UserContext(), diskPath, ref, prefix)
544 + if err != nil {
545 + h.logger.Error("archive tar.gz failed", "ref", ref, "err", err)
546 + return h.renderErrorT(c, fiber.StatusNotFound, "err.archive_error", "err.archive_tar_failed", ref)
547 + }
548 + c.Set(fiber.HeaderContentType, "application/gzip")
549 + c.Set(fiber.HeaderContentDisposition, fmt.Sprintf(`attachment; filename="%s.tar.gz"`, prefix))
550 + return c.Send(tarBytes)
551 + }
552 +
553 + zipBytes, err := git.ArchiveZip(c.UserContext(), diskPath, ref, prefix)
554 + if err != nil {
555 + h.logger.Error("archive zip failed", "ref", ref, "err", err)
556 + return h.renderErrorT(c, fiber.StatusNotFound, "err.archive_error", "err.archive_zip_failed", ref)
557 + }
558 +
559 + c.Set(fiber.HeaderContentType, "application/zip")
560 + c.Set(fiber.HeaderContentDisposition, fmt.Sprintf(`attachment; filename="%s.zip"`, prefix))
561 + return c.Send(zipBytes)
562 +}
563 +
564 +func (h *Handler) RepoIssuesPage(c *fiber.Ctx) error {
565 + r, _, err := h.loadAuthorizedRepo(c, false)
566 + if err != nil {
567 + return nil
568 + }
569 + if !r.EnableIssues {
570 + return h.renderErrorT(c, fiber.StatusNotFound, "err.not_found", "err.issues_disabled")
571 + }
572 +
573 + state := c.Query("state", "open")
574 + isClosed := state == "closed"
575 +
576 + issues, _ := h.repoSvc.ListIssues(c.UserContext(), r.ID, isClosed)
577 + openCount, closedCount, _ := h.repoSvc.CountIssues(c.UserContext(), r.ID)
578 +
579 + viewer := middleware.CurrentUser(c)
580 + data := h.baseData(c, h.tr(c, "repo.tab.issues")+" · "+r.OwnerUsername+"/"+r.Name)
581 + data["Repo"] = r
582 + data["Ref"] = r.DefaultBranch
583 + data["ActiveTab"] = "issues"
584 + data["CanWrite"] = h.repoSvc.CanWrite(c.UserContext(), r, viewer)
585 + data["CloneURL"] = h.cloneURL(c, r.OwnerUsername, r.Name)
586 + data["Issues"] = issues
587 + data["OpenCount"] = openCount
588 + data["ClosedCount"] = closedCount
589 + data["ShowClosed"] = isClosed
590 +
591 + return h.render(c, fiber.StatusOK, "issues", data)
592 +}
593 +
594 +func (h *Handler) RepoNewIssuePage(c *fiber.Ctx) error {
595 + r, _, err := h.loadAuthorizedRepo(c, false)
596 + if err != nil {
597 + return nil
598 + }
599 + if !r.EnableIssues {
600 + return h.renderErrorT(c, fiber.StatusNotFound, "err.not_found", "err.issues_disabled")
601 + }
602 +
603 + viewer := middleware.CurrentUser(c)
604 + data := h.baseData(c, h.tr(c, "issue.new")+" · "+r.OwnerUsername+"/"+r.Name)
605 + data["Repo"] = r
606 + data["Ref"] = r.DefaultBranch
607 + data["ActiveTab"] = "issues"
608 + data["CanWrite"] = h.repoSvc.CanWrite(c.UserContext(), r, viewer)
609 + data["CloneURL"] = h.cloneURL(c, r.OwnerUsername, r.Name)
610 +
611 + return h.render(c, fiber.StatusOK, "issue_new", data)
612 +}
613 +
614 +func (h *Handler) RepoNewIssueSubmit(c *fiber.Ctx) error {
615 + r, _, err := h.loadAuthorizedRepo(c, false)
616 + if err != nil {
617 + return nil
618 + }
619 + if !r.EnableIssues {
620 + return h.renderErrorT(c, fiber.StatusNotFound, "err.not_found", "err.issues_disabled")
621 + }
622 +
623 + u := middleware.CurrentUser(c)
624 + title := c.FormValue("title")
625 + body := c.FormValue("body")
626 +
627 + iss, err := h.repoSvc.CreateIssue(c.UserContext(), r.ID, u.ID, title, body)
628 + if err != nil {
629 + h.setFlashT(c, "flash.error", err.Error())
630 + return c.Redirect(fmt.Sprintf("/%s/%s/issues/new", r.OwnerUsername, r.Name), fiber.StatusSeeOther)
631 + }
632 +
633 + return c.Redirect(fmt.Sprintf("/%s/%s/issues/%d", r.OwnerUsername, r.Name, iss.Number), fiber.StatusSeeOther)
634 +}
635 +
636 +func (h *Handler) RepoIssueDetailPage(c *fiber.Ctx) error {
637 + r, _, err := h.loadAuthorizedRepo(c, false)
638 + if err != nil {
639 + return nil
640 + }
641 + if !r.EnableIssues {
642 + return h.renderErrorT(c, fiber.StatusNotFound, "err.not_found", "err.issues_disabled")
643 + }
644 +
645 + num, _ := strconv.Atoi(c.Params("number"))
646 + iss, err := h.repoSvc.GetIssue(c.UserContext(), r.ID, num)
647 + if err != nil {
648 + return h.renderErrorT(c, fiber.StatusNotFound, "err.issue_not_found", "err.issue_not_found_desc")
649 + }
650 +
651 + comments, _ := h.repoSvc.ListIssueComments(c.UserContext(), iss.ID)
652 + viewer := middleware.CurrentUser(c)
653 + canToggle := viewer != nil && (viewer.ID == iss.AuthorID || h.repoSvc.CanWrite(c.UserContext(), r, viewer))
654 +
655 + data := h.baseData(c, fmt.Sprintf("#%d: %s · %s/%s", iss.Number, iss.Title, r.OwnerUsername, r.Name))
656 + data["Repo"] = r
657 + data["Ref"] = r.DefaultBranch
658 + data["ActiveTab"] = "issues"
659 + data["CanWrite"] = h.repoSvc.CanWrite(c.UserContext(), r, viewer)
660 + data["CloneURL"] = h.cloneURL(c, r.OwnerUsername, r.Name)
661 + data["Issue"] = iss
662 + data["Comments"] = comments
663 + data["CanToggleIssue"] = canToggle
664 +
665 + return h.render(c, fiber.StatusOK, "issue_detail", data)
666 +}
667 +
668 +func (h *Handler) RepoIssueCommentSubmit(c *fiber.Ctx) error {
669 + r, _, err := h.loadAuthorizedRepo(c, false)
670 + if err != nil {
671 + return nil
672 + }
673 + if !r.EnableIssues {
674 + return h.renderErrorT(c, fiber.StatusNotFound, "err.not_found", "err.issues_disabled")
675 + }
676 +
677 + num, _ := strconv.Atoi(c.Params("number"))
678 + iss, err := h.repoSvc.GetIssue(c.UserContext(), r.ID, num)
679 + if err != nil {
680 + return h.renderErrorT(c, fiber.StatusNotFound, "err.issue_not_found", "err.issue_not_found_desc")
681 + }
682 +
683 + u := middleware.CurrentUser(c)
684 + body := c.FormValue("body")
685 + if err := h.repoSvc.CreateIssueComment(c.UserContext(), iss.ID, u.ID, body); err != nil {
686 + h.setFlashT(c, "flash.comment_error", err.Error())
687 + }
688 + return c.Redirect(fmt.Sprintf("/%s/%s/issues/%d", r.OwnerUsername, r.Name, iss.Number), fiber.StatusSeeOther)
689 +}
690 +
691 +func (h *Handler) RepoIssueStateSubmit(c *fiber.Ctx) error {
692 + r, _, err := h.loadAuthorizedRepo(c, false)
693 + if err != nil {
694 + return nil
695 + }
696 + if !r.EnableIssues {
697 + return h.renderErrorT(c, fiber.StatusNotFound, "err.not_found", "err.issues_disabled")
698 + }
699 +
700 + num, _ := strconv.Atoi(c.Params("number"))
701 + iss, err := h.repoSvc.GetIssue(c.UserContext(), r.ID, num)
702 + if err != nil {
703 + return h.renderErrorT(c, fiber.StatusNotFound, "err.issue_not_found", "err.issue_not_found_desc")
704 + }
705 +
706 + viewer := middleware.CurrentUser(c)
707 + if viewer == nil || (viewer.ID != iss.AuthorID && !h.repoSvc.CanWrite(c.UserContext(), r, viewer)) {
708 + return h.renderErrorT(c, fiber.StatusForbidden, "err.forbidden", "err.issue_state_forbidden")
709 + }
710 +
711 + targetState := c.FormValue("state")
712 + isClosed := targetState == "closed"
713 + _ = h.repoSvc.SetIssueClosed(c.UserContext(), iss.ID, isClosed)
714 +
715 + if isClosed {
716 + h.setFlashT(c, "flash.issue_closed", iss.Number)
717 + } else {
718 + h.setFlashT(c, "flash.issue_reopened", iss.Number)
719 + }
720 + return c.Redirect(fmt.Sprintf("/%s/%s/issues/%d", r.OwnerUsername, r.Name, iss.Number), fiber.StatusSeeOther)
721 +}
internal/web/handlers/reviews.go
+55 -0
... ... @@ -0,0 +1,55 @@
1 +package handlers
2 +
3 +import (
4 + "fmt"
5 + "strconv"
6 + "strings"
7 +
8 + "github.com/gofiber/fiber/v2"
9 +
10 + "polar/internal/web/middleware"
11 +)
12 +
13 +// RepoPullReviewSubmit records the reviewer's verdict (approve / request changes).
14 +func (h *Handler) RepoPullReviewSubmit(c *fiber.Ctx) error {
15 + r, _, err := h.loadAuthorizedRepo(c, false)
16 + if err != nil {
17 + return nil
18 + }
19 + if !r.EnablePulls {
20 + return h.renderErrorT(c, fiber.StatusNotFound, "err.not_found", "err.pulls_disabled")
21 + }
22 +
23 + num, _ := strconv.Atoi(c.Params("number"))
24 + pr, err := h.repoSvc.GetPullRequest(c.UserContext(), r.ID, num)
25 + if err != nil {
26 + return h.renderErrorT(c, fiber.StatusNotFound, "err.pr_not_found", "err.pr_not_found_desc")
27 + }
28 +
29 + u := middleware.CurrentUser(c)
30 + redirect := fmt.Sprintf("/%s/%s/pulls/%d", r.OwnerUsername, r.Name, pr.Number)
31 +
32 + if u == nil || u.ID == pr.AuthorID {
33 + h.setFlashT(c, "flash.review_self")
34 + return c.Redirect(redirect, fiber.StatusSeeOther)
35 + }
36 + if pr.Status != "open" {
37 + h.setFlashT(c, "flash.review_closed")
38 + return c.Redirect(redirect, fiber.StatusSeeOther)
39 + }
40 +
41 + state := strings.TrimSpace(c.FormValue("state"))
42 + body := strings.TrimSpace(c.FormValue("body"))
43 +
44 + if err := h.repoSvc.UpsertReview(c.UserContext(), pr.ID, u.ID, state, body); err != nil {
45 + h.setFlashT(c, "flash.review_failed", err.Error())
46 + return c.Redirect(redirect, fiber.StatusSeeOther)
47 + }
48 +
49 + if state == "approved" {
50 + h.setFlashT(c, "flash.review_approved")
51 + } else {
52 + h.setFlashT(c, "flash.review_changes_requested")
53 + }
54 + return c.Redirect(redirect, fiber.StatusSeeOther)
55 +}
internal/web/handlers/social_test.go
+322 -0
... ... @@ -0,0 +1,322 @@
1 +package handlers
2 +
3 +import (
4 + "context"
5 + "encoding/json"
6 + "io"
7 + "net/http"
8 + "net/http/httptest"
9 + "os"
10 + "os/exec"
11 + "path/filepath"
12 + "strings"
13 + "testing"
14 +
15 + "polar/internal/auth"
16 + "polar/internal/repo"
17 +)
18 +
19 +func postForm(t *testing.T, app interface {
20 + Test(*http.Request, ...int) (*http.Response, error)
21 +}, path, body string) *http.Response {
22 + t.Helper()
23 + req := httptest.NewRequest(http.MethodPost, path, strings.NewReader(body))
24 + req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
25 + resp, err := app.Test(req, 5000)
26 + if err != nil {
27 + t.Fatalf("POST %s: %v", path, err)
28 + }
29 + return resp
30 +}
31 +
32 +func getPage(t *testing.T, app interface {
33 + Test(*http.Request, ...int) (*http.Response, error)
34 +}, path string) (int, string) {
35 + t.Helper()
36 + resp, err := app.Test(httptest.NewRequest(http.MethodGet, path, nil), 5000)
37 + if err != nil {
38 + t.Fatalf("GET %s: %v", path, err)
39 + }
40 + defer resp.Body.Close()
41 + b, _ := io.ReadAll(resp.Body)
42 + return resp.StatusCode, string(b)
43 +}
44 +
45 +// TestDeviceFlowAPI walks through the full RFC 8628 exchange.
46 +func TestDeviceFlowAPI(t *testing.T) {
47 + app, authSvc, userSvc, _ := setupTestApp(t)
48 + ctx := context.Background()
49 +
50 + u, err := userSvc.Register(ctx, "dev", "dev@example.com", "password123", true)
51 + if err != nil {
52 + t.Fatalf("register: %v", err)
53 + }
54 +
55 + resp := postForm(t, app, "/api/v1/device/code", "client_id=git-credential-polar")
56 + if resp.StatusCode != http.StatusOK {
57 + t.Fatalf("device/code status %d", resp.StatusCode)
58 + }
59 + var code struct {
60 + DeviceCode string `json:"device_code"`
61 + UserCode string `json:"user_code"`
62 + VerificationURI string `json:"verification_uri"`
63 + Interval int `json:"interval"`
64 + ExpiresIn int `json:"expires_in"`
65 + }
66 + if err := json.NewDecoder(resp.Body).Decode(&code); err != nil {
67 + t.Fatalf("decode device/code: %v", err)
68 + }
69 + if code.DeviceCode == "" || code.UserCode == "" || code.Interval <= 0 || code.ExpiresIn <= 0 {
70 + t.Fatalf("incomplete device code response: %+v", code)
71 + }
72 + if !strings.Contains(code.VerificationURI, "/login/device") {
73 + t.Fatalf("unexpected verification uri %q", code.VerificationURI)
74 + }
75 +
76 + // Pending exchange.
77 + resp = postForm(t, app, "/api/v1/device/token", "device_code="+code.DeviceCode)
78 + if resp.StatusCode != http.StatusTooManyRequests {
79 + t.Fatalf("expected 429 while pending, got %d", resp.StatusCode)
80 + }
81 + pendingBody, _ := io.ReadAll(resp.Body)
82 + if !strings.Contains(string(pendingBody), "authorization_pending") {
83 + t.Fatalf("expected authorization_pending, got %s", string(pendingBody))
84 + }
85 +
86 + // The verification page shows the pending grant.
87 + status, page := getPage(t, app, "/login/device?user_code="+code.UserCode)
88 + if status != http.StatusOK {
89 + t.Fatalf("device page status %d", status)
90 + }
91 + if !strings.Contains(page, code.UserCode) {
92 + t.Fatalf("device page missing user code")
93 + }
94 +
95 + // Approve and exchange.
96 + if err := authSvc.SetDeviceCodeStatus(ctx, code.UserCode, u.ID, auth.DeviceStatusApproved); err != nil {
97 + t.Fatalf("approve: %v", err)
98 + }
99 + resp = postForm(t, app, "/api/v1/device/token", "device_code="+code.DeviceCode)
100 + if resp.StatusCode != http.StatusOK {
101 + body, _ := io.ReadAll(resp.Body)
102 + t.Fatalf("token exchange status %d: %s", resp.StatusCode, string(body))
103 + }
104 + var token struct {
105 + AccessToken string `json:"access_token"`
106 + TokenType string `json:"token_type"`
107 + Username string `json:"username"`
108 + }
109 + if err := json.NewDecoder(resp.Body).Decode(&token); err != nil {
110 + t.Fatalf("decode token: %v", err)
111 + }
112 + if !strings.HasPrefix(token.AccessToken, "polar_") || token.Username != "dev" {
113 + t.Fatalf("unexpected token payload: %+v", token)
114 + }
115 +
116 + userID, err := authSvc.VerifyToken(ctx, token.AccessToken)
117 + if err != nil || userID != u.ID {
118 + t.Fatalf("issued token does not verify: id=%d err=%v", userID, err)
119 + }
120 +
121 + // The device code is single use.
122 + resp = postForm(t, app, "/api/v1/device/token", "device_code="+code.DeviceCode)
123 + if resp.StatusCode == http.StatusOK {
124 + t.Fatalf("device code must not be exchangeable twice")
125 + }
126 +}
127 +
128 +func gitRun(t *testing.T, dir string, args ...string) {
129 + t.Helper()
130 + cmd := exec.CommandContext(context.Background(), "git", args...)
131 + cmd.Dir = dir
132 + cmd.Env = append(os.Environ(), "GIT_TERMINAL_PROMPT=0")
133 + if out, err := cmd.CombinedOutput(); err != nil {
134 + t.Fatalf("git %v: %v (%s)", args, err, string(out))
135 + }
136 +}
137 +
138 +// pushCommit seeds the bare repository with a single commit on the given branch.
139 +func pushCommit(t *testing.T, barePath, branch, filename, content string) {
140 + t.Helper()
141 + work := t.TempDir()
142 + gitRun(t, work, "init", "-b", "main")
143 + gitRun(t, work, "config", "user.name", "Tester")
144 + gitRun(t, work, "config", "user.email", "tester@example.com")
145 + if err := os.WriteFile(filepath.Join(work, filename), []byte(content), 0o644); err != nil {
146 + t.Fatalf("write %s: %v", filename, err)
147 + }
148 + gitRun(t, work, "add", ".")
149 + gitRun(t, work, "commit", "-m", "add "+filename)
150 + pushRef := "HEAD:refs/heads/" + branch
151 + gitRun(t, work, "push", barePath, pushRef)
152 +}
153 +
154 +// pushBranchFromClone adds a branch with a new commit on top of the cloned
155 +// history of the given bare repository.
156 +func pushBranchFromClone(t *testing.T, barePath, branch, filename, content string) {
157 + t.Helper()
158 + work := filepath.Join(t.TempDir(), "clone")
159 + gitRun(t, t.TempDir(), "clone", barePath, work)
160 + gitRun(t, work, "config", "user.name", "Tester")
161 + gitRun(t, work, "config", "user.email", "tester@example.com")
162 + gitRun(t, work, "checkout", "-b", branch)
163 + if err := os.WriteFile(filepath.Join(work, filename), []byte(content), 0o644); err != nil {
164 + t.Fatalf("write %s: %v", filename, err)
165 + }
166 + gitRun(t, work, "add", ".")
167 + gitRun(t, work, "commit", "-m", "add "+filename)
168 + gitRun(t, work, "push", "origin", branch)
169 +}
170 +
171 +// TestForksCrossRepoPRAndReviews exercises the social features end to end.
172 +func TestForksCrossRepoPRAndReviews(t *testing.T) {
173 + app, _, userSvc, repoSvc := setupTestApp(t)
174 + ctx := context.Background()
175 +
176 + alice, err := userSvc.Register(ctx, "alice", "alice@example.com", "strongpassword", true)
177 + if err != nil {
178 + t.Fatalf("register alice: %v", err)
179 + }
180 + bob, err := userSvc.Register(ctx, "bob", "bob@example.com", "strongpassword", true)
181 + if err != nil {
182 + t.Fatalf("register bob: %v", err)
183 + }
184 +
185 + r, err := repoSvc.Create(ctx, alice, "engine", "Analytical Engine", false)
186 + if err != nil {
187 + t.Fatalf("create repo: %v", err)
188 + }
189 + basePath, _ := repoSvc.DiskPath("alice", "engine")
190 + pushCommit(t, basePath, "main", "file.txt", "base\n")
191 +
192 + // Fork and verify both the record and the on-disk copy.
193 + fork, err := repoSvc.Fork(ctx, r, bob, "")
194 + if err != nil {
195 + t.Fatalf("fork: %v", err)
196 + }
197 + if fork.ForkedFromRepoID == nil || *fork.ForkedFromRepoID != r.ID {
198 + t.Fatalf("fork missing origin link")
199 + }
200 + if fork.ForkedFromOwner != "alice" || fork.ForkedFromName != "engine" {
201 + t.Fatalf("fork origin metadata wrong: %+v", fork)
202 + }
203 + forkPath, _ := repoSvc.DiskPath("bob", "engine")
204 + if _, err := os.Stat(filepath.Join(forkPath, "HEAD")); err != nil {
205 + t.Fatalf("fork bare repository missing on disk: %v", err)
206 + }
207 +
208 + found, err := repoSvc.FindForkByOwner(ctx, r.ID, bob.ID)
209 + if err != nil || found == nil || found.ID != fork.ID {
210 + t.Fatalf("FindForkByOwner failed: %+v err=%v", found, err)
211 + }
212 + forks, err := repoSvc.ListForks(ctx, r.ID, 10)
213 + if err != nil || len(forks) != 1 {
214 + t.Fatalf("ListForks expected 1, got %d err=%v", len(forks), err)
215 + }
216 +
217 + // Repository pages expose the fork relationship.
218 + status, page := getPage(t, app, "/bob/engine")
219 + if status != http.StatusOK || !strings.Contains(page, "/alice/engine") {
220 + t.Fatalf("fork page should link to the origin repository (status %d)", status)
221 + }
222 + status, page = getPage(t, app, "/alice/engine/forks")
223 + if status != http.StatusOK || !strings.Contains(page, "bob/engine") {
224 + t.Fatalf("forks page should list bob/engine (status %d)", status)
225 + }
226 +
227 + // Bob pushes a feature branch into his fork and opens a cross-fork PR.
228 + pushBranchFromClone(t, forkPath, "feature", "feature.txt", "feature")
229 +
230 + pr, err := repoSvc.CreatePullRequest(ctx, r.ID, bob.ID, "Add feature", "Implements feature", "main", "feature", &fork.ID)
231 + if err != nil {
232 + t.Fatalf("create cross-fork PR: %v", err)
233 + }
234 + if pr.HeadRepoID == nil || *pr.HeadRepoID != fork.ID || pr.HeadRepoOwner != "bob" {
235 + t.Fatalf("cross-fork PR metadata wrong: %+v", pr)
236 + }
237 +
238 + status, page = getPage(t, app, "/alice/engine/pulls/1")
239 + if status != http.StatusOK {
240 + t.Fatalf("pull detail status %d", status)
241 + }
242 + if !strings.Contains(page, "bob/engine:feature") {
243 + t.Fatalf("pull detail missing cross-fork head label")
244 + }
245 + if !strings.Contains(page, "Add feature") {
246 + t.Fatalf("pull detail missing title")
247 + }
248 +
249 + // Reviews: alice approves, the verdict shows up on the page.
250 + if err := repoSvc.UpsertReview(ctx, pr.ID, alice.ID, repo.ReviewApproved, "looks good"); err != nil {
251 + t.Fatalf("upsert review: %v", err)
252 + }
253 + reviews, err := repoSvc.ListReviews(ctx, pr.ID)
254 + if err != nil || len(reviews) != 1 || reviews[0].State != repo.ReviewApproved {
255 + t.Fatalf("ListReviews unexpected: %+v err=%v", reviews, err)
256 + }
257 + approved, changesRequested := repoSvc.ReviewCounts(ctx, pr.ID)
258 + if approved != 1 || changesRequested != 0 {
259 + t.Fatalf("ReviewCounts = %d/%d", approved, changesRequested)
260 + }
261 + // Changing the verdict updates the same review row.
262 + if err := repoSvc.UpsertReview(ctx, pr.ID, alice.ID, repo.ReviewChangesRequested, "needs tests"); err != nil {
263 + t.Fatalf("update review: %v", err)
264 + }
265 + reviews, _ = repoSvc.ListReviews(ctx, pr.ID)
266 + if len(reviews) != 1 || reviews[0].State != repo.ReviewChangesRequested || reviews[0].Body != "needs tests" {
267 + t.Fatalf("review update failed: %+v", reviews)
268 + }
269 + status, page = getPage(t, app, "/alice/engine/pulls/1")
270 + if status != http.StatusOK || !strings.Contains(page, "needs tests") {
271 + t.Fatalf("pull page should render reviews")
272 + }
273 +
274 + // Cross-fork merge produces a merge commit on the base repository.
275 + if err := repoSvc.MergePullRequest(ctx, r, pr, "Alice", "alice@example.com", alice.ID); err != nil {
276 + t.Fatalf("cross-fork merge: %v", err)
277 + }
278 + merged, err := repoSvc.GetPullRequest(ctx, r.ID, 1)
279 + if err != nil || merged.Status != "merged" {
280 + t.Fatalf("expected merged PR, got %+v err=%v", merged, err)
281 + }
282 +
283 + // Collaborators on a private repository.
284 + priv, err := repoSvc.Create(ctx, alice, "vault", "Secret", true)
285 + if err != nil {
286 + t.Fatalf("create private repo: %v", err)
287 + }
288 + if repoSvc.CanRead(ctx, priv, bob) {
289 + t.Fatalf("bob must not read the private repo before being added")
290 + }
291 + if err := repoSvc.AddCollaborator(ctx, priv, "bob", repo.RoleRead); err != nil {
292 + t.Fatalf("add collaborator: %v", err)
293 + }
294 + if !repoSvc.CanRead(ctx, priv, bob) {
295 + t.Fatalf("bob should read the private repo with the read role")
296 + }
297 + if repoSvc.CanWrite(ctx, priv, bob) {
298 + t.Fatalf("bob must not write with the read role")
299 + }
300 + if err := repoSvc.AddCollaborator(ctx, priv, "bob", repo.RoleWrite); err != nil {
301 + t.Fatalf("upgrade collaborator: %v", err)
302 + }
303 + if !repoSvc.CanWrite(ctx, priv, bob) {
304 + t.Fatalf("bob should write with the write role")
305 + }
306 + if err := repoSvc.AddCollaborator(ctx, priv, "alice", repo.RoleWrite); err != repo.ErrCannotAddOwner {
307 + t.Fatalf("adding the owner should fail, got %v", err)
308 + }
309 + if err := repoSvc.AddCollaborator(ctx, priv, "ghost", repo.RoleRead); err != repo.ErrCollabUserNotFound {
310 + t.Fatalf("unknown user should fail, got %v", err)
311 + }
312 + collabs, err := repoSvc.ListCollaborators(ctx, priv.ID)
313 + if err != nil || len(collabs) != 1 || collabs[0].Username != "bob" || collabs[0].Role != repo.RoleWrite {
314 + t.Fatalf("ListCollaborators unexpected: %+v err=%v", collabs, err)
315 + }
316 + if err := repoSvc.RemoveCollaborator(ctx, priv.ID, bob.ID); err != nil {
317 + t.Fatalf("remove collaborator: %v", err)
318 + }
319 + if repoSvc.CanRead(ctx, priv, bob) {
320 + t.Fatalf("bob must lose access after removal")
321 + }
322 +}
internal/web/middleware/middleware.go
+223 -0
... ... @@ -0,0 +1,223 @@
1 +package middleware
2 +
3 +import (
4 + "crypto/rand"
5 + "crypto/subtle"
6 + "encoding/hex"
7 + "log/slog"
8 + "strings"
9 + "sync"
10 + "time"
11 +
12 + "polar/internal/auth"
13 + "polar/internal/i18n"
14 + "polar/internal/user"
15 +
16 + "github.com/gofiber/fiber/v2"
17 +)
18 +
19 +const (
20 + SessionCookieName = "polar_session"
21 + CSRFCookieName = "polar_csrf"
22 + ThemeCookieName = "polar_theme"
23 + LangCookieName = "polar_lang"
24 +)
25 +
26 +func SecurityHeaders() fiber.Handler {
27 + return func(c *fiber.Ctx) error {
28 + c.Set("X-Content-Type-Options", "nosniff")
29 + c.Set("X-Frame-Options", "DENY")
30 + c.Set("Referrer-Policy", "strict-origin-when-cross-origin")
31 + c.Set("Content-Security-Policy", "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self'; connect-src 'self'; frame-ancestors 'none'")
32 + return c.Next()
33 + }
34 +}
35 +
36 +func RecoverAndLog(logger *slog.Logger) fiber.Handler {
37 + return func(c *fiber.Ctx) (err error) {
38 + start := time.Now()
39 + defer func() {
40 + if r := recover(); r != nil {
41 + logger.Error("panic recovered", "panic", r, "path", c.Path())
42 + _ = c.Status(fiber.StatusInternalServerError).SendString("Internal Server Error")
43 + }
44 + }()
45 +
46 + err = c.Next()
47 + dur := time.Since(start)
48 + if !strings.HasPrefix(c.Path(), "/static/") && c.Path() != "/healthz" {
49 + logger.Info("http request",
50 + "method", c.Method(),
51 + "path", c.Path(),
52 + "status", c.Response().StatusCode(),
53 + "duration_ms", dur.Milliseconds(),
54 + )
55 + }
56 + return err
57 + }
58 +}
59 +
60 +func LocaleAndTheme(defaultLang string) fiber.Handler {
61 + return func(c *fiber.Ctx) error {
62 + lang := c.Query("lang")
63 + if lang == "ru" || lang == "en" {
64 + c.Cookie(&fiber.Cookie{
65 + Name: LangCookieName,
66 + Value: lang,
67 + Path: "/",
68 + MaxAge: 365 * 24 * 3600,
69 + HTTPOnly: true,
70 + SameSite: "Lax",
71 + })
72 + } else {
73 + lang = c.Cookies(LangCookieName, defaultLang)
74 + }
75 + c.Locals("lang", i18n.Normalize(lang))
76 +
77 + theme := c.Cookies(ThemeCookieName, "system")
78 + switch theme {
79 + case "light", "dark", "system":
80 + default:
81 + theme = "system"
82 + }
83 + c.Locals("theme", theme)
84 + return c.Next()
85 + }
86 +}
87 +
88 +func SessionAuth(authSvc *auth.Service, userSvc *user.Service) fiber.Handler {
89 + return func(c *fiber.Ctx) error {
90 + sessID := c.Cookies(SessionCookieName)
91 + if sessID != "" {
92 + if sess, err := authSvc.GetSession(c.UserContext(), sessID); err == nil && sess != nil {
93 + if u, err := userSvc.GetByID(c.UserContext(), sess.UserID); err == nil && u != nil {
94 + c.Locals("user", u)
95 + c.Locals("session", sess)
96 + c.Locals("csrf_token", sess.CSRFToken)
97 + return c.Next()
98 + }
99 + }
100 + }
101 +
102 + // Anonymous CSRF token via cookie
103 + csrfCookie := c.Cookies(CSRFCookieName)
104 + if len(csrfCookie) < 32 {
105 + b := make([]byte, 24)
106 + _, _ = rand.Read(b)
107 + csrfCookie = hex.EncodeToString(b)
108 + c.Cookie(&fiber.Cookie{
109 + Name: CSRFCookieName,
110 + Value: csrfCookie,
111 + Path: "/",
112 + MaxAge: 86400,
113 + HTTPOnly: true,
114 + SameSite: "Lax",
115 + })
116 + }
117 + c.Locals("csrf_token", csrfCookie)
118 + return c.Next()
119 + }
120 +}
121 +
122 +func CSRFProtection() fiber.Handler {
123 + return func(c *fiber.Ctx) error {
124 + method := c.Method()
125 + if method == fiber.MethodGet || method == fiber.MethodHead || method == fiber.MethodOptions {
126 + return c.Next()
127 + }
128 +
129 + // Git Smart HTTP endpoints use Basic Auth + Token
130 + p := c.Path()
131 + if strings.HasSuffix(p, "/git-upload-pack") || strings.HasSuffix(p, "/git-receive-pack") {
132 + return c.Next()
133 + }
134 +
135 + // Device flow endpoints are unauthenticated machine-to-machine calls.
136 + if strings.HasPrefix(p, "/api/v1/device/") {
137 + return c.Next()
138 + }
139 +
140 + expected, _ := c.Locals("csrf_token").(string)
141 + provided := c.FormValue("_csrf")
142 + if provided == "" {
143 + provided = c.Get("X-CSRF-Token")
144 + }
145 +
146 + if expected == "" || provided == "" || subtle.ConstantTimeCompare([]byte(expected), []byte(provided)) != 1 {
147 + return c.Status(fiber.StatusForbidden).SendString("CSRF token mismatch")
148 + }
149 + return c.Next()
150 + }
151 +}
152 +
153 +func RequireAuth() fiber.Handler {
154 + return func(c *fiber.Ctx) error {
155 + if CurrentUser(c) == nil {
156 + return c.Redirect("/login", fiber.StatusSeeOther)
157 + }
158 + return c.Next()
159 + }
160 +}
161 +
162 +func RequireAdmin() fiber.Handler {
163 + return func(c *fiber.Ctx) error {
164 + u := CurrentUser(c)
165 + if u == nil {
166 + return c.Redirect("/login", fiber.StatusSeeOther)
167 + }
168 + if !u.IsAdmin {
169 + return c.Status(fiber.StatusForbidden).SendString("Forbidden: administrator access required")
170 + }
171 + return c.Next()
172 + }
173 +}
174 +
175 +func CurrentUser(c *fiber.Ctx) *user.User {
176 + u, _ := c.Locals("user").(*user.User)
177 + return u
178 +}
179 +
180 +type rateBucket struct {
181 + count int
182 + resetAt time.Time
183 +}
184 +
185 +type RateLimiter struct {
186 + mu sync.Mutex
187 + buckets map[string]*rateBucket
188 + limit int
189 + window time.Duration
190 +}
191 +
192 +func NewRateLimiter(limit int, window time.Duration) *RateLimiter {
193 + return &RateLimiter{
194 + buckets: make(map[string]*rateBucket),
195 + limit: limit,
196 + window: window,
197 + }
198 +}
199 +
200 +func (rl *RateLimiter) Handler() fiber.Handler {
201 + return func(c *fiber.Ctx) error {
202 + ip := c.IP()
203 + if ip == "" {
204 + ip = "local"
205 + }
206 + now := time.Now()
207 +
208 + rl.mu.Lock()
209 + b, exists := rl.buckets[ip]
210 + if !exists || now.After(b.resetAt) {
211 + b = &rateBucket{count: 0, resetAt: now.Add(rl.window)}
212 + rl.buckets[ip] = b
213 + }
214 + b.count++
215 + over := b.count > rl.limit
216 + rl.mu.Unlock()
217 +
218 + if over {
219 + return c.Status(fiber.StatusTooManyRequests).SendString("Too many requests, please try again in a minute.")
220 + }
221 + return c.Next()
222 + }
223 +}
internal/web/static/css/app.css
+1367 -0
... ... @@ -0,0 +1,1367 @@
1 +/* Polar Design System — Minimalist Sidebar Layout, 3 Themes (light, dark, system) */
2 +
3 +@font-face {
4 + font-family: 'Inter';
5 + font-style: normal;
6 + font-weight: 400 600;
7 + font-display: swap;
8 + src: url('/static/fonts/Inter-Regular.woff2') format('woff2');
9 +}
10 +
11 +@font-face {
12 + font-family: 'Inter';
13 + font-style: normal;
14 + font-weight: 400 600;
15 + font-display: swap;
16 + src: url('/static/fonts/Inter-Cyrillic.woff2') format('woff2');
17 + unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
18 +}
19 +
20 +@font-face {
21 + font-family: 'JetBrains Mono';
22 + font-style: normal;
23 + font-weight: 400 600;
24 + font-display: swap;
25 + src: url('/static/fonts/JetBrainsMono-Regular.woff2') format('woff2');
26 +}
27 +
28 +:root,
29 +html[data-theme="light"] {
30 + --background: 0 0% 100%;
31 + --foreground: 0 0% 6.7%;
32 + --card: 0 0% 98%;
33 + --card-foreground: 0 0% 6.7%;
34 + --popover: 0 0% 100%;
35 + --popover-foreground: 0 0% 6.7%;
36 + --primary: 0 0% 6.7%;
37 + --primary-foreground: 0 0% 100%;
38 + --secondary: 0 0% 95%;
39 + --secondary-foreground: 0 0% 6.7%;
40 + --muted: 0 0% 95%;
41 + --muted-foreground: 0 0% 45%;
42 + --accent: 0 0% 93%;
43 + --accent-foreground: 0 0% 6.7%;
44 + --destructive: 0 72% 46%;
45 + --destructive-foreground: 0 0% 100%;
46 + --border: 0 0% 90%;
47 + --input: 0 0% 89%;
48 + --ring: 0 0% 6.7%;
49 + --radius: 0.45rem;
50 +
51 + --diff-add-bg: 142 70% 94%;
52 + --diff-add-fg: 142 76% 22%;
53 + --diff-del-bg: 0 86% 95%;
54 + --diff-del-fg: 0 72% 35%;
55 +
56 + --syntax-kw: 262 72% 42%;
57 + --syntax-str: 142 68% 28%;
58 + --syntax-cmt: 0 0% 46%;
59 + --syntax-fn: 215 80% 42%;
60 + --syntax-num: 24 85% 38%;
61 + --syntax-type: 190 78% 32%;
62 + --syntax-op: 0 0% 25%;
63 + color-scheme: light;
64 +}
65 +
66 +html[data-theme="dark"] {
67 + --background: 0 0% 6.7%;
68 + --foreground: 0 0% 100%;
69 + --card: 0 0% 9%;
70 + --card-foreground: 0 0% 100%;
71 + --popover: 0 0% 9.5%;
72 + --popover-foreground: 0 0% 100%;
73 + --primary: 0 0% 100%;
74 + --primary-foreground: 0 0% 6.7%;
75 + --secondary: 0 0% 13%;
76 + --secondary-foreground: 0 0% 100%;
77 + --muted: 0 0% 12%;
78 + --muted-foreground: 0 0% 65%;
79 + --accent: 0 0% 15%;
80 + --accent-foreground: 0 0% 100%;
81 + --destructive: 0 72% 58%;
82 + --destructive-foreground: 0 0% 98%;
83 + --border: 0 0% 16%;
84 + --input: 0 0% 17%;
85 + --ring: 0 0% 85%;
86 +
87 + --diff-add-bg: 142 50% 12%;
88 + --diff-add-fg: 142 70% 75%;
89 + --diff-del-bg: 0 55% 14%;
90 + --diff-del-fg: 0 80% 78%;
91 +
92 + --syntax-kw: 265 85% 78%;
93 + --syntax-str: 142 65% 70%;
94 + --syntax-cmt: 0 0% 54%;
95 + --syntax-fn: 210 90% 74%;
96 + --syntax-num: 32 90% 72%;
97 + --syntax-type: 188 80% 68%;
98 + --syntax-op: 0 0% 78%;
99 + color-scheme: dark;
100 +}
101 +
102 +@media (prefers-color-scheme: dark) {
103 + html[data-theme="system"] {
104 + --background: 0 0% 6.7%;
105 + --foreground: 0 0% 100%;
106 + --card: 0 0% 9%;
107 + --card-foreground: 0 0% 100%;
108 + --popover: 0 0% 9.5%;
109 + --popover-foreground: 0 0% 100%;
110 + --primary: 0 0% 100%;
111 + --primary-foreground: 0 0% 6.7%;
112 + --secondary: 0 0% 13%;
113 + --secondary-foreground: 0 0% 100%;
114 + --muted: 0 0% 12%;
115 + --muted-foreground: 0 0% 65%;
116 + --accent: 0 0% 15%;
117 + --accent-foreground: 0 0% 100%;
118 + --destructive: 0 72% 58%;
119 + --destructive-foreground: 0 0% 98%;
120 + --border: 0 0% 16%;
121 + --input: 0 0% 17%;
122 + --ring: 0 0% 85%;
123 + --diff-add-bg: 142 50% 12%;
124 + --diff-add-fg: 142 70% 75%;
125 + --diff-del-bg: 0 55% 14%;
126 + --diff-del-fg: 0 80% 78%;
127 + --syntax-kw: 265 85% 78%;
128 + --syntax-str: 142 65% 70%;
129 + --syntax-cmt: 0 0% 54%;
130 + --syntax-fn: 210 90% 74%;
131 + --syntax-num: 32 90% 72%;
132 + --syntax-type: 188 80% 68%;
133 + --syntax-op: 0 0% 78%;
134 + color-scheme: dark;
135 + }
136 +}
137 +
138 +*, *::before, *::after {
139 + box-sizing: border-box;
140 + border-color: hsl(var(--border));
141 +}
142 +
143 +html {
144 + font-family: 'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
145 + font-size: 13.5px;
146 + line-height: 1.5;
147 + -webkit-font-smoothing: antialiased;
148 + background-color: hsl(var(--background));
149 + color: hsl(var(--foreground));
150 + overflow-y: scroll;
151 +}
152 +
153 +body {
154 + margin: 0;
155 + min-height: 100vh;
156 + background-color: hsl(var(--background));
157 + color: hsl(var(--foreground));
158 +}
159 +
160 +code, pre, kbd, .font-mono {
161 + font-family: 'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
162 +}
163 +
164 +a {
165 + color: inherit;
166 + text-decoration: none;
167 +}
168 +
169 +@media (prefers-reduced-motion: reduce) {
170 + *, *::before, *::after {
171 + animation-duration: 0.01ms !important;
172 + transition-duration: 0.01ms !important;
173 + }
174 +}
175 +
176 +:focus-visible {
177 + outline: 2px solid hsl(var(--ring));
178 + outline-offset: 2px;
179 +}
180 +
181 +/* App Shell: Left Sidebar + Right Main Content */
182 +.app-shell {
183 + display: flex;
184 + flex-direction: row;
185 + align-items: stretch;
186 + min-height: 100vh;
187 + width: 100%;
188 +}
189 +
190 +.app-sidebar {
191 + width: 236px;
192 + min-width: 236px;
193 + max-width: 236px;
194 + flex: 0 0 236px;
195 + border-right: 1px solid hsl(var(--border));
196 + background-color: hsl(var(--card));
197 + display: none;
198 + flex-direction: column;
199 + justify-content: space-between;
200 + position: sticky;
201 + top: 0;
202 + height: 100vh;
203 + overflow-y: auto;
204 + overflow-x: hidden;
205 + padding: 0.85rem 0.75rem;
206 + user-select: none;
207 + transition:
208 + width 200ms cubic-bezier(0.16, 1, 0.3, 1),
209 + min-width 200ms cubic-bezier(0.16, 1, 0.3, 1),
210 + max-width 200ms cubic-bezier(0.16, 1, 0.3, 1),
211 + flex-basis 200ms cubic-bezier(0.16, 1, 0.3, 1),
212 + padding 200ms cubic-bezier(0.16, 1, 0.3, 1),
213 + border-color 200ms cubic-bezier(0.16, 1, 0.3, 1);
214 +}
215 +
216 +.sidebar-inner {
217 + width: 218px;
218 + min-width: 218px;
219 + height: 100%;
220 + display: flex;
221 + flex-direction: column;
222 + justify-content: space-between;
223 + transition:
224 + opacity 150ms cubic-bezier(0.16, 1, 0.3, 1),
225 + transform 200ms cubic-bezier(0.16, 1, 0.3, 1);
226 +}
227 +
228 +html[data-sidebar="collapsed"] .app-sidebar {
229 + width: 0;
230 + min-width: 0;
231 + max-width: 0;
232 + flex-basis: 0;
233 + padding-left: 0;
234 + padding-right: 0;
235 + border-right-color: transparent;
236 +}
237 +
238 +html[data-sidebar="collapsed"] .sidebar-inner {
239 + opacity: 0;
240 + transform: translateX(-8px);
241 + pointer-events: none;
242 +}
243 +
244 +.sidebar-expand-btn {
245 + position: fixed;
246 + top: 0.85rem;
247 + left: 0.85rem;
248 + z-index: 50;
249 + display: none;
250 + align-items: center;
251 + justify-content: center;
252 + width: 2rem;
253 + height: 2rem;
254 + border-radius: var(--radius);
255 + border: 1px solid hsl(var(--border));
256 + background-color: hsl(var(--card));
257 + color: hsl(var(--muted-foreground));
258 + box-shadow: 0 2px 8px rgba(0, 0, 0, 0.12);
259 + cursor: pointer;
260 + opacity: 0;
261 + transform: translateX(-6px) scale(0.95);
262 + pointer-events: none;
263 + transition:
264 + opacity 160ms cubic-bezier(0.16, 1, 0.3, 1),
265 + transform 160ms cubic-bezier(0.16, 1, 0.3, 1),
266 + background-color 120ms ease,
267 + color 120ms ease;
268 +}
269 +
270 +.sidebar-expand-btn:hover {
271 + background-color: hsl(var(--accent));
272 + color: hsl(var(--foreground));
273 +}
274 +
275 +.mobile-topbar {
276 + display: flex;
277 + align-items: center;
278 + justify-content: space-between;
279 + height: 2.75rem;
280 + padding: 0 0.85rem;
281 + border-bottom: 1px solid hsl(var(--border));
282 + background-color: hsl(var(--card));
283 +}
284 +
285 +.app-col {
286 + flex: 1 1 0%;
287 + min-width: 0;
288 + width: 100%;
289 + display: flex;
290 + flex-direction: column;
291 + min-height: 100vh;
292 +}
293 +
294 +.app-main {
295 + flex: 1 1 auto;
296 + width: 100%;
297 + padding: 1.5rem 1.25rem 3rem;
298 +}
299 +
300 +@keyframes pageFadeIn {
301 + from {
302 + opacity: 0;
303 + transform: translateY(4px);
304 + }
305 + to {
306 + opacity: 1;
307 + transform: translateY(0);
308 + }
309 +}
310 +
311 +.app-main > .container,
312 +.app-main > .container-narrow {
313 + animation: pageFadeIn 160ms cubic-bezier(0.16, 1, 0.3, 1);
314 +}
315 +
316 +@media (min-width: 640px) {
317 + .app-sidebar {
318 + display: flex;
319 + }
320 + .sidebar-expand-btn {
321 + display: inline-flex;
322 + }
323 + html[data-sidebar="collapsed"] .sidebar-expand-btn {
324 + opacity: 1;
325 + transform: translateX(0) scale(1);
326 + pointer-events: auto;
327 + }
328 + .mobile-topbar {
329 + display: none;
330 + }
331 + .app-main {
332 + padding: 2rem 2.5rem 3.5rem;
333 + }
334 +}
335 +
336 +/* Unified Container Width — identical across Code, Commits, and Settings */
337 +.container,
338 +.container-narrow {
339 + width: 100%;
340 + max-width: 960px;
341 + margin-left: auto;
342 + margin-right: auto;
343 +}
344 +
345 +/* Sidebar Navigation */
346 +.nav-item {
347 + display: flex;
348 + align-items: center;
349 + justify-content: space-between;
350 + gap: 0.5rem;
351 + height: 1.95rem;
352 + padding: 0 0.55rem;
353 + border-radius: var(--radius);
354 + font-size: 0.85rem;
355 + color: hsl(var(--muted-foreground));
356 + transition: background-color 140ms ease, color 140ms ease, transform 120ms cubic-bezier(0.16, 1, 0.3, 1);
357 + cursor: pointer;
358 + border: 0;
359 + background: transparent;
360 + width: 100%;
361 + text-align: left;
362 + overflow: hidden;
363 +}
364 +.nav-item:hover,
365 +.nav-item.active {
366 + background-color: hsl(var(--accent));
367 + color: hsl(var(--foreground));
368 +}
369 +.nav-item:active {
370 + transform: scale(0.985);
371 +}
372 +.nav-section-label {
373 + display: flex;
374 + align-items: center;
375 + justify-content: space-between;
376 + padding: 0.45rem 0.55rem 0.25rem;
377 + font-size: 0.7rem;
378 + font-weight: 600;
379 + text-transform: uppercase;
380 + letter-spacing: 0.04em;
381 + color: hsl(var(--muted-foreground));
382 +}
383 +
384 +/* Segmented Theme Control in Sidebar */
385 +.segmented {
386 + display: grid;
387 + grid-template-columns: repeat(3, minmax(0, 1fr));
388 + gap: 2px;
389 + padding: 2px;
390 + width: 100%;
391 + background-color: hsl(var(--muted));
392 + border: 1px solid hsl(var(--border));
393 + border-radius: var(--radius);
394 +}
395 +.segmented-btn {
396 + display: inline-flex;
397 + align-items: center;
398 + justify-content: center;
399 + gap: 0.25rem;
400 + height: 1.65rem;
401 + padding: 0 0.2rem;
402 + border: 0;
403 + border-radius: calc(var(--radius) - 2px);
404 + background: transparent;
405 + color: hsl(var(--muted-foreground));
406 + font-size: 0.72rem;
407 + font-weight: 500;
408 + cursor: pointer;
409 + overflow: hidden;
410 + text-overflow: ellipsis;
411 + white-space: nowrap;
412 + transition: background-color 150ms cubic-bezier(0.16, 1, 0.3, 1), color 150ms ease, box-shadow 150ms ease, transform 120ms ease;
413 +}
414 +.segmented-btn:hover {
415 + color: hsl(var(--foreground));
416 +}
417 +.segmented-btn:active {
418 + transform: scale(0.96);
419 +}
420 +.segmented-btn.active {
421 + background-color: hsl(var(--background));
422 + color: hsl(var(--foreground));
423 + box-shadow: 0 1px 2px rgba(0, 0, 0, 0.08);
424 +}
425 +
426 +/* Icons */
427 +.icon {
428 + display: inline-block;
429 + vertical-align: middle;
430 + flex-shrink: 0;
431 + stroke: currentColor;
432 +}
433 +.size-3 { width: 0.75rem; height: 0.75rem; }
434 +.size-3\.5 { width: 0.875rem; height: 0.875rem; }
435 +.size-4 { width: 1rem; height: 1rem; }
436 +.size-5 { width: 1.25rem; height: 1.25rem; }
437 +.size-6 { width: 1.5rem; height: 1.5rem; }
438 +
439 +/* Buttons */
440 +.btn {
441 + display: inline-flex;
442 + align-items: center;
443 + justify-content: center;
444 + gap: 0.4rem;
445 + white-space: nowrap;
446 + border-radius: var(--radius);
447 + font-size: 0.85rem;
448 + font-weight: 500;
449 + line-height: 1;
450 + height: 1.95rem;
451 + padding: 0 0.7rem;
452 + border: 1px solid transparent;
453 + cursor: pointer;
454 + transition: background-color 140ms ease, border-color 140ms ease, color 140ms ease, opacity 140ms ease, transform 120ms cubic-bezier(0.16, 1, 0.3, 1);
455 + user-select: none;
456 +}
457 +.btn:active:not(:disabled) {
458 + transform: scale(0.97);
459 +}
460 +.btn:disabled {
461 + opacity: 0.5;
462 + pointer-events: none;
463 +}
464 +.btn-sm {
465 + height: 1.7rem;
466 + padding: 0 0.5rem;
467 + font-size: 0.78rem;
468 +}
469 +.btn-lg {
470 + height: 2.3rem;
471 + padding: 0 1rem;
472 + font-size: 0.92rem;
473 +}
474 +.btn-icon {
475 + width: 1.9rem;
476 + height: 1.9rem;
477 + padding: 0;
478 +}
479 +.btn-default, .btn-primary {
480 + background-color: hsl(var(--primary));
481 + color: hsl(var(--primary-foreground));
482 +}
483 +.btn-default:hover, .btn-primary:hover {
484 + opacity: 0.9;
485 +}
486 +.btn-secondary {
487 + background-color: hsl(var(--secondary));
488 + color: hsl(var(--secondary-foreground));
489 + border-color: hsl(var(--border));
490 +}
491 +.btn-secondary:hover {
492 + background-color: hsl(var(--accent));
493 +}
494 +.btn-outline {
495 + background-color: transparent;
496 + color: hsl(var(--foreground));
497 + border-color: hsl(var(--border));
498 +}
499 +.btn-outline:hover {
500 + background-color: hsl(var(--accent));
501 + color: hsl(var(--accent-foreground));
502 +}
503 +.btn-ghost {
504 + background-color: transparent;
505 + color: hsl(var(--muted-foreground));
506 +}
507 +.btn-ghost:hover {
508 + background-color: hsl(var(--accent));
509 + color: hsl(var(--foreground));
510 +}
511 +.btn-destructive {
512 + background-color: hsl(var(--destructive));
513 + color: hsl(var(--destructive-foreground));
514 +}
515 +.btn-destructive:hover {
516 + opacity: 0.9;
517 +}
518 +
519 +/* Inputs, Selects, Textareas */
520 +.input, .select, .textarea {
521 + display: block;
522 + width: 100%;
523 + border-radius: var(--radius);
524 + border: 1px solid hsl(var(--input));
525 + background-color: hsl(var(--background));
526 + color: hsl(var(--foreground));
527 + font-size: 0.85rem;
528 + padding: 0.35rem 0.6rem;
529 + transition: border-color 100ms ease;
530 +}
531 +.input, .select {
532 + height: 2.05rem;
533 +}
534 +.textarea {
535 + min-height: 4rem;
536 + resize: vertical;
537 +}
538 +.input:focus, .select:focus, .textarea:focus {
539 + outline: none;
540 + border-color: hsl(var(--ring));
541 +}
542 +.input::placeholder, .textarea::placeholder {
543 + color: hsl(var(--muted-foreground));
544 +}
545 +.label {
546 + display: block;
547 + font-size: 0.8rem;
548 + font-weight: 500;
549 + margin-bottom: 0.3rem;
550 + color: hsl(var(--foreground));
551 +}
552 +.field-hint {
553 + font-size: 0.74rem;
554 + color: hsl(var(--muted-foreground));
555 + margin-top: 0.25rem;
556 +}
557 +
558 +/* Switch */
559 +.switch {
560 + position: relative;
561 + display: inline-flex;
562 + width: 2.1rem;
563 + height: 1.2rem;
564 + flex-shrink: 0;
565 + cursor: pointer;
566 + align-items: center;
567 + border-radius: 9999px;
568 + border: 1px solid hsl(var(--border));
569 + background-color: hsl(var(--muted));
570 +}
571 +.switch input {
572 + opacity: 0;
573 + width: 0;
574 + height: 0;
575 + position: absolute;
576 +}
577 +.switch-thumb {
578 + pointer-events: none;
579 + display: block;
580 + width: 0.85rem;
581 + height: 0.85rem;
582 + border-radius: 9999px;
583 + background-color: hsl(var(--foreground));
584 + transform: translateX(0.15rem);
585 + transition: transform 100ms ease;
586 +}
587 +.switch input:checked ~ .switch-thumb {
588 + transform: translateX(0.95rem);
589 +}
590 +
591 +/* Cards */
592 +.card {
593 + border-radius: var(--radius);
594 + border: 1px solid hsl(var(--border));
595 + background-color: hsl(var(--card));
596 + color: hsl(var(--card-foreground));
597 +}
598 +.card-header {
599 + padding: 0.7rem 0.9rem;
600 + border-bottom: 1px solid hsl(var(--border));
601 + display: flex;
602 + align-items: center;
603 + justify-content: space-between;
604 + gap: 0.75rem;
605 +}
606 +.card-body {
607 + padding: 0.9rem;
608 +}
609 +.card-footer {
610 + padding: 0.65rem 0.9rem;
611 + border-top: 1px solid hsl(var(--border));
612 + background-color: hsl(var(--muted) / 0.3);
613 +}
614 +
615 +/* Badges */
616 +.badge {
617 + display: inline-flex;
618 + align-items: center;
619 + gap: 0.25rem;
620 + border-radius: 9999px;
621 + border: 1px solid hsl(var(--border));
622 + padding: 0.08rem 0.45rem;
623 + font-size: 0.72rem;
624 + font-weight: 500;
625 + line-height: 1.3;
626 + color: hsl(var(--foreground));
627 + background-color: hsl(var(--secondary));
628 +}
629 +.badge-outline {
630 + background-color: transparent;
631 + color: hsl(var(--muted-foreground));
632 +}
633 +.badge-primary {
634 + background-color: hsl(var(--primary));
635 + color: hsl(var(--primary-foreground));
636 + border-color: transparent;
637 +}
638 +.badge-destructive {
639 + background-color: hsl(var(--destructive) / 0.12);
640 + color: hsl(var(--destructive));
641 + border-color: hsl(var(--destructive) / 0.3);
642 +}
643 +
644 +/* Kbd */
645 +kbd, .kbd {
646 + display: inline-flex;
647 + align-items: center;
648 + justify-content: center;
649 + min-width: 1.25rem;
650 + height: 1.15rem;
651 + padding: 0 0.28rem;
652 + font-size: 0.68rem;
653 + font-weight: 500;
654 + line-height: 1;
655 + color: hsl(var(--muted-foreground));
656 + background-color: hsl(var(--muted));
657 + border: 1px solid hsl(var(--border));
658 + border-radius: 0.25rem;
659 +}
660 +
661 +/* Avatar */
662 +.avatar {
663 + display: inline-flex;
664 + align-items: center;
665 + justify-content: center;
666 + width: 1.45rem;
667 + height: 1.45rem;
668 + border-radius: 9999px;
669 + background-color: hsl(var(--secondary));
670 + border: 1px solid hsl(var(--border));
671 + font-size: 0.7rem;
672 + font-weight: 600;
673 + color: hsl(var(--foreground));
674 + text-transform: uppercase;
675 + flex-shrink: 0;
676 + overflow: hidden;
677 +}
678 +.avatar-img {
679 + width: 100%;
680 + height: 100%;
681 + object-fit: cover;
682 + display: block;
683 +}
684 +.avatar-lg {
685 + width: 2.3rem;
686 + height: 2.3rem;
687 + font-size: 0.9rem;
688 +}
689 +.avatar-xl {
690 + width: 4.25rem;
691 + height: 4.25rem;
692 + font-size: 1.5rem;
693 +}
694 +
695 +
696 +/* Separator */
697 +.separator {
698 + height: 1px;
699 + width: 100%;
700 + background-color: hsl(var(--border));
701 + margin: 0.85rem 0;
702 + border: 0;
703 +}
704 +
705 +/* Tabs */
706 +.tabs-nav {
707 + display: flex;
708 + align-items: center;
709 + gap: 0.15rem;
710 + padding: 0.2rem;
711 + border: 1px solid hsl(var(--border));
712 + border-radius: 999px;
713 + background: hsl(var(--muted) / 0.25);
714 + margin-bottom: 1rem;
715 + overflow-x: auto;
716 +}
717 +.tab-link {
718 + display: inline-flex;
719 + align-items: center;
720 + gap: 0.35rem;
721 + padding: 0.38rem 0.8rem;
722 + font-size: 0.82rem;
723 + font-weight: 500;
724 + color: hsl(var(--muted-foreground));
725 + border-radius: 999px;
726 + white-space: nowrap;
727 + transition: color 100ms ease, background-color 100ms ease;
728 +}
729 +.tab-link:hover {
730 + color: hsl(var(--foreground));
731 +}
732 +.tab-link.active {
733 + color: hsl(var(--foreground));
734 + background: hsl(var(--card));
735 + box-shadow: 0 1px 2px hsl(0 0% 0% / 0.08);
736 +}
737 +
738 +/* Dense File List & Tables */
739 +.dense-list {
740 + width: 100%;
741 +}
742 +.dense-row {
743 + display: flex;
744 + align-items: center;
745 + justify-content: space-between;
746 + gap: 0.75rem;
747 + min-height: 2.05rem;
748 + padding: 0.25rem 0.75rem;
749 + border-bottom: 1px solid hsl(var(--border));
750 + font-size: 0.85rem;
751 + transition: background-color 80ms ease;
752 +}
753 +.dense-row:last-child {
754 + border-bottom: none;
755 +}
756 +.dense-row:hover {
757 + background-color: hsl(var(--accent) / 0.5);
758 +}
759 +
760 +.table-wrap {
761 + width: 100%;
762 + overflow-x: auto;
763 + border: 1px solid hsl(var(--border));
764 + border-radius: var(--radius);
765 + background-color: hsl(var(--card));
766 +}
767 +.table {
768 + width: 100%;
769 + border-collapse: collapse;
770 + font-size: 0.85rem;
771 +}
772 +.table th {
773 + text-align: left;
774 + font-weight: 500;
775 + color: hsl(var(--muted-foreground));
776 + padding: 0.5rem 0.75rem;
777 + border-bottom: 1px solid hsl(var(--border));
778 + background-color: hsl(var(--muted) / 0.35);
779 + font-size: 0.75rem;
780 +}
781 +.table td {
782 + padding: 0.5rem 0.75rem;
783 + border-bottom: 1px solid hsl(var(--border));
784 + vertical-align: middle;
785 +}
786 +.table tr:last-child td {
787 + border-bottom: none;
788 +}
789 +
790 +/* Breadcrumb */
791 +.breadcrumb {
792 + display: flex;
793 + align-items: center;
794 + flex-wrap: wrap;
795 + gap: 0.25rem;
796 + font-size: 0.85rem;
797 +}
798 +.breadcrumb-sep {
799 + color: hsl(var(--muted-foreground));
800 +}
801 +
802 +/* Dropdown Menu */
803 +@keyframes dropdownIn {
804 + from {
805 + opacity: 0;
806 + transform: translateY(-4px) scale(0.98);
807 + }
808 + to {
809 + opacity: 1;
810 + transform: translateY(0) scale(1);
811 + }
812 +}
813 +.dropdown {
814 + position: relative;
815 + display: inline-block;
816 +}
817 +.dropdown-menu {
818 + position: absolute;
819 + left: 0;
820 + top: calc(100% + 0.3rem);
821 + min-width: 11rem;
822 + background-color: hsl(var(--popover));
823 + color: hsl(var(--popover-foreground));
824 + border: 1px solid hsl(var(--border));
825 + border-radius: var(--radius);
826 + padding: 0.25rem;
827 + box-shadow: 0 8px 24px -4px rgba(0, 0, 0, 0.22);
828 + z-index: 60;
829 + display: none;
830 + transform-origin: top left;
831 +}
832 +.dropdown-menu.open {
833 + display: block;
834 + animation: dropdownIn 140ms cubic-bezier(0.16, 1, 0.3, 1);
835 +}
836 +.dropdown-item {
837 + display: flex;
838 + width: 100%;
839 + align-items: center;
840 + justify-content: space-between;
841 + gap: 0.5rem;
842 + padding: 0.35rem 0.55rem;
843 + font-size: 0.8rem;
844 + border-radius: calc(var(--radius) - 2px);
845 + color: hsl(var(--popover-foreground));
846 + background: transparent;
847 + border: 0;
848 + cursor: pointer;
849 + text-align: left;
850 + transition: background-color 120ms ease, color 120ms ease;
851 +}
852 +.dropdown-item:hover, .dropdown-item.active {
853 + background-color: hsl(var(--accent));
854 + color: hsl(var(--accent-foreground));
855 +}
856 +
857 +/* Modal / Dialog & Command Palette */
858 +@keyframes backdropIn {
859 + from { opacity: 0; }
860 + to { opacity: 1; }
861 +}
862 +@keyframes dialogIn {
863 + from {
864 + opacity: 0;
865 + transform: translateY(-6px) scale(0.97);
866 + }
867 + to {
868 + opacity: 1;
869 + transform: translateY(0) scale(1);
870 + }
871 +}
872 +.backdrop {
873 + position: fixed;
874 + inset: 0;
875 + background-color: rgba(0, 0, 0, 0.55);
876 + backdrop-filter: blur(2px);
877 + z-index: 80;
878 + display: none;
879 + align-items: flex-start;
880 + justify-content: center;
881 + padding: 10vh 1rem 2rem;
882 +}
883 +.backdrop.open {
884 + display: flex;
885 + animation: backdropIn 140ms ease;
886 +}
887 +.dialog-box {
888 + width: 100%;
889 + max-width: 28rem;
890 + background-color: hsl(var(--popover));
891 + color: hsl(var(--popover-foreground));
892 + border: 1px solid hsl(var(--border));
893 + border-radius: var(--radius);
894 + box-shadow: 0 16px 40px -8px rgba(0, 0, 0, 0.35);
895 + overflow: hidden;
896 + animation: dialogIn 170ms cubic-bezier(0.16, 1, 0.3, 1);
897 +}
898 +.palette-box {
899 + width: 100%;
900 + max-width: 34rem;
901 + background-color: hsl(var(--popover));
902 + color: hsl(var(--popover-foreground));
903 + border: 1px solid hsl(var(--border));
904 + border-radius: var(--radius);
905 + box-shadow: 0 16px 48px -8px rgba(0, 0, 0, 0.4);
906 + overflow: hidden;
907 + animation: dialogIn 170ms cubic-bezier(0.16, 1, 0.3, 1);
908 +}
909 +.palette-input-wrap {
910 + display: flex;
911 + align-items: center;
912 + gap: 0.6rem;
913 + padding: 0.6rem 0.8rem;
914 + border-bottom: 1px solid hsl(var(--border));
915 +}
916 +.palette-input {
917 + width: 100%;
918 + border: 0;
919 + background: transparent;
920 + color: hsl(var(--foreground));
921 + font-size: 0.9rem;
922 + outline: none;
923 +}
924 +.palette-list {
925 + max-height: 20rem;
926 + overflow-y: auto;
927 + padding: 0.3rem;
928 +}
929 +.palette-group-title {
930 + padding: 0.3rem 0.5rem 0.15rem;
931 + font-size: 0.68rem;
932 + font-weight: 600;
933 + text-transform: uppercase;
934 + letter-spacing: 0.04em;
935 + color: hsl(var(--muted-foreground));
936 +}
937 +.palette-item {
938 + display: flex;
939 + width: 100%;
940 + align-items: center;
941 + justify-content: space-between;
942 + gap: 0.5rem;
943 + padding: 0.4rem 0.55rem;
944 + border-radius: calc(var(--radius) - 2px);
945 + font-size: 0.85rem;
946 + color: hsl(var(--foreground));
947 + cursor: pointer;
948 + border: 0;
949 + background: transparent;
950 + text-align: left;
951 + transition: background-color 100ms ease, color 100ms ease;
952 +}
953 +.palette-item:hover, .palette-item.selected {
954 + background-color: hsl(var(--accent));
955 + color: hsl(var(--accent-foreground));
956 +}
957 +
958 +/* Toast */
959 +@keyframes toastIn {
960 + from {
961 + opacity: 0;
962 + transform: translateY(8px) scale(0.97);
963 + }
964 + to {
965 + opacity: 1;
966 + transform: translateY(0) scale(1);
967 + }
968 +}
969 +.toast-container {
970 + position: fixed;
971 + bottom: 1rem;
972 + right: 1rem;
973 + z-index: 90;
974 + display: flex;
975 + flex-direction: column;
976 + gap: 0.4rem;
977 + max-width: 20rem;
978 +}
979 +.toast {
980 + display: flex;
981 + align-items: center;
982 + justify-content: space-between;
983 + gap: 0.65rem;
984 + padding: 0.5rem 0.75rem;
985 + border-radius: var(--radius);
986 + border: 1px solid hsl(var(--border));
987 + background-color: hsl(var(--popover));
988 + color: hsl(var(--popover-foreground));
989 + box-shadow: 0 8px 24px -4px rgba(0, 0, 0, 0.25);
990 + font-size: 0.8rem;
991 + animation: toastIn 180ms cubic-bezier(0.16, 1, 0.3, 1);
992 +}
993 +
994 +/* Skeleton */
995 +@keyframes pulse {
996 + 0%, 100% { opacity: 1; }
997 + 50% { opacity: 0.45; }
998 +}
999 +.skeleton {
1000 + background-color: hsl(var(--muted));
1001 + border-radius: calc(var(--radius) - 2px);
1002 + animation: pulse 1.6s ease-in-out infinite;
1003 +}
1004 +
1005 +/* Empty State */
1006 +.empty-state {
1007 + text-align: center;
1008 + padding: 2rem 1rem;
1009 + border: 1px dashed hsl(var(--border));
1010 + border-radius: var(--radius);
1011 + color: hsl(var(--muted-foreground));
1012 +}
1013 +
1014 +/* Code Viewer & Chroma */
1015 +.code-table {
1016 + width: 100%;
1017 + border-collapse: collapse;
1018 + font-family: 'JetBrains Mono', monospace;
1019 + font-size: 0.8rem;
1020 + line-height: 1.5;
1021 +}
1022 +.code-ln {
1023 + width: 1%;
1024 + min-width: 2.75rem;
1025 + padding: 0 0.65rem;
1026 + text-align: right;
1027 + color: hsl(var(--muted-foreground) / 0.6);
1028 + user-select: none;
1029 + vertical-align: top;
1030 + border-right: 1px solid hsl(var(--border));
1031 +}
1032 +.code-line {
1033 + padding: 0 0.75rem;
1034 + white-space: pre;
1035 + overflow-x: auto;
1036 +}
1037 +.chroma .k, .chroma .kc, .chroma .kd, .chroma .kn, .chroma .kp, .chroma .kr { color: hsl(var(--syntax-kw)); font-weight: 500; }
1038 +.chroma .kt { color: hsl(var(--syntax-type)); }
1039 +.chroma .s, .chroma .sa, .chroma .sb, .chroma .sc, .chroma .dl, .chroma .sd, .chroma .s2, .chroma .se, .chroma .sh, .chroma .si, .chroma .sx, .chroma .sr, .chroma .s1, .chroma .ss { color: hsl(var(--syntax-str)); }
1040 +.chroma .c, .chroma .ch, .chroma .cm, .chroma .c1, .chroma .cs, .chroma .cp, .chroma .cpf { color: hsl(var(--syntax-cmt)); font-style: italic; }
1041 +.chroma .nf, .chroma .fm, .chroma .nx { color: hsl(var(--syntax-fn)); }
1042 +.chroma .m, .chroma .mb, .chroma .mf, .chroma .mh, .chroma .mi, .chroma .il, .chroma .mo { color: hsl(var(--syntax-num)); }
1043 +.chroma .o, .chroma .ow { color: hsl(var(--syntax-op)); }
1044 +
1045 +/* Diff Viewer */
1046 +.diff-table {
1047 + width: 100%;
1048 + border-collapse: collapse;
1049 + font-family: 'JetBrains Mono', monospace;
1050 + font-size: 0.78rem;
1051 + line-height: 1.5;
1052 +}
1053 +.diff-row-add {
1054 + background-color: hsl(var(--diff-add-bg));
1055 + color: hsl(var(--diff-add-fg));
1056 +}
1057 +.diff-row-del {
1058 + background-color: hsl(var(--diff-del-bg));
1059 + color: hsl(var(--diff-del-fg));
1060 +}
1061 +.diff-row-hunk {
1062 + background-color: hsl(var(--muted));
1063 + color: hsl(var(--muted-foreground));
1064 +}
1065 +.diff-num {
1066 + width: 2.75rem;
1067 + padding: 0 0.45rem;
1068 + text-align: right;
1069 + user-select: none;
1070 + opacity: 0.65;
1071 + border-right: 1px solid hsl(var(--border));
1072 +}
1073 +.diff-code {
1074 + padding: 0 0.65rem;
1075 + white-space: pre-wrap;
1076 + word-break: break-all;
1077 +}
1078 +
1079 +/* Markdown Body */
1080 +.markdown-body {
1081 + font-size: 0.9rem;
1082 + line-height: 1.6;
1083 + color: hsl(var(--foreground));
1084 +}
1085 +.markdown-body h1, .markdown-body h2, .markdown-body h3, .markdown-body h4 {
1086 + margin-top: 1.25em;
1087 + margin-bottom: 0.45em;
1088 + font-weight: 600;
1089 + line-height: 1.25;
1090 +}
1091 +.markdown-body h1 { font-size: 1.35rem; padding-bottom: 0.25rem; border-bottom: 1px solid hsl(var(--border)); }
1092 +.markdown-body h2 { font-size: 1.15rem; padding-bottom: 0.2rem; border-bottom: 1px solid hsl(var(--border)); }
1093 +.markdown-body h3 { font-size: 1rem; }
1094 +.markdown-body h1:first-child, .markdown-body h2:first-child { margin-top: 0; }
1095 +.markdown-body p, .markdown-body ul, .markdown-body ol, .markdown-body pre, .markdown-body blockquote {
1096 + margin-top: 0;
1097 + margin-bottom: 0.8rem;
1098 +}
1099 +.markdown-body code {
1100 + background-color: hsl(var(--muted));
1101 + padding: 0.12rem 0.3rem;
1102 + border-radius: 0.25rem;
1103 + font-size: 0.84em;
1104 +}
1105 +.markdown-body pre {
1106 + background-color: hsl(var(--muted) / 0.6);
1107 + border: 1px solid hsl(var(--border));
1108 + border-radius: var(--radius);
1109 + padding: 0.75rem 0.9rem;
1110 + overflow-x: auto;
1111 +}
1112 +.markdown-body pre code {
1113 + background: transparent;
1114 + padding: 0;
1115 +}
1116 +.markdown-body a {
1117 + text-decoration: underline;
1118 + text-underline-offset: 3px;
1119 +}
1120 +
1121 +/* Utility Helpers */
1122 +.flex { display: flex; }
1123 +.block { display: block; }
1124 +.inline-flex { display: inline-flex; }
1125 +.grid { display: grid; }
1126 +.hidden { display: none; }
1127 +.items-center { align-items: center; }
1128 +.items-start { align-items: flex-start; }
1129 +.items-baseline { align-items: baseline; }
1130 +.justify-between { justify-content: space-between; }
1131 +.justify-center { justify-content: center; }
1132 +.justify-end { justify-content: flex-end; }
1133 +.flex-col { flex-direction: column; }
1134 +.flex-wrap { flex-wrap: wrap; }
1135 +.flex-1 { flex: 1 1 0%; }
1136 +.flex-shrink-0 { flex-shrink: 0; }
1137 +.min-w-0 { min-width: 0; }
1138 +.gap-0\.5 { gap: 0.125rem; }
1139 +.gap-1 { gap: 0.25rem; }
1140 +.gap-1\.5 { gap: 0.375rem; }
1141 +.gap-2 { gap: 0.5rem; }
1142 +.gap-2\.5 { gap: 0.625rem; }
1143 +.gap-3 { gap: 0.75rem; }
1144 +.gap-4 { gap: 1rem; }
1145 +.gap-6 { gap: 1.5rem; }
1146 +.w-full { width: 100%; }
1147 +.text-xs { font-size: 0.75rem; }
1148 +.text-sm { font-size: 0.85rem; }
1149 +.text-base { font-size: 0.96rem; }
1150 +.text-lg { font-size: 1.1rem; }
1151 +.text-xl { font-size: 1.25rem; }
1152 +.text-2xl { font-size: 1.5rem; }
1153 +.font-medium { font-weight: 500; }
1154 +.font-semibold { font-weight: 600; }
1155 +.font-bold { font-weight: 700; }
1156 +.uppercase { text-transform: uppercase; }
1157 +.tracking-tight { letter-spacing: -0.015em; }
1158 +.text-muted { color: hsl(var(--muted-foreground)); }
1159 +.text-destructive { color: hsl(var(--destructive)); }
1160 +.text-foreground { color: hsl(var(--foreground)); }
1161 +.text-center { text-align: center; }
1162 +.truncate { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
1163 +.hover\:underline:hover { text-decoration: underline; }
1164 +.select-all { user-select: all; }
1165 +.cursor-pointer { cursor: pointer; }
1166 +.mt-0\.5 { margin-top: 0.125rem; }
1167 +.mt-1 { margin-top: 0.25rem; }
1168 +.mt-2 { margin-top: 0.5rem; }
1169 +.mt-3 { margin-top: 0.75rem; }
1170 +.mt-4 { margin-top: 1rem; }
1171 +.mt-6 { margin-top: 1.5rem; }
1172 +.mr-2 { margin-right: 0.5rem; }
1173 +.mb-1 { margin-bottom: 0.25rem; }
1174 +.mb-1\.5 { margin-bottom: 0.375rem; }
1175 +.mb-2 { margin-bottom: 0.5rem; }
1176 +.mb-3 { margin-bottom: 0.75rem; }
1177 +.mb-4 { margin-bottom: 1rem; }
1178 +.mb-6 { margin-bottom: 1.5rem; }
1179 +.p-2 { padding: 0.5rem; }
1180 +.p-3 { padding: 0.75rem; }
1181 +.p-4 { padding: 1rem; }
1182 +.px-3 { padding-left: 0.75rem; padding-right: 0.75rem; }
1183 +.py-2 { padding-top: 0.5rem; padding-bottom: 0.5rem; }
1184 +.pt-2 { padding-top: 0.5rem; }
1185 +.pt-3 { padding-top: 0.75rem; }
1186 +.pb-3 { padding-bottom: 0.75rem; }
1187 +
1188 +.grid-2 { display: grid; grid-template-columns: repeat(1, minmax(0, 1fr)); gap: 0.85rem; }
1189 +.grid-3 { display: grid; grid-template-columns: repeat(1, minmax(0, 1fr)); gap: 0.85rem; }
1190 +.grid-4 { display: grid; grid-template-columns: repeat(1, minmax(0, 1fr)); gap: 0.85rem; }
1191 +
1192 +@media (min-width: 768px) {
1193 + .grid-2 { grid-template-columns: repeat(2, minmax(0, 1fr)); }
1194 + .grid-3 { grid-template-columns: repeat(3, minmax(0, 1fr)); }
1195 + .grid-4 { grid-template-columns: repeat(2, minmax(0, 1fr)); }
1196 + .md-flex { display: flex !important; }
1197 + .md-hidden { display: none !important; }
1198 +}
1199 +
1200 +/* Mobile Drawer */
1201 +.mobile-drawer {
1202 + position: fixed;
1203 + inset: 0;
1204 + z-index: 75;
1205 + background-color: rgba(0, 0, 0, 0.5);
1206 + display: none;
1207 +}
1208 +.mobile-drawer.open {
1209 + display: block;
1210 +}
1211 +.mobile-drawer-panel {
1212 + width: 224px;
1213 + max-width: 85vw;
1214 + height: 100%;
1215 + background-color: hsl(var(--card));
1216 + border-right: 1px solid hsl(var(--border));
1217 + padding: 0.75rem 0.65rem;
1218 + display: flex;
1219 + flex-direction: column;
1220 + justify-content: space-between;
1221 +}
1222 +
1223 +@media (min-width: 1024px) {
1224 + .grid-4 { grid-template-columns: repeat(4, minmax(0, 1fr)); }
1225 +}
1226 +
1227 +/* ── Polar repository shell ─────────────────────────────────────────── */
1228 +.repo-banner {
1229 + position: relative;
1230 + display: flex;
1231 + align-items: flex-start;
1232 + justify-content: space-between;
1233 + gap: 1rem;
1234 + flex-wrap: wrap;
1235 + padding: 0.9rem 1rem 0.95rem;
1236 + background: hsl(var(--card));
1237 + border: 1px solid hsl(var(--border));
1238 + border-radius: calc(var(--radius) * 1.6);
1239 + overflow: hidden;
1240 +}
1241 +.repo-banner::before {
1242 + content: "";
1243 + position: absolute;
1244 + inset: 0 0 auto 0;
1245 + height: 2px;
1246 + background: linear-gradient(90deg, hsl(var(--primary)), hsl(var(--primary) / 0) 65%);
1247 +}
1248 +.repo-banner-main {
1249 + display: flex;
1250 + align-items: center;
1251 + gap: 0.7rem;
1252 + min-width: 0;
1253 + flex: 1 1 20rem;
1254 +}
1255 +.repo-banner-actions {
1256 + display: flex;
1257 + align-items: center;
1258 + gap: 0.4rem;
1259 + flex-wrap: wrap;
1260 +}
1261 +
1262 +.repo-stats {
1263 + display: flex;
1264 + align-items: center;
1265 + gap: 0.4rem;
1266 + flex-wrap: wrap;
1267 +}
1268 +.stat-chip {
1269 + display: inline-flex;
1270 + align-items: center;
1271 + gap: 0.4rem;
1272 + height: 1.85rem;
1273 + padding: 0 0.7rem;
1274 + border: 1px solid hsl(var(--border));
1275 + border-radius: 999px;
1276 + background: hsl(var(--card));
1277 + font-size: 0.78rem;
1278 + color: hsl(var(--muted-foreground));
1279 + white-space: nowrap;
1280 + transition: border-color 120ms ease, color 120ms ease;
1281 +}
1282 +.stat-chip b {
1283 + color: hsl(var(--foreground));
1284 + font-weight: 600;
1285 +}
1286 +.stat-chip:hover {
1287 + color: hsl(var(--foreground));
1288 + border-color: hsl(var(--primary) / 0.55);
1289 +}
1290 +
1291 +.repo-layout {
1292 + display: grid;
1293 + grid-template-columns: minmax(0, 1fr) 305px;
1294 + gap: 1.1rem;
1295 + align-items: start;
1296 +}
1297 +.repo-main {
1298 + min-width: 0;
1299 +}
1300 +.repo-side {
1301 + display: flex;
1302 + flex-direction: column;
1303 + gap: 0.9rem;
1304 + position: sticky;
1305 + top: 0.75rem;
1306 +}
1307 +.side-card {
1308 + border: 1px solid hsl(var(--border));
1309 + border-radius: calc(var(--radius) * 1.3);
1310 + background: hsl(var(--card));
1311 + overflow: hidden;
1312 +}
1313 +.side-card-header {
1314 + display: flex;
1315 + align-items: center;
1316 + gap: 0.4rem;
1317 + padding: 0.5rem 0.8rem;
1318 + font-size: 0.78rem;
1319 + font-weight: 600;
1320 + border-bottom: 1px solid hsl(var(--border));
1321 + background: hsl(var(--muted) / 0.3);
1322 +}
1323 +.side-card-body {
1324 + display: flex;
1325 + flex-direction: column;
1326 + gap: 0.55rem;
1327 + padding: 0.7rem 0.8rem;
1328 + font-size: 0.8rem;
1329 +}
1330 +.meta-row {
1331 + display: flex;
1332 + align-items: center;
1333 + justify-content: space-between;
1334 + gap: 0.5rem;
1335 + color: hsl(var(--muted-foreground));
1336 +}
1337 +.meta-row a,
1338 +.meta-row b {
1339 + color: hsl(var(--foreground));
1340 +}
1341 +.clone-box {
1342 + display: flex;
1343 + align-items: center;
1344 + gap: 0.35rem;
1345 + border: 1px solid hsl(var(--border));
1346 + border-radius: var(--radius);
1347 + background: hsl(var(--muted) / 0.25);
1348 + padding: 0.15rem 0.25rem 0.15rem 0.6rem;
1349 + min-width: 0;
1350 +}
1351 +.clone-box code {
1352 + flex: 1;
1353 + min-width: 0;
1354 + overflow: hidden;
1355 + text-overflow: ellipsis;
1356 + white-space: nowrap;
1357 + font-size: 0.72rem;
1358 +}
1359 +@media (max-width: 1000px) {
1360 + .repo-layout {
1361 + grid-template-columns: 1fr;
1362 + }
1363 + .repo-side {
1364 + position: static;
1365 + order: -1;
1366 + }
1367 +}
internal/web/static/embed.go
+26 -0
... ... @@ -0,0 +1,26 @@
1 +package static
2 +
3 +import (
4 + "crypto/sha256"
5 + "embed"
6 + "encoding/hex"
7 +)
8 +
9 +//go:embed css/* js/* fonts/* icons/* favicon.svg
10 +var FS embed.FS
11 +
12 +//go:embed icons/hugeicons-sprite.svg
13 +var SpriteSVG string
14 +
15 +//go:embed css/app.css
16 +var AppCSS string
17 +
18 +//go:embed js/app.js
19 +var AppJS string
20 +
21 +func AssetVersion() string {
22 + h := sha256.New()
23 + _, _ = h.Write([]byte(AppCSS))
24 + _, _ = h.Write([]byte(AppJS))
25 + return hex.EncodeToString(h.Sum(nil))[:10]
26 +}
internal/web/static/favicon.svg
+8 -0
... ... @@ -0,0 +1,8 @@
1 +<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64">
2 + <rect width="64" height="64" rx="14" fill="#0a0a0a"/>
3 + <path d="M22 18v24" stroke="#ffffff" stroke-width="6" stroke-linecap="round"/>
4 + <path d="M22 30c0 8 6 10 14 10" stroke="#ffffff" stroke-width="6" stroke-linecap="round" fill="none"/>
5 + <circle cx="22" cy="14" r="6" fill="#ffffff"/>
6 + <circle cx="22" cy="46" r="6" fill="#ffffff"/>
7 + <circle cx="42" cy="42" r="6" fill="#ffffff"/>
8 +</svg>
internal/web/static/fonts/Inter-Cyrillic.woff2
+0 -0
Binary file — inline preview unavailable
internal/web/static/fonts/Inter-Regular.woff2
+0 -0
Binary file — inline preview unavailable
internal/web/static/fonts/JetBrainsMono-Regular.woff2
+0 -0
Binary file — inline preview unavailable
internal/web/static/icons/hugeicons-sprite.svg
+221 -0
... ... @@ -0,0 +1,221 @@
1 +<svg xmlns="http://www.w3.org/2000/svg" style="display:none" aria-hidden="true">
2 + <!-- Hugeicons (@hugeicons/core-free-icons, MIT License) inline SVG sprite -->
3 + <symbol id="hi-folder" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
4 + <path d="M3 7.8C3 6.12 3 5.28 3.327 4.638a3 3 0 0 1 1.311-1.311C5.28 3 6.12 3 7.8 3h1.33c.653 0 .98 0 1.276.096.262.085.505.222.712.405.234.207.415.479.778 1.023l.408.612c.363.544.544.816.778 1.023.207.183.45.32.712.405.296.096.623.096 1.276.096H16.2c1.68 0 2.52 0 3.162.327a3 3 0 0 1 1.311 1.311C21 8.94 21 9.78 21 11.46v4.74c0 1.68 0 2.52-.327 3.162a3 3 0 0 1-1.311 1.311C18.72 21 17.88 21 16.2 21H7.8c-1.68 0-2.52 0-3.162-.327a3 3 0 0 1-1.311-1.311C3 18.72 3 17.88 3 16.2V7.8Z"/>
5 + </symbol>
6 + <symbol id="hi-file" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
7 + <path d="M14 2.5V6c0 1.1.9 2 2 2h3.5"/>
8 + <path d="M5 17V7c0-2.21 1.79-4 4-4h5.17a3 3 0 0 1 2.12.88l2.83 2.83A3 3 0 0 1 20 8.83V17c0 2.21-1.79 4-4 4H9c-2.21 0-4-1.79-4-4Z"/>
9 + </symbol>
10 + <symbol id="hi-file-code" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
11 + <path d="M14 2.5V6c0 1.1.9 2 2 2h3.5"/>
12 + <path d="M5 17V7c0-2.21 1.79-4 4-4h5.17a3 3 0 0 1 2.12.88l2.83 2.83A3 3 0 0 1 20 8.83V17c0 2.21-1.79 4-4 4H9c-2.21 0-4-1.79-4-4Z"/>
13 + <path d="m10 12.5-2 2 2 2m4-4 2 2-2 2"/>
14 + </symbol>
15 + <symbol id="hi-git-branch" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
16 + <circle cx="6" cy="6" r="2.5"/>
17 + <circle cx="18" cy="8" r="2.5"/>
18 + <circle cx="6" cy="18" r="2.5"/>
19 + <path d="M6 8.5v7M18 10.5c0 3.5-2.5 4.5-6 4.5H6"/>
20 + </symbol>
21 + <symbol id="hi-git-commit" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
22 + <circle cx="12" cy="12" r="3.5"/>
23 + <path d="M3 12h5.5m7 0H21"/>
24 + </symbol>
25 + <symbol id="hi-git-merge" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
26 + <circle cx="6" cy="6" r="2.5"/>
27 + <circle cx="6" cy="18" r="2.5"/>
28 + <circle cx="18" cy="16" r="2.5"/>
29 + <path d="M6 8.5v7m0-7c0 4 4 7.5 9.5 7.5"/>
30 + </symbol>
31 + <symbol id="hi-tag" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
32 + <path d="M3.5 9.6V5.8A2.3 2.3 0 0 1 5.8 3.5h3.8c.61 0 1.2.24 1.63.67l8.6 8.6a2.3 2.3 0 0 1 0 3.26l-3.8 3.8a2.3 2.3 0 0 1-3.26 0l-8.6-8.6A2.3 2.3 0 0 1 3.5 9.6Z"/>
33 + <circle cx="7.5" cy="7.5" r="1.25" fill="currentColor"/>
34 + </symbol>
35 + <symbol id="hi-search" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
36 + <circle cx="11" cy="11" r="7.5"/>
37 + <path d="m16.5 16.5 4 4"/>
38 + </symbol>
39 + <symbol id="hi-settings" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
40 + <circle cx="12" cy="12" r="3"/>
41 + <path d="M19.4 15a1.65 1.65 0 0 0 .33 1.82l.06.06a2 2 0 1 1-2.83 2.83l-.06-.06a1.65 1.65 0 0 0-1.82-.33 1.65 1.65 0 0 0-1 1.51V21a2 2 0 1 1-4 0v-.09A1.65 1.65 0 0 0 9 19.4a1.65 1.65 0 0 0-1.82.33l-.06.06a2 2 0 1 1-2.83-2.83l.06-.06a1.65 1.65 0 0 0 .33-1.82 1.65 1.65 0 0 0-1.51-1H3a2 2 0 1 1 0-4h.09A1.65 1.65 0 0 0 4.6 9a1.65 1.65 0 0 0-.33-1.82l-.06-.06a2 2 0 1 1 2.83-2.83l.06.06a1.65 1.65 0 0 0 1.82.33H9a1.65 1.65 0 0 0 1-1.51V3a2 2 0 1 1 4 0v.09a1.65 1.65 0 0 0 1 1.51 1.65 1.65 0 0 0 1.82-.33l.06-.06a2 2 0 1 1 2.83 2.83l-.06.06a1.65 1.65 0 0 0-.33 1.82V9c.26.604.852.997 1.51 1H21a2 2 0 1 1 0 4h-.09a1.65 1.65 0 0 0-1.51 1Z"/>
42 + </symbol>
43 + <symbol id="hi-user" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
44 + <circle cx="12" cy="8" r="4"/>
45 + <path d="M5 20c0-3.314 3.134-6 7-6s7 2.686 7 6"/>
46 + </symbol>
47 + <symbol id="hi-users" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
48 + <circle cx="9" cy="8" r="3.5"/>
49 + <path d="M3 19.5c0-2.9 2.686-5.25 6-5.25s6 2.35 6 5.25"/>
50 + <path d="M15.5 5a3.2 3.2 0 0 1 0 6.2M17.5 14.5c2.1.45 3.5 2 3.5 4.2"/>
51 + </symbol>
52 + <symbol id="hi-copy" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
53 + <rect x="8.5" y="8.5" width="11.5" height="11.5" rx="2.5"/>
54 + <path d="M15.5 8.5V6.5A2.5 2.5 0 0 0 13 4H6.5A2.5 2.5 0 0 0 4 6.5V13a2.5 2.5 0 0 0 2.5 2.5h2"/>
55 + </symbol>
56 + <symbol id="hi-check" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
57 + <path d="m4.5 12.5 5 5L19.5 7.5"/>
58 + </symbol>
59 + <symbol id="hi-plus" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
60 + <path d="M12 4.5v15m7.5-7.5h-15"/>
61 + </symbol>
62 + <symbol id="hi-sun" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
63 + <circle cx="12" cy="12" r="4.2"/>
64 + <path d="M12 2.5v2.2m0 14.6v2.2M4.93 4.93l1.56 1.56m11.02 11.02 1.56 1.56M2.5 12h2.2m14.6 0h2.2M4.93 19.07l1.56-1.56m11.02-11.02 1.56-1.56"/>
65 + </symbol>
66 + <symbol id="hi-moon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
67 + <path d="M20.2 14.6A8.5 8.5 0 0 1 9.4 3.8a8.5 8.5 0 1 0 10.8 10.8Z"/>
68 + </symbol>
69 + <symbol id="hi-laptop" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
70 + <rect x="4" y="4.5" width="16" height="11" rx="2"/>
71 + <path d="M2.5 19.5h19"/>
72 + </symbol>
73 + <symbol id="hi-sparkles" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
74 + <path d="m12 3 1.9 5.1L19 10l-5.1 1.9L12 17l-1.9-5.1L5 10l5.1-1.9L12 3Zm6.5 12 .8 2.2 2.2.8-2.2.8-.8 2.2-.8-2.2-2.2-.8 2.2-.8.8-2.2Z"/>
75 + </symbol>
76 + <symbol id="hi-book-open" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
77 + <path d="M12 6.5c-2-1.7-4.7-2.5-8-2.5v14c3.3 0 6 .8 8 2.5m0-14c2-1.7 4.7-2.5 8-2.5v14c-3.3 0-6 .8-8 2.5m0-14v14"/>
78 + </symbol>
79 + <symbol id="hi-menu" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
80 + <path d="M4 6.5h16M4 12h16M4 17.5h16"/>
81 + </symbol>
82 + <symbol id="hi-close" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
83 + <path d="m6 6 12 12M18 6 6 18"/>
84 + </symbol>
85 + <symbol id="hi-lock" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
86 + <rect x="4.5" y="10.5" width="15" height="10" rx="2.5"/>
87 + <path d="M8 10.5V7.5a4 4 0 1 1 8 0v3m-4 4v2"/>
88 + </symbol>
89 + <symbol id="hi-unlock" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
90 + <rect x="4.5" y="10.5" width="15" height="10" rx="2.5"/>
91 + <path d="M8 10.5V7.5a4 4 0 0 1 7.6-1.7M12 14.5v2"/>
92 + </symbol>
93 + <symbol id="hi-globe" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
94 + <circle cx="12" cy="12" r="9"/>
95 + <path d="M3.5 12h17M12 3c2.5 2.5 3.8 5.6 3.8 9s-1.3 6.5-3.8 9c-2.5-2.5-3.8-5.6-3.8-9S9.5 5.5 12 3Z"/>
96 + </symbol>
97 + <symbol id="hi-star" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
98 + <path d="m12 3.5 2.7 5.5 6.1.9-4.4 4.3 1 6.1-5.4-2.9-5.4 2.9 1-6.1-4.4-4.3 6.1-.9L12 3.5Z"/>
99 + </symbol>
100 + <symbol id="hi-trash" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
101 + <path d="M4 6.5h16m-10 4v6m4-6v6M6 6.5l.8 12.1a2.5 2.5 0 0 0 2.5 2.4h5.4a2.5 2.5 0 0 0 2.5-2.4L18 6.5M9 6.5V4.8A1.8 1.8 0 0 1 10.8 3h2.4A1.8 1.8 0 0 1 15 4.8v1.7"/>
102 + </symbol>
103 + <symbol id="hi-chevron-down" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
104 + <path d="m6 9 6 6 6-6"/>
105 + </symbol>
106 + <symbol id="hi-chevron-right" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
107 + <path d="m9 6 6 6-6 6"/>
108 + </symbol>
109 + <symbol id="hi-arrow-left" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
110 + <path d="M19 12H5m6-6-6 6 6 6"/>
111 + </symbol>
112 + <symbol id="hi-arrow-right" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
113 + <path d="M5 12h14m-6-6 6 6-6 6"/>
114 + </symbol>
115 + <symbol id="hi-terminal" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
116 + <rect x="3" y="4" width="18" height="16" rx="2.5"/>
117 + <path d="m7.5 9.5 3 2.5-3 2.5m4.5 0h4"/>
118 + </symbol>
119 + <symbol id="hi-key" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
120 + <circle cx="8" cy="15" r="4.5"/>
121 + <path d="m11.2 11.8 8.3-8.3m-2.5 2.5 2.5 2.5m-5 0 2 2"/>
122 + </symbol>
123 + <symbol id="hi-shield" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
124 + <path d="M12 3 4.5 6.2v5.3c0 5 3.2 8.7 7.5 9.5 4.3-.8 7.5-4.5 7.5-9.5V6.2L12 3Z"/>
125 + <path d="m9 12.2 2 2 4-4"/>
126 + </symbol>
127 + <symbol id="hi-alert-circle" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
128 + <circle cx="12" cy="12" r="9"/>
129 + <path d="M12 8v4.5m0 3.5h.01"/>
130 + </symbol>
131 + <symbol id="hi-info" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
132 + <circle cx="12" cy="12" r="9"/>
133 + <path d="M12 11.5v4.5m0-8h.01"/>
134 + </symbol>
135 + <symbol id="hi-code" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
136 + <path d="m8 8-4.5 4L8 16m8-8 4.5 4L16 16m-2.5-10-3 12"/>
137 + </symbol>
138 + <symbol id="hi-download" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
139 + <path d="M12 4v11.5m0 0-4.5-4.5M12 15.5l4.5-4.5M4.5 19.5h15"/>
140 + </symbol>
141 + <symbol id="hi-history" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
142 + <path d="M3.5 12a8.5 8.5 0 1 0 2.3-5.8L3.5 8.5M3.5 4v4.5H8M12 7.5v4.8l3.2 1.8"/>
143 + </symbol>
144 + <symbol id="hi-eye" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
145 + <path d="M2.5 12S6 5.5 12 5.5 21.5 12 21.5 12 18 18.5 12 18.5 2.5 12 2.5 12Z"/>
146 + <circle cx="12" cy="12" r="3"/>
147 + </symbol>
148 + <symbol id="hi-edit" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
149 + <path d="M15.5 4.5a2.12 2.12 0 0 1 3 3L8 18l-4 1 1-4 10.5-10.5Z"/>
150 + </symbol>
151 + <symbol id="hi-log-out" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
152 + <path d="M10 4H6.5A2.5 2.5 0 0 0 4 6.5v11A2.5 2.5 0 0 0 6.5 20H10m6-12 4 4-4 4m4-4H9.5"/>
153 + </symbol>
154 + <symbol id="hi-home" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
155 + <path d="m3.5 10.5 8.5-7 8.5 7v8a2 2 0 0 1-2 2h-13a2 2 0 0 1-2-2v-8Z"/>
156 + <path d="M9.5 20.5v-6h5v6"/>
157 + </symbol>
158 + <symbol id="hi-command" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
159 + <path d="M18 3a3 3 0 0 0-3 3v12a3 3 0 0 0 3 3 3 3 0 0 0 3-3 3 3 0 0 0-3-3H6a3 3 0 0 0-3 3 3 3 0 0 0 3 3 3 3 0 0 0 3-3V6a3 3 0 0 0-3-3 3 3 0 0 0-3 3 3 3 0 0 0 3 3h12a3 3 0 0 0 3-3 3 3 0 0 0-3-3Z"/>
160 + </symbol>
161 + <symbol id="hi-keyboard" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
162 + <rect x="2.5" y="5.5" width="19" height="13" rx="2.5"/>
163 + <path d="M6.5 9.5h.01M10 9.5h.01M14 9.5h.01M17.5 9.5h.01M6.5 13h.01M17.5 13h.01M9 15h6"/>
164 + </symbol>
165 + <symbol id="hi-server" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
166 + <rect x="3.5" y="4" width="17" height="6.5" rx="2"/>
167 + <rect x="3.5" y="13.5" width="17" height="6.5" rx="2"/>
168 + <path d="M7.5 7.25h.01M7.5 16.75h.01"/>
169 + </symbol>
170 + <symbol id="hi-database" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
171 + <ellipse cx="12" cy="5.5" rx="7.5" ry="2.8"/>
172 + <path d="M4.5 5.5v13c0 1.55 3.36 2.8 7.5 2.8s7.5-1.25 7.5-2.8v-13M4.5 12c0 1.55 3.36 2.8 7.5 2.8s7.5-1.25 7.5-2.8"/>
173 + </symbol>
174 + <symbol id="hi-zap" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
175 + <path d="M13 2.5 4.5 13.5h6.5L10 21.5l9.5-11H13V2.5Z"/>
176 + </symbol>
177 + <symbol id="hi-more" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
178 + <circle cx="5.5" cy="12" r="1.25" fill="currentColor"/>
179 + <circle cx="12" cy="12" r="1.25" fill="currentColor"/>
180 + <circle cx="18.5" cy="12" r="1.25" fill="currentColor"/>
181 + </symbol>
182 + <symbol id="hi-sidebar" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
183 + <rect x="3" y="4" width="18" height="16" rx="2.5"/>
184 + <path d="M9 4v16"/>
185 + </symbol>
186 + <symbol id="hi-map-pin" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
187 + <path d="M12 21s-6.5-5.6-6.5-10.5a6.5 6.5 0 1 1 13 0C18.5 15.4 12 21 12 21Z"/>
188 + <circle cx="12" cy="10.5" r="2.2"/>
189 + </symbol>
190 + <symbol id="hi-link" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
191 + <path d="M10 13a5 5 0 0 0 7.07 0l2.83-2.83a5 5 0 0 0-7.07-7.07L11 4.93"/>
192 + <path d="M14 11a5 5 0 0 0-7.07 0L4.1 13.83a5 5 0 0 0 7.07 7.07L13 19.07"/>
193 + </symbol>
194 + <symbol id="hi-calendar" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
195 + <rect x="3.5" y="5" width="17" height="15.5" rx="2.5"/>
196 + <path d="M8 3.5v3M16 3.5v3M3.5 9.5h17"/>
197 + </symbol>
198 + <symbol id="hi-message" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
199 + <path d="M21 11.5a8.4 8.4 0 0 1-.9 3.8 8.5 8.5 0 0 1-7.6 4.7 8.4 8.4 0 0 1-3.8-.9L3 21l1.9-5.7a8.4 8.4 0 0 1-.9-3.8 8.5 8.5 0 0 1 4.7-7.6 8.4 8.4 0 0 1 3.8-.9h.5a8.5 8.5 0 0 1 8 8v.5Z"/>
200 + </symbol>
201 + <symbol id="hi-image" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
202 + <rect x="3.5" y="3.5" width="17" height="17" rx="2.5"/>
203 + <circle cx="8.5" cy="8.5" r="1.5"/>
204 + <path d="m20.5 15-4.5-4.5L6 20.5"/>
205 + </symbol>
206 + <symbol id="hi-issue" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
207 + <circle cx="12" cy="12" r="9"/>
208 + <circle cx="12" cy="12" r="2" fill="currentColor"/>
209 + </symbol>
210 + <symbol id="hi-git-pull-request" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
211 + <circle cx="18" cy="18" r="2.5"/>
212 + <circle cx="6" cy="6" r="2.5"/>
213 + <path d="M13 6h3a2 2 0 0 1 2 2v7.5"/>
214 + <path d="M6 8.5v12"/>
215 + <polyline points="15 9 12 6 15 3"/>
216 + </symbol>
217 + <symbol id="hi-activity" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round">
218 + <path d="M22 12h-4l-3 9L9 3l-3 9H2"/>
219 + </symbol>
220 +</svg>
221 +
internal/web/static/js/app.js
+467 -0
... ... @@ -0,0 +1,467 @@
1 +(function () {
2 + 'use strict';
3 +
4 + function showToast(message) {
5 + var container = document.getElementById('toast-container');
6 + if (!container) return;
7 + var toast = document.createElement('div');
8 + toast.className = 'toast';
9 + toast.setAttribute('role', 'status');
10 + toast.textContent = message;
11 + container.appendChild(toast);
12 + setTimeout(function () {
13 + if (toast.parentNode) toast.parentNode.removeChild(toast);
14 + }, 2800);
15 + }
16 + window.PolarToast = showToast;
17 +
18 + function setTheme(theme, silent) {
19 + var allowed = ['light', 'dark', 'system'];
20 + if (allowed.indexOf(theme) === -1) theme = 'system';
21 + document.documentElement.setAttribute('data-theme', theme);
22 + try {
23 + localStorage.setItem('polar_theme', theme);
24 + } catch (e) {}
25 + document.cookie = 'polar_theme=' + encodeURIComponent(theme) + '; path=/; max-age=31536000; SameSite=Lax';
26 +
27 + document.querySelectorAll('[data-set-theme]').forEach(function (el) {
28 + var isCurrent = el.getAttribute('data-set-theme') === theme;
29 + el.classList.toggle('active', isCurrent);
30 + el.setAttribute('aria-checked', isCurrent ? 'true' : 'false');
31 + });
32 + }
33 + window.PolarSetTheme = setTheme;
34 +
35 + try {
36 + var currentAttr = document.documentElement.getAttribute('data-theme') || 'system';
37 + document.querySelectorAll('[data-set-theme]').forEach(function (el) {
38 + el.classList.toggle('active', el.getAttribute('data-set-theme') === currentAttr);
39 + });
40 + } catch (e) {}
41 +
42 + function toggleSidebar() {
43 + var html = document.documentElement;
44 + var isCollapsed = html.getAttribute('data-sidebar') === 'collapsed';
45 + if (isCollapsed) {
46 + html.removeAttribute('data-sidebar');
47 + try {
48 + localStorage.setItem('polar_sidebar', 'expanded');
49 + } catch (e) {}
50 + } else {
51 + html.setAttribute('data-sidebar', 'collapsed');
52 + try {
53 + localStorage.setItem('polar_sidebar', 'collapsed');
54 + } catch (e) {}
55 + }
56 + }
57 + window.PolarToggleSidebar = toggleSidebar;
58 +
59 + function closeAllDropdowns() {
60 + document.querySelectorAll('[data-dropdown-menu].open').forEach(function (menu) {
61 + menu.classList.remove('open');
62 + var parent = menu.closest('[data-dropdown]');
63 + if (parent) {
64 + var btn = parent.querySelector('[data-dropdown-trigger]');
65 + if (btn) btn.setAttribute('aria-expanded', 'false');
66 + }
67 + });
68 + }
69 +
70 + function openDialog(id) {
71 + var dlg = document.getElementById(id);
72 + if (!dlg) return;
73 + closeAllDropdowns();
74 + dlg.classList.add('open');
75 + dlg.setAttribute('aria-hidden', 'false');
76 + var firstInput = dlg.querySelector('input:not([type="hidden"]), button[data-autofocus]');
77 + if (firstInput) {
78 + setTimeout(function () { firstInput.focus(); }, 20);
79 + }
80 + }
81 + window.PolarOpenDialog = openDialog;
82 +
83 + function closeDialog(dlg) {
84 + if (!dlg) return;
85 + dlg.classList.remove('open');
86 + dlg.setAttribute('aria-hidden', 'true');
87 + }
88 +
89 + // Command Palette logic
90 + var paletteIndex = 0;
91 +
92 + function getVisiblePaletteItems() {
93 + var list = document.querySelectorAll('#command-palette [data-palette-item]');
94 + var visible = [];
95 + list.forEach(function (item) {
96 + if (item.style.display !== 'none') visible.push(item);
97 + });
98 + return visible;
99 + }
100 +
101 + function updatePaletteSelection() {
102 + var items = getVisiblePaletteItems();
103 + if (paletteIndex >= items.length) paletteIndex = 0;
104 + if (paletteIndex < 0) paletteIndex = Math.max(0, items.length - 1);
105 + items.forEach(function (el, idx) {
106 + el.classList.toggle('selected', idx === paletteIndex);
107 + if (idx === paletteIndex) {
108 + el.scrollIntoView({ block: 'nearest' });
109 + }
110 + });
111 + }
112 +
113 + function filterPalette(query) {
114 + var q = (query || '').trim().toLowerCase();
115 + var allItems = document.querySelectorAll('#command-palette [data-palette-item]');
116 + allItems.forEach(function (item) {
117 + var text = (item.getAttribute('data-palette-keywords') || item.textContent || '').toLowerCase();
118 + var show = q === '' || text.indexOf(q) !== -1;
119 + item.style.display = show ? '' : 'none';
120 + });
121 + document.querySelectorAll('#command-palette [data-palette-group]').forEach(function (group) {
122 + var hasVisible = false;
123 + group.querySelectorAll('[data-palette-item]').forEach(function (it) {
124 + if (it.style.display !== 'none') hasVisible = true;
125 + });
126 + group.style.display = hasVisible ? '' : 'none';
127 + });
128 + paletteIndex = 0;
129 + updatePaletteSelection();
130 + }
131 +
132 + function openPalette(initialQuery) {
133 + var palette = document.getElementById('command-palette');
134 + if (!palette) return;
135 + closeAllDropdowns();
136 + palette.classList.add('open');
137 + palette.setAttribute('aria-hidden', 'false');
138 + var input = document.getElementById('command-palette-input');
139 + if (input) {
140 + input.value = initialQuery || '';
141 + filterPalette(input.value);
142 + setTimeout(function () {
143 + input.focus();
144 + if (initialQuery) input.select();
145 + }, 20);
146 + }
147 + }
148 + window.PolarOpenPalette = openPalette;
149 +
150 + function activatePaletteItem(item) {
151 + if (!item) return;
152 + var palette = document.getElementById('command-palette');
153 + var href = item.getAttribute('data-palette-href');
154 + var theme = item.getAttribute('data-palette-theme');
155 + var action = item.getAttribute('data-palette-action');
156 + if (palette) closeDialog(palette);
157 +
158 + if (theme) {
159 + setTheme(theme, false);
160 + } else if (action === 'shortcuts') {
161 + openDialog('shortcuts-dialog');
162 + } else if (action === 'toggle-sidebar') {
163 + toggleSidebar();
164 + } else if (href) {
165 + window.location.href = href;
166 + }
167 + }
168 +
169 + document.addEventListener('click', function (e) {
170 + // Toggle sidebar
171 + var sbBtn = e.target.closest('[data-toggle-sidebar]');
172 + if (sbBtn) {
173 + e.preventDefault();
174 + toggleSidebar();
175 + return;
176 + }
177 +
178 + // Dropdown trigger
179 + var trigger = e.target.closest('[data-dropdown-trigger]');
180 + if (trigger) {
181 + e.stopPropagation();
182 + var dropdown = trigger.closest('[data-dropdown]');
183 + var menu = dropdown ? dropdown.querySelector('[data-dropdown-menu]') : null;
184 + var wasOpen = menu && menu.classList.contains('open');
185 + closeAllDropdowns();
186 + if (menu && !wasOpen) {
187 + menu.classList.add('open');
188 + trigger.setAttribute('aria-expanded', 'true');
189 + }
190 + return;
191 + }
192 +
193 + // Theme button
194 + var themeBtn = e.target.closest('[data-set-theme]');
195 + if (themeBtn) {
196 + e.preventDefault();
197 + setTheme(themeBtn.getAttribute('data-set-theme'), false);
198 + closeAllDropdowns();
199 + return;
200 + }
201 +
202 + // Open Command Palette
203 + var paletteTrigger = e.target.closest('[data-open-palette]');
204 + if (paletteTrigger) {
205 + e.preventDefault();
206 + openPalette(paletteTrigger.getAttribute('data-open-palette') || '');
207 + return;
208 + }
209 +
210 + // Palette item click
211 + var paletteItem = e.target.closest('[data-palette-item]');
212 + if (paletteItem) {
213 + e.preventDefault();
214 + activatePaletteItem(paletteItem);
215 + return;
216 + }
217 +
218 + // Dialog open
219 + var dlgOpen = e.target.closest('[data-dialog-open]');
220 + if (dlgOpen) {
221 + e.preventDefault();
222 + openDialog(dlgOpen.getAttribute('data-dialog-open'));
223 + return;
224 + }
225 +
226 + // Dialog close
227 + var dlgClose = e.target.closest('[data-dialog-close]');
228 + if (dlgClose) {
229 + e.preventDefault();
230 + closeDialog(dlgClose.closest('.backdrop'));
231 + return;
232 + }
233 +
234 + // Backdrop click
235 + if (e.target.classList.contains('backdrop')) {
236 + closeDialog(e.target);
237 + return;
238 + }
239 +
240 + // Mobile drawer
241 + var drawerOpen = e.target.closest('[data-drawer-open]');
242 + if (drawerOpen) {
243 + var drw = document.getElementById('mobile-drawer');
244 + if (drw) drw.classList.add('open');
245 + return;
246 + }
247 + var drawerClose = e.target.closest('[data-drawer-close]');
248 + if (drawerClose || e.target.id === 'mobile-drawer') {
249 + var drw2 = document.getElementById('mobile-drawer');
250 + if (drw2) drw2.classList.remove('open');
251 + return;
252 + }
253 +
254 + // Copy to clipboard
255 + var copyBtn = e.target.closest('[data-copy]');
256 + if (copyBtn) {
257 + e.preventDefault();
258 + var text = copyBtn.getAttribute('data-copy');
259 + var copiedMsg = document.documentElement.getAttribute('data-copied-text') || 'Copied';
260 + if (navigator.clipboard && navigator.clipboard.writeText) {
261 + navigator.clipboard.writeText(text).then(function () {
262 + showToast(copiedMsg);
263 + });
264 + } else {
265 + var ta = document.createElement('textarea');
266 + ta.value = text;
267 + document.body.appendChild(ta);
268 + ta.select();
269 + document.execCommand('copy');
270 + document.body.removeChild(ta);
271 + showToast(copiedMsg);
272 + }
273 + return;
274 + }
275 +
276 + if (!e.target.closest('[data-dropdown-menu]')) {
277 + closeAllDropdowns();
278 + }
279 + });
280 +
281 + // Input handlers (palette filter + delete repo confirmation match)
282 + document.addEventListener('input', function (e) {
283 + if (e.target.id === 'command-palette-input') {
284 + filterPalette(e.target.value);
285 + return;
286 + }
287 +
288 + var matchExpected = e.target.getAttribute('data-confirm-input');
289 + if (matchExpected !== null) {
290 + var btnId = e.target.getAttribute('data-confirm-button');
291 + var btn = btnId ? document.getElementById(btnId) : null;
292 + if (btn) {
293 + btn.disabled = e.target.value.trim() !== matchExpected;
294 + }
295 + }
296 +
297 + if (e.target.hasAttribute('data-file-filter')) {
298 + var q = e.target.value.trim().toLowerCase();
299 + document.querySelectorAll('[data-tree-row]').forEach(function (row) {
300 + var name = (row.getAttribute('data-tree-name') || '').toLowerCase();
301 + row.style.display = !q || name.indexOf(q) !== -1 ? '' : 'none';
302 + });
303 + }
304 + });
305 +
306 + // Keyboard navigation & chords
307 + var lastChordKey = '';
308 + var lastChordTime = 0;
309 +
310 + document.addEventListener('keydown', function (e) {
311 + var palette = document.getElementById('command-palette');
312 + var isPaletteOpen = palette && palette.classList.contains('open');
313 +
314 + if ((e.ctrlKey || e.metaKey) && e.key.toLowerCase() === 'k') {
315 + e.preventDefault();
316 + if (isPaletteOpen) {
317 + closeDialog(palette);
318 + } else {
319 + openPalette('');
320 + }
321 + return;
322 + }
323 +
324 + if ((e.ctrlKey || e.metaKey) && e.key.toLowerCase() === 'b') {
325 + e.preventDefault();
326 + toggleSidebar();
327 + return;
328 + }
329 +
330 + if (e.key === 'Escape') {
331 + closeAllDropdowns();
332 + document.querySelectorAll('.backdrop.open').forEach(function (b) {
333 + closeDialog(b);
334 + });
335 + var drw = document.getElementById('mobile-drawer');
336 + if (drw) drw.classList.remove('open');
337 + return;
338 + }
339 +
340 + if (isPaletteOpen) {
341 + var items = getVisiblePaletteItems();
342 + if (e.key === 'ArrowDown') {
343 + e.preventDefault();
344 + paletteIndex = (paletteIndex + 1) % Math.max(1, items.length);
345 + updatePaletteSelection();
346 + } else if (e.key === 'ArrowUp') {
347 + e.preventDefault();
348 + paletteIndex = (paletteIndex - 1 + Math.max(1, items.length)) % Math.max(1, items.length);
349 + updatePaletteSelection();
350 + } else if (e.key === 'Enter') {
351 + e.preventDefault();
352 + if (items[paletteIndex]) activatePaletteItem(items[paletteIndex]);
353 + }
354 + return;
355 + }
356 +
357 + var tag = e.target && e.target.tagName ? e.target.tagName.toUpperCase() : '';
358 + if (tag === 'INPUT' || tag === 'TEXTAREA' || tag === 'SELECT' || (e.target && e.target.isContentEditable)) {
359 + return;
360 + }
361 + if (e.ctrlKey || e.metaKey || e.altKey) return;
362 +
363 + var now = Date.now();
364 + if (lastChordKey === 'g' && now - lastChordTime < 900) {
365 + lastChordKey = '';
366 + if (e.key.toLowerCase() === 'h') {
367 + e.preventDefault();
368 + window.location.href = '/';
369 + return;
370 + }
371 + if (e.key.toLowerCase() === 'r') {
372 + e.preventDefault();
373 + window.location.href = '/repos';
374 + return;
375 + }
376 + }
377 +
378 + if (e.key.toLowerCase() === 'g') {
379 + lastChordKey = 'g';
380 + lastChordTime = now;
381 + return;
382 + }
383 +
384 + if (e.key === '/') {
385 + e.preventDefault();
386 + var searchInput = document.querySelector('[data-search-input]');
387 + if (searchInput) {
388 + searchInput.focus();
389 + } else {
390 + openPalette('');
391 + }
392 + return;
393 + }
394 +
395 + if (e.key === '?') {
396 + e.preventDefault();
397 + openDialog('shortcuts-dialog');
398 + return;
399 + }
400 +
401 + if (e.key.toLowerCase() === 't') {
402 + e.preventDefault();
403 + var fileFilter = document.querySelector('[data-file-filter]');
404 + if (fileFilter) {
405 + fileFilter.focus();
406 + } else {
407 + openPalette('file:');
408 + }
409 + }
410 + });
411 +
412 + // Avatar file picker preview & client-side 256x256 square crop/resize
413 + document.addEventListener('change', function (e) {
414 + if (e.target && e.target.id === 'avatar-file-input') {
415 + var file = e.target.files && e.target.files[0];
416 + if (!file) return;
417 + var reader = new FileReader();
418 + reader.onload = function (ev) {
419 + var img = new Image();
420 + img.onload = function () {
421 + var size = 256;
422 + var canvas = document.createElement('canvas');
423 + canvas.width = size;
424 + canvas.height = size;
425 + var ctx = canvas.getContext('2d');
426 + var minSide = Math.min(img.width, img.height);
427 + var sx = (img.width - minSide) / 2;
428 + var sy = (img.height - minSide) / 2;
429 + ctx.drawImage(img, sx, sy, minSide, minSide, 0, 0, size, size);
430 + var dataUrl = canvas.toDataURL('image/webp', 0.88);
431 + if (!dataUrl || dataUrl.indexOf('data:image/webp') !== 0) {
432 + dataUrl = canvas.toDataURL('image/jpeg', 0.88);
433 + }
434 + var hidden = document.getElementById('avatar-data-input');
435 + var rmHidden = document.getElementById('remove-avatar-input');
436 + if (hidden) hidden.value = dataUrl;
437 + if (rmHidden) rmHidden.value = 'false';
438 + var previewWrap = document.getElementById('avatar-preview-wrap');
439 + if (previewWrap) {
440 + previewWrap.innerHTML = '<span class="avatar avatar-xl"><img src="' + dataUrl + '" alt="Avatar" class="avatar-img"></span>';
441 + }
442 + };
443 + img.src = ev.target.result;
444 + };
445 + reader.readAsDataURL(file);
446 + }
447 + });
448 +
449 + document.addEventListener('click', function (e) {
450 + var rmBtn = e.target.closest('#remove-avatar-btn');
451 + if (rmBtn) {
452 + e.preventDefault();
453 + var rmHidden = document.getElementById('remove-avatar-input');
454 + var hidden = document.getElementById('avatar-data-input');
455 + var fileInput = document.getElementById('avatar-file-input');
456 + if (rmHidden) rmHidden.value = 'true';
457 + if (hidden) hidden.value = '';
458 + if (fileInput) fileInput.value = '';
459 + var previewWrap = document.getElementById('avatar-preview-wrap');
460 + if (previewWrap) {
461 + previewWrap.innerHTML = '<span class="avatar avatar-xl">?</span>';
462 + }
463 + rmBtn.style.display = 'none';
464 + }
465 + });
466 +})();
467 +
internal/web/static/js/htmx.min.js
+1 -0
... ... @@ -0,0 +1 @@
1 +var htmx=function(){"use strict";const Q={onLoad:null,process:null,on:null,off:null,trigger:null,ajax:null,find:null,findAll:null,closest:null,values:function(e,t){const n=cn(e,t||"post");return n.values},remove:null,addClass:null,removeClass:null,toggleClass:null,takeClass:null,swap:null,defineExtension:null,removeExtension:null,logAll:null,logNone:null,logger:null,config:{historyEnabled:true,historyCacheSize:10,refreshOnHistoryMiss:false,defaultSwapStyle:"innerHTML",defaultSwapDelay:0,defaultSettleDelay:20,includeIndicatorStyles:true,indicatorClass:"htmx-indicator",requestClass:"htmx-request",addedClass:"htmx-added",settlingClass:"htmx-settling",swappingClass:"htmx-swapping",allowEval:true,allowScriptTags:true,inlineScriptNonce:"",inlineStyleNonce:"",attributesToSettle:["class","style","width","height"],withCredentials:false,timeout:0,wsReconnectDelay:"full-jitter",wsBinaryType:"blob",disableSelector:"[hx-disable], [data-hx-disable]",scrollBehavior:"instant",defaultFocusScroll:false,getCacheBusterParam:false,globalViewTransitions:false,methodsThatUseUrlParams:["get","delete"],selfRequestsOnly:true,ignoreTitle:false,scrollIntoViewOnBoost:true,triggerSpecsCache:null,disableInheritance:false,responseHandling:[{code:"204",swap:false},{code:"[23]..",swap:true},{code:"[45]..",swap:false,error:true}],allowNestedOobSwaps:true},parseInterval:null,_:null,version:"2.0.3"};Q.onLoad=j;Q.process=kt;Q.on=ye;Q.off=be;Q.trigger=de;Q.ajax=Rn;Q.find=r;Q.findAll=x;Q.closest=g;Q.remove=z;Q.addClass=K;Q.removeClass=G;Q.toggleClass=W;Q.takeClass=Z;Q.swap=$e;Q.defineExtension=Fn;Q.removeExtension=Bn;Q.logAll=V;Q.logNone=_;Q.parseInterval=h;Q._=e;const n={addTriggerHandler:St,bodyContains:le,canAccessLocalStorage:B,findThisElement:Se,filterValues:dn,swap:$e,hasAttribute:s,getAttributeValue:te,getClosestAttributeValue:re,getClosestMatch:i,getExpressionVars:En,getHeaders:fn,getInputValues:cn,getInternalData:ie,getSwapSpecification:gn,getTriggerSpecs:st,getTarget:Ee,makeFragment:P,mergeObjects:ce,makeSettleInfo:xn,oobSwap:He,querySelectorExt:ae,settleImmediately:Kt,shouldCancel:dt,triggerEvent:de,triggerErrorEvent:fe,withExtensions:Ft};const o=["get","post","put","delete","patch"];const R=o.map(function(e){return"[hx-"+e+"], [data-hx-"+e+"]"}).join(", ");function h(e){if(e==undefined){return undefined}let t=NaN;if(e.slice(-2)=="ms"){t=parseFloat(e.slice(0,-2))}else if(e.slice(-1)=="s"){t=parseFloat(e.slice(0,-1))*1e3}else if(e.slice(-1)=="m"){t=parseFloat(e.slice(0,-1))*1e3*60}else{t=parseFloat(e)}return isNaN(t)?undefined:t}function ee(e,t){return e instanceof Element&&e.getAttribute(t)}function s(e,t){return!!e.hasAttribute&&(e.hasAttribute(t)||e.hasAttribute("data-"+t))}function te(e,t){return ee(e,t)||ee(e,"data-"+t)}function c(e){const t=e.parentElement;if(!t&&e.parentNode instanceof ShadowRoot)return e.parentNode;return t}function ne(){return document}function m(e,t){return e.getRootNode?e.getRootNode({composed:t}):ne()}function i(e,t){while(e&&!t(e)){e=c(e)}return e||null}function H(e,t,n){const r=te(t,n);const o=te(t,"hx-disinherit");var i=te(t,"hx-inherit");if(e!==t){if(Q.config.disableInheritance){if(i&&(i==="*"||i.split(" ").indexOf(n)>=0)){return r}else{return null}}if(o&&(o==="*"||o.split(" ").indexOf(n)>=0)){return"unset"}}return r}function re(t,n){let r=null;i(t,function(e){return!!(r=H(t,ue(e),n))});if(r!=="unset"){return r}}function d(e,t){const n=e instanceof Element&&(e.matches||e.matchesSelector||e.msMatchesSelector||e.mozMatchesSelector||e.webkitMatchesSelector||e.oMatchesSelector);return!!n&&n.call(e,t)}function T(e){const t=/<([a-z][^\/\0>\x20\t\r\n\f]*)/i;const n=t.exec(e);if(n){return n[1].toLowerCase()}else{return""}}function q(e){const t=new DOMParser;return t.parseFromString(e,"text/html")}function L(e,t){while(t.childNodes.length>0){e.append(t.childNodes[0])}}function N(e){const t=ne().createElement("script");se(e.attributes,function(e){t.setAttribute(e.name,e.value)});t.textContent=e.textContent;t.async=false;if(Q.config.inlineScriptNonce){t.nonce=Q.config.inlineScriptNonce}return t}function A(e){return e.matches("script")&&(e.type==="text/javascript"||e.type==="module"||e.type==="")}function I(e){Array.from(e.querySelectorAll("script")).forEach(e=>{if(A(e)){const t=N(e);const n=e.parentNode;try{n.insertBefore(t,e)}catch(e){C(e)}finally{e.remove()}}})}function P(e){const t=e.replace(/<head(\s[^>]*)?>[\s\S]*?<\/head>/i,"");const n=T(t);let r;if(n==="html"){r=new DocumentFragment;const i=q(e);L(r,i.body);r.title=i.title}else if(n==="body"){r=new DocumentFragment;const i=q(t);L(r,i.body);r.title=i.title}else{const i=q('<body><template class="internal-htmx-wrapper">'+t+"</template></body>");r=i.querySelector("template").content;r.title=i.title;var o=r.querySelector("title");if(o&&o.parentNode===r){o.remove();r.title=o.innerText}}if(r){if(Q.config.allowScriptTags){I(r)}else{r.querySelectorAll("script").forEach(e=>e.remove())}}return r}function oe(e){if(e){e()}}function t(e,t){return Object.prototype.toString.call(e)==="[object "+t+"]"}function k(e){return typeof e==="function"}function D(e){return t(e,"Object")}function ie(e){const t="htmx-internal-data";let n=e[t];if(!n){n=e[t]={}}return n}function M(t){const n=[];if(t){for(let e=0;e<t.length;e++){n.push(t[e])}}return n}function se(t,n){if(t){for(let e=0;e<t.length;e++){n(t[e])}}}function X(e){const t=e.getBoundingClientRect();const n=t.top;const r=t.bottom;return n<window.innerHeight&&r>=0}function le(e){const t=e.getRootNode&&e.getRootNode();if(t&&t instanceof window.ShadowRoot){return ne().body.contains(t.host)}else{return ne().body.contains(e)}}function F(e){return e.trim().split(/\s+/)}function ce(e,t){for(const n in t){if(t.hasOwnProperty(n)){e[n]=t[n]}}return e}function S(e){try{return JSON.parse(e)}catch(e){C(e);return null}}function B(){const e="htmx:localStorageTest";try{localStorage.setItem(e,e);localStorage.removeItem(e);return true}catch(e){return false}}function U(t){try{const e=new URL(t);if(e){t=e.pathname+e.search}if(!/^\/$/.test(t)){t=t.replace(/\/+$/,"")}return t}catch(e){return t}}function e(e){return vn(ne().body,function(){return eval(e)})}function j(t){const e=Q.on("htmx:load",function(e){t(e.detail.elt)});return e}function V(){Q.logger=function(e,t,n){if(console){console.log(t,e,n)}}}function _(){Q.logger=null}function r(e,t){if(typeof e!=="string"){return e.querySelector(t)}else{return r(ne(),e)}}function x(e,t){if(typeof e!=="string"){return e.querySelectorAll(t)}else{return x(ne(),e)}}function E(){return window}function z(e,t){e=y(e);if(t){E().setTimeout(function(){z(e);e=null},t)}else{c(e).removeChild(e)}}function ue(e){return e instanceof Element?e:null}function $(e){return e instanceof HTMLElement?e:null}function J(e){return typeof e==="string"?e:null}function f(e){return e instanceof Element||e instanceof Document||e instanceof DocumentFragment?e:null}function K(e,t,n){e=ue(y(e));if(!e){return}if(n){E().setTimeout(function(){K(e,t);e=null},n)}else{e.classList&&e.classList.add(t)}}function G(e,t,n){let r=ue(y(e));if(!r){return}if(n){E().setTimeout(function(){G(r,t);r=null},n)}else{if(r.classList){r.classList.remove(t);if(r.classList.length===0){r.removeAttribute("class")}}}}function W(e,t){e=y(e);e.classList.toggle(t)}function Z(e,t){e=y(e);se(e.parentElement.children,function(e){G(e,t)});K(ue(e),t)}function g(e,t){e=ue(y(e));if(e&&e.closest){return e.closest(t)}else{do{if(e==null||d(e,t)){return e}}while(e=e&&ue(c(e)));return null}}function l(e,t){return e.substring(0,t.length)===t}function Y(e,t){return e.substring(e.length-t.length)===t}function ge(e){const t=e.trim();if(l(t,"<")&&Y(t,"/>")){return t.substring(1,t.length-2)}else{return t}}function p(e,t,n){e=y(e);if(t.indexOf("closest ")===0){return[g(ue(e),ge(t.substr(8)))]}else if(t.indexOf("find ")===0){return[r(f(e),ge(t.substr(5)))]}else if(t==="next"){return[ue(e).nextElementSibling]}else if(t.indexOf("next ")===0){return[pe(e,ge(t.substr(5)),!!n)]}else if(t==="previous"){return[ue(e).previousElementSibling]}else if(t.indexOf("previous ")===0){return[me(e,ge(t.substr(9)),!!n)]}else if(t==="document"){return[document]}else if(t==="window"){return[window]}else if(t==="body"){return[document.body]}else if(t==="root"){return[m(e,!!n)]}else if(t==="host"){return[e.getRootNode().host]}else if(t.indexOf("global ")===0){return p(e,t.slice(7),true)}else{return M(f(m(e,!!n)).querySelectorAll(ge(t)))}}var pe=function(t,e,n){const r=f(m(t,n)).querySelectorAll(e);for(let e=0;e<r.length;e++){const o=r[e];if(o.compareDocumentPosition(t)===Node.DOCUMENT_POSITION_PRECEDING){return o}}};var me=function(t,e,n){const r=f(m(t,n)).querySelectorAll(e);for(let e=r.length-1;e>=0;e--){const o=r[e];if(o.compareDocumentPosition(t)===Node.DOCUMENT_POSITION_FOLLOWING){return o}}};function ae(e,t){if(typeof e!=="string"){return p(e,t)[0]}else{return p(ne().body,e)[0]}}function y(e,t){if(typeof e==="string"){return r(f(t)||document,e)}else{return e}}function xe(e,t,n,r){if(k(t)){return{target:ne().body,event:J(e),listener:t,options:n}}else{return{target:y(e),event:J(t),listener:n,options:r}}}function ye(t,n,r,o){Vn(function(){const e=xe(t,n,r,o);e.target.addEventListener(e.event,e.listener,e.options)});const e=k(n);return e?n:r}function be(t,n,r){Vn(function(){const e=xe(t,n,r);e.target.removeEventListener(e.event,e.listener)});return k(n)?n:r}const ve=ne().createElement("output");function we(e,t){const n=re(e,t);if(n){if(n==="this"){return[Se(e,t)]}else{const r=p(e,n);if(r.length===0){C('The selector "'+n+'" on '+t+" returned no matches!");return[ve]}else{return r}}}}function Se(e,t){return ue(i(e,function(e){return te(ue(e),t)!=null}))}function Ee(e){const t=re(e,"hx-target");if(t){if(t==="this"){return Se(e,"hx-target")}else{return ae(e,t)}}else{const n=ie(e);if(n.boosted){return ne().body}else{return e}}}function Ce(t){const n=Q.config.attributesToSettle;for(let e=0;e<n.length;e++){if(t===n[e]){return true}}return false}function Oe(t,n){se(t.attributes,function(e){if(!n.hasAttribute(e.name)&&Ce(e.name)){t.removeAttribute(e.name)}});se(n.attributes,function(e){if(Ce(e.name)){t.setAttribute(e.name,e.value)}})}function Re(t,e){const n=Un(e);for(let e=0;e<n.length;e++){const r=n[e];try{if(r.isInlineSwap(t)){return true}}catch(e){C(e)}}return t==="outerHTML"}function He(e,o,i,t){t=t||ne();let n="#"+ee(o,"id");let s="outerHTML";if(e==="true"){}else if(e.indexOf(":")>0){s=e.substr(0,e.indexOf(":"));n=e.substr(e.indexOf(":")+1,e.length)}else{s=e}o.removeAttribute("hx-swap-oob");o.removeAttribute("data-hx-swap-oob");const r=p(t,n,false);if(r){se(r,function(e){let t;const n=o.cloneNode(true);t=ne().createDocumentFragment();t.appendChild(n);if(!Re(s,e)){t=f(n)}const r={shouldSwap:true,target:e,fragment:t};if(!de(e,"htmx:oobBeforeSwap",r))return;e=r.target;if(r.shouldSwap){qe(t);_e(s,e,e,t,i);Te()}se(i.elts,function(e){de(e,"htmx:oobAfterSwap",r)})});o.parentNode.removeChild(o)}else{o.parentNode.removeChild(o);fe(ne().body,"htmx:oobErrorNoTarget",{content:o})}return e}function Te(){const e=r("#--htmx-preserve-pantry--");if(e){for(const t of[...e.children]){const n=r("#"+t.id);n.parentNode.moveBefore(t,n);n.remove()}e.remove()}}function qe(e){se(x(e,"[hx-preserve], [data-hx-preserve]"),function(e){const t=te(e,"id");const n=ne().getElementById(t);if(n!=null){if(e.moveBefore){let e=r("#--htmx-preserve-pantry--");if(e==null){ne().body.insertAdjacentHTML("afterend","<div id='--htmx-preserve-pantry--'></div>");e=r("#--htmx-preserve-pantry--")}e.moveBefore(n,null)}else{e.parentNode.replaceChild(n,e)}}})}function Le(l,e,c){se(e.querySelectorAll("[id]"),function(t){const n=ee(t,"id");if(n&&n.length>0){const r=n.replace("'","\\'");const o=t.tagName.replace(":","\\:");const e=f(l);const i=e&&e.querySelector(o+"[id='"+r+"']");if(i&&i!==e){const s=t.cloneNode();Oe(t,i);c.tasks.push(function(){Oe(t,s)})}}})}function Ne(e){return function(){G(e,Q.config.addedClass);kt(ue(e));Ae(f(e));de(e,"htmx:load")}}function Ae(e){const t="[autofocus]";const n=$(d(e,t)?e:e.querySelector(t));if(n!=null){n.focus()}}function u(e,t,n,r){Le(e,n,r);while(n.childNodes.length>0){const o=n.firstChild;K(ue(o),Q.config.addedClass);e.insertBefore(o,t);if(o.nodeType!==Node.TEXT_NODE&&o.nodeType!==Node.COMMENT_NODE){r.tasks.push(Ne(o))}}}function Ie(e,t){let n=0;while(n<e.length){t=(t<<5)-t+e.charCodeAt(n++)|0}return t}function Pe(t){let n=0;if(t.attributes){for(let e=0;e<t.attributes.length;e++){const r=t.attributes[e];if(r.value){n=Ie(r.name,n);n=Ie(r.value,n)}}}return n}function ke(t){const n=ie(t);if(n.onHandlers){for(let e=0;e<n.onHandlers.length;e++){const r=n.onHandlers[e];be(t,r.event,r.listener)}delete n.onHandlers}}function De(e){const t=ie(e);if(t.timeout){clearTimeout(t.timeout)}if(t.listenerInfos){se(t.listenerInfos,function(e){if(e.on){be(e.on,e.trigger,e.listener)}})}ke(e);se(Object.keys(t),function(e){delete t[e]})}function a(e){de(e,"htmx:beforeCleanupElement");De(e);if(e.children){se(e.children,function(e){a(e)})}}function Me(t,e,n){if(t instanceof Element&&t.tagName==="BODY"){return Ve(t,e,n)}let r;const o=t.previousSibling;const i=c(t);if(!i){return}u(i,t,e,n);if(o==null){r=i.firstChild}else{r=o.nextSibling}n.elts=n.elts.filter(function(e){return e!==t});while(r&&r!==t){if(r instanceof Element){n.elts.push(r)}r=r.nextSibling}a(t);if(t instanceof Element){t.remove()}else{t.parentNode.removeChild(t)}}function Xe(e,t,n){return u(e,e.firstChild,t,n)}function Fe(e,t,n){return u(c(e),e,t,n)}function Be(e,t,n){return u(e,null,t,n)}function Ue(e,t,n){return u(c(e),e.nextSibling,t,n)}function je(e){a(e);const t=c(e);if(t){return t.removeChild(e)}}function Ve(e,t,n){const r=e.firstChild;u(e,r,t,n);if(r){while(r.nextSibling){a(r.nextSibling);e.removeChild(r.nextSibling)}a(r);e.removeChild(r)}}function _e(t,e,n,r,o){switch(t){case"none":return;case"outerHTML":Me(n,r,o);return;case"afterbegin":Xe(n,r,o);return;case"beforebegin":Fe(n,r,o);return;case"beforeend":Be(n,r,o);return;case"afterend":Ue(n,r,o);return;case"delete":je(n);return;default:var i=Un(e);for(let e=0;e<i.length;e++){const s=i[e];try{const l=s.handleSwap(t,n,r,o);if(l){if(Array.isArray(l)){for(let e=0;e<l.length;e++){const c=l[e];if(c.nodeType!==Node.TEXT_NODE&&c.nodeType!==Node.COMMENT_NODE){o.tasks.push(Ne(c))}}}return}}catch(e){C(e)}}if(t==="innerHTML"){Ve(n,r,o)}else{_e(Q.config.defaultSwapStyle,e,n,r,o)}}}function ze(e,n,r){var t=x(e,"[hx-swap-oob], [data-hx-swap-oob]");se(t,function(e){if(Q.config.allowNestedOobSwaps||e.parentElement===null){const t=te(e,"hx-swap-oob");if(t!=null){He(t,e,n,r)}}else{e.removeAttribute("hx-swap-oob");e.removeAttribute("data-hx-swap-oob")}});return t.length>0}function $e(e,t,r,o){if(!o){o={}}e=y(e);const i=o.contextElement?m(o.contextElement,false):ne();const n=document.activeElement;let s={};try{s={elt:n,start:n?n.selectionStart:null,end:n?n.selectionEnd:null}}catch(e){}const l=xn(e);if(r.swapStyle==="textContent"){e.textContent=t}else{let n=P(t);l.title=n.title;if(o.selectOOB){const u=o.selectOOB.split(",");for(let t=0;t<u.length;t++){const a=u[t].split(":",2);let e=a[0].trim();if(e.indexOf("#")===0){e=e.substring(1)}const f=a[1]||"true";const d=n.querySelector("#"+e);if(d){He(f,d,l,i)}}}ze(n,l,i);se(x(n,"template"),function(e){if(ze(e.content,l,i)){e.remove()}});if(o.select){const h=ne().createDocumentFragment();se(n.querySelectorAll(o.select),function(e){h.appendChild(e)});n=h}qe(n);_e(r.swapStyle,o.contextElement,e,n,l);Te()}if(s.elt&&!le(s.elt)&&ee(s.elt,"id")){const g=document.getElementById(ee(s.elt,"id"));const p={preventScroll:r.focusScroll!==undefined?!r.focusScroll:!Q.config.defaultFocusScroll};if(g){if(s.start&&g.setSelectionRange){try{g.setSelectionRange(s.start,s.end)}catch(e){}}g.focus(p)}}e.classList.remove(Q.config.swappingClass);se(l.elts,function(e){if(e.classList){e.classList.add(Q.config.settlingClass)}de(e,"htmx:afterSwap",o.eventInfo)});if(o.afterSwapCallback){o.afterSwapCallback()}if(!r.ignoreTitle){kn(l.title)}const c=function(){se(l.tasks,function(e){e.call()});se(l.elts,function(e){if(e.classList){e.classList.remove(Q.config.settlingClass)}de(e,"htmx:afterSettle",o.eventInfo)});if(o.anchor){const e=ue(y("#"+o.anchor));if(e){e.scrollIntoView({block:"start",behavior:"auto"})}}yn(l.elts,r);if(o.afterSettleCallback){o.afterSettleCallback()}};if(r.settleDelay>0){E().setTimeout(c,r.settleDelay)}else{c()}}function Je(e,t,n){const r=e.getResponseHeader(t);if(r.indexOf("{")===0){const o=S(r);for(const i in o){if(o.hasOwnProperty(i)){let e=o[i];if(D(e)){n=e.target!==undefined?e.target:n}else{e={value:e}}de(n,i,e)}}}else{const s=r.split(",");for(let e=0;e<s.length;e++){de(n,s[e].trim(),[])}}}const Ke=/\s/;const b=/[\s,]/;const Ge=/[_$a-zA-Z]/;const We=/[_$a-zA-Z0-9]/;const Ze=['"',"'","/"];const v=/[^\s]/;const Ye=/[{(]/;const Qe=/[})]/;function et(e){const t=[];let n=0;while(n<e.length){if(Ge.exec(e.charAt(n))){var r=n;while(We.exec(e.charAt(n+1))){n++}t.push(e.substr(r,n-r+1))}else if(Ze.indexOf(e.charAt(n))!==-1){const o=e.charAt(n);var r=n;n++;while(n<e.length&&e.charAt(n)!==o){if(e.charAt(n)==="\\"){n++}n++}t.push(e.substr(r,n-r+1))}else{const i=e.charAt(n);t.push(i)}n++}return t}function tt(e,t,n){return Ge.exec(e.charAt(0))&&e!=="true"&&e!=="false"&&e!=="this"&&e!==n&&t!=="."}function nt(r,o,i){if(o[0]==="["){o.shift();let e=1;let t=" return (function("+i+"){ return (";let n=null;while(o.length>0){const s=o[0];if(s==="]"){e--;if(e===0){if(n===null){t=t+"true"}o.shift();t+=")})";try{const l=vn(r,function(){return Function(t)()},function(){return true});l.source=t;return l}catch(e){fe(ne().body,"htmx:syntax:error",{error:e,source:t});return null}}}else if(s==="["){e++}if(tt(s,n,i)){t+="(("+i+"."+s+") ? ("+i+"."+s+") : (window."+s+"))"}else{t=t+s}n=o.shift()}}}function w(e,t){let n="";while(e.length>0&&!t.test(e[0])){n+=e.shift()}return n}function rt(e){let t;if(e.length>0&&Ye.test(e[0])){e.shift();t=w(e,Qe).trim();e.shift()}else{t=w(e,b)}return t}const ot="input, textarea, select";function it(e,t,n){const r=[];const o=et(t);do{w(o,v);const l=o.length;const c=w(o,/[,\[\s]/);if(c!==""){if(c==="every"){const u={trigger:"every"};w(o,v);u.pollInterval=h(w(o,/[,\[\s]/));w(o,v);var i=nt(e,o,"event");if(i){u.eventFilter=i}r.push(u)}else{const a={trigger:c};var i=nt(e,o,"event");if(i){a.eventFilter=i}w(o,v);while(o.length>0&&o[0]!==","){const f=o.shift();if(f==="changed"){a.changed=true}else if(f==="once"){a.once=true}else if(f==="consume"){a.consume=true}else if(f==="delay"&&o[0]===":"){o.shift();a.delay=h(w(o,b))}else if(f==="from"&&o[0]===":"){o.shift();if(Ye.test(o[0])){var s=rt(o)}else{var s=w(o,b);if(s==="closest"||s==="find"||s==="next"||s==="previous"){o.shift();const d=rt(o);if(d.length>0){s+=" "+d}}}a.from=s}else if(f==="target"&&o[0]===":"){o.shift();a.target=rt(o)}else if(f==="throttle"&&o[0]===":"){o.shift();a.throttle=h(w(o,b))}else if(f==="queue"&&o[0]===":"){o.shift();a.queue=w(o,b)}else if(f==="root"&&o[0]===":"){o.shift();a[f]=rt(o)}else if(f==="threshold"&&o[0]===":"){o.shift();a[f]=w(o,b)}else{fe(e,"htmx:syntax:error",{token:o.shift()})}w(o,v)}r.push(a)}}if(o.length===l){fe(e,"htmx:syntax:error",{token:o.shift()})}w(o,v)}while(o[0]===","&&o.shift());if(n){n[t]=r}return r}function st(e){const t=te(e,"hx-trigger");let n=[];if(t){const r=Q.config.triggerSpecsCache;n=r&&r[t]||it(e,t,r)}if(n.length>0){return n}else if(d(e,"form")){return[{trigger:"submit"}]}else if(d(e,'input[type="button"], input[type="submit"]')){return[{trigger:"click"}]}else if(d(e,ot)){return[{trigger:"change"}]}else{return[{trigger:"click"}]}}function lt(e){ie(e).cancelled=true}function ct(e,t,n){const r=ie(e);r.timeout=E().setTimeout(function(){if(le(e)&&r.cancelled!==true){if(!gt(n,e,Mt("hx:poll:trigger",{triggerSpec:n,target:e}))){t(e)}ct(e,t,n)}},n.pollInterval)}function ut(e){return location.hostname===e.hostname&&ee(e,"href")&&ee(e,"href").indexOf("#")!==0}function at(e){return g(e,Q.config.disableSelector)}function ft(t,n,e){if(t instanceof HTMLAnchorElement&&ut(t)&&(t.target===""||t.target==="_self")||t.tagName==="FORM"&&String(ee(t,"method")).toLowerCase()!=="dialog"){n.boosted=true;let r,o;if(t.tagName==="A"){r="get";o=ee(t,"href")}else{const i=ee(t,"method");r=i?i.toLowerCase():"get";o=ee(t,"action");if(r==="get"&&o.includes("?")){o=o.replace(/\?[^#]+/,"")}}e.forEach(function(e){pt(t,function(e,t){const n=ue(e);if(at(n)){a(n);return}he(r,o,n,t)},n,e,true)})}}function dt(e,t){const n=ue(t);if(!n){return false}if(e.type==="submit"||e.type==="click"){if(n.tagName==="FORM"){return true}if(d(n,'input[type="submit"], button')&&g(n,"form")!==null){return true}if(n instanceof HTMLAnchorElement&&n.href&&(n.getAttribute("href")==="#"||n.getAttribute("href").indexOf("#")!==0)){return true}}return false}function ht(e,t){return ie(e).boosted&&e instanceof HTMLAnchorElement&&t.type==="click"&&(t.ctrlKey||t.metaKey)}function gt(e,t,n){const r=e.eventFilter;if(r){try{return r.call(t,n)!==true}catch(e){const o=r.source;fe(ne().body,"htmx:eventFilter:error",{error:e,source:o});return true}}return false}function pt(l,c,e,u,a){const f=ie(l);let t;if(u.from){t=p(l,u.from)}else{t=[l]}if(u.changed){if(!("lastValue"in f)){f.lastValue=new WeakMap}t.forEach(function(e){if(!f.lastValue.has(u)){f.lastValue.set(u,new WeakMap)}f.lastValue.get(u).set(e,e.value)})}se(t,function(i){const s=function(e){if(!le(l)){i.removeEventListener(u.trigger,s);return}if(ht(l,e)){return}if(a||dt(e,l)){e.preventDefault()}if(gt(u,l,e)){return}const t=ie(e);t.triggerSpec=u;if(t.handledFor==null){t.handledFor=[]}if(t.handledFor.indexOf(l)<0){t.handledFor.push(l);if(u.consume){e.stopPropagation()}if(u.target&&e.target){if(!d(ue(e.target),u.target)){return}}if(u.once){if(f.triggeredOnce){return}else{f.triggeredOnce=true}}if(u.changed){const n=event.target;const r=n.value;const o=f.lastValue.get(u);if(o.has(n)&&o.get(n)===r){return}o.set(n,r)}if(f.delayed){clearTimeout(f.delayed)}if(f.throttle){return}if(u.throttle>0){if(!f.throttle){de(l,"htmx:trigger");c(l,e);f.throttle=E().setTimeout(function(){f.throttle=null},u.throttle)}}else if(u.delay>0){f.delayed=E().setTimeout(function(){de(l,"htmx:trigger");c(l,e)},u.delay)}else{de(l,"htmx:trigger");c(l,e)}}};if(e.listenerInfos==null){e.listenerInfos=[]}e.listenerInfos.push({trigger:u.trigger,listener:s,on:i});i.addEventListener(u.trigger,s)})}let mt=false;let xt=null;function yt(){if(!xt){xt=function(){mt=true};window.addEventListener("scroll",xt);window.addEventListener("resize",xt);setInterval(function(){if(mt){mt=false;se(ne().querySelectorAll("[hx-trigger*='revealed'],[data-hx-trigger*='revealed']"),function(e){bt(e)})}},200)}}function bt(e){if(!s(e,"data-hx-revealed")&&X(e)){e.setAttribute("data-hx-revealed","true");const t=ie(e);if(t.initHash){de(e,"revealed")}else{e.addEventListener("htmx:afterProcessNode",function(){de(e,"revealed")},{once:true})}}}function vt(e,t,n,r){const o=function(){if(!n.loaded){n.loaded=true;t(e)}};if(r>0){E().setTimeout(o,r)}else{o()}}function wt(t,n,e){let i=false;se(o,function(r){if(s(t,"hx-"+r)){const o=te(t,"hx-"+r);i=true;n.path=o;n.verb=r;e.forEach(function(e){St(t,e,n,function(e,t){const n=ue(e);if(g(n,Q.config.disableSelector)){a(n);return}he(r,o,n,t)})})}});return i}function St(r,e,t,n){if(e.trigger==="revealed"){yt();pt(r,n,t,e);bt(ue(r))}else if(e.trigger==="intersect"){const o={};if(e.root){o.root=ae(r,e.root)}if(e.threshold){o.threshold=parseFloat(e.threshold)}const i=new IntersectionObserver(function(t){for(let e=0;e<t.length;e++){const n=t[e];if(n.isIntersecting){de(r,"intersect");break}}},o);i.observe(ue(r));pt(ue(r),n,t,e)}else if(e.trigger==="load"){if(!gt(e,r,Mt("load",{elt:r}))){vt(ue(r),n,t,e.delay)}}else if(e.pollInterval>0){t.polling=true;ct(ue(r),n,e)}else{pt(r,n,t,e)}}function Et(e){const t=ue(e);if(!t){return false}const n=t.attributes;for(let e=0;e<n.length;e++){const r=n[e].name;if(l(r,"hx-on:")||l(r,"data-hx-on:")||l(r,"hx-on-")||l(r,"data-hx-on-")){return true}}return false}const Ct=(new XPathEvaluator).createExpression('.//*[@*[ starts-with(name(), "hx-on:") or starts-with(name(), "data-hx-on:") or'+' starts-with(name(), "hx-on-") or starts-with(name(), "data-hx-on-") ]]');function Ot(e,t){if(Et(e)){t.push(ue(e))}const n=Ct.evaluate(e);let r=null;while(r=n.iterateNext())t.push(ue(r))}function Rt(e){const t=[];if(e instanceof DocumentFragment){for(const n of e.childNodes){Ot(n,t)}}else{Ot(e,t)}return t}function Ht(e){if(e.querySelectorAll){const n=", [hx-boost] a, [data-hx-boost] a, a[hx-boost], a[data-hx-boost]";const r=[];for(const i in Mn){const s=Mn[i];if(s.getSelectors){var t=s.getSelectors();if(t){r.push(t)}}}const o=e.querySelectorAll(R+n+", form, [type='submit'],"+" [hx-ext], [data-hx-ext], [hx-trigger], [data-hx-trigger]"+r.flat().map(e=>", "+e).join(""));return o}else{return[]}}function Tt(e){const t=g(ue(e.target),"button, input[type='submit']");const n=Lt(e);if(n){n.lastButtonClicked=t}}function qt(e){const t=Lt(e);if(t){t.lastButtonClicked=null}}function Lt(e){const t=g(ue(e.target),"button, input[type='submit']");if(!t){return}const n=y("#"+ee(t,"form"),t.getRootNode())||g(t,"form");if(!n){return}return ie(n)}function Nt(e){e.addEventListener("click",Tt);e.addEventListener("focusin",Tt);e.addEventListener("focusout",qt)}function At(t,e,n){const r=ie(t);if(!Array.isArray(r.onHandlers)){r.onHandlers=[]}let o;const i=function(e){vn(t,function(){if(at(t)){return}if(!o){o=new Function("event",n)}o.call(t,e)})};t.addEventListener(e,i);r.onHandlers.push({event:e,listener:i})}function It(t){ke(t);for(let e=0;e<t.attributes.length;e++){const n=t.attributes[e].name;const r=t.attributes[e].value;if(l(n,"hx-on")||l(n,"data-hx-on")){const o=n.indexOf("-on")+3;const i=n.slice(o,o+1);if(i==="-"||i===":"){let e=n.slice(o+1);if(l(e,":")){e="htmx"+e}else if(l(e,"-")){e="htmx:"+e.slice(1)}else if(l(e,"htmx-")){e="htmx:"+e.slice(5)}At(t,e,r)}}}}function Pt(t){if(g(t,Q.config.disableSelector)){a(t);return}const n=ie(t);if(n.initHash!==Pe(t)){De(t);n.initHash=Pe(t);de(t,"htmx:beforeProcessNode");const e=st(t);const r=wt(t,n,e);if(!r){if(re(t,"hx-boost")==="true"){ft(t,n,e)}else if(s(t,"hx-trigger")){e.forEach(function(e){St(t,e,n,function(){})})}}if(t.tagName==="FORM"||ee(t,"type")==="submit"&&s(t,"form")){Nt(t)}de(t,"htmx:afterProcessNode")}}function kt(e){e=y(e);if(g(e,Q.config.disableSelector)){a(e);return}Pt(e);se(Ht(e),function(e){Pt(e)});se(Rt(e),It)}function Dt(e){return e.replace(/([a-z0-9])([A-Z])/g,"$1-$2").toLowerCase()}function Mt(e,t){let n;if(window.CustomEvent&&typeof window.CustomEvent==="function"){n=new CustomEvent(e,{bubbles:true,cancelable:true,composed:true,detail:t})}else{n=ne().createEvent("CustomEvent");n.initCustomEvent(e,true,true,t)}return n}function fe(e,t,n){de(e,t,ce({error:t},n))}function Xt(e){return e==="htmx:afterProcessNode"}function Ft(e,t){se(Un(e),function(e){try{t(e)}catch(e){C(e)}})}function C(e){if(console.error){console.error(e)}else if(console.log){console.log("ERROR: ",e)}}function de(e,t,n){e=y(e);if(n==null){n={}}n.elt=e;const r=Mt(t,n);if(Q.logger&&!Xt(t)){Q.logger(e,t,n)}if(n.error){C(n.error);de(e,"htmx:error",{errorInfo:n})}let o=e.dispatchEvent(r);const i=Dt(t);if(o&&i!==t){const s=Mt(i,r.detail);o=o&&e.dispatchEvent(s)}Ft(ue(e),function(e){o=o&&(e.onEvent(t,r)!==false&&!r.defaultPrevented)});return o}let Bt=location.pathname+location.search;function Ut(){const e=ne().querySelector("[hx-history-elt],[data-hx-history-elt]");return e||ne().body}function jt(t,e){if(!B()){return}const n=_t(e);const r=ne().title;const o=window.scrollY;if(Q.config.historyCacheSize<=0){localStorage.removeItem("htmx-history-cache");return}t=U(t);const i=S(localStorage.getItem("htmx-history-cache"))||[];for(let e=0;e<i.length;e++){if(i[e].url===t){i.splice(e,1);break}}const s={url:t,content:n,title:r,scroll:o};de(ne().body,"htmx:historyItemCreated",{item:s,cache:i});i.push(s);while(i.length>Q.config.historyCacheSize){i.shift()}while(i.length>0){try{localStorage.setItem("htmx-history-cache",JSON.stringify(i));break}catch(e){fe(ne().body,"htmx:historyCacheError",{cause:e,cache:i});i.shift()}}}function Vt(t){if(!B()){return null}t=U(t);const n=S(localStorage.getItem("htmx-history-cache"))||[];for(let e=0;e<n.length;e++){if(n[e].url===t){return n[e]}}return null}function _t(e){const t=Q.config.requestClass;const n=e.cloneNode(true);se(x(n,"."+t),function(e){G(e,t)});se(x(n,"[data-disabled-by-htmx]"),function(e){e.removeAttribute("disabled")});return n.innerHTML}function zt(){const e=Ut();const t=Bt||location.pathname+location.search;let n;try{n=ne().querySelector('[hx-history="false" i],[data-hx-history="false" i]')}catch(e){n=ne().querySelector('[hx-history="false"],[data-hx-history="false"]')}if(!n){de(ne().body,"htmx:beforeHistorySave",{path:t,historyElt:e});jt(t,e)}if(Q.config.historyEnabled)history.replaceState({htmx:true},ne().title,window.location.href)}function $t(e){if(Q.config.getCacheBusterParam){e=e.replace(/org\.htmx\.cache-buster=[^&]*&?/,"");if(Y(e,"&")||Y(e,"?")){e=e.slice(0,-1)}}if(Q.config.historyEnabled){history.pushState({htmx:true},"",e)}Bt=e}function Jt(e){if(Q.config.historyEnabled)history.replaceState({htmx:true},"",e);Bt=e}function Kt(e){se(e,function(e){e.call(undefined)})}function Gt(o){const e=new XMLHttpRequest;const i={path:o,xhr:e};de(ne().body,"htmx:historyCacheMiss",i);e.open("GET",o,true);e.setRequestHeader("HX-Request","true");e.setRequestHeader("HX-History-Restore-Request","true");e.setRequestHeader("HX-Current-URL",ne().location.href);e.onload=function(){if(this.status>=200&&this.status<400){de(ne().body,"htmx:historyCacheMissLoad",i);const e=P(this.response);const t=e.querySelector("[hx-history-elt],[data-hx-history-elt]")||e;const n=Ut();const r=xn(n);kn(e.title);qe(e);Ve(n,t,r);Te();Kt(r.tasks);Bt=o;de(ne().body,"htmx:historyRestore",{path:o,cacheMiss:true,serverResponse:this.response})}else{fe(ne().body,"htmx:historyCacheMissLoadError",i)}};e.send()}function Wt(e){zt();e=e||location.pathname+location.search;const t=Vt(e);if(t){const n=P(t.content);const r=Ut();const o=xn(r);kn(t.title);qe(n);Ve(r,n,o);Te();Kt(o.tasks);E().setTimeout(function(){window.scrollTo(0,t.scroll)},0);Bt=e;de(ne().body,"htmx:historyRestore",{path:e,item:t})}else{if(Q.config.refreshOnHistoryMiss){window.location.reload(true)}else{Gt(e)}}}function Zt(e){let t=we(e,"hx-indicator");if(t==null){t=[e]}se(t,function(e){const t=ie(e);t.requestCount=(t.requestCount||0)+1;e.classList.add.call(e.classList,Q.config.requestClass)});return t}function Yt(e){let t=we(e,"hx-disabled-elt");if(t==null){t=[]}se(t,function(e){const t=ie(e);t.requestCount=(t.requestCount||0)+1;e.setAttribute("disabled","");e.setAttribute("data-disabled-by-htmx","")});return t}function Qt(e,t){se(e.concat(t),function(e){const t=ie(e);t.requestCount=(t.requestCount||1)-1});se(e,function(e){const t=ie(e);if(t.requestCount===0){e.classList.remove.call(e.classList,Q.config.requestClass)}});se(t,function(e){const t=ie(e);if(t.requestCount===0){e.removeAttribute("disabled");e.removeAttribute("data-disabled-by-htmx")}})}function en(t,n){for(let e=0;e<t.length;e++){const r=t[e];if(r.isSameNode(n)){return true}}return false}function tn(e){const t=e;if(t.name===""||t.name==null||t.disabled||g(t,"fieldset[disabled]")){return false}if(t.type==="button"||t.type==="submit"||t.tagName==="image"||t.tagName==="reset"||t.tagName==="file"){return false}if(t.type==="checkbox"||t.type==="radio"){return t.checked}return true}function nn(t,e,n){if(t!=null&&e!=null){if(Array.isArray(e)){e.forEach(function(e){n.append(t,e)})}else{n.append(t,e)}}}function rn(t,n,r){if(t!=null&&n!=null){let e=r.getAll(t);if(Array.isArray(n)){e=e.filter(e=>n.indexOf(e)<0)}else{e=e.filter(e=>e!==n)}r.delete(t);se(e,e=>r.append(t,e))}}function on(t,n,r,o,i){if(o==null||en(t,o)){return}else{t.push(o)}if(tn(o)){const s=ee(o,"name");let e=o.value;if(o instanceof HTMLSelectElement&&o.multiple){e=M(o.querySelectorAll("option:checked")).map(function(e){return e.value})}if(o instanceof HTMLInputElement&&o.files){e=M(o.files)}nn(s,e,n);if(i){sn(o,r)}}if(o instanceof HTMLFormElement){se(o.elements,function(e){if(t.indexOf(e)>=0){rn(e.name,e.value,n)}else{t.push(e)}if(i){sn(e,r)}});new FormData(o).forEach(function(e,t){if(e instanceof File&&e.name===""){return}nn(t,e,n)})}}function sn(e,t){const n=e;if(n.willValidate){de(n,"htmx:validation:validate");if(!n.checkValidity()){t.push({elt:n,message:n.validationMessage,validity:n.validity});de(n,"htmx:validation:failed",{message:n.validationMessage,validity:n.validity})}}}function ln(n,e){for(const t of e.keys()){n.delete(t)}e.forEach(function(e,t){n.append(t,e)});return n}function cn(e,t){const n=[];const r=new FormData;const o=new FormData;const i=[];const s=ie(e);if(s.lastButtonClicked&&!le(s.lastButtonClicked)){s.lastButtonClicked=null}let l=e instanceof HTMLFormElement&&e.noValidate!==true||te(e,"hx-validate")==="true";if(s.lastButtonClicked){l=l&&s.lastButtonClicked.formNoValidate!==true}if(t!=="get"){on(n,o,i,g(e,"form"),l)}on(n,r,i,e,l);if(s.lastButtonClicked||e.tagName==="BUTTON"||e.tagName==="INPUT"&&ee(e,"type")==="submit"){const u=s.lastButtonClicked||e;const a=ee(u,"name");nn(a,u.value,o)}const c=we(e,"hx-include");se(c,function(e){on(n,r,i,ue(e),l);if(!d(e,"form")){se(f(e).querySelectorAll(ot),function(e){on(n,r,i,e,l)})}});ln(r,o);return{errors:i,formData:r,values:Nn(r)}}function un(e,t,n){if(e!==""){e+="&"}if(String(n)==="[object Object]"){n=JSON.stringify(n)}const r=encodeURIComponent(n);e+=encodeURIComponent(t)+"="+r;return e}function an(e){e=qn(e);let n="";e.forEach(function(e,t){n=un(n,t,e)});return n}function fn(e,t,n){const r={"HX-Request":"true","HX-Trigger":ee(e,"id"),"HX-Trigger-Name":ee(e,"name"),"HX-Target":te(t,"id"),"HX-Current-URL":ne().location.href};bn(e,"hx-headers",false,r);if(n!==undefined){r["HX-Prompt"]=n}if(ie(e).boosted){r["HX-Boosted"]="true"}return r}function dn(n,e){const t=re(e,"hx-params");if(t){if(t==="none"){return new FormData}else if(t==="*"){return n}else if(t.indexOf("not ")===0){se(t.substr(4).split(","),function(e){e=e.trim();n.delete(e)});return n}else{const r=new FormData;se(t.split(","),function(t){t=t.trim();if(n.has(t)){n.getAll(t).forEach(function(e){r.append(t,e)})}});return r}}else{return n}}function hn(e){return!!ee(e,"href")&&ee(e,"href").indexOf("#")>=0}function gn(e,t){const n=t||re(e,"hx-swap");const r={swapStyle:ie(e).boosted?"innerHTML":Q.config.defaultSwapStyle,swapDelay:Q.config.defaultSwapDelay,settleDelay:Q.config.defaultSettleDelay};if(Q.config.scrollIntoViewOnBoost&&ie(e).boosted&&!hn(e)){r.show="top"}if(n){const s=F(n);if(s.length>0){for(let e=0;e<s.length;e++){const l=s[e];if(l.indexOf("swap:")===0){r.swapDelay=h(l.substr(5))}else if(l.indexOf("settle:")===0){r.settleDelay=h(l.substr(7))}else if(l.indexOf("transition:")===0){r.transition=l.substr(11)==="true"}else if(l.indexOf("ignoreTitle:")===0){r.ignoreTitle=l.substr(12)==="true"}else if(l.indexOf("scroll:")===0){const c=l.substr(7);var o=c.split(":");const u=o.pop();var i=o.length>0?o.join(":"):null;r.scroll=u;r.scrollTarget=i}else if(l.indexOf("show:")===0){const a=l.substr(5);var o=a.split(":");const f=o.pop();var i=o.length>0?o.join(":"):null;r.show=f;r.showTarget=i}else if(l.indexOf("focus-scroll:")===0){const d=l.substr("focus-scroll:".length);r.focusScroll=d=="true"}else if(e==0){r.swapStyle=l}else{C("Unknown modifier in hx-swap: "+l)}}}}return r}function pn(e){return re(e,"hx-encoding")==="multipart/form-data"||d(e,"form")&&ee(e,"enctype")==="multipart/form-data"}function mn(t,n,r){let o=null;Ft(n,function(e){if(o==null){o=e.encodeParameters(t,r,n)}});if(o!=null){return o}else{if(pn(n)){return ln(new FormData,qn(r))}else{return an(r)}}}function xn(e){return{tasks:[],elts:[e]}}function yn(e,t){const n=e[0];const r=e[e.length-1];if(t.scroll){var o=null;if(t.scrollTarget){o=ue(ae(n,t.scrollTarget))}if(t.scroll==="top"&&(n||o)){o=o||n;o.scrollTop=0}if(t.scroll==="bottom"&&(r||o)){o=o||r;o.scrollTop=o.scrollHeight}}if(t.show){var o=null;if(t.showTarget){let e=t.showTarget;if(t.showTarget==="window"){e="body"}o=ue(ae(n,e))}if(t.show==="top"&&(n||o)){o=o||n;o.scrollIntoView({block:"start",behavior:Q.config.scrollBehavior})}if(t.show==="bottom"&&(r||o)){o=o||r;o.scrollIntoView({block:"end",behavior:Q.config.scrollBehavior})}}}function bn(r,e,o,i){if(i==null){i={}}if(r==null){return i}const s=te(r,e);if(s){let e=s.trim();let t=o;if(e==="unset"){return null}if(e.indexOf("javascript:")===0){e=e.substr(11);t=true}else if(e.indexOf("js:")===0){e=e.substr(3);t=true}if(e.indexOf("{")!==0){e="{"+e+"}"}let n;if(t){n=vn(r,function(){return Function("return ("+e+")")()},{})}else{n=S(e)}for(const l in n){if(n.hasOwnProperty(l)){if(i[l]==null){i[l]=n[l]}}}}return bn(ue(c(r)),e,o,i)}function vn(e,t,n){if(Q.config.allowEval){return t()}else{fe(e,"htmx:evalDisallowedError");return n}}function wn(e,t){return bn(e,"hx-vars",true,t)}function Sn(e,t){return bn(e,"hx-vals",false,t)}function En(e){return ce(wn(e),Sn(e))}function Cn(t,n,r){if(r!==null){try{t.setRequestHeader(n,r)}catch(e){t.setRequestHeader(n,encodeURIComponent(r));t.setRequestHeader(n+"-URI-AutoEncoded","true")}}}function On(t){if(t.responseURL&&typeof URL!=="undefined"){try{const e=new URL(t.responseURL);return e.pathname+e.search}catch(e){fe(ne().body,"htmx:badResponseUrl",{url:t.responseURL})}}}function O(e,t){return t.test(e.getAllResponseHeaders())}function Rn(t,n,r){t=t.toLowerCase();if(r){if(r instanceof Element||typeof r==="string"){return he(t,n,null,null,{targetOverride:y(r)||ve,returnPromise:true})}else{let e=y(r.target);if(r.target&&!e||!e&&!y(r.source)){e=ve}return he(t,n,y(r.source),r.event,{handler:r.handler,headers:r.headers,values:r.values,targetOverride:e,swapOverride:r.swap,select:r.select,returnPromise:true})}}else{return he(t,n,null,null,{returnPromise:true})}}function Hn(e){const t=[];while(e){t.push(e);e=e.parentElement}return t}function Tn(e,t,n){let r;let o;if(typeof URL==="function"){o=new URL(t,document.location.href);const i=document.location.origin;r=i===o.origin}else{o=t;r=l(t,document.location.origin)}if(Q.config.selfRequestsOnly){if(!r){return false}}return de(e,"htmx:validateUrl",ce({url:o,sameHost:r},n))}function qn(e){if(e instanceof FormData)return e;const t=new FormData;for(const n in e){if(e.hasOwnProperty(n)){if(e[n]&&typeof e[n].forEach==="function"){e[n].forEach(function(e){t.append(n,e)})}else if(typeof e[n]==="object"&&!(e[n]instanceof Blob)){t.append(n,JSON.stringify(e[n]))}else{t.append(n,e[n])}}}return t}function Ln(r,o,e){return new Proxy(e,{get:function(t,e){if(typeof e==="number")return t[e];if(e==="length")return t.length;if(e==="push"){return function(e){t.push(e);r.append(o,e)}}if(typeof t[e]==="function"){return function(){t[e].apply(t,arguments);r.delete(o);t.forEach(function(e){r.append(o,e)})}}if(t[e]&&t[e].length===1){return t[e][0]}else{return t[e]}},set:function(e,t,n){e[t]=n;r.delete(o);e.forEach(function(e){r.append(o,e)});return true}})}function Nn(r){return new Proxy(r,{get:function(e,t){if(typeof t==="symbol"){return Reflect.get(e,t)}if(t==="toJSON"){return()=>Object.fromEntries(r)}if(t in e){if(typeof e[t]==="function"){return function(){return r[t].apply(r,arguments)}}else{return e[t]}}const n=r.getAll(t);if(n.length===0){return undefined}else if(n.length===1){return n[0]}else{return Ln(e,t,n)}},set:function(t,n,e){if(typeof n!=="string"){return false}t.delete(n);if(e&&typeof e.forEach==="function"){e.forEach(function(e){t.append(n,e)})}else if(typeof e==="object"&&!(e instanceof Blob)){t.append(n,JSON.stringify(e))}else{t.append(n,e)}return true},deleteProperty:function(e,t){if(typeof t==="string"){e.delete(t)}return true},ownKeys:function(e){return Reflect.ownKeys(Object.fromEntries(e))},getOwnPropertyDescriptor:function(e,t){return Reflect.getOwnPropertyDescriptor(Object.fromEntries(e),t)}})}function he(t,n,r,o,i,D){let s=null;let l=null;i=i!=null?i:{};if(i.returnPromise&&typeof Promise!=="undefined"){var e=new Promise(function(e,t){s=e;l=t})}if(r==null){r=ne().body}const M=i.handler||Dn;const X=i.select||null;if(!le(r)){oe(s);return e}const c=i.targetOverride||ue(Ee(r));if(c==null||c==ve){fe(r,"htmx:targetError",{target:te(r,"hx-target")});oe(l);return e}let u=ie(r);const a=u.lastButtonClicked;if(a){const L=ee(a,"formaction");if(L!=null){n=L}const N=ee(a,"formmethod");if(N!=null){if(N.toLowerCase()!=="dialog"){t=N}}}const f=re(r,"hx-confirm");if(D===undefined){const K=function(e){return he(t,n,r,o,i,!!e)};const G={target:c,elt:r,path:n,verb:t,triggeringEvent:o,etc:i,issueRequest:K,question:f};if(de(r,"htmx:confirm",G)===false){oe(s);return e}}let d=r;let h=re(r,"hx-sync");let g=null;let F=false;if(h){const A=h.split(":");const I=A[0].trim();if(I==="this"){d=Se(r,"hx-sync")}else{d=ue(ae(r,I))}h=(A[1]||"drop").trim();u=ie(d);if(h==="drop"&&u.xhr&&u.abortable!==true){oe(s);return e}else if(h==="abort"){if(u.xhr){oe(s);return e}else{F=true}}else if(h==="replace"){de(d,"htmx:abort")}else if(h.indexOf("queue")===0){const W=h.split(" ");g=(W[1]||"last").trim()}}if(u.xhr){if(u.abortable){de(d,"htmx:abort")}else{if(g==null){if(o){const P=ie(o);if(P&&P.triggerSpec&&P.triggerSpec.queue){g=P.triggerSpec.queue}}if(g==null){g="last"}}if(u.queuedRequests==null){u.queuedRequests=[]}if(g==="first"&&u.queuedRequests.length===0){u.queuedRequests.push(function(){he(t,n,r,o,i)})}else if(g==="all"){u.queuedRequests.push(function(){he(t,n,r,o,i)})}else if(g==="last"){u.queuedRequests=[];u.queuedRequests.push(function(){he(t,n,r,o,i)})}oe(s);return e}}const p=new XMLHttpRequest;u.xhr=p;u.abortable=F;const m=function(){u.xhr=null;u.abortable=false;if(u.queuedRequests!=null&&u.queuedRequests.length>0){const e=u.queuedRequests.shift();e()}};const B=re(r,"hx-prompt");if(B){var x=prompt(B);if(x===null||!de(r,"htmx:prompt",{prompt:x,target:c})){oe(s);m();return e}}if(f&&!D){if(!confirm(f)){oe(s);m();return e}}let y=fn(r,c,x);if(t!=="get"&&!pn(r)){y["Content-Type"]="application/x-www-form-urlencoded"}if(i.headers){y=ce(y,i.headers)}const U=cn(r,t);let b=U.errors;const j=U.formData;if(i.values){ln(j,qn(i.values))}const V=qn(En(r));const v=ln(j,V);let w=dn(v,r);if(Q.config.getCacheBusterParam&&t==="get"){w.set("org.htmx.cache-buster",ee(c,"id")||"true")}if(n==null||n===""){n=ne().location.href}const S=bn(r,"hx-request");const _=ie(r).boosted;let E=Q.config.methodsThatUseUrlParams.indexOf(t)>=0;const C={boosted:_,useUrlParams:E,formData:w,parameters:Nn(w),unfilteredFormData:v,unfilteredParameters:Nn(v),headers:y,target:c,verb:t,errors:b,withCredentials:i.credentials||S.credentials||Q.config.withCredentials,timeout:i.timeout||S.timeout||Q.config.timeout,path:n,triggeringEvent:o};if(!de(r,"htmx:configRequest",C)){oe(s);m();return e}n=C.path;t=C.verb;y=C.headers;w=qn(C.parameters);b=C.errors;E=C.useUrlParams;if(b&&b.length>0){de(r,"htmx:validation:halted",C);oe(s);m();return e}const z=n.split("#");const $=z[0];const O=z[1];let R=n;if(E){R=$;const Z=!w.keys().next().done;if(Z){if(R.indexOf("?")<0){R+="?"}else{R+="&"}R+=an(w);if(O){R+="#"+O}}}if(!Tn(r,R,C)){fe(r,"htmx:invalidPath",C);oe(l);return e}p.open(t.toUpperCase(),R,true);p.overrideMimeType("text/html");p.withCredentials=C.withCredentials;p.timeout=C.timeout;if(S.noHeaders){}else{for(const k in y){if(y.hasOwnProperty(k)){const Y=y[k];Cn(p,k,Y)}}}const H={xhr:p,target:c,requestConfig:C,etc:i,boosted:_,select:X,pathInfo:{requestPath:n,finalRequestPath:R,responsePath:null,anchor:O}};p.onload=function(){try{const t=Hn(r);H.pathInfo.responsePath=On(p);M(r,H);if(H.keepIndicators!==true){Qt(T,q)}de(r,"htmx:afterRequest",H);de(r,"htmx:afterOnLoad",H);if(!le(r)){let e=null;while(t.length>0&&e==null){const n=t.shift();if(le(n)){e=n}}if(e){de(e,"htmx:afterRequest",H);de(e,"htmx:afterOnLoad",H)}}oe(s);m()}catch(e){fe(r,"htmx:onLoadError",ce({error:e},H));throw e}};p.onerror=function(){Qt(T,q);fe(r,"htmx:afterRequest",H);fe(r,"htmx:sendError",H);oe(l);m()};p.onabort=function(){Qt(T,q);fe(r,"htmx:afterRequest",H);fe(r,"htmx:sendAbort",H);oe(l);m()};p.ontimeout=function(){Qt(T,q);fe(r,"htmx:afterRequest",H);fe(r,"htmx:timeout",H);oe(l);m()};if(!de(r,"htmx:beforeRequest",H)){oe(s);m();return e}var T=Zt(r);var q=Yt(r);se(["loadstart","loadend","progress","abort"],function(t){se([p,p.upload],function(e){e.addEventListener(t,function(e){de(r,"htmx:xhr:"+t,{lengthComputable:e.lengthComputable,loaded:e.loaded,total:e.total})})})});de(r,"htmx:beforeSend",H);const J=E?null:mn(p,r,w);p.send(J);return e}function An(e,t){const n=t.xhr;let r=null;let o=null;if(O(n,/HX-Push:/i)){r=n.getResponseHeader("HX-Push");o="push"}else if(O(n,/HX-Push-Url:/i)){r=n.getResponseHeader("HX-Push-Url");o="push"}else if(O(n,/HX-Replace-Url:/i)){r=n.getResponseHeader("HX-Replace-Url");o="replace"}if(r){if(r==="false"){return{}}else{return{type:o,path:r}}}const i=t.pathInfo.finalRequestPath;const s=t.pathInfo.responsePath;const l=re(e,"hx-push-url");const c=re(e,"hx-replace-url");const u=ie(e).boosted;let a=null;let f=null;if(l){a="push";f=l}else if(c){a="replace";f=c}else if(u){a="push";f=s||i}if(f){if(f==="false"){return{}}if(f==="true"){f=s||i}if(t.pathInfo.anchor&&f.indexOf("#")===-1){f=f+"#"+t.pathInfo.anchor}return{type:a,path:f}}else{return{}}}function In(e,t){var n=new RegExp(e.code);return n.test(t.toString(10))}function Pn(e){for(var t=0;t<Q.config.responseHandling.length;t++){var n=Q.config.responseHandling[t];if(In(n,e.status)){return n}}return{swap:false}}function kn(e){if(e){const t=r("title");if(t){t.innerHTML=e}else{window.document.title=e}}}function Dn(o,i){const s=i.xhr;let l=i.target;const e=i.etc;const c=i.select;if(!de(o,"htmx:beforeOnLoad",i))return;if(O(s,/HX-Trigger:/i)){Je(s,"HX-Trigger",o)}if(O(s,/HX-Location:/i)){zt();let e=s.getResponseHeader("HX-Location");var t;if(e.indexOf("{")===0){t=S(e);e=t.path;delete t.path}Rn("get",e,t).then(function(){$t(e)});return}const n=O(s,/HX-Refresh:/i)&&s.getResponseHeader("HX-Refresh")==="true";if(O(s,/HX-Redirect:/i)){i.keepIndicators=true;location.href=s.getResponseHeader("HX-Redirect");n&&location.reload();return}if(n){i.keepIndicators=true;location.reload();return}if(O(s,/HX-Retarget:/i)){if(s.getResponseHeader("HX-Retarget")==="this"){i.target=o}else{i.target=ue(ae(o,s.getResponseHeader("HX-Retarget")))}}const u=An(o,i);const r=Pn(s);const a=r.swap;let f=!!r.error;let d=Q.config.ignoreTitle||r.ignoreTitle;let h=r.select;if(r.target){i.target=ue(ae(o,r.target))}var g=e.swapOverride;if(g==null&&r.swapOverride){g=r.swapOverride}if(O(s,/HX-Retarget:/i)){if(s.getResponseHeader("HX-Retarget")==="this"){i.target=o}else{i.target=ue(ae(o,s.getResponseHeader("HX-Retarget")))}}if(O(s,/HX-Reswap:/i)){g=s.getResponseHeader("HX-Reswap")}var p=s.response;var m=ce({shouldSwap:a,serverResponse:p,isError:f,ignoreTitle:d,selectOverride:h,swapOverride:g},i);if(r.event&&!de(l,r.event,m))return;if(!de(l,"htmx:beforeSwap",m))return;l=m.target;p=m.serverResponse;f=m.isError;d=m.ignoreTitle;h=m.selectOverride;g=m.swapOverride;i.target=l;i.failed=f;i.successful=!f;if(m.shouldSwap){if(s.status===286){lt(o)}Ft(o,function(e){p=e.transformResponse(p,s,o)});if(u.type){zt()}var x=gn(o,g);if(!x.hasOwnProperty("ignoreTitle")){x.ignoreTitle=d}l.classList.add(Q.config.swappingClass);let n=null;let r=null;if(c){h=c}if(O(s,/HX-Reselect:/i)){h=s.getResponseHeader("HX-Reselect")}const y=re(o,"hx-select-oob");const b=re(o,"hx-select");let e=function(){try{if(u.type){de(ne().body,"htmx:beforeHistoryUpdate",ce({history:u},i));if(u.type==="push"){$t(u.path);de(ne().body,"htmx:pushedIntoHistory",{path:u.path})}else{Jt(u.path);de(ne().body,"htmx:replacedInHistory",{path:u.path})}}$e(l,p,x,{select:h||b,selectOOB:y,eventInfo:i,anchor:i.pathInfo.anchor,contextElement:o,afterSwapCallback:function(){if(O(s,/HX-Trigger-After-Swap:/i)){let e=o;if(!le(o)){e=ne().body}Je(s,"HX-Trigger-After-Swap",e)}},afterSettleCallback:function(){if(O(s,/HX-Trigger-After-Settle:/i)){let e=o;if(!le(o)){e=ne().body}Je(s,"HX-Trigger-After-Settle",e)}oe(n)}})}catch(e){fe(o,"htmx:swapError",i);oe(r);throw e}};let t=Q.config.globalViewTransitions;if(x.hasOwnProperty("transition")){t=x.transition}if(t&&de(o,"htmx:beforeTransition",i)&&typeof Promise!=="undefined"&&document.startViewTransition){const v=new Promise(function(e,t){n=e;r=t});const w=e;e=function(){document.startViewTransition(function(){w();return v})}}if(x.swapDelay>0){E().setTimeout(e,x.swapDelay)}else{e()}}if(f){fe(o,"htmx:responseError",ce({error:"Response Status Error Code "+s.status+" from "+i.pathInfo.requestPath},i))}}const Mn={};function Xn(){return{init:function(e){return null},getSelectors:function(){return null},onEvent:function(e,t){return true},transformResponse:function(e,t,n){return e},isInlineSwap:function(e){return false},handleSwap:function(e,t,n,r){return false},encodeParameters:function(e,t,n){return null}}}function Fn(e,t){if(t.init){t.init(n)}Mn[e]=ce(Xn(),t)}function Bn(e){delete Mn[e]}function Un(e,n,r){if(n==undefined){n=[]}if(e==undefined){return n}if(r==undefined){r=[]}const t=te(e,"hx-ext");if(t){se(t.split(","),function(e){e=e.replace(/ /g,"");if(e.slice(0,7)=="ignore:"){r.push(e.slice(7));return}if(r.indexOf(e)<0){const t=Mn[e];if(t&&n.indexOf(t)<0){n.push(t)}}})}return Un(ue(c(e)),n,r)}var jn=false;ne().addEventListener("DOMContentLoaded",function(){jn=true});function Vn(e){if(jn||ne().readyState==="complete"){e()}else{ne().addEventListener("DOMContentLoaded",e)}}function _n(){if(Q.config.includeIndicatorStyles!==false){const e=Q.config.inlineStyleNonce?` nonce="${Q.config.inlineStyleNonce}"`:"";ne().head.insertAdjacentHTML("beforeend","<style"+e+"> ."+Q.config.indicatorClass+"{opacity:0} ."+Q.config.requestClass+" ."+Q.config.indicatorClass+"{opacity:1; transition: opacity 200ms ease-in;} ."+Q.config.requestClass+"."+Q.config.indicatorClass+"{opacity:1; transition: opacity 200ms ease-in;} </style>")}}function zn(){const e=ne().querySelector('meta[name="htmx-config"]');if(e){return S(e.content)}else{return null}}function $n(){const e=zn();if(e){Q.config=ce(Q.config,e)}}Vn(function(){$n();_n();let e=ne().body;kt(e);const t=ne().querySelectorAll("[hx-trigger='restored'],[data-hx-trigger='restored']");e.addEventListener("htmx:abort",function(e){const t=e.target;const n=ie(t);if(n&&n.xhr){n.xhr.abort()}});const n=window.onpopstate?window.onpopstate.bind(window):null;window.onpopstate=function(e){if(e.state&&e.state.htmx){Wt();se(t,function(e){de(e,"htmx:restored",{document:ne(),triggerEvent:de})})}else{if(n){n(e)}}};E().setTimeout(function(){de(e,"htmx:load",{});e=null},0)});return Q}();
internal/web/views/layouts/base.html
+381 -0
... ... @@ -0,0 +1,381 @@
1 +<!DOCTYPE html>
2 +<html lang="{{.Lang}}" data-theme="{{if .Theme}}{{.Theme}}{{else}}system{{end}}" data-copied-text="{{t .Lang "common.copied"}}">
3 +<head>
4 + <meta charset="utf-8">
5 + <meta name="viewport" content="width=device-width, initial-scale=1">
6 + <link rel="icon" type="image/svg+xml" href="/static/favicon.svg">
7 + <title>{{if .Title}}{{.Title}} · Polar{{else}}Polar{{end}}</title>
8 + <meta name="description" content="{{t .Lang "app.tagline"}}">
9 + <script>
10 + (function(){
11 + try {
12 + var saved = localStorage.getItem('polar_theme');
13 + if (saved && ['light','dark','system'].indexOf(saved) !== -1) {
14 + document.documentElement.setAttribute('data-theme', saved);
15 + }
16 + var sb = localStorage.getItem('polar_sidebar');
17 + if (sb === 'collapsed') {
18 + document.documentElement.setAttribute('data-sidebar', 'collapsed');
19 + }
20 + } catch(e) {}
21 + })();
22 + </script>
23 + <style>{{inlineCSS}}</style>
24 + <link rel="stylesheet" href="/static/css/app.css?v={{assetVer}}">
25 +</head>
26 +<body>
27 + {{sprite}}
28 +
29 + <!-- Floating button to expand sidebar when collapsed -->
30 + <button type="button" class="sidebar-expand-btn" data-toggle-sidebar title="{{t .Lang "nav.toggle_sidebar"}} (Ctrl+B)" aria-label="{{t .Lang "nav.toggle_sidebar"}}">
31 + {{icon "sidebar" "size-4"}}
32 + </button>
33 +
34 + <div class="app-shell">
35 + <!-- Left Sidebar -->
36 + <aside class="app-sidebar" aria-label="Sidebar">
37 + <div class="sidebar-inner">
38 + <div class="flex flex-col gap-2 min-w-0">
39 + <!-- Brand, Language & Collapse Sidebar -->
40 + <div class="flex items-center justify-between px-3 py-2" style="padding:0.25rem 0.35rem;">
41 + <a href="/" class="font-semibold text-base tracking-tight" style="letter-spacing:-0.02em;">Polar</a>
42 + <div class="flex items-center gap-1">
43 + {{if eq .Lang "en"}}
44 + <a href="?lang=ru" class="btn btn-ghost btn-sm font-mono" title="{{t .Lang "nav.lang"}}">RU</a>
45 + {{else}}
46 + <a href="?lang=en" class="btn btn-ghost btn-sm font-mono" title="{{t .Lang "nav.lang"}}">EN</a>
47 + {{end}}
48 + <button type="button" class="btn btn-ghost btn-icon" style="width:1.65rem;height:1.65rem;" data-toggle-sidebar title="{{t .Lang "nav.toggle_sidebar"}} (Ctrl+B)" aria-label="{{t .Lang "nav.toggle_sidebar"}}">
49 + {{icon "sidebar" "size-4"}}
50 + </button>
51 + </div>
52 + </div>
53 +
54 + <!-- Search / Command Palette Trigger -->
55 + <button type="button" class="btn btn-outline w-full justify-between text-muted" style="padding:0 0.55rem;height:1.95rem;" data-open-palette="">
56 + <span class="flex items-center gap-2 text-xs">
57 + {{icon "search" "size-3.5"}}
58 + <span>{{t .Lang "nav.search_placeholder"}}</span>
59 + </span>
60 + <kbd class="kbd">⌘K</kbd>
61 + </button>
62 +
63 + <!-- Primary Navigation -->
64 + <nav class="flex flex-col gap-1 mt-1">
65 + {{if .CurrentUser}}
66 + <a href="/repos" class="nav-item">
67 + <span class="flex items-center gap-2">{{icon "git-branch" "size-4"}} {{t .Lang "nav.repositories"}}</span>
68 + </a>
69 + {{else}}
70 + <a href="/" class="nav-item">
71 + <span class="flex items-center gap-2">{{icon "home" "size-4"}} {{t .Lang "nav.home"}}</span>
72 + </a>
73 + {{end}}
74 + {{if .ExploreEnabled}}
75 + <a href="/explore" class="nav-item">
76 + <span class="flex items-center gap-2">{{icon "globe" "size-4"}} {{t .Lang "nav.explore"}}</span>
77 + </a>
78 + {{end}}
79 + {{if .CurrentUser}}
80 + <a href="/settings" class="nav-item">
81 + <span class="flex items-center gap-2">{{icon "settings" "size-4"}} {{t .Lang "nav.settings"}}</span>
82 + </a>
83 + {{if .CurrentUser.IsAdmin}}
84 + <a href="/admin" class="nav-item">
85 + <span class="flex items-center gap-2">{{icon "shield" "size-4"}} {{t .Lang "nav.admin"}}</span>
86 + </a>
87 + {{end}}
88 + {{end}}
89 + </nav>
90 +
91 + <!-- Quick Repository List in Sidebar -->
92 + <div class="mt-2">
93 + <div class="nav-section-label">
94 + <span>{{t .Lang "nav.repositories"}}</span>
95 + {{if .CurrentUser}}
96 + <a href="/new" class="btn btn-ghost btn-icon" style="width:1.35rem;height:1.35rem;" title="{{t .Lang "repo.new.title"}}">
97 + {{icon "plus" "size-3.5"}}
98 + </a>
99 + {{end}}
100 + </div>
101 + <div class="flex flex-col gap-1">
102 + {{if .PaletteRepos}}
103 + {{range .PaletteRepos}}
104 + <a href="/{{.OwnerUsername}}/{{.Name}}" class="nav-item" style="height:1.8rem;font-size:0.8rem;">
105 + <span class="flex items-center gap-2 min-w-0 truncate">
106 + {{if .IsPrivate}}
107 + {{icon "lock" "size-3.5"}}
108 + {{else}}
109 + {{icon "folder" "size-3.5"}}
110 + {{end}}
111 + <span class="truncate">{{.OwnerUsername}}/<strong>{{.Name}}</strong></span>
112 + </span>
113 + </a>
114 + {{end}}
115 + {{else}}
116 + {{if .CurrentUser}}
117 + <a href="/new" class="nav-item text-xs">
118 + <span class="flex items-center gap-1.5">{{icon "plus" "size-3.5"}} {{t .Lang "repo.new.title"}}</span>
119 + </a>
120 + {{end}}
121 + {{end}}
122 + </div>
123 + </div>
124 + </div>
125 +
126 + <!-- Sidebar Bottom: 3-Theme Switcher + Account -->
127 + <div class="flex flex-col gap-2 pt-2" style="border-top:1px solid hsl(var(--border));">
128 + <div class="segmented" role="radiogroup" aria-label="{{t .Lang "nav.theme"}}">
129 + <button type="button" class="segmented-btn {{if eq .Theme "light"}}active{{end}}" data-set-theme="light" title="{{t .Lang "theme.light"}}">
130 + {{icon "sun" "size-3.5"}}
131 + <span>{{t .Lang "theme.light"}}</span>
132 + </button>
133 + <button type="button" class="segmented-btn {{if eq .Theme "dark"}}active{{end}}" data-set-theme="dark" title="{{t .Lang "theme.dark"}}">
134 + {{icon "moon" "size-3.5"}}
135 + <span>{{t .Lang "theme.dark"}}</span>
136 + </button>
137 + <button type="button" class="segmented-btn {{if eq .Theme "system"}}active{{end}}" data-set-theme="system" title="{{t .Lang "theme.system"}}">
138 + {{icon "laptop" "size-3.5"}}
139 + <span>{{t .Lang "theme.system"}}</span>
140 + </button>
141 + </div>
142 +
143 + {{if .CurrentUser}}
144 + <div class="flex items-center justify-between gap-1" style="padding:0.15rem 0.25rem;">
145 + <a href="/{{.CurrentUser.Username}}" class="flex items-center gap-2 min-w-0 truncate text-sm font-medium">
146 + {{avatar .CurrentUser.Username .CurrentUser.AvatarURL}}
147 + <span class="truncate">{{.CurrentUser.Username}}</span>
148 + </a>
149 + <div class="flex items-center gap-1">
150 + <form method="post" action="/logout" style="margin:0;">
151 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
152 + <button type="submit" class="btn btn-ghost btn-icon" style="width:1.65rem;height:1.65rem;" title="{{t .Lang "nav.logout"}}" aria-label="{{t .Lang "nav.logout"}}">
153 + {{icon "log-out" "size-3.5"}}
154 + </button>
155 + </form>
156 + </div>
157 + </div>
158 + {{else}}
159 + <div class="flex flex-col gap-1.5">
160 + <a href="/login" class="btn btn-outline btn-sm w-full">{{t .Lang "nav.login"}}</a>
161 + {{if .RegistrationEnabled}}
162 + <a href="/register" class="btn btn-primary btn-sm w-full">{{t .Lang "nav.register"}}</a>
163 + {{end}}
164 + </div>
165 + {{end}}
166 + </div>
167 + </div>
168 + </aside>
169 +
170 + <!-- Main Content Column -->
171 + <div class="app-col">
172 + <!-- Mobile Topbar (only visible on small screens) -->
173 + <div class="mobile-topbar">
174 + <div class="flex items-center gap-2">
175 + <button type="button" class="btn btn-ghost btn-icon" data-drawer-open aria-label="Menu">
176 + {{icon "menu" "size-4"}}
177 + </button>
178 + <a href="/" class="font-semibold text-base tracking-tight" style="letter-spacing:-0.02em;">Polar</a>
179 + </div>
180 + <div class="flex items-center gap-1.5">
181 + <button type="button" class="btn btn-ghost btn-icon" data-open-palette="" aria-label="{{t .Lang "nav.command_palette"}}">
182 + {{icon "search" "size-4"}}
183 + </button>
184 + {{if .CurrentUser}}
185 + <a href="/new" class="btn btn-primary btn-sm">{{icon "plus" "size-3.5"}}</a>
186 + {{else}}
187 + <a href="/login" class="btn btn-outline btn-sm">{{t .Lang "nav.login"}}</a>
188 + {{end}}
189 + </div>
190 + </div>
191 +
192 + <main class="app-main">
193 + {{if .Flash}}
194 + <div class="container mb-4">
195 + <div class="card p-3 flex items-center justify-between gap-2" role="status" style="border-color:hsl(var(--primary) / 0.4);">
196 + <span class="flex items-center gap-2 text-sm">{{icon "check" "size-4"}} {{.Flash}}</span>
197 + </div>
198 + </div>
199 + {{end}}
200 + {{if .Error}}
201 + <div class="container mb-4">
202 + <div class="card p-3 flex items-center justify-between gap-2" role="alert" style="border-color:hsl(var(--destructive) / 0.6);color:hsl(var(--destructive));">
203 + <span class="flex items-center gap-2 text-sm">{{icon "alert-circle" "size-4"}} {{.Error}}</span>
204 + </div>
205 + </div>
206 + {{end}}
207 +
208 + {{template "content" .}}
209 + </main>
210 + </div>
211 + </div>
212 +
213 + <!-- Mobile Drawer -->
214 + <div id="mobile-drawer" class="mobile-drawer" aria-hidden="true">
215 + <div class="mobile-drawer-panel">
216 + <div class="flex flex-col gap-2">
217 + <div class="flex items-center justify-between" style="padding-bottom:0.5rem;border-bottom:1px solid hsl(var(--border));">
218 + <span class="font-semibold text-base tracking-tight" style="letter-spacing:-0.02em;">Polar</span>
219 + <button type="button" class="btn btn-ghost btn-icon" data-drawer-close aria-label="{{t .Lang "common.close"}}">
220 + {{icon "close" "size-4"}}
221 + </button>
222 + </div>
223 + <nav class="flex flex-col gap-1">
224 + <a href="/" class="nav-item">{{icon "home" "size-4"}} {{t .Lang "nav.home"}}</a>
225 + {{if .CurrentUser}}
226 + <a href="/repos" class="nav-item">{{icon "git-branch" "size-4"}} {{t .Lang "nav.repositories"}}</a>
227 + <a href="/new" class="nav-item">{{icon "plus" "size-4"}} {{t .Lang "repo.new.title"}}</a>
228 + <a href="/settings" class="nav-item">{{icon "settings" "size-4"}} {{t .Lang "nav.settings"}}</a>
229 + {{if .CurrentUser.IsAdmin}}
230 + <a href="/admin" class="nav-item">{{icon "shield" "size-4"}} {{t .Lang "nav.admin"}}</a>
231 + {{end}}
232 + {{end}}
233 + {{if .ExploreEnabled}}
234 + <a href="/explore" class="nav-item">{{icon "globe" "size-4"}} {{t .Lang "nav.explore"}}</a>
235 + {{end}}
236 + </nav>
237 + </div>
238 + <div class="segmented">
239 + <button type="button" class="segmented-btn" data-set-theme="light">{{t .Lang "theme.light"}}</button>
240 + <button type="button" class="segmented-btn" data-set-theme="dark">{{t .Lang "theme.dark"}}</button>
241 + <button type="button" class="segmented-btn" data-set-theme="system">{{t .Lang "theme.system"}}</button>
242 + </div>
243 + </div>
244 + </div>
245 +
246 + <!-- Command Palette (Ctrl/Cmd+K) -->
247 + <div id="command-palette" class="backdrop" role="dialog" aria-modal="true" aria-label="{{t .Lang "nav.command_palette"}}" aria-hidden="true">
248 + <div class="palette-box">
249 + <div class="palette-input-wrap">
250 + {{icon "search" "size-4"}}
251 + <input id="command-palette-input" type="text" class="palette-input" placeholder="{{t .Lang "palette.placeholder"}}" autocomplete="off">
252 + <kbd class="kbd">ESC</kbd>
253 + </div>
254 + <div class="palette-list" role="listbox">
255 + <div data-palette-group>
256 + <div class="palette-group-title">{{t .Lang "palette.group.nav"}}</div>
257 + <button type="button" class="palette-item" data-palette-item data-palette-href="/" data-palette-keywords="home главная домой">
258 + <span class="flex items-center gap-2">{{icon "home" "size-4"}} {{t .Lang "nav.home"}}</span>
259 + <span class="flex items-center gap-1"><kbd class="kbd">g</kbd><kbd class="kbd">h</kbd></span>
260 + </button>
261 + <button type="button" class="palette-item" data-palette-item data-palette-href="/repos" data-palette-keywords="repositories repos репозитории">
262 + <span class="flex items-center gap-2">{{icon "git-branch" "size-4"}} {{t .Lang "nav.repositories"}}</span>
263 + <span class="flex items-center gap-1"><kbd class="kbd">g</kbd><kbd class="kbd">r</kbd></span>
264 + </button>
265 + {{if .ExploreEnabled}}
266 + <button type="button" class="palette-item" data-palette-item data-palette-href="/explore" data-palette-keywords="explore обзор публичные">
267 + <span class="flex items-center gap-2">{{icon "globe" "size-4"}} {{t .Lang "nav.explore"}}</span>
268 + </button>
269 + {{end}}
270 + {{if .CurrentUser}}
271 + <button type="button" class="palette-item" data-palette-item data-palette-href="/new" data-palette-keywords="new create создать репозиторий">
272 + <span class="flex items-center gap-2">{{icon "plus" "size-4"}} {{t .Lang "repo.new.title"}}</span>
273 + </button>
274 + <button type="button" class="palette-item" data-palette-item data-palette-href="/settings" data-palette-keywords="settings tokens настройки токены">
275 + <span class="flex items-center gap-2">{{icon "settings" "size-4"}} {{t .Lang "nav.settings"}}</span>
276 + </button>
277 + {{if .CurrentUser.IsAdmin}}
278 + <button type="button" class="palette-item" data-palette-item data-palette-href="/admin" data-palette-keywords="admin админка">
279 + <span class="flex items-center gap-2">{{icon "shield" "size-4"}} {{t .Lang "nav.admin"}}</span>
280 + </button>
281 + {{end}}
282 + {{else}}
283 + <button type="button" class="palette-item" data-palette-item data-palette-href="/login" data-palette-keywords="login войти">
284 + <span class="flex items-center gap-2">{{icon "user" "size-4"}} {{t .Lang "nav.login"}}</span>
285 + </button>
286 + <button type="button" class="palette-item" data-palette-item data-palette-href="/register" data-palette-keywords="register регистрация">
287 + <span class="flex items-center gap-2">{{icon "plus" "size-4"}} {{t .Lang "nav.register"}}</span>
288 + </button>
289 + {{end}}
290 + <button type="button" class="palette-item" data-palette-item data-palette-action="toggle-sidebar" data-palette-keywords="sidebar toggle боковая панель скрыть">
291 + <span class="flex items-center gap-2">{{icon "sidebar" "size-4"}} {{t .Lang "nav.toggle_sidebar"}}</span>
292 + <span class="flex items-center gap-1"><kbd class="kbd">Ctrl</kbd><kbd class="kbd">B</kbd></span>
293 + </button>
294 + </div>
295 +
296 + {{if .PaletteFiles}}
297 + <div data-palette-group>
298 + <div class="palette-group-title">{{t .Lang "repo.files"}} ({{.Repo.OwnerUsername}}/{{.Repo.Name}})</div>
299 + {{range .PaletteFiles}}
300 + <button type="button" class="palette-item" data-palette-item data-palette-href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/blob/{{$.Ref}}/{{.}}" data-palette-keywords="file: {{.}}">
301 + <span class="flex items-center gap-2 font-mono text-xs">{{icon "file-code" "size-4"}} {{.}}</span>
302 + </button>
303 + {{end}}
304 + </div>
305 + {{end}}
306 +
307 + {{if .PaletteRepos}}
308 + <div data-palette-group>
309 + <div class="palette-group-title">{{t .Lang "palette.group.repos"}}</div>
310 + {{range .PaletteRepos}}
311 + <button type="button" class="palette-item" data-palette-item data-palette-href="/{{.OwnerUsername}}/{{.Name}}" data-palette-keywords="repo {{.OwnerUsername}}/{{.Name}} {{.Description}}">
312 + <span class="flex items-center gap-2">
313 + {{if .IsPrivate}}{{icon "lock" "size-4"}}{{else}}{{icon "git-branch" "size-4"}}{{end}}
314 + <span>{{.OwnerUsername}}/<strong>{{.Name}}</strong></span>
315 + </span>
316 + <span class="text-xs text-muted">{{if .IsPrivate}}{{t $.Lang "repo.private"}}{{else}}{{t $.Lang "repo.public"}}{{end}}</span>
317 + </button>
318 + {{end}}
319 + </div>
320 + {{end}}
321 +
322 + <div data-palette-group>
323 + <div class="palette-group-title">{{t .Lang "palette.group.themes"}}</div>
324 + <button type="button" class="palette-item" data-palette-item data-palette-theme="light" data-palette-keywords="theme light светлая">
325 + <span class="flex items-center gap-2">{{icon "sun" "size-4"}} {{t .Lang "theme.light"}}</span>
326 + </button>
327 + <button type="button" class="palette-item" data-palette-item data-palette-theme="dark" data-palette-keywords="theme dark темная тёмная">
328 + <span class="flex items-center gap-2">{{icon "moon" "size-4"}} {{t .Lang "theme.dark"}}</span>
329 + </button>
330 + <button type="button" class="palette-item" data-palette-item data-palette-theme="system" data-palette-keywords="theme system авто системная">
331 + <span class="flex items-center gap-2">{{icon "laptop" "size-4"}} {{t .Lang "theme.system"}}</span>
332 + </button>
333 + </div>
334 + </div>
335 + </div>
336 + </div>
337 +
338 + <!-- Keyboard Shortcuts Dialog (?) -->
339 + <div id="shortcuts-dialog" class="backdrop" role="dialog" aria-modal="true" aria-label="{{t .Lang "shortcuts.title"}}" aria-hidden="true">
340 + <div class="dialog-box">
341 + <div class="card-header">
342 + <span class="font-semibold flex items-center gap-2">{{icon "keyboard" "size-4"}} {{t .Lang "shortcuts.title"}}</span>
343 + <button type="button" class="btn btn-ghost btn-icon" data-dialog-close aria-label="{{t .Lang "common.close"}}">
344 + {{icon "close" "size-4"}}
345 + </button>
346 + </div>
347 + <div class="card-body flex flex-col gap-2 text-sm">
348 + <div class="flex items-center justify-between py-2" style="border-bottom:1px solid hsl(var(--border));">
349 + <span>{{t .Lang "shortcuts.palette"}}</span>
350 + <span class="flex items-center gap-1"><kbd class="kbd">Ctrl</kbd><kbd class="kbd">K</kbd></span>
351 + </div>
352 + <div class="flex items-center justify-between py-2" style="border-bottom:1px solid hsl(var(--border));">
353 + <span>{{t .Lang "shortcuts.sidebar"}}</span>
354 + <span class="flex items-center gap-1"><kbd class="kbd">Ctrl</kbd><kbd class="kbd">B</kbd></span>
355 + </div>
356 + <div class="flex items-center justify-between py-2" style="border-bottom:1px solid hsl(var(--border));">
357 + <span>{{t .Lang "shortcuts.search"}}</span>
358 + <kbd class="kbd">/</kbd>
359 + </div>
360 + <div class="flex items-center justify-between py-2" style="border-bottom:1px solid hsl(var(--border));">
361 + <span>{{t .Lang "shortcuts.home"}}</span>
362 + <span class="flex items-center gap-1"><kbd class="kbd">g</kbd><kbd class="kbd">h</kbd></span>
363 + </div>
364 + <div class="flex items-center justify-between py-2" style="border-bottom:1px solid hsl(var(--border));">
365 + <span>{{t .Lang "shortcuts.repos"}}</span>
366 + <span class="flex items-center gap-1"><kbd class="kbd">g</kbd><kbd class="kbd">r</kbd></span>
367 + </div>
368 + <div class="flex items-center justify-between py-2">
369 + <span>{{t .Lang "shortcuts.files"}}</span>
370 + <kbd class="kbd">t</kbd>
371 + </div>
372 + </div>
373 + </div>
374 + </div>
375 +
376 + <div id="toast-container" class="toast-container" aria-live="polite"></div>
377 +
378 + <script src="/static/js/htmx.min.js" defer></script>
379 + <script src="/static/js/app.js?v={{assetVer}}" defer></script>
380 +</body>
381 +</html>
internal/web/views/pages/activity.html
+107 -0
... ... @@ -0,0 +1,107 @@
1 +{{define "content"}}
2 +<div class="container">
3 + {{template "repo_header" .}}
4 +
5 + <!-- Pulse Statistics -->
6 + {{if .Stats}}
7 + <div class="grid-4 mb-4">
8 + <div class="card p-3">
9 + <div class="flex items-center justify-between text-muted text-xs font-semibold uppercase mb-1">
10 + <span>{{t .Lang "activity.commits"}}</span>
11 + {{icon "git-commit" "size-4"}}
12 + </div>
13 + <div class="text-xl font-bold font-mono">{{.Stats.CommitCount}}</div>
14 + <div class="text-xs text-muted mt-1">{{t .Lang "activity.on_default_branch"}}</div>
15 + </div>
16 +
17 + <div class="card p-3">
18 + <div class="flex items-center justify-between text-muted text-xs font-semibold uppercase mb-1">
19 + <span>{{t .Lang "repo.tab.pulls"}}</span>
20 + {{icon "git-pull-request" "size-4"}}
21 + </div>
22 + <div class="flex items-baseline gap-2 font-mono">
23 + <span class="text-xl font-bold" style="color:hsl(var(--primary));">{{.Stats.OpenPRs}}</span>
24 + <span class="text-xs text-muted">/ {{.Stats.MergedPRs}} {{t .Lang "pulls.status.merged"}}</span>
25 + </div>
26 + <div class="text-xs text-muted mt-1">{{t .Lang "activity.pull_requests"}}</div>
27 + </div>
28 +
29 + <div class="card p-3">
30 + <div class="flex items-center justify-between text-muted text-xs font-semibold uppercase mb-1">
31 + <span>{{t .Lang "repo.tab.issues"}}</span>
32 + {{icon "issue" "size-4"}}
33 + </div>
34 + <div class="flex items-baseline gap-2 font-mono">
35 + <span class="text-xl font-bold" style="color:hsl(var(--primary));">{{.Stats.OpenIssues}}</span>
36 + <span class="text-xs text-muted">/ {{.Stats.ClosedIssues}} {{t .Lang "issue.status.closed"}}</span>
37 + </div>
38 + <div class="text-xs text-muted mt-1">{{t .Lang "activity.issues"}}</div>
39 + </div>
40 +
41 + <div class="card p-3">
42 + <div class="flex items-center justify-between text-muted text-xs font-semibold uppercase mb-1">
43 + <span>{{t .Lang "repo.tab.releases"}}</span>
44 + {{icon "tag" "size-4"}}
45 + </div>
46 + <div class="text-xl font-bold font-mono">{{.Stats.ReleaseCount}}</div>
47 + <div class="text-xs text-muted mt-1">{{t .Lang "activity.published_releases"}}</div>
48 + </div>
49 + </div>
50 + {{end}}
51 +
52 + <!-- Activity Timeline -->
53 + <div class="card">
54 + <div class="card-header flex items-center justify-between">
55 + <span class="font-semibold text-sm flex items-center gap-2">
56 + {{icon "activity" "size-4"}}
57 + <span>{{t .Lang "activity.recent_feed"}}</span>
58 + </span>
59 + </div>
60 +
61 + {{if .Items}}
62 + <div class="dense-list">
63 + {{range .Items}}
64 + <div class="dense-row" style="min-height:3rem;padding:0.6rem 0.85rem;">
65 + <div class="flex items-center gap-3 min-w-0">
66 + <span class="text-muted flex-shrink-0" style="display:inline-flex;align-items:center;">
67 + {{if eq .Type "commit"}}
68 + <span style="color:hsl(var(--primary));">{{icon "git-commit" "size-4"}}</span>
69 + {{else if eq .Type "pull"}}
70 + <span style="color:hsl(var(--accent));">{{icon "git-pull-request" "size-4"}}</span>
71 + {{else if eq .Type "issue"}}
72 + <span style="color:hsl(var(--primary));">{{icon "issue" "size-4"}}</span>
73 + {{else if eq .Type "release"}}
74 + <span style="color:hsl(var(--warning-fg, 38 92% 50%));">{{icon "tag" "size-4"}}</span>
75 + {{else}}
76 + {{icon "activity" "size-4"}}
77 + {{end}}
78 + </span>
79 +
80 + <div class="flex flex-col min-w-0">
81 + <div class="flex items-center gap-2 flex-wrap min-w-0">
82 + <a href="{{.Link}}" class="font-semibold text-sm truncate">{{.Title}}</a>
83 + {{if .Subtitle}}
84 + <span class="font-mono text-xs text-muted">{{.Subtitle}}</span>
85 + {{end}}
86 + {{if .Badge}}
87 + <span class="badge badge-outline text-xs" style="padding:0.05rem 0.35rem;">{{activityBadge $.Lang .Type .Badge}}</span>
88 + {{end}}
89 + </div>
90 + <div class="text-xs text-muted flex items-center gap-1.5 mt-0.5">
91 + {{if .AuthorUsername}}
92 + <span>@{{.AuthorUsername}}</span>
93 + <span>·</span>
94 + {{end}}
95 + <span>{{timeAgo .CreatedAt $.Lang}}</span>
96 + </div>
97 + </div>
98 + </div>
99 + </div>
100 + {{end}}
101 + </div>
102 + {{else}}
103 + <div class="card-body text-xs text-muted">{{t .Lang "activity.empty"}}</div>
104 + {{end}}
105 + </div>
106 +</div>
107 +{{end}}
internal/web/views/pages/admin.html
+171 -0
... ... @@ -0,0 +1,171 @@
1 +{{define "content"}}
2 +<div class="container">
3 + <div class="flex items-center justify-between mb-4">
4 + <h1 class="text-lg font-semibold" style="margin:0;">{{t .Lang "admin.title"}}</h1>
5 + </div>
6 +
7 + <!-- Feature Toggles (Modules & Access) -->
8 + <section class="card mb-4">
9 + <div class="card-header">
10 + <span class="font-semibold flex items-center gap-2">{{icon "settings" "size-4"}} {{t .Lang "admin.features"}}</span>
11 + </div>
12 + <div class="dense-list">
13 + <!-- 1. Explore Page -->
14 + <div class="dense-row" style="min-height:3.25rem;padding:0.65rem 0.9rem;">
15 + <div class="flex flex-col gap-1 min-w-0">
16 + <div class="flex items-center gap-2 font-medium text-sm">
17 + {{icon "globe" "size-4"}}
18 + <span>{{t .Lang "admin.explore"}}</span>
19 + {{if .ExploreEnabled}}
20 + <span class="badge badge-primary">{{t .Lang "admin.enabled"}}</span>
21 + {{else}}
22 + <span class="badge badge-outline">{{t .Lang "admin.disabled"}}</span>
23 + {{end}}
24 + </div>
25 + <div class="text-xs text-muted">{{t .Lang "admin.explore.desc"}}</div>
26 + </div>
27 + <form method="post" action="/admin/settings" style="margin:0;flex-shrink:0;">
28 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
29 + <input type="hidden" name="setting_key" value="explore_enabled">
30 + {{if .ExploreEnabled}}
31 + <input type="hidden" name="setting_val" value="false">
32 + <button type="submit" class="btn btn-outline btn-sm">{{t .Lang "admin.disable_btn"}}</button>
33 + {{else}}
34 + <input type="hidden" name="setting_val" value="true">
35 + <button type="submit" class="btn btn-primary btn-sm">{{t .Lang "admin.enable_btn"}}</button>
36 + {{end}}
37 + </form>
38 + </div>
39 +
40 + <!-- 2. Public Registration -->
41 + <div class="dense-row" style="min-height:3.25rem;padding:0.65rem 0.9rem;">
42 + <div class="flex flex-col gap-1 min-w-0">
43 + <div class="flex items-center gap-2 font-medium text-sm">
44 + {{icon "user" "size-4"}}
45 + <span>{{t .Lang "admin.registration"}}</span>
46 + {{if .RegistrationEnabled}}
47 + <span class="badge badge-primary">{{t .Lang "admin.enabled"}}</span>
48 + {{else}}
49 + <span class="badge badge-outline">{{t .Lang "admin.disabled"}}</span>
50 + {{end}}
51 + </div>
52 + <div class="text-xs text-muted">{{t .Lang "admin.registration.desc"}}</div>
53 + </div>
54 + <form method="post" action="/admin/settings" style="margin:0;flex-shrink:0;">
55 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
56 + <input type="hidden" name="setting_key" value="registration_enabled">
57 + {{if .RegistrationEnabled}}
58 + <input type="hidden" name="setting_val" value="false">
59 + <button type="submit" class="btn btn-outline btn-sm">{{t .Lang "admin.disable_btn"}}</button>
60 + {{else}}
61 + <input type="hidden" name="setting_val" value="true">
62 + <button type="submit" class="btn btn-primary btn-sm">{{t .Lang "admin.enable_btn"}}</button>
63 + {{end}}
64 + </form>
65 + </div>
66 +
67 +
68 + <!-- 4. Landing Page -->
69 + <div class="dense-row" style="min-height:3.25rem;padding:0.65rem 0.9rem;">
70 + <div class="flex flex-col gap-1 min-w-0">
71 + <div class="flex items-center gap-2 font-medium text-sm">
72 + {{icon "home" "size-4"}}
73 + <span>{{t .Lang "admin.landing"}}</span>
74 + {{if .LandingEnabled}}
75 + <span class="badge badge-primary">{{t .Lang "admin.enabled"}}</span>
76 + {{else}}
77 + <span class="badge badge-outline">{{t .Lang "admin.disabled"}}</span>
78 + {{end}}
79 + </div>
80 + <div class="text-xs text-muted">{{t .Lang "admin.landing.desc"}}</div>
81 + </div>
82 + <form method="post" action="/admin/settings" style="margin:0;flex-shrink:0;">
83 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
84 + <input type="hidden" name="setting_key" value="landing_enabled">
85 + {{if .LandingEnabled}}
86 + <input type="hidden" name="setting_val" value="false">
87 + <button type="submit" class="btn btn-outline btn-sm">{{t .Lang "admin.disable_btn"}}</button>
88 + {{else}}
89 + <input type="hidden" name="setting_val" value="true">
90 + <button type="submit" class="btn btn-primary btn-sm">{{t .Lang "admin.enable_btn"}}</button>
91 + {{end}}
92 + </form>
93 + </div>
94 +
95 + <!-- 5. Anonymous Read Access -->
96 + <div class="dense-row" style="min-height:3.25rem;padding:0.65rem 0.9rem;">
97 + <div class="flex flex-col gap-1 min-w-0">
98 + <div class="flex items-center gap-2 font-medium text-sm">
99 + {{icon "eye" "size-4"}}
100 + <span>{{t .Lang "admin.anon_read"}}</span>
101 + {{if .AnonymousReadEnabled}}
102 + <span class="badge badge-primary">{{t .Lang "admin.enabled"}}</span>
103 + {{else}}
104 + <span class="badge badge-outline">{{t .Lang "admin.disabled"}}</span>
105 + {{end}}
106 + </div>
107 + <div class="text-xs text-muted">{{t .Lang "admin.anon_read.desc"}}</div>
108 + </div>
109 + <form method="post" action="/admin/settings" style="margin:0;flex-shrink:0;">
110 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
111 + <input type="hidden" name="setting_key" value="anonymous_read_enabled">
112 + {{if .AnonymousReadEnabled}}
113 + <input type="hidden" name="setting_val" value="false">
114 + <button type="submit" class="btn btn-outline btn-sm">{{t .Lang "admin.disable_btn"}}</button>
115 + {{else}}
116 + <input type="hidden" name="setting_val" value="true">
117 + <button type="submit" class="btn btn-primary btn-sm">{{t .Lang "admin.enable_btn"}}</button>
118 + {{end}}
119 + </form>
120 + </div>
121 + </div>
122 + </section>
123 +
124 + <!-- Users Table -->
125 + <section class="card">
126 + <div class="card-header">
127 + <span class="font-semibold flex items-center gap-2">{{icon "users" "size-4"}} {{t .Lang "admin.users"}} ({{len .Users}})</span>
128 + </div>
129 + <div class="table-wrap" style="border:0;border-radius:0;">
130 + <table class="table">
131 + <thead>
132 + <tr>
133 + <th>ID</th>
134 + <th>{{t .Lang "admin.col.user"}}</th>
135 + <th>{{t .Lang "auth.email"}}</th>
136 + <th>{{t .Lang "admin.col.repos"}}</th>
137 + <th>{{t .Lang "admin.col.role"}}</th>
138 + <th>{{t .Lang "admin.col.joined"}}</th>
139 + </tr>
140 + </thead>
141 + <tbody>
142 + {{range .Users}}
143 + <tr>
144 + <td class="font-mono text-xs text-muted">#{{.ID}}</td>
145 + <td>
146 + <a href="/{{.Username}}" class="flex items-center gap-2 font-medium">
147 + {{avatar .Username .AvatarURL}}
148 + <div class="flex flex-col">
149 + <span>{{.Username}}</span>
150 + {{if .FullName}}<span class="text-xs text-muted">{{.FullName}}</span>{{end}}
151 + </div>
152 + </a>
153 + </td>
154 + <td class="text-xs text-muted">{{.Email}}</td>
155 + <td class="font-mono text-xs">{{.RepoCount}}</td>
156 + <td>
157 + {{if .IsAdmin}}
158 + <span class="badge badge-primary">{{t $.Lang "admin.role.admin"}}</span>
159 + {{else}}
160 + <span class="badge badge-outline">{{t $.Lang "admin.role.user"}}</span>
161 + {{end}}
162 + </td>
163 + <td class="text-xs text-muted">{{timeAgo .CreatedAt $.Lang}}</td>
164 + </tr>
165 + {{end}}
166 + </tbody>
167 + </table>
168 + </div>
169 + </section>
170 +</div>
171 +{{end}}
internal/web/views/pages/blob.html
+106 -0
... ... @@ -0,0 +1,106 @@
1 +{{define "content"}}
2 +<div class="container">
3 + {{template "repo_header" .}}
4 +
5 + <div class="flex items-center justify-between flex-wrap gap-2 mb-3">
6 + <div class="flex items-center gap-2 flex-wrap">
7 + <div class="dropdown" data-dropdown>
8 + <button type="button" class="btn btn-outline btn-sm font-mono" data-dropdown-trigger aria-haspopup="true" aria-expanded="false">
9 + {{icon "git-branch" "size-3.5"}}
10 + <span>{{.Ref}}</span>
11 + {{icon "chevron-down" "size-3.5"}}
12 + </button>
13 + <div class="dropdown-menu" data-dropdown-menu role="menu" style="min-width:13rem;">
14 + <div class="palette-group-title">{{t .Lang "repo.branches"}}</div>
15 + {{range .Branches}}
16 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/blob/{{.}}/{{$.SubPath}}" class="dropdown-item font-mono {{if eq . $.Ref}}active{{end}}" role="menuitem">
17 + <span class="flex items-center gap-2">{{icon "git-branch" "size-3.5"}} {{.}}</span>
18 + {{if eq . $.Ref}}{{icon "check" "size-3.5"}}{{end}}
19 + </a>
20 + {{end}}
21 + {{if .Tags}}
22 + <hr class="separator" style="margin:0.25rem 0;">
23 + <div class="palette-group-title">{{t .Lang "repo.tags"}}</div>
24 + {{range .Tags}}
25 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/blob/{{.}}/{{$.SubPath}}" class="dropdown-item font-mono {{if eq . $.Ref}}active{{end}}" role="menuitem">
26 + <span class="flex items-center gap-2">{{icon "tag" "size-3.5"}} {{.}}</span>
27 + {{if eq . $.Ref}}{{icon "check" "size-3.5"}}{{end}}
28 + </a>
29 + {{end}}
30 + {{end}}
31 + </div>
32 + </div>
33 +
34 + <nav class="breadcrumb font-mono text-xs" aria-label="File breadcrumb">
35 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/tree/{{.Ref}}" class="text-muted">{{.Repo.Name}}</a>
36 + {{range .Breadcrumbs}}
37 + <span class="breadcrumb-sep">/</span>
38 + {{if .IsLast}}
39 + <span class="font-semibold">{{.Name}}</span>
40 + {{else}}
41 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/tree/{{$.Ref}}/{{.Path}}" class="text-muted">{{.Name}}</a>
42 + {{end}}
43 + {{end}}
44 + </nav>
45 + </div>
46 +
47 + <div class="flex items-center gap-1.5">
48 + <button type="button" class="btn btn-outline btn-sm" data-open-palette="file:">
49 + {{icon "search" "size-3.5"}}
50 + <kbd class="kbd">t</kbd>
51 + </button>
52 + </div>
53 + </div>
54 +
55 + <div class="card">
56 + <div class="card-header" style="padding:0.5rem 0.8rem;">
57 + <div class="flex items-center gap-2 text-xs text-muted font-mono">
58 + {{icon "file-code" "size-4"}}
59 + <span class="font-semibold" style="color:hsl(var(--foreground));">{{.Blob.Name}}</span>
60 + <span>·</span>
61 + {{if not .Blob.IsBinary}}
62 + <span>{{.Blob.LineCount}} {{pluralT .Lang .Blob.LineCount "repo.lines"}}</span>
63 + <span>·</span>
64 + {{end}}
65 + <span>{{formatSize .Blob.Size}}</span>
66 + </div>
67 +
68 + <div class="flex items-center gap-1.5">
69 + {{if not .Blob.IsBinary}}
70 + <button type="button" class="btn btn-outline btn-sm" data-copy="{{.RawText}}" aria-label="{{t .Lang "common.copy"}}">
71 + {{icon "copy" "size-3.5"}}
72 + <span>{{t .Lang "common.copy"}}</span>
73 + </button>
74 + {{end}}
75 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/raw/{{.Ref}}/{{.SubPath}}" class="btn btn-outline btn-sm">
76 + {{icon "download" "size-3.5"}}
77 + <span>{{t .Lang "repo.raw"}}</span>
78 + </a>
79 + </div>
80 + </div>
81 +
82 + {{if .Blob.IsBinary}}
83 + <div class="card-body text-center py-2 text-sm text-muted">
84 + <p>{{t .Lang "repo.binary_notice"}} ({{formatSize .Blob.Size}})</p>
85 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/raw/{{.Ref}}/{{.SubPath}}" class="btn btn-secondary btn-sm">
86 + {{icon "download" "size-3.5"}}
87 + <span>{{t .Lang "repo.download_raw"}}</span>
88 + </a>
89 + </div>
90 + {{else}}
91 + <div style="overflow-x:auto;">
92 + <table class="code-table chroma">
93 + <tbody>
94 + {{range .HighlightedLines}}
95 + <tr id="L{{.Num}}">
96 + <td class="code-ln"><a href="#L{{.Num}}">{{.Num}}</a></td>
97 + <td class="code-line">{{.HTML}}</td>
98 + </tr>
99 + {{end}}
100 + </tbody>
101 + </table>
102 + </div>
103 + {{end}}
104 + </div>
105 +</div>
106 +{{end}}
internal/web/views/pages/branches.html
+129 -0
... ... @@ -0,0 +1,129 @@
1 +{{define "content"}}
2 +<div class="container">
3 + {{template "repo_header" .}}
4 +
5 + <!-- Branches Section -->
6 + <section class="card mb-4">
7 + <div class="card-header">
8 + <span class="font-semibold flex items-center gap-2">
9 + {{icon "git-branch" "size-4"}}
10 + <span>{{t .Lang "repo.branches"}} ({{len .BranchDetails}})</span>
11 + </span>
12 + </div>
13 +
14 + {{if and .CanWrite (not .IsEmpty)}}
15 + <form method="post" action="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/branches" class="card-body flex items-center flex-wrap gap-2" style="border-bottom:1px solid hsl(var(--border));background:hsl(var(--muted)/0.25);">
16 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
17 + <input name="branch_name" type="text" class="input font-mono" style="flex:1 1 12rem;height:1.9rem;" placeholder="{{t .Lang "repo.branch.name_ph"}}" required maxlength="100">
18 + <select name="from_ref" class="select font-mono" style="flex:0 1 11rem;height:1.9rem;">
19 + {{range .BranchDetails}}
20 + <option value="{{.Name}}" {{if .IsDefault}}selected{{end}}>{{.Name}}</option>
21 + {{end}}
22 + </select>
23 + <button type="submit" class="btn btn-primary btn-sm" style="height:1.9rem;">
24 + {{icon "plus" "size-3.5"}}
25 + <span>{{t .Lang "repo.branch.create"}}</span>
26 + </button>
27 + </form>
28 + {{end}}
29 +
30 + {{if .BranchDetails}}
31 + <div class="dense-list">
32 + {{range .BranchDetails}}
33 + <div class="dense-row" style="min-height:2.6rem;padding:0.45rem 0.85rem;">
34 + <div class="flex items-center gap-2 min-w-0">
35 + {{icon "git-branch" "size-4"}}
36 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/tree/{{.Name}}" class="font-mono font-semibold text-sm">{{.Name}}</a>
37 + {{if .IsDefault}}
38 + <span class="badge badge-primary">{{t $.Lang "repo.branch.default"}}</span>
39 + {{end}}
40 + {{if .Subject}}
41 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/commit/{{.Hash}}" class="text-xs text-muted truncate">— {{.Subject}}</a>
42 + {{end}}
43 + </div>
44 + <div class="flex items-center gap-2 flex-shrink-0">
45 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/commit/{{.Hash}}" class="badge badge-outline font-mono">{{.ShortHash}}</a>
46 + <span class="text-xs text-muted">{{timeAgo .UpdatedAt $.Lang}}</span>
47 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/archive/{{.Name}}.zip" class="btn btn-ghost btn-icon" style="width:1.65rem;height:1.65rem;" title="{{t $.Lang "repo.download_zip"}}">
48 + {{icon "download" "size-3.5"}}
49 + </a>
50 + {{if and $.CanWrite (not .IsDefault)}}
51 + <form method="post" action="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/branches/delete" style="margin:0;">
52 + <input type="hidden" name="_csrf" value="{{$.CSRFToken}}">
53 + <input type="hidden" name="branch_name" value="{{.Name}}">
54 + <button type="submit" class="btn btn-ghost btn-icon text-destructive" style="width:1.65rem;height:1.65rem;" title="{{t $.Lang "common.delete"}}">
55 + {{icon "trash" "size-3.5"}}
56 + </button>
57 + </form>
58 + {{end}}
59 + </div>
60 + </div>
61 + {{end}}
62 + </div>
63 + {{else}}
64 + <div class="card-body text-xs text-muted">{{t .Lang "repo.no_commits"}}</div>
65 + {{end}}
66 + </section>
67 +
68 + <!-- Tags / Releases Section -->
69 + <section class="card">
70 + <div class="card-header">
71 + <span class="font-semibold flex items-center gap-2">
72 + {{icon "tag" "size-4"}}
73 + <span>{{t .Lang "repo.tags"}} ({{len .TagDetails}})</span>
74 + </span>
75 + </div>
76 +
77 + {{if and .CanWrite (not .IsEmpty)}}
78 + <form method="post" action="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/tags" class="card-body flex items-center flex-wrap gap-2" style="border-bottom:1px solid hsl(var(--border));background:hsl(var(--muted)/0.25);">
79 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
80 + <input name="tag_name" type="text" class="input font-mono" style="flex:0 1 9rem;height:1.9rem;" placeholder="{{t .Lang "repo.tag.name_ph"}}" required maxlength="80">
81 + <select name="from_ref" class="select font-mono" style="flex:0 1 10rem;height:1.9rem;">
82 + {{range .BranchDetails}}
83 + <option value="{{.Name}}" {{if .IsDefault}}selected{{end}}>{{.Name}}</option>
84 + {{end}}
85 + </select>
86 + <input name="message" type="text" class="input" style="flex:1 1 12rem;height:1.9rem;" placeholder="{{t .Lang "repo.tag.msg_ph"}}" maxlength="200">
87 + <button type="submit" class="btn btn-outline btn-sm" style="height:1.9rem;">
88 + {{icon "plus" "size-3.5"}}
89 + <span>{{t .Lang "repo.tag.create"}}</span>
90 + </button>
91 + </form>
92 + {{end}}
93 +
94 + {{if .TagDetails}}
95 + <div class="dense-list">
96 + {{range .TagDetails}}
97 + <div class="dense-row" style="min-height:2.6rem;padding:0.45rem 0.85rem;">
98 + <div class="flex items-center gap-2 min-w-0">
99 + {{icon "tag" "size-4"}}
100 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/tree/{{.Name}}" class="font-mono font-semibold text-sm">{{.Name}}</a>
101 + {{if .Subject}}
102 + <span class="text-xs text-muted truncate">— {{.Subject}}</span>
103 + {{end}}
104 + </div>
105 + <div class="flex items-center gap-2 flex-shrink-0">
106 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/commit/{{.Hash}}" class="badge badge-outline font-mono">{{.ShortHash}}</a>
107 + <span class="text-xs text-muted">{{timeAgo .CreatedAt $.Lang}}</span>
108 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/archive/{{.Name}}.zip" class="btn btn-ghost btn-icon" style="width:1.65rem;height:1.65rem;" title="{{t $.Lang "repo.download_zip"}}">
109 + {{icon "download" "size-3.5"}}
110 + </a>
111 + {{if $.CanWrite}}
112 + <form method="post" action="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/tags/delete" style="margin:0;">
113 + <input type="hidden" name="_csrf" value="{{$.CSRFToken}}">
114 + <input type="hidden" name="tag_name" value="{{.Name}}">
115 + <button type="submit" class="btn btn-ghost btn-icon text-destructive" style="width:1.65rem;height:1.65rem;" title="{{t $.Lang "common.delete"}}">
116 + {{icon "trash" "size-3.5"}}
117 + </button>
118 + </form>
119 + {{end}}
120 + </div>
121 + </div>
122 + {{end}}
123 + </div>
124 + {{else}}
125 + <div class="card-body text-xs text-muted">{{t .Lang "repo.tags.empty"}}</div>
126 + {{end}}
127 + </section>
128 +</div>
129 +{{end}}
internal/web/views/pages/commit.html
+101 -0
... ... @@ -0,0 +1,101 @@
1 +{{define "content"}}
2 +<div class="container">
3 + {{template "repo_header" .}}
4 +
5 + <div class="card mb-4">
6 + <div class="card-header flex items-center justify-between flex-wrap gap-2">
7 + <div class="flex items-center gap-2 min-w-0">
8 + {{icon "git-commit" "size-4"}}
9 + <h1 class="text-base font-semibold truncate" style="margin:0;">{{.Detail.Commit.Subject}}</h1>
10 + </div>
11 + <div class="flex items-center gap-1.5 font-mono text-xs">
12 + <span class="badge badge-outline">{{.Detail.Commit.ShortHash}}</span>
13 + <button type="button" class="btn btn-ghost btn-icon" style="width:1.7rem;height:1.7rem;" data-copy="{{.Detail.Commit.Hash}}" aria-label="{{t .Lang "common.copy"}}">
14 + {{icon "copy" "size-3.5"}}
15 + </button>
16 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/tree/{{.Detail.Commit.Hash}}" class="btn btn-outline btn-sm">{{t .Lang "repo.browse_at_commit"}}</a>
17 + </div>
18 + </div>
19 +
20 + {{if .Detail.Commit.Body}}
21 + <div class="card-body" style="border-bottom:1px solid hsl(var(--border));background:hsl(var(--muted)/0.25);">
22 + <pre class="font-mono text-xs" style="margin:0;white-space:pre-wrap;">{{.Detail.Commit.Body}}</pre>
23 + </div>
24 + {{end}}
25 +
26 + <div class="card-body flex items-center justify-between flex-wrap gap-3 text-xs text-muted" style="padding:0.6rem 0.9rem;">
27 + <div class="flex items-center gap-2">
28 + <span class="avatar" style="width:1.35rem;height:1.35rem;font-size:0.62rem;">{{avatarInitial .Detail.Commit.AuthorName}}</span>
29 + <span class="font-medium" style="color:hsl(var(--foreground));">{{.Detail.Commit.AuthorName}}</span>
30 + <span>·</span>
31 + <span>{{formatDate .Detail.Commit.AuthoredAt}}</span>
32 + </div>
33 +
34 + <div class="flex items-center gap-3 font-mono">
35 + <span><strong>{{.Detail.FilesChanged}}</strong> {{pluralT .Lang .Detail.FilesChanged "repo.files_changed"}}</span>
36 + <span style="color:hsl(var(--diff-add-fg));">+{{.Detail.TotalAdditions}}</span>
37 + <span style="color:hsl(var(--diff-del-fg));">-{{.Detail.TotalDeletions}}</span>
38 + </div>
39 + </div>
40 + </div>
41 +
42 + <div class="flex flex-col gap-4">
43 + {{range .Detail.Files}}
44 + <section class="card">
45 + <div class="card-header" style="padding:0.5rem 0.8rem;">
46 + <div class="flex items-center gap-2 font-mono text-xs min-w-0">
47 + {{icon "file-code" "size-4"}}
48 + {{if eq .Status "renamed"}}
49 + <span>{{.OldPath}} → <strong>{{.NewPath}}</strong></span>
50 + {{else}}
51 + <strong>{{.NewPath}}</strong>
52 + {{end}}
53 + </div>
54 + <div class="flex items-center gap-2 font-mono text-xs">
55 + <span style="color:hsl(var(--diff-add-fg));">+{{.Additions}}</span>
56 + <span style="color:hsl(var(--diff-del-fg));">-{{.Deletions}}</span>
57 + </div>
58 + </div>
59 +
60 + {{if .IsBinary}}
61 + <div class="card-body text-xs text-muted">{{t $.Lang "repo.binary_notice"}}</div>
62 + {{else}}
63 + <div style="overflow-x:auto;">
64 + <table class="diff-table">
65 + <tbody>
66 + {{range .Lines}}
67 + {{if eq .Type "hunk"}}
68 + <tr class="diff-row-hunk">
69 + <td class="diff-num">...</td>
70 + <td class="diff-num">...</td>
71 + <td class="diff-code">{{.Content}}</td>
72 + </tr>
73 + {{else if eq .Type "add"}}
74 + <tr class="diff-row-add">
75 + <td class="diff-num"></td>
76 + <td class="diff-num">{{.NewNum}}</td>
77 + <td class="diff-code">+{{.Content}}</td>
78 + </tr>
79 + {{else if eq .Type "del"}}
80 + <tr class="diff-row-del">
81 + <td class="diff-num">{{.OldNum}}</td>
82 + <td class="diff-num"></td>
83 + <td class="diff-code">-{{.Content}}</td>
84 + </tr>
85 + {{else}}
86 + <tr>
87 + <td class="diff-num">{{.OldNum}}</td>
88 + <td class="diff-num">{{.NewNum}}</td>
89 + <td class="diff-code"> {{.Content}}</td>
90 + </tr>
91 + {{end}}
92 + {{end}}
93 + </tbody>
94 + </table>
95 + </div>
96 + {{end}}
97 + </section>
98 + {{end}}
99 + </div>
100 +</div>
101 +{{end}}
internal/web/views/pages/commits.html
+66 -0
... ... @@ -0,0 +1,66 @@
1 +{{define "content"}}
2 +<div class="container">
3 + {{template "repo_header" .}}
4 +
5 + <div class="flex items-center justify-between flex-wrap gap-2 mb-3">
6 + <div class="dropdown" data-dropdown>
7 + <button type="button" class="btn btn-outline btn-sm font-mono" data-dropdown-trigger aria-haspopup="true" aria-expanded="false">
8 + {{icon "git-branch" "size-3.5"}}
9 + <span>{{.Ref}}</span>
10 + {{icon "chevron-down" "size-3.5"}}
11 + </button>
12 + <div class="dropdown-menu" data-dropdown-menu role="menu" style="min-width:13rem;">
13 + <div class="palette-group-title">{{t .Lang "repo.branches"}}</div>
14 + {{range .Branches}}
15 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/commits/{{.}}" class="dropdown-item font-mono {{if eq . $.Ref}}active{{end}}" role="menuitem">
16 + <span class="flex items-center gap-2">{{icon "git-branch" "size-3.5"}} {{.}}</span>
17 + {{if eq . $.Ref}}{{icon "check" "size-3.5"}}{{end}}
18 + </a>
19 + {{end}}
20 + </div>
21 + </div>
22 +
23 + <span class="text-xs text-muted">{{t .Lang "repo.history"}} · {{.Ref}}</span>
24 + </div>
25 +
26 + {{if .Commits}}
27 + <div class="card">
28 + {{range .Commits}}
29 + <div class="dense-row" style="min-height:2.6rem;padding:0.4rem 0.85rem;">
30 + <div class="flex items-center gap-2.5 min-w-0">
31 + {{icon "git-commit" "size-4"}}
32 + <div class="min-w-0">
33 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/commit/{{.Hash}}" class="font-medium text-sm truncate block">{{.Subject}}</a>
34 + <div class="text-xs text-muted flex items-center gap-1.5 mt-1">
35 + <span>{{.AuthorName}}</span>
36 + <span>·</span>
37 + <span>{{timeAgo .AuthoredAt $.Lang}}</span>
38 + </div>
39 + </div>
40 + </div>
41 +
42 + <div class="flex items-center gap-1.5">
43 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/commit/{{.Hash}}" class="btn btn-outline btn-sm font-mono">{{.ShortHash}}</a>
44 + <button type="button" class="btn btn-ghost btn-icon" style="width:1.7rem;height:1.7rem;" data-copy="{{.Hash}}" aria-label="{{t $.Lang "common.copy"}}">
45 + {{icon "copy" "size-3.5"}}
46 + </button>
47 + </div>
48 + </div>
49 + {{end}}
50 + </div>
51 +
52 + <div class="flex items-center justify-between mt-4">
53 + {{if gt .Page 1}}
54 + <a href="?page={{sub .Page 1}}" class="btn btn-outline btn-sm">{{icon "arrow-left" "size-3.5"}} {{t .Lang "common.newer"}}</a>
55 + {{else}}
56 + <span></span>
57 + {{end}}
58 + {{if .HasMore}}
59 + <a href="?page={{add .Page 1}}" class="btn btn-outline btn-sm">{{t .Lang "common.older"}} {{icon "arrow-right" "size-3.5"}}</a>
60 + {{end}}
61 + </div>
62 + {{else}}
63 + {{template "ui_empty_state" (dict "Icon" "git-commit" "Title" (t .Lang "repo.no_commits"))}}
64 + {{end}}
65 +</div>
66 +{{end}}
internal/web/views/pages/device.html
+75 -0
... ... @@ -0,0 +1,75 @@
1 +{{define "content"}}
2 +<div class="container-narrow">
3 + <div class="card mb-4" style="margin-top:2.5rem;">
4 + <div class="card-header">
5 + <span class="font-semibold flex items-center gap-2">{{icon "key" "size-4"}} {{t .Lang "device.title"}}</span>
6 + <span class="badge badge-outline font-mono">{{t .Lang "device.badge"}}</span>
7 + </div>
8 + <div class="card-body flex flex-col gap-3">
9 + <p class="text-sm text-muted" style="margin:0;">{{t .Lang "device.desc"}}</p>
10 +
11 + {{if .CodeError}}
12 + <div class="text-sm flex items-center gap-2" style="color:hsl(var(--diff-del-fg));">
13 + {{icon "alert-circle" "size-4"}}
14 + <span>{{.CodeError}}</span>
15 + </div>
16 + {{end}}
17 +
18 + <form method="get" action="/login/device" class="flex items-center gap-2">
19 + <input name="user_code" class="input font-mono" style="letter-spacing:0.18em;text-transform:uppercase;max-width:12rem;" placeholder="XXXX-XXXX" value="{{.UserCode}}" maxlength="12" autocomplete="off" autofocus>
20 + <button class="btn btn-outline btn-sm" type="submit">
21 + {{icon "search" "size-3.5"}}
22 + <span>{{t .Lang "device.check"}}</span>
23 + </button>
24 + </form>
25 +
26 + {{if .CodeApproved}}
27 + <div class="flex items-center gap-2 text-sm" style="color:hsl(var(--diff-add-fg));border-top:1px solid hsl(var(--border));padding-top:0.85rem;">
28 + {{icon "check" "size-4"}}
29 + <span>{{t .Lang "device.approved_now"}}</span>
30 + </div>
31 + {{else if .CodeDenied}}
32 + <div class="flex items-center gap-2 text-sm" style="color:hsl(var(--diff-del-fg));border-top:1px solid hsl(var(--border));padding-top:0.85rem;">
33 + {{icon "close" "size-4"}}
34 + <span>{{t .Lang "device.denied_now"}}</span>
35 + </div>
36 + {{else if .SignedIn}}
37 + {{if and .UserCode .CodePending}}
38 + <form method="post" action="/login/device" class="flex flex-col gap-3" style="border-top:1px solid hsl(var(--border));padding-top:0.85rem;">
39 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
40 + <input type="hidden" name="user_code" value="{{.UserCode}}">
41 + <div class="text-sm">
42 + {{t .Lang "device.authorize_for"}}
43 + <span class="font-mono font-semibold">{{.UserCode}}</span>
44 + {{if .ClientName}}· <span class="font-medium">{{.ClientName}}</span>{{end}}
45 + </div>
46 + <div class="text-xs text-muted">{{t .Lang "device.scope_hint"}}</div>
47 + <div class="flex items-center gap-2">
48 + <button type="submit" name="action" value="approve" class="btn btn-primary btn-sm">
49 + {{icon "check" "size-3.5"}}
50 + <span>{{t .Lang "device.approve"}}</span>
51 + </button>
52 + <button type="submit" name="action" value="deny" class="btn btn-outline btn-sm">
53 + {{icon "close" "size-3.5"}}
54 + <span>{{t .Lang "device.deny"}}</span>
55 + </button>
56 + </div>
57 + </form>
58 + {{end}}
59 + {{else}}
60 + <div class="flex items-center gap-2 text-sm" style="border-top:1px solid hsl(var(--border));padding-top:0.85rem;">
61 + <a class="btn btn-primary btn-sm" href="/login?next=%2Flogin%2Fdevice%3Fuser_code%3D{{.UserCode}}">
62 + {{icon "user" "size-3.5"}}
63 + <span>{{t .Lang "device.signin_to_approve"}}</span>
64 + </a>
65 + </div>
66 + {{end}}
67 + </div>
68 + </div>
69 +
70 + <div class="text-xs text-muted text-center" style="margin-bottom:2.5rem;">
71 + {{t .Lang "device.helper_hint"}}
72 + <code class="font-mono">scripts/git-credential-polar</code>
73 + </div>
74 +</div>
75 +{{end}}
internal/web/views/pages/error.html
+13 -0
... ... @@ -0,0 +1,13 @@
1 +{{define "content"}}
2 +<div class="container" style="max-width:28rem;padding-top:3rem;">
3 + <div class="empty-state">
4 + <div class="font-mono text-2xl font-bold mb-1" style="color:hsl(var(--foreground));">{{.StatusCode}}</div>
5 + <div class="font-semibold text-base" style="color:hsl(var(--foreground));">{{.Title}}</div>
6 + <p class="text-sm text-muted mt-1">{{.Message}}</p>
7 + <div class="mt-4 flex items-center justify-center gap-2">
8 + <a href="/" class="btn btn-primary btn-sm">{{icon "home" "size-3.5"}} {{t .Lang "nav.home"}}</a>
9 + <a href="/repos" class="btn btn-outline btn-sm">{{icon "git-branch" "size-3.5"}} {{t .Lang "nav.repositories"}}</a>
10 + </div>
11 + </div>
12 +</div>
13 +{{end}}
internal/web/views/pages/forks.html
+46 -0
... ... @@ -0,0 +1,46 @@
1 +{{define "content"}}
2 +<div class="container">
3 + {{template "repo_header" .}}
4 +
5 + <div class="card mb-4">
6 + <div class="card-header">
7 + <span class="font-semibold flex items-center gap-2">{{icon "git-branch" "size-4"}} {{t .Lang "forks.title"}}</span>
8 + <span class="text-xs text-muted font-mono">{{.Repo.OwnerUsername}}/{{.Repo.Name}}</span>
9 + </div>
10 +
11 + {{if .Upstream}}
12 + <div class="card-body text-xs text-muted flex items-center gap-1.5" style="border-bottom:1px solid hsl(var(--border));">
13 + {{icon "git-branch" "size-3.5"}}
14 + {{t .Lang "fork.forked_from"}}
15 + <a class="font-medium" style="color:hsl(var(--foreground));" href="/{{.Upstream.Owner}}/{{.Upstream.Name}}">{{.Upstream.Owner}}/{{.Upstream.Name}}</a>
16 + </div>
17 + {{end}}
18 +
19 + <div class="dense-list">
20 + {{range .Forks}}
21 + <div class="dense-row" style="min-height:3rem;padding:0.55rem 0.85rem;">
22 + <div class="flex items-center gap-2.5 min-w-0">
23 + {{avatar .OwnerUsername .OwnerAvatarURL}}
24 + <div class="min-w-0">
25 + <a href="/{{.OwnerUsername}}/{{.Name}}" class="font-semibold text-sm">{{.OwnerUsername}}/{{.Name}}</a>
26 + {{if .Description}}
27 + <div class="text-xs text-muted truncate">{{.Description}}</div>
28 + {{end}}
29 + </div>
30 + </div>
31 + <div class="flex items-center gap-3 text-xs text-muted">
32 + <span>{{timeAgo .UpdatedAt $.Lang}}</span>
33 + {{if $.CurrentUser}}
34 + {{if eq .OwnerID $.CurrentUser.ID}}
35 + <span class="badge badge-outline">{{t $.Lang "fork.your_fork"}}</span>
36 + {{end}}
37 + {{end}}
38 + </div>
39 + </div>
40 + {{else}}
41 + <div class="card-body text-sm text-muted">{{t .Lang "forks.empty"}}</div>
42 + {{end}}
43 + </div>
44 + </div>
45 +</div>
46 +{{end}}
internal/web/views/pages/issue_detail.html
+95 -0
... ... @@ -0,0 +1,95 @@
1 +{{define "content"}}
2 +<div class="container">
3 + {{template "repo_header" .}}
4 +
5 + <!-- Issue Header -->
6 + <div class="mb-4 pb-3" style="border-bottom:1px solid hsl(var(--border));">
7 + <div class="flex items-start justify-between flex-wrap gap-3">
8 + <div class="flex items-center gap-2 flex-wrap">
9 + <h1 class="text-lg font-bold" style="margin:0;">{{.Issue.Title}}</h1>
10 + <span class="font-mono text-base text-muted">#{{.Issue.Number}}</span>
11 + </div>
12 + {{if .CanToggleIssue}}
13 + <form method="post" action="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/issues/{{.Issue.Number}}/state" style="margin:0;">
14 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
15 + {{if .Issue.IsClosed}}
16 + <input type="hidden" name="state" value="open">
17 + <button type="submit" class="btn btn-outline btn-sm">
18 + {{icon "alert-circle" "size-3.5"}}
19 + <span>{{t .Lang "issue.reopen_btn"}}</span>
20 + </button>
21 + {{else}}
22 + <input type="hidden" name="state" value="closed">
23 + <button type="submit" class="btn btn-outline btn-sm">
24 + {{icon "check" "size-3.5"}}
25 + <span>{{t .Lang "issue.close_btn"}}</span>
26 + </button>
27 + {{end}}
28 + </form>
29 + {{end}}
30 + </div>
31 +
32 + <div class="flex items-center gap-2 mt-2 text-xs text-muted">
33 + {{if .Issue.IsClosed}}
34 + <span class="badge badge-outline">{{icon "check" "size-3.5"}} {{t .Lang "issue.status.closed"}}</span>
35 + {{else}}
36 + <span class="badge badge-primary">{{icon "alert-circle" "size-3.5"}} {{t .Lang "issue.status.open"}}</span>
37 + {{end}}
38 + <a href="/{{.Issue.AuthorUsername}}" class="font-medium" style="color:hsl(var(--foreground));">@{{.Issue.AuthorUsername}}</a>
39 + <span>·</span>
40 + <span>{{timeAgo .Issue.CreatedAt .Lang}}</span>
41 + </div>
42 + </div>
43 +
44 + <!-- Issue Description Card -->
45 + <div class="card mb-4">
46 + <div class="card-header text-xs" style="padding:0.5rem 0.85rem;background:hsl(var(--muted)/0.3);">
47 + <div class="flex items-center gap-2">
48 + {{avatar .Issue.AuthorUsername .Issue.AuthorAvatar}}
49 + <a href="/{{.Issue.AuthorUsername}}" class="font-semibold">@{{.Issue.AuthorUsername}}</a>
50 + <span class="text-muted">{{timeAgo .Issue.CreatedAt .Lang}}</span>
51 + </div>
52 + </div>
53 + <div class="card-body markdown-body">
54 + {{if .Issue.Body}}
55 + {{renderMD .Issue.Body}}
56 + {{else}}
57 + <span class="text-xs text-muted">—</span>
58 + {{end}}
59 + </div>
60 + </div>
61 +
62 + <!-- Comments -->
63 + {{if .Comments}}
64 + <div class="flex flex-col gap-3 mb-4">
65 + {{range .Comments}}
66 + <div class="card">
67 + <div class="card-header text-xs" style="padding:0.5rem 0.85rem;background:hsl(var(--muted)/0.2);">
68 + <div class="flex items-center gap-2">
69 + {{avatar .AuthorUsername .AuthorAvatar}}
70 + <a href="/{{.AuthorUsername}}" class="font-semibold">@{{.AuthorUsername}}</a>
71 + <span class="text-muted">{{timeAgo .CreatedAt $.Lang}}</span>
72 + </div>
73 + </div>
74 + <div class="card-body markdown-body">
75 + {{renderMD .Body}}
76 + </div>
77 + </div>
78 + {{end}}
79 + </div>
80 + {{end}}
81 +
82 + <!-- Add Comment Form -->
83 + {{if .CurrentUser}}
84 + <div class="card">
85 + <form method="post" action="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/issues/{{.Issue.Number}}/comments" class="card-body flex flex-col gap-2.5">
86 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
87 + <textarea name="body" class="textarea" rows="4" placeholder="{{t .Lang "issue.comment_ph"}}" required maxlength="20000"></textarea>
88 + <div class="flex items-center justify-end">
89 + <button type="submit" class="btn btn-primary btn-sm">{{t .Lang "issue.comment_btn"}}</button>
90 + </div>
91 + </form>
92 + </div>
93 + {{end}}
94 +</div>
95 +{{end}}
internal/web/views/pages/issue_new.html
+26 -0
... ... @@ -0,0 +1,26 @@
1 +{{define "content"}}
2 +<div class="container">
3 + {{template "repo_header" .}}
4 +
5 + <div class="card">
6 + <div class="card-header">
7 + <span class="font-semibold flex items-center gap-2">{{icon "plus" "size-4"}} {{t .Lang "issue.new"}}</span>
8 + </div>
9 + <form method="post" action="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/issues/new" class="card-body flex flex-col gap-3">
10 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
11 + <div>
12 + <label class="label" for="title">{{t .Lang "issue.title"}}</label>
13 + <input id="title" name="title" type="text" class="input" placeholder="{{t .Lang "issue.title_ph"}}" required autofocus maxlength="200">
14 + </div>
15 + <div>
16 + <label class="label" for="body">{{t .Lang "issue.body"}}</label>
17 + <textarea id="body" name="body" class="textarea" rows="6" placeholder="{{t .Lang "issue.body_ph"}}" maxlength="20000"></textarea>
18 + </div>
19 + <div class="flex items-center justify-end gap-2">
20 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/issues" class="btn btn-ghost btn-sm">{{t .Lang "common.cancel"}}</a>
21 + <button type="submit" class="btn btn-primary btn-sm">{{t .Lang "issue.create"}}</button>
22 + </div>
23 + </form>
24 + </div>
25 +</div>
26 +{{end}}
internal/web/views/pages/issues.html
+68 -0
... ... @@ -0,0 +1,68 @@
1 +{{define "content"}}
2 +<div class="container">
3 + {{template "repo_header" .}}
4 +
5 + <div class="flex items-center justify-between flex-wrap gap-2 mb-3">
6 + <div class="flex items-center gap-1.5">
7 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/issues?state=open" class="btn {{if not .ShowClosed}}btn-secondary{{else}}btn-ghost{{end}} btn-sm">
8 + {{icon "alert-circle" "size-3.5"}}
9 + <span>{{t .Lang "issue.open"}} ({{.OpenCount}})</span>
10 + </a>
11 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/issues?state=closed" class="btn {{if .ShowClosed}}btn-secondary{{else}}btn-ghost{{end}} btn-sm">
12 + {{icon "check" "size-3.5"}}
13 + <span>{{t .Lang "issue.closed"}} ({{.ClosedCount}})</span>
14 + </a>
15 + </div>
16 +
17 + {{if .CurrentUser}}
18 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/issues/new" class="btn btn-primary btn-sm">
19 + {{icon "plus" "size-3.5"}}
20 + <span>{{t .Lang "issue.new"}}</span>
21 + </a>
22 + {{end}}
23 + </div>
24 +
25 + {{if .Issues}}
26 + <div class="card">
27 + <div class="dense-list">
28 + {{range .Issues}}
29 + <div class="dense-row" style="min-height:2.75rem;padding:0.5rem 0.85rem;">
30 + <div class="flex items-center gap-2.5 min-w-0">
31 + {{if .IsClosed}}
32 + <span class="text-muted">{{icon "check" "size-4"}}</span>
33 + {{else}}
34 + <span style="color:hsl(var(--primary));">{{icon "alert-circle" "size-4"}}</span>
35 + {{end}}
36 + <div class="flex flex-col min-w-0">
37 + <div class="flex items-center gap-2 min-w-0">
38 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/issues/{{.Number}}" class="font-semibold text-sm truncate">{{.Title}}</a>
39 + <span class="font-mono text-xs text-muted">#{{.Number}}</span>
40 + </div>
41 + <div class="text-xs text-muted flex items-center gap-1.5">
42 + <span>@{{.AuthorUsername}}</span>
43 + <span>·</span>
44 + <span>{{timeAgo .CreatedAt $.Lang}}</span>
45 + </div>
46 + </div>
47 + </div>
48 + <div class="flex items-center gap-2 text-xs text-muted flex-shrink-0">
49 + {{if gt .CommentCount 0}}
50 + <span class="flex items-center gap-1 font-mono">
51 + {{icon "message" "size-3.5"}}
52 + <span>{{.CommentCount}}</span>
53 + </span>
54 + {{end}}
55 + </div>
56 + </div>
57 + {{end}}
58 + </div>
59 + </div>
60 + {{else}}
61 + {{if .CurrentUser}}
62 + {{template "ui_empty_state" (dict "Icon" "alert-circle" "Title" (t .Lang "issue.empty") "ActionHref" (printf "/%s/%s/issues/new" .Repo.OwnerUsername .Repo.Name) "ActionLabel" (t .Lang "issue.new") "ActionIcon" "plus")}}
63 + {{else}}
64 + {{template "ui_empty_state" (dict "Icon" "alert-circle" "Title" (t .Lang "issue.empty"))}}
65 + {{end}}
66 + {{end}}
67 +</div>
68 +{{end}}
internal/web/views/pages/landing.html
+98 -0
... ... @@ -0,0 +1,98 @@
1 +{{define "content"}}
2 +<div class="container">
3 + <!-- Minimal Hero -->
4 + <section class="mb-6">
5 + <div class="mb-2">
6 + <span class="badge">{{icon "git-branch" "size-3.5"}} {{t .Lang "landing.badge"}}</span>
7 + </div>
8 + <h1 class="text-2xl font-bold" style="max-width:38rem;line-height:1.2;margin:0 0 0.6rem 0;">
9 + {{t .Lang "landing.hero.title"}}
10 + </h1>
11 + <p class="text-sm text-muted" style="max-width:36rem;margin:0 0 1.25rem 0;">
12 + {{t .Lang "landing.hero.subtitle"}}
13 + </p>
14 +
15 + <div class="flex items-center flex-wrap gap-2">
16 + {{if .CurrentUser}}
17 + <a href="/new" class="btn btn-primary">
18 + {{icon "plus" "size-4"}}
19 + <span>{{t .Lang "repo.new.title"}}</span>
20 + </a>
21 + <a href="/repos" class="btn btn-outline">
22 + {{icon "git-branch" "size-4"}}
23 + <span>{{t .Lang "nav.repositories"}}</span>
24 + </a>
25 + {{else}}
26 + {{if .RegistrationEnabled}}
27 + <a href="/register" class="btn btn-primary">
28 + <span>{{t .Lang "landing.hero.cta_start"}}</span>
29 + {{icon "arrow-right" "size-4"}}
30 + </a>
31 + {{end}}
32 + <a href="/login" class="btn btn-outline">
33 + <span>{{t .Lang "nav.login"}}</span>
34 + </a>
35 + {{end}}
36 + </div>
37 + </section>
38 +
39 + <!-- 4 Core Principles -->
40 + <section class="mb-6">
41 + <div class="grid-2">
42 + <div class="card p-3">
43 + <div class="flex items-center gap-2 font-semibold text-sm mb-1">
44 + {{icon "server" "size-4"}}
45 + <span>{{t .Lang "landing.feat1.title"}}</span>
46 + </div>
47 + <p class="text-xs text-muted" style="margin:0;">{{t .Lang "landing.feat1.desc"}}</p>
48 + </div>
49 +
50 + <div class="card p-3">
51 + <div class="flex items-center gap-2 font-semibold text-sm mb-1">
52 + {{icon "database" "size-4"}}
53 + <span>{{t .Lang "landing.feat2.title"}}</span>
54 + </div>
55 + <p class="text-xs text-muted" style="margin:0;">{{t .Lang "landing.feat2.desc"}}</p>
56 + </div>
57 +
58 + <div class="card p-3">
59 + <div class="flex items-center gap-2 font-semibold text-sm mb-1">
60 + {{icon "zap" "size-4"}}
61 + <span>{{t .Lang "landing.feat3.title"}}</span>
62 + </div>
63 + <p class="text-xs text-muted" style="margin:0;">{{t .Lang "landing.feat3.desc"}}</p>
64 + </div>
65 +
66 + <div class="card p-3">
67 + <div class="flex items-center gap-2 font-semibold text-sm mb-1">
68 + {{icon "lock" "size-4"}}
69 + <span>{{t .Lang "landing.feat4.title"}}</span>
70 + </div>
71 + <p class="text-xs text-muted" style="margin:0;">{{t .Lang "landing.feat4.desc"}}</p>
72 + </div>
73 + </div>
74 + </section>
75 +
76 + {{if and .ExploreEnabled .Repos}}
77 + <section>
78 + <div class="flex items-center justify-between mb-2">
79 + <h2 class="text-base font-semibold" style="margin:0;">{{t .Lang "nav.explore"}}</h2>
80 + </div>
81 + <div class="card">
82 + {{range .Repos}}
83 + <div class="dense-row">
84 + <div class="flex items-center gap-2 min-w-0">
85 + {{icon "git-branch" "size-4"}}
86 + <a href="/{{.OwnerUsername}}/{{.Name}}" class="font-medium">{{.OwnerUsername}}/<strong>{{.Name}}</strong></a>
87 + {{if .Description}}
88 + <span class="text-xs text-muted truncate">— {{.Description}}</span>
89 + {{end}}
90 + </div>
91 + <span class="text-xs text-muted">{{timeAgo .UpdatedAt $.Lang}}</span>
92 + </div>
93 + {{end}}
94 + </div>
95 + </section>
96 + {{end}}
97 +</div>
98 +{{end}}
internal/web/views/pages/login.html
+30 -0
... ... @@ -0,0 +1,30 @@
1 +{{define "content"}}
2 +<div class="container" style="max-width:23rem;padding-top:2rem;">
3 + <div class="card">
4 + <div class="card-header">
5 + <h1 class="text-base font-semibold" style="margin:0;">{{t .Lang "auth.login.title"}}</h1>
6 + </div>
7 + <form method="post" action="/login" class="card-body flex flex-col gap-3">
8 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
9 + {{if .Next}}<input type="hidden" name="next" value="{{.Next}}">{{end}}
10 + <div>
11 + <label class="label" for="login">{{t .Lang "auth.username_or_email"}}</label>
12 + <input id="login" name="login" type="text" class="input" value="{{.FormLogin}}" required autofocus autocomplete="username">
13 + </div>
14 + <div>
15 + <label class="label" for="password">{{t .Lang "auth.password"}}</label>
16 + <input id="password" name="password" type="password" class="input" required autocomplete="current-password">
17 + </div>
18 + <button type="submit" class="btn btn-primary w-full mt-1">
19 + <span>{{t .Lang "auth.submit_login"}}</span>
20 + </button>
21 + </form>
22 + {{if .RegistrationEnabled}}
23 + <div class="card-footer text-xs text-muted flex items-center justify-between">
24 + <span>{{t .Lang "auth.no_account"}}</span>
25 + <a href="/register" class="font-medium" style="color:hsl(var(--foreground));">{{t .Lang "nav.register"}} →</a>
26 + </div>
27 + {{end}}
28 + </div>
29 +</div>
30 +{{end}}
internal/web/views/pages/profile.html
+138 -0
... ... @@ -0,0 +1,138 @@
1 +{{define "content"}}
2 +<div class="container">
3 + <!-- Profile Card -->
4 + <div class="card p-4 mb-4">
5 + <div class="flex items-start justify-between flex-wrap gap-4">
6 + <div class="flex items-start gap-4 min-w-0">
7 + {{avatar .ProfileUser.Username .ProfileUser.AvatarURL "avatar-xl"}}
8 + <div class="flex flex-col gap-1 min-w-0">
9 + <div class="flex items-center gap-2 flex-wrap">
10 + {{if .ProfileUser.FullName}}
11 + <h1 class="text-xl font-bold" style="margin:0;line-height:1.2;">{{.ProfileUser.FullName}}</h1>
12 + <span class="font-mono text-sm text-muted">@{{.ProfileUser.Username}}</span>
13 + {{else}}
14 + <h1 class="text-xl font-bold" style="margin:0;line-height:1.2;">{{.ProfileUser.Username}}</h1>
15 + {{end}}
16 + {{if .ProfileUser.IsAdmin}}
17 + <span class="badge badge-primary">{{t .Lang "admin.role.admin"}}</span>
18 + {{end}}
19 + </div>
20 +
21 + {{if .ProfileUser.Bio}}
22 + <p class="text-sm" style="margin:0.15rem 0 0.25rem;max-width:38rem;">{{.ProfileUser.Bio}}</p>
23 + {{end}}
24 +
25 + <div class="flex items-center flex-wrap gap-3 text-xs text-muted mt-1">
26 + {{if .ProfileUser.Location}}
27 + <span class="flex items-center gap-1">
28 + {{icon "map-pin" "size-3.5"}}
29 + <span>{{.ProfileUser.Location}}</span>
30 + </span>
31 + {{end}}
32 + {{if .ProfileUser.Website}}
33 + <a href="{{.ProfileUser.Website}}" target="_blank" rel="noopener noreferrer" class="flex items-center gap-1" style="color:hsl(var(--foreground));text-decoration:underline;text-underline-offset:3px;">
34 + {{icon "link" "size-3.5"}}
35 + <span>{{.ProfileUser.Website}}</span>
36 + </a>
37 + {{end}}
38 + <span class="flex items-center gap-1">
39 + {{icon "calendar" "size-3.5"}}
40 + <span>{{t .Lang "profile.joined"}}: {{formatShortDate .ProfileUser.CreatedAt}}</span>
41 + </span>
42 + </div>
43 + </div>
44 + </div>
45 +
46 + <div class="flex items-center gap-2">
47 + {{if .CurrentUser}}
48 + {{if eq .CurrentUser.ID .ProfileUser.ID}}
49 + <a href="/settings" class="btn btn-outline btn-sm">
50 + {{icon "edit" "size-3.5"}}
51 + <span>{{t .Lang "profile.edit"}}</span>
52 + </a>
53 + {{end}}
54 + {{end}}
55 + </div>
56 + </div>
57 +
58 + <!-- Stats Row -->
59 + <div class="flex items-center gap-4 flex-wrap mt-4 pt-3" style="border-top:1px solid hsl(var(--border));">
60 + <div class="flex items-center gap-1.5 text-xs">
61 + {{icon "git-branch" "size-3.5"}}
62 + <span class="text-muted">{{t .Lang "profile.total_repos"}}:</span>
63 + <strong class="font-mono">{{len .Repos}}</strong>
64 + </div>
65 + <div class="flex items-center gap-1.5 text-xs">
66 + {{icon "globe" "size-3.5"}}
67 + <span class="text-muted">{{t .Lang "profile.public_repos"}}:</span>
68 + <strong class="font-mono">{{.PublicRepoCount}}</strong>
69 + </div>
70 + {{if .ShowPrivateCount}}
71 + <div class="flex items-center gap-1.5 text-xs">
72 + {{icon "lock" "size-3.5"}}
73 + <span class="text-muted">{{t .Lang "profile.private_repos"}}:</span>
74 + <strong class="font-mono">{{.PrivateRepoCount}}</strong>
75 + </div>
76 + {{end}}
77 + </div>
78 + </div>
79 +
80 + <!-- Repositories Section -->
81 + <div class="flex items-center justify-between flex-wrap gap-3 mb-3">
82 + <h2 class="text-base font-semibold" style="margin:0;">{{t .Lang "nav.repositories"}} ({{len .Repos}})</h2>
83 + <div class="flex items-center gap-2">
84 + <div class="flex items-center" style="position:relative;">
85 + <input type="text" class="input" style="height:1.85rem;width:14rem;padding-right:1.8rem;" placeholder="{{t .Lang "repo.filter_ph"}}" data-search-input data-file-filter>
86 + <kbd class="kbd" style="position:absolute;right:0.4rem;pointer-events:none;">/</kbd>
87 + </div>
88 + {{if .CurrentUser}}
89 + {{if eq .CurrentUser.ID .ProfileUser.ID}}
90 + <a href="/new" class="btn btn-primary btn-sm" style="height:1.85rem;">
91 + {{icon "plus" "size-3.5"}}
92 + <span>{{t .Lang "nav.new_repo"}}</span>
93 + </a>
94 + {{end}}
95 + {{end}}
96 + </div>
97 + </div>
98 +
99 + {{if .Repos}}
100 + <div class="grid-2">
101 + {{range .Repos}}
102 + <div class="card p-3 flex flex-col justify-between gap-2" data-tree-row data-tree-name="{{.Name}} {{.Description}}">
103 + <div>
104 + <div class="flex items-center justify-between gap-2 mb-1">
105 + <a href="/{{.OwnerUsername}}/{{.Name}}" class="font-semibold text-sm flex items-center gap-1.5 truncate">
106 + {{if .IsPrivate}}
107 + {{icon "lock" "size-3.5"}}
108 + {{else}}
109 + {{icon "git-branch" "size-3.5"}}
110 + {{end}}
111 + <span class="truncate">{{.Name}}</span>
112 + </a>
113 + {{if .IsPrivate}}
114 + <span class="badge badge-outline">{{t $.Lang "repo.private"}}</span>
115 + {{else}}
116 + <span class="badge badge-outline">{{t $.Lang "repo.public"}}</span>
117 + {{end}}
118 + </div>
119 + {{if .Description}}
120 + <p class="text-xs text-muted" style="margin:0.2rem 0 0;display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical;overflow:hidden;">{{.Description}}</p>
121 + {{end}}
122 + </div>
123 + <div class="flex items-center justify-between text-xs text-muted pt-2" style="border-top:1px solid hsl(var(--border)/0.6);">
124 + <span class="font-mono flex items-center gap-1">{{icon "git-branch" "size-3.5"}} {{.DefaultBranch}}</span>
125 + <span>{{timeAgo .UpdatedAt $.Lang}}</span>
126 + </div>
127 + </div>
128 + {{end}}
129 + </div>
130 + {{else}}
131 + {{if and .CurrentUser (eq .CurrentUser.ID .ProfileUser.ID)}}
132 + {{template "ui_empty_state" (dict "Icon" "git-branch" "Title" (t .Lang "repo.empty_list") "Subtitle" (t .Lang "repo.empty_list_sub") "ActionHref" "/new" "ActionLabel" (t .Lang "repo.new.title") "ActionIcon" "plus")}}
133 + {{else}}
134 + {{template "ui_empty_state" (dict "Icon" "git-branch" "Title" (t .Lang "repo.empty_list"))}}
135 + {{end}}
136 + {{end}}
137 +</div>
138 +{{end}}
internal/web/views/pages/pull_detail.html
+343 -0
... ... @@ -0,0 +1,343 @@
1 +{{define "content"}}
2 +<div class="container">
3 + {{template "repo_header" .}}
4 +
5 + <!-- PR Header -->
6 + <div class="mb-4 pb-3" style="border-bottom:1px solid hsl(var(--border));">
7 + <div class="flex items-start justify-between flex-wrap gap-3">
8 + <div class="flex items-center gap-2 flex-wrap min-w-0">
9 + <h1 class="text-lg font-bold" style="margin:0;">{{.PR.Title}}</h1>
10 + <span class="font-mono text-base text-muted">#{{.PR.Number}}</span>
11 + </div>
12 +
13 + {{if .CanToggle}}
14 + {{if ne .PR.Status "merged"}}
15 + <form method="post" action="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/pulls/{{.PR.Number}}/state" style="margin:0;">
16 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
17 + {{if eq .PR.Status "closed"}}
18 + <input type="hidden" name="state" value="open">
19 + <button type="submit" class="btn btn-outline btn-sm">
20 + {{icon "git-pull-request" "size-3.5"}}
21 + <span>{{t .Lang "pulls.reopen_btn"}}</span>
22 + </button>
23 + {{else}}
24 + <input type="hidden" name="state" value="closed">
25 + <button type="submit" class="btn btn-outline btn-sm">
26 + {{icon "close" "size-3.5"}}
27 + <span>{{t .Lang "pulls.close_btn"}}</span>
28 + </button>
29 + {{end}}
30 + </form>
31 + {{end}}
32 + {{end}}
33 + </div>
34 +
35 + <div class="flex items-center gap-2 mt-2 text-xs text-muted flex-wrap">
36 + {{if eq .PR.Status "merged"}}
37 + <span class="badge badge-primary font-medium flex items-center gap-1.5" style="background:hsl(var(--accent));color:#fff;">
38 + {{icon "git-merge" "size-3.5"}} {{t .Lang "pulls.status.merged"}}
39 + </span>
40 + {{else if eq .PR.Status "closed"}}
41 + <span class="badge badge-outline flex items-center gap-1.5">
42 + {{icon "close" "size-3.5"}} {{t .Lang "pulls.status.closed"}}
43 + </span>
44 + {{else}}
45 + <span class="badge badge-primary flex items-center gap-1.5">
46 + {{icon "git-pull-request" "size-3.5"}} {{t .Lang "pulls.status.open"}}
47 + </span>
48 + {{end}}
49 +
50 + <a href="/{{.PR.AuthorUsername}}" class="font-medium" style="color:hsl(var(--foreground));">@{{.PR.AuthorUsername}}</a>
51 + <span>{{t .Lang "pulls.wants_to_merge"}}</span>
52 + <span class="badge badge-outline font-mono text-xs">{{if .PR.HeadRepoID}}{{.PR.HeadRepoOwner}}/{{.PR.HeadRepoName}}:{{end}}{{.PR.HeadBranch}}</span>
53 + <span>{{t .Lang "pulls.into"}}</span>
54 + <span class="badge badge-outline font-mono text-xs">{{.PR.BaseBranch}}</span>
55 + <span>·</span>
56 + <span>{{timeAgo .PR.CreatedAt .Lang}}</span>
57 + </div>
58 +
59 + <!-- Sub-tabs: Conversation, Commits, Files Changed -->
60 + <div class="flex items-center gap-2 mt-3 pt-2" style="border-top:1px solid hsl(var(--border));">
61 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/pulls/{{.PR.Number}}?tab=conversation" class="btn {{if eq .SubTab "conversation"}}btn-secondary{{else}}btn-ghost{{end}} btn-sm">
62 + {{icon "message" "size-3.5"}}
63 + <span>{{t .Lang "pulls.conversation"}}</span>
64 + </a>
65 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/pulls/{{.PR.Number}}?tab=commits" class="btn {{if eq .SubTab "commits"}}btn-secondary{{else}}btn-ghost{{end}} btn-sm">
66 + {{icon "git-commit" "size-3.5"}}
67 + <span>{{t .Lang "pulls.commits"}} ({{len .CompareCommits}})</span>
68 + </a>
69 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/pulls/{{.PR.Number}}?tab=files" class="btn {{if eq .SubTab "files"}}btn-secondary{{else}}btn-ghost{{end}} btn-sm">
70 + {{icon "file-code" "size-3.5"}}
71 + <span>{{t .Lang "pulls.files_changed"}} {{if .Compare}}({{.Compare.FilesChanged}}){{end}}</span>
72 + </a>
73 + </div>
74 + </div>
75 +
76 + {{if eq .SubTab "commits"}}
77 + <!-- Commits list -->
78 + <div class="card mb-4">
79 + <div class="dense-list">
80 + {{range .CompareCommits}}
81 + <div class="dense-row" style="min-height:2.8rem;padding:0.5rem 0.85rem;">
82 + <div class="flex items-center gap-2 min-w-0">
83 + <span class="text-muted">{{icon "git-commit" "size-3.5"}}</span>
84 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/commit/{{.Hash}}" class="font-semibold text-sm truncate">{{.Subject}}</a>
85 + </div>
86 + <div class="flex items-center gap-2 text-xs text-muted flex-shrink-0 font-mono">
87 + <span>{{.AuthorName}}</span>
88 + <span class="badge badge-outline">{{.ShortHash}}</span>
89 + </div>
90 + </div>
91 + {{else}}
92 + <div class="card-body text-xs text-muted">{{t .Lang "pulls.no_commits"}}</div>
93 + {{end}}
94 + </div>
95 + </div>
96 +
97 + {{else if eq .SubTab "files"}}
98 + <!-- Files changed diff viewer -->
99 + {{if .Compare}}
100 + <div class="flex items-center justify-between mb-3 text-xs text-muted font-mono">
101 + <span><strong>{{.Compare.FilesChanged}}</strong> {{pluralT .Lang .Compare.FilesChanged "repo.files_changed"}}</span>
102 + <div class="flex items-center gap-2">
103 + <span style="color:hsl(var(--diff-add-fg));">+{{.Compare.TotalAdditions}}</span>
104 + <span style="color:hsl(var(--diff-del-fg));">-{{.Compare.TotalDeletions}}</span>
105 + </div>
106 + </div>
107 +
108 + <div class="flex flex-col gap-4">
109 + {{range .Compare.Files}}
110 + <section class="card">
111 + <div class="card-header" style="padding:0.5rem 0.8rem;">
112 + <div class="flex items-center gap-2 font-mono text-xs min-w-0">
113 + {{icon "file-code" "size-4"}}
114 + {{if eq .Status "renamed"}}
115 + <span>{{.OldPath}} → <strong>{{.NewPath}}</strong></span>
116 + {{else}}
117 + <strong>{{.NewPath}}</strong>
118 + {{end}}
119 + </div>
120 + <div class="flex items-center gap-2 font-mono text-xs">
121 + <span style="color:hsl(var(--diff-add-fg));">+{{.Additions}}</span>
122 + <span style="color:hsl(var(--diff-del-fg));">-{{.Deletions}}</span>
123 + </div>
124 + </div>
125 +
126 + {{if .IsBinary}}
127 + <div class="card-body text-xs text-muted">{{t $.Lang "repo.binary_notice"}}</div>
128 + {{else}}
129 + <div style="overflow-x:auto;">
130 + <table class="diff-table">
131 + <tbody>
132 + {{range .Lines}}
133 + {{if eq .Type "hunk"}}
134 + <tr class="diff-row-hunk">
135 + <td class="diff-num">...</td>
136 + <td class="diff-num">...</td>
137 + <td class="diff-code">{{.Content}}</td>
138 + </tr>
139 + {{else if eq .Type "add"}}
140 + <tr class="diff-row-add">
141 + <td class="diff-num"></td>
142 + <td class="diff-num">{{.NewNum}}</td>
143 + <td class="diff-code">+{{.Content}}</td>
144 + </tr>
145 + {{else if eq .Type "del"}}
146 + <tr class="diff-row-del">
147 + <td class="diff-num">{{.OldNum}}</td>
148 + <td class="diff-num"></td>
149 + <td class="diff-code">-{{.Content}}</td>
150 + </tr>
151 + {{else}}
152 + <tr>
153 + <td class="diff-num">{{.OldNum}}</td>
154 + <td class="diff-num">{{.NewNum}}</td>
155 + <td class="diff-code"> {{.Content}}</td>
156 + </tr>
157 + {{end}}
158 + {{end}}
159 + </tbody>
160 + </table>
161 + </div>
162 + {{end}}
163 + </section>
164 + {{else}}
165 + <div class="card p-4 text-xs text-muted">{{t .Lang "pulls.no_changes"}}</div>
166 + {{end}}
167 + </div>
168 + {{end}}
169 +
170 + {{else}}
171 + <!-- Conversation Tab -->
172 +
173 + <!-- Initial PR Description Card -->
174 + <div class="card mb-4">
175 + <div class="card-header text-xs" style="padding:0.5rem 0.85rem;background:hsl(var(--muted)/0.3);">
176 + <div class="flex items-center gap-2">
177 + {{avatar .PR.AuthorUsername .PR.AuthorAvatar}}
178 + <a href="/{{.PR.AuthorUsername}}" class="font-semibold">@{{.PR.AuthorUsername}}</a>
179 + <span class="text-muted">{{timeAgo .PR.CreatedAt .Lang}}</span>
180 + </div>
181 + </div>
182 + <div class="card-body markdown-body">
183 + {{if .PR.Body}}
184 + {{renderMD .PR.Body}}
185 + {{else}}
186 + <span class="text-xs text-muted">—</span>
187 + {{end}}
188 + </div>
189 + </div>
190 +
191 + <!-- Comments List -->
192 + {{if .Comments}}
193 + <div class="flex flex-col gap-3 mb-4">
194 + {{range .Comments}}
195 + <div class="card">
196 + <div class="card-header text-xs" style="padding:0.5rem 0.85rem;background:hsl(var(--muted)/0.2);">
197 + <div class="flex items-center gap-2">
198 + {{avatar .AuthorUsername .AuthorAvatar}}
199 + <a href="/{{.AuthorUsername}}" class="font-semibold">@{{.AuthorUsername}}</a>
200 + <span class="text-muted">{{timeAgo .CreatedAt $.Lang}}</span>
201 + </div>
202 + </div>
203 + <div class="card-body markdown-body">
204 + {{renderMD .Body}}
205 + </div>
206 + </div>
207 + {{end}}
208 + </div>
209 + {{end}}
210 +
211 + <!-- Merge Box / State Banner -->
212 + <div class="card mb-4">
213 + {{if eq .PR.Status "merged"}}
214 + <div class="card-body flex items-center gap-3" style="background:hsl(var(--muted)/0.2);">
215 + <span style="color:hsl(var(--accent));">{{icon "git-merge" "size-6"}}</span>
216 + <div class="flex flex-col gap-0.5">
217 + <div class="font-semibold text-sm">{{t .Lang "pulls.merged_message"}}</div>
218 + <div class="text-xs text-muted">
219 + {{if .PR.MergedByUsername}}
220 + <span>@{{.PR.MergedByUsername}}</span>
221 + <span>·</span>
222 + {{end}}
223 + {{if .PR.MergedAt}}
224 + <span>{{formatDate .PR.MergedAt}}</span>
225 + {{end}}
226 + </div>
227 + </div>
228 + </div>
229 +
230 + {{else if eq .PR.Status "closed"}}
231 + <div class="card-body flex items-center gap-3" style="background:hsl(var(--muted)/0.2);">
232 + <span class="text-muted">{{icon "close" "size-6"}}</span>
233 + <div class="flex flex-col gap-0.5">
234 + <div class="font-semibold text-sm">{{t .Lang "pulls.closed_message"}}</div>
235 + <div class="text-xs text-muted">{{t .Lang "pulls.closed_desc"}}</div>
236 + </div>
237 + </div>
238 +
239 + {{else}}
240 + <!-- PR is open -->
241 + {{if .CanMergeAction}}
242 + <div class="card-body flex flex-col gap-3" style="background:hsl(var(--muted)/0.15);">
243 + <div class="flex items-center gap-2 text-sm font-semibold" style="color:hsl(var(--diff-add-fg));">
244 + {{icon "check" "size-5"}}
245 + <span>{{t .Lang "pulls.able_to_merge"}}</span>
246 + </div>
247 + <div class="text-xs text-muted">{{t .Lang "pulls.merge_clean"}}</div>
248 + <form method="post" action="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/pulls/{{.PR.Number}}/merge" class="flex items-center gap-2">
249 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
250 + <button type="submit" class="btn btn-primary btn-sm">
251 + {{icon "git-merge" "size-3.5"}}
252 + <span>{{t .Lang "pulls.merge_btn"}}</span>
253 + </button>
254 + </form>
255 + </div>
256 + {{else if not .CanMerge}}
257 + <div class="card-body flex items-center gap-3" style="background:hsl(var(--muted)/0.15);">
258 + <span style="color:hsl(var(--diff-del-fg));">{{icon "alert-circle" "size-5"}}</span>
259 + <div class="flex flex-col gap-0.5">
260 + <div class="font-semibold text-sm" style="color:hsl(var(--diff-del-fg));">{{t .Lang "pulls.conflicts_title"}}</div>
261 + <div class="text-xs text-muted">{{t .Lang "pulls.conflicts_desc"}}</div>
262 + </div>
263 + </div>
264 + {{else}}
265 + <div class="card-body flex items-center gap-2 text-xs text-muted" style="background:hsl(var(--muted)/0.15);">
266 + {{icon "check" "size-4"}}
267 + <span>{{t .Lang "pulls.only_write_merge"}}</span>
268 + </div>
269 + {{end}}
270 + {{end}}
271 + </div>
272 +
273 + <!-- Reviews Panel -->
274 + {{if or .Reviews .CanReview}}
275 + <div class="card mb-4">
276 + <div class="card-header" style="padding:0.55rem 0.85rem;">
277 + <span class="font-semibold text-xs flex items-center gap-2">
278 + {{icon "shield" "size-4"}}
279 + <span>{{t .Lang "reviews.title"}}</span>
280 + {{if gt .ApprovedCount 0}}<span class="badge" style="padding:0 0.35rem;font-size:0.68rem;color:hsl(var(--diff-add-fg));">{{.ApprovedCount}} ✓</span>{{end}}
281 + {{if gt .ChangesRequestedCount 0}}<span class="badge" style="padding:0 0.35rem;font-size:0.68rem;color:hsl(var(--diff-del-fg));">{{.ChangesRequestedCount}} ✗</span>{{end}}
282 + </span>
283 + </div>
284 + {{if .Reviews}}
285 + <div class="dense-list">
286 + {{range .Reviews}}
287 + <div class="dense-row" style="min-height:2.5rem;padding:0.45rem 0.85rem;">
288 + <div class="flex items-center gap-2 min-w-0">
289 + {{avatar .ReviewerUsername .ReviewerAvatar}}
290 + <a href="/{{.ReviewerUsername}}" class="font-semibold text-sm">@{{.ReviewerUsername}}</a>
291 + {{if eq .State "approved"}}
292 + <span class="flex items-center gap-1 text-xs font-medium" style="color:hsl(var(--diff-add-fg));">{{icon "check" "size-3.5"}} {{t $.Lang "reviews.approved"}}</span>
293 + {{else}}
294 + <span class="flex items-center gap-1 text-xs font-medium" style="color:hsl(var(--diff-del-fg));">{{icon "alert-circle" "size-3.5"}} {{t $.Lang "reviews.changes_requested"}}</span>
295 + {{end}}
296 + </div>
297 + <div class="flex items-center gap-2 text-xs text-muted">
298 + {{if .Body}}<span class="truncate" style="max-width:22rem;">{{.Body}}</span>{{end}}
299 + <span>{{timeAgo .UpdatedAt $.Lang}}</span>
300 + </div>
301 + </div>
302 + {{end}}
303 + </div>
304 + {{end}}
305 + {{if .CanReview}}
306 + <div class="card-body" style="border-top:1px solid hsl(var(--border));">
307 + <form method="post" action="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/pulls/{{.PR.Number}}/review" class="flex flex-col gap-2.5">
308 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
309 + <textarea name="body" class="textarea" rows="2" placeholder="{{t .Lang "reviews.body_ph"}}" maxlength="10000"></textarea>
310 + <div class="flex items-center gap-2 justify-end">
311 + <button type="submit" name="state" value="changes_requested" class="btn btn-outline btn-sm">
312 + {{icon "alert-circle" "size-3.5"}}
313 + <span>{{t .Lang "reviews.request_changes"}}</span>
314 + </button>
315 + <button type="submit" name="state" value="approved" class="btn btn-primary btn-sm">
316 + {{icon "check" "size-3.5"}}
317 + <span>{{t .Lang "reviews.approve"}}</span>
318 + </button>
319 + </div>
320 + </form>
321 + </div>
322 + {{end}}
323 + </div>
324 + {{end}}
325 +
326 + <!-- Add Comment Form --> {{if .CurrentUser}}
327 + <div class="card">
328 + <form method="post" action="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/pulls/{{.PR.Number}}/comments" class="card-body flex flex-col gap-2.5">
329 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
330 + <textarea name="body" class="textarea" rows="4" placeholder="{{t .Lang "pulls.comment_ph"}}" required maxlength="20000"></textarea>
331 + <div class="flex items-center justify-end">
332 + <button type="submit" class="btn btn-primary btn-sm">
333 + {{icon "message" "size-3.5"}}
334 + <span>{{t .Lang "pulls.comment_btn"}}</span>
335 + </button>
336 + </div>
337 + </form>
338 + </div>
339 + {{end}}
340 +
341 + {{end}}
342 +</div>
343 +{{end}}
internal/web/views/pages/pull_new.html
+187 -0
... ... @@ -0,0 +1,187 @@
1 +{{define "content"}}
2 +<div class="container">
3 + {{template "repo_header" .}}
4 +
5 + <div class="card mb-4">
6 + <div class="card-header flex items-center justify-between flex-wrap gap-3">
7 + <div class="flex items-center gap-2">
8 + {{icon "git-pull-request" "size-4"}}
9 + <span class="font-semibold text-sm">{{t .Lang "pulls.compare_branches"}}</span>
10 + </div>
11 + <div class="flex items-center gap-2 flex-wrap text-xs">
12 + {{if gt (len .HeadRepos) 1}}
13 + <label class="text-muted font-medium">{{t .Lang "pulls.head_repo"}}:</label>
14 + <select class="select font-mono text-xs" style="width:auto;min-width:150px;padding:0.25rem 0.5rem;" onchange="window.location.href='?head_repo='+encodeURIComponent(this.value)">
15 + {{range .HeadRepos}}
16 + <option value="{{.ID}}" {{if eq .ID $.HeadRepo.ID}}selected{{end}}>{{.OwnerUsername}}/{{.Name}}</option>
17 + {{end}}
18 + </select>
19 + {{end}}
20 + <label class="text-muted font-medium">{{t .Lang "pulls.base"}}:</label>
21 + <select class="select font-mono text-xs" style="width:auto;min-width:130px;padding:0.25rem 0.5rem;" onchange="window.location.href='?base='+encodeURIComponent(this.value)+'&head={{.HeadBranch}}&head_repo={{.HeadRepo.ID}}'">
22 + {{range .BaseBranches}}
23 + <option value="{{.}}" {{if eq . $.BaseBranch}}selected{{end}}>{{.}}</option>
24 + {{end}}
25 + </select>
26 +
27 + <span class="text-muted font-mono">←</span>
28 +
29 + <label class="text-muted font-medium">{{t .Lang "pulls.compare"}}:</label>
30 + <select class="select font-mono text-xs" style="width:auto;min-width:130px;padding:0.25rem 0.5rem;" onchange="window.location.href='?base={{.BaseBranch}}&head='+encodeURIComponent(this.value)+'&head_repo={{.HeadRepo.ID}}'">
31 + {{range .Branches}}
32 + <option value="{{.}}" {{if eq . $.HeadBranch}}selected{{end}}>{{.}}</option>
33 + {{end}}
34 + </select>
35 + </div>
36 + </div>
37 +
38 + {{if and (eq .BaseBranch .HeadBranch) (eq .HeadRepo.ID .Repo.ID)}}
39 + <div class="card-body text-xs text-muted" style="background:hsl(var(--muted)/0.2);">
40 + {{icon "alert-circle" "size-4"}} {{t .Lang "pulls.branches_identical"}}
41 + </div>
42 + {{else}}
43 + <div class="card-body text-xs flex items-center gap-2" style="background:hsl(var(--muted)/0.2);">
44 + {{if .CanMerge}}
45 + <span style="color:hsl(var(--diff-add-fg));" class="flex items-center gap-1.5 font-medium">
46 + {{icon "check" "size-4"}} {{t .Lang "pulls.able_to_merge"}}
47 + </span>
48 + {{else}}
49 + <span style="color:hsl(var(--diff-del-fg));" class="flex items-center gap-1.5 font-medium">
50 + {{icon "alert-circle" "size-4"}} {{t .Lang "pulls.cannot_merge_warning"}}
51 + </span>
52 + {{end}}
53 + </div>
54 + {{end}}
55 + </div>
56 +
57 + {{if or (ne .BaseBranch .HeadBranch) (ne .HeadRepo.ID .Repo.ID)}}
58 + <!-- Create PR Form -->
59 + <section class="card mb-4">
60 + <div class="card-header">
61 + <span class="font-semibold text-sm">{{t .Lang "pulls.new"}}</span>
62 + {{if ne .HeadRepo.ID .Repo.ID}}
63 + <span class="text-xs text-muted font-mono">{{.HeadRepo.OwnerUsername}}/{{.HeadRepo.Name}} → {{.Repo.OwnerUsername}}/{{.Repo.Name}}</span>
64 + {{end}}
65 + </div>
66 + <form method="post" action="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/pulls/new" class="card-body flex flex-col gap-3">
67 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
68 + <input type="hidden" name="base_branch" value="{{.BaseBranch}}">
69 + <input type="hidden" name="head_branch" value="{{.HeadBranch}}">
70 + {{if ne .HeadRepo.ID .Repo.ID}}<input type="hidden" name="head_repo" value="{{.HeadRepo.ID}}">{{end}}
71 +
72 + <div>
73 + <label class="label" for="title">{{t .Lang "pulls.title"}}</label>
74 + <input id="title" name="title" type="text" class="input" placeholder="{{t .Lang "pulls.title_ph"}}" required maxlength="200" autofocus>
75 + </div>
76 +
77 + <div>
78 + <label class="label" for="body">{{t .Lang "pulls.body"}}</label>
79 + <textarea id="body" name="body" class="textarea" rows="6" placeholder="{{t .Lang "pulls.body_ph"}}" maxlength="20000"></textarea>
80 + </div>
81 +
82 + <div class="flex items-center justify-end">
83 + <button type="submit" class="btn btn-primary btn-sm">
84 + {{icon "git-pull-request" "size-3.5"}}
85 + <span>{{t .Lang "pulls.create_btn"}}</span>
86 + </button>
87 + </div>
88 + </form>
89 + </section>
90 +
91 + <!-- Commits in this comparison -->
92 + {{if .CompareCommits}}
93 + <div class="card mb-4">
94 + <div class="card-header flex items-center justify-between">
95 + <span class="font-semibold text-xs text-muted uppercase" style="letter-spacing:0.04em;">{{t .Lang "pulls.commits"}} ({{len .CompareCommits}})</span>
96 + </div>
97 + <div class="dense-list">
98 + {{range .CompareCommits}}
99 + <div class="dense-row" style="min-height:2.6rem;padding:0.45rem 0.85rem;">
100 + <div class="flex items-center gap-2 min-w-0">
101 + <span class="text-muted">{{icon "git-commit" "size-3.5"}}</span>
102 + <span class="font-semibold text-sm truncate">{{.Subject}}</span>
103 + </div>
104 + <div class="flex items-center gap-2 text-xs text-muted flex-shrink-0 font-mono">
105 + <span>{{.AuthorName}}</span>
106 + <span class="badge badge-outline">{{.ShortHash}}</span>
107 + </div>
108 + </div>
109 + {{end}}
110 + </div>
111 + </div>
112 + {{end}}
113 +
114 + <!-- Diff Viewer -->
115 + {{if .Compare}}
116 + {{if .Compare.Files}}
117 + <div class="flex items-center justify-between mb-3 text-xs text-muted font-mono">
118 + <span><strong>{{.Compare.FilesChanged}}</strong> {{pluralT .Lang .Compare.FilesChanged "repo.files_changed"}}</span>
119 + <div class="flex items-center gap-2">
120 + <span style="color:hsl(var(--diff-add-fg));">+{{.Compare.TotalAdditions}}</span>
121 + <span style="color:hsl(var(--diff-del-fg));">-{{.Compare.TotalDeletions}}</span>
122 + </div>
123 + </div>
124 +
125 + <div class="flex flex-col gap-4">
126 + {{range .Compare.Files}}
127 + <section class="card">
128 + <div class="card-header" style="padding:0.5rem 0.8rem;">
129 + <div class="flex items-center gap-2 font-mono text-xs min-w-0">
130 + {{icon "file-code" "size-4"}}
131 + {{if eq .Status "renamed"}}
132 + <span>{{.OldPath}} → <strong>{{.NewPath}}</strong></span>
133 + {{else}}
134 + <strong>{{.NewPath}}</strong>
135 + {{end}}
136 + </div>
137 + <div class="flex items-center gap-2 font-mono text-xs">
138 + <span style="color:hsl(var(--diff-add-fg));">+{{.Additions}}</span>
139 + <span style="color:hsl(var(--diff-del-fg));">-{{.Deletions}}</span>
140 + </div>
141 + </div>
142 +
143 + {{if .IsBinary}}
144 + <div class="card-body text-xs text-muted">{{t $.Lang "repo.binary_notice"}}</div>
145 + {{else}}
146 + <div style="overflow-x:auto;">
147 + <table class="diff-table">
148 + <tbody>
149 + {{range .Lines}}
150 + {{if eq .Type "hunk"}}
151 + <tr class="diff-row-hunk">
152 + <td class="diff-num">...</td>
153 + <td class="diff-num">...</td>
154 + <td class="diff-code">{{.Content}}</td>
155 + </tr>
156 + {{else if eq .Type "add"}}
157 + <tr class="diff-row-add">
158 + <td class="diff-num"></td>
159 + <td class="diff-num">{{.NewNum}}</td>
160 + <td class="diff-code">+{{.Content}}</td>
161 + </tr>
162 + {{else if eq .Type "del"}}
163 + <tr class="diff-row-del">
164 + <td class="diff-num">{{.OldNum}}</td>
165 + <td class="diff-num"></td>
166 + <td class="diff-code">-{{.Content}}</td>
167 + </tr>
168 + {{else}}
169 + <tr>
170 + <td class="diff-num">{{.OldNum}}</td>
171 + <td class="diff-num">{{.NewNum}}</td>
172 + <td class="diff-code"> {{.Content}}</td>
173 + </tr>
174 + {{end}}
175 + {{end}}
176 + </tbody>
177 + </table>
178 + </div>
179 + {{end}}
180 + </section>
181 + {{end}}
182 + </div>
183 + {{end}}
184 + {{end}}
185 + {{end}}
186 +</div>
187 +{{end}}
internal/web/views/pages/pulls.html
+79 -0
... ... @@ -0,0 +1,79 @@
1 +{{define "content"}}
2 +<div class="container">
3 + {{template "repo_header" .}}
4 +
5 + <div class="flex items-center justify-between flex-wrap gap-2 mb-3">
6 + <div class="flex items-center gap-1.5">
7 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/pulls?state=open" class="btn {{if eq .CurrentState "open"}}btn-secondary{{else}}btn-ghost{{end}} btn-sm">
8 + <span style="color:hsl(var(--primary));">{{icon "git-pull-request" "size-3.5"}}</span>
9 + <span>{{t .Lang "pulls.open"}} ({{.OpenCount}})</span>
10 + </a>
11 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/pulls?state=merged" class="btn {{if eq .CurrentState "merged"}}btn-secondary{{else}}btn-ghost{{end}} btn-sm">
12 + <span style="color:hsl(var(--accent));">{{icon "git-merge" "size-3.5"}}</span>
13 + <span>{{t .Lang "pulls.merged"}} ({{.MergedCount}})</span>
14 + </a>
15 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/pulls?state=closed" class="btn {{if eq .CurrentState "closed"}}btn-secondary{{else}}btn-ghost{{end}} btn-sm">
16 + <span class="text-muted">{{icon "close" "size-3.5"}}</span>
17 + <span>{{t .Lang "pulls.closed"}} ({{.ClosedCount}})</span>
18 + </a>
19 + </div>
20 +
21 + {{if .CurrentUser}}
22 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/pulls/new" class="btn btn-primary btn-sm">
23 + {{icon "plus" "size-3.5"}}
24 + <span>{{t .Lang "pulls.new"}}</span>
25 + </a>
26 + {{end}}
27 + </div>
28 +
29 + {{if .Pulls}}
30 + <div class="card">
31 + <div class="dense-list">
32 + {{range .Pulls}}
33 + <div class="dense-row" style="min-height:3rem;padding:0.6rem 0.85rem;">
34 + <div class="flex items-center gap-2.5 min-w-0">
35 + {{if eq .Status "merged"}}
36 + <span style="color:hsl(var(--accent));">{{icon "git-merge" "size-4"}}</span>
37 + {{else if eq .Status "closed"}}
38 + <span class="text-muted">{{icon "close" "size-4"}}</span>
39 + {{else}}
40 + <span style="color:hsl(var(--primary));">{{icon "git-pull-request" "size-4"}}</span>
41 + {{end}}
42 + <div class="flex flex-col min-w-0">
43 + <div class="flex items-center gap-2 min-w-0 flex-wrap">
44 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/pulls/{{.Number}}" class="font-semibold text-sm truncate">{{.Title}}</a>
45 + <span class="font-mono text-xs text-muted">#{{.Number}}</span>
46 + <span class="badge badge-outline font-mono text-xs" style="padding:0.1rem 0.4rem;">{{.HeadBranch}} → {{.BaseBranch}}</span>
47 + </div>
48 + <div class="text-xs text-muted flex items-center gap-1.5 mt-0.5">
49 + <span>@{{.AuthorUsername}}</span>
50 + <span>·</span>
51 + <span>{{timeAgo .CreatedAt $.Lang}}</span>
52 + {{if eq .Status "merged"}}
53 + <span>·</span>
54 + <span style="color:hsl(var(--accent));font-weight:500;">{{t $.Lang "pulls.merged"}}</span>
55 + {{end}}
56 + </div>
57 + </div>
58 + </div>
59 + <div class="flex items-center gap-2 text-xs text-muted flex-shrink-0">
60 + {{if gt .CommentCount 0}}
61 + <span class="flex items-center gap-1 font-mono">
62 + {{icon "message" "size-3.5"}}
63 + <span>{{.CommentCount}}</span>
64 + </span>
65 + {{end}}
66 + </div>
67 + </div>
68 + {{end}}
69 + </div>
70 + </div>
71 + {{else}}
72 + {{if .CurrentUser}}
73 + {{template "ui_empty_state" (dict "Icon" "git-pull-request" "Title" (t .Lang "pulls.empty") "ActionHref" (printf "/%s/%s/pulls/new" .Repo.OwnerUsername .Repo.Name) "ActionLabel" (t .Lang "pulls.new") "ActionIcon" "plus")}}
74 + {{else}}
75 + {{template "ui_empty_state" (dict "Icon" "git-pull-request" "Title" (t .Lang "pulls.empty"))}}
76 + {{end}}
77 + {{end}}
78 +</div>
79 +{{end}}
internal/web/views/pages/register.html
+42 -0
... ... @@ -0,0 +1,42 @@
1 +{{define "content"}}
2 +<div class="container" style="max-width:23rem;padding-top:2rem;">
3 + <div class="card">
4 + <div class="card-header">
5 + <h1 class="text-base font-semibold" style="margin:0;">{{t .Lang "auth.register.title"}}</h1>
6 + </div>
7 + {{if not .RegistrationEnabled}}
8 + <div class="card-body text-sm text-muted">
9 + <div class="flex items-center gap-2 text-destructive">
10 + {{icon "lock" "size-4"}}
11 + <span>{{t .Lang "auth.register.disabled"}}</span>
12 + </div>
13 + </div>
14 + {{else}}
15 + <form method="post" action="/register" class="card-body flex flex-col gap-3">
16 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
17 + <div>
18 + <label class="label" for="username">{{t .Lang "auth.username"}}</label>
19 + <input id="username" name="username" type="text" class="input font-mono" value="{{.FormUsername}}" placeholder="polar" required autofocus pattern="^[a-zA-Z0-9](?:[a-zA-Z0-9]|[-_][a-zA-Z0-9]){1,31}$">
20 + <div class="field-hint">{{t .Lang "auth.username_hint"}}</div>
21 + </div>
22 + <div>
23 + <label class="label" for="email">{{t .Lang "auth.email"}}</label>
24 + <input id="email" name="email" type="email" class="input" value="{{.FormEmail}}" placeholder="user@example.com" required autocomplete="email">
25 + </div>
26 + <div>
27 + <label class="label" for="password">{{t .Lang "auth.password"}}</label>
28 + <input id="password" name="password" type="password" class="input" minlength="8" required autocomplete="new-password">
29 + <div class="field-hint">{{t .Lang "auth.password_hint"}}</div>
30 + </div>
31 + <button type="submit" class="btn btn-primary w-full mt-1">
32 + <span>{{t .Lang "auth.submit_register"}}</span>
33 + </button>
34 + </form>
35 + {{end}}
36 + <div class="card-footer text-xs text-muted flex items-center justify-between">
37 + <span>{{t .Lang "auth.have_account"}}</span>
38 + <a href="/login" class="font-medium" style="color:hsl(var(--foreground));">{{t .Lang "nav.login"}} →</a>
39 + </div>
40 + </div>
41 +</div>
42 +{{end}}
internal/web/views/pages/release_new.html
+64 -0
... ... @@ -0,0 +1,64 @@
1 +{{define "content"}}
2 +<div class="container">
3 + {{template "repo_header" .}}
4 +
5 + <section class="card mb-4">
6 + <div class="card-header">
7 + <span class="font-semibold text-sm flex items-center gap-2">
8 + {{icon "tag" "size-4"}}
9 + <span>{{t .Lang "releases.new"}}</span>
10 + </span>
11 + </div>
12 + <form method="post" action="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/releases/new" class="card-body flex flex-col gap-3">
13 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
14 +
15 + <div class="grid-2">
16 + <div>
17 + <label class="label" for="tag_name">{{t .Lang "releases.tag_name"}}</label>
18 + <input id="tag_name" name="tag_name" type="text" class="input font-mono" list="existing-tags" placeholder="v1.0.0" value="{{.SelectedTag}}" required autofocus>
19 + <datalist id="existing-tags">
20 + {{range .Tags}}
21 + <option value="{{.}}">
22 + {{end}}
23 + </datalist>
24 + <div class="text-xs text-muted mt-1">{{t .Lang "releases.tag_desc"}}</div>
25 + </div>
26 +
27 + <div>
28 + <label class="label" for="target_ref">{{t .Lang "releases.target"}}</label>
29 + <select id="target_ref" name="target_ref" class="select font-mono">
30 + {{range .Branches}}
31 + <option value="{{.}}" {{if eq . $.Repo.DefaultBranch}}selected{{end}}>{{.}}</option>
32 + {{end}}
33 + </select>
34 + <div class="text-xs text-muted mt-1">{{t .Lang "releases.target_desc"}}</div>
35 + </div>
36 + </div>
37 +
38 + <div>
39 + <label class="label" for="title">{{t .Lang "releases.title"}}</label>
40 + <input id="title" name="title" type="text" class="input" placeholder="{{t .Lang "releases.title_ph"}}" maxlength="200">
41 + </div>
42 +
43 + <div>
44 + <label class="label" for="body">{{t .Lang "releases.body"}}</label>
45 + <textarea id="body" name="body" class="textarea" rows="8" placeholder="{{t .Lang "releases.body_ph"}}" maxlength="50000"></textarea>
46 + </div>
47 +
48 + <div>
49 + <label class="flex items-center gap-2 cursor-pointer text-sm">
50 + <input type="checkbox" name="is_prerelease" value="true" class="switch">
51 + <span>{{t .Lang "releases.is_prerelease"}}</span>
52 + </label>
53 + </div>
54 +
55 + <div class="flex items-center justify-end">
56 + <button type="submit" class="btn btn-primary btn-sm">
57 + {{icon "tag" "size-3.5"}}
58 + <span>{{t .Lang "releases.publish_btn"}}</span>
59 + </button>
60 + </div>
61 + </form>
62 + </section>
63 +</div>
64 +{{end}}
internal/web/views/pages/releases.html
+91 -0
... ... @@ -0,0 +1,91 @@
1 +{{define "content"}}
2 +<div class="container">
3 + {{template "repo_header" .}}
4 +
5 + <div class="flex items-center justify-between flex-wrap gap-2 mb-4">
6 + <div class="flex items-center gap-2 text-sm text-muted">
7 + <span class="font-medium text-foreground">{{len .Releases}}</span>
8 + <span>{{pluralT .Lang (len .Releases) "releases.count"}}</span>
9 + <span>·</span>
10 + <span class="font-medium text-foreground">{{.TagCount}}</span>
11 + <span>{{pluralT .Lang .TagCount "releases.tags"}}</span>
12 + </div>
13 +
14 + {{if .CanWrite}}
15 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/releases/new" class="btn btn-primary btn-sm">
16 + {{icon "plus" "size-3.5"}}
17 + <span>{{t .Lang "releases.new"}}</span>
18 + </a>
19 + {{end}}
20 + </div>
21 +
22 + {{if .Releases}}
23 + <div class="flex flex-col gap-6">
24 + {{range .Releases}}
25 + <article class="card" id="{{.TagName}}">
26 + <div class="card-header flex items-center justify-between flex-wrap gap-2">
27 + <div class="flex items-center gap-2.5 flex-wrap min-w-0">
28 + <h2 class="text-base font-bold" style="margin:0;">{{.Title}}</h2>
29 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/tree/{{.TagName}}" class="badge badge-primary font-mono text-xs flex items-center gap-1">
30 + {{icon "tag" "size-3"}}
31 + <span>{{.TagName}}</span>
32 + </a>
33 + {{if .IsPrerelease}}
34 + <span class="badge badge-outline text-xs" style="color:hsl(var(--warning-fg, 38 92% 50%));border-color:currentColor;">
35 + {{t $.Lang "releases.prerelease"}}
36 + </span>
37 + {{end}}
38 + </div>
39 +
40 + <div class="flex items-center gap-2 text-xs text-muted flex-shrink-0">
41 + <div class="flex items-center gap-1.5">
42 + {{avatar .AuthorUsername .AuthorAvatar}}
43 + <a href="/{{.AuthorUsername}}" class="font-medium text-foreground">@{{.AuthorUsername}}</a>
44 + <span>·</span>
45 + <span>{{formatDate .PublishedAt}}</span>
46 + </div>
47 + {{if $.CanWrite}}
48 + <form method="post" action="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/releases/{{.ID}}/delete" onsubmit="return confirm('{{t $.Lang "releases.delete_confirm"}}');" style="margin:0;">
49 + <input type="hidden" name="_csrf" value="{{$.CSRFToken}}">
50 + <button type="submit" class="btn btn-ghost btn-icon text-muted" style="width:1.8rem;height:1.8rem;" title="{{t $.Lang "releases.delete"}}">
51 + {{icon "trash" "size-3.5"}}
52 + </button>
53 + </form>
54 + {{end}}
55 + </div>
56 + </div>
57 +
58 + <div class="card-body markdown-body">
59 + {{if .BodyHTML}}
60 + {{.BodyHTML}}
61 + {{else}}
62 + <span class="text-xs text-muted">—</span>
63 + {{end}}
64 + </div>
65 +
66 + <!-- Release Assets (Source Code) -->
67 + <div class="card-body" style="border-top:1px solid hsl(var(--border));padding:0.6rem 0.9rem;background:hsl(var(--muted)/0.15);">
68 + <div class="text-xs font-semibold text-muted uppercase mb-2" style="letter-spacing:0.04em;">{{t $.Lang "releases.assets"}}</div>
69 + <div class="flex flex-col gap-1.5">
70 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/archive/{{.TagName}}.zip" class="flex items-center gap-2 text-xs font-mono font-medium hover:underline" style="color:hsl(var(--primary));">
71 + {{icon "download" "size-3.5"}}
72 + <span>{{t $.Lang "releases.source_zip"}}</span>
73 + </a>
74 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/archive/{{.TagName}}.tar.gz" class="flex items-center gap-2 text-xs font-mono font-medium hover:underline" style="color:hsl(var(--primary));">
75 + {{icon "download" "size-3.5"}}
76 + <span>{{t $.Lang "releases.source_tar"}}</span>
77 + </a>
78 + </div>
79 + </div>
80 + </article>
81 + {{end}}
82 + </div>
83 + {{else}}
84 + {{if .CanWrite}}
85 + {{template "ui_empty_state" (dict "Icon" "tag" "Title" (t .Lang "releases.empty") "ActionHref" (printf "/%s/%s/releases/new" .Repo.OwnerUsername .Repo.Name) "ActionLabel" (t .Lang "releases.new") "ActionIcon" "plus")}}
86 + {{else}}
87 + {{template "ui_empty_state" (dict "Icon" "tag" "Title" (t .Lang "releases.empty"))}}
88 + {{end}}
89 + {{end}}
90 +</div>
91 +{{end}}
internal/web/views/pages/repo.html
+218 -0
... ... @@ -0,0 +1,218 @@
1 +{{define "content"}}
2 +<div class="container">
3 + {{template "repo_header" .}}
4 +
5 + {{if .IsEmpty}}
6 + <div class="card">
7 + <div class="card-header">
8 + <span class="font-semibold flex items-center gap-2">{{icon "terminal" "size-4"}} {{t .Lang "repo.empty.title"}}</span>
9 + <a href="/settings#tokens" class="btn btn-outline btn-sm">
10 + {{icon "key" "size-3.5"}}
11 + <span>{{t .Lang "settings.tokens"}}</span>
12 + </a>
13 + </div>
14 + <div class="card-body flex flex-col gap-4">
15 + <div>
16 + <div class="flex items-center justify-between mb-1.5">
17 + <span class="text-xs font-semibold">1. {{t .Lang "repo.empty.new_cmd"}}</span>
18 + <button type="button" class="btn btn-ghost btn-sm" data-copy="{{.QuickStartNew}}">
19 + {{icon "copy" "size-3.5"}}
20 + <span>{{t .Lang "common.copy"}}</span>
21 + </button>
22 + </div>
23 + <pre class="card p-3 font-mono text-xs" style="margin:0;background:hsl(var(--muted)/0.4);overflow-x:auto;"><code>{{.QuickStartNew}}</code></pre>
24 + </div>
25 +
26 + <div>
27 + <div class="flex items-center justify-between mb-1.5">
28 + <span class="text-xs font-semibold">2. {{t .Lang "repo.empty.push_cmd"}}</span>
29 + <button type="button" class="btn btn-ghost btn-sm" data-copy="{{.QuickStartExisting}}">
30 + {{icon "copy" "size-3.5"}}
31 + <span>{{t .Lang "common.copy"}}</span>
32 + </button>
33 + </div>
34 + <pre class="card p-3 font-mono text-xs" style="margin:0;background:hsl(var(--muted)/0.4);overflow-x:auto;"><code>{{.QuickStartExisting}}</code></pre>
35 + </div>
36 + </div>
37 + </div>
38 + {{else}}
39 + <div class="repo-layout">
40 + <div class="repo-main">
41 + <!-- Controls Bar: Branch/Tag Switcher + Breadcrumb + File Filter -->
42 + <div class="flex items-center justify-between flex-wrap gap-2 mb-3">
43 + <div class="flex items-center gap-2 flex-wrap">
44 + <div class="dropdown" data-dropdown>
45 + <button type="button" class="btn btn-outline btn-sm font-mono" data-dropdown-trigger aria-haspopup="true" aria-expanded="false">
46 + {{icon "git-branch" "size-3.5"}}
47 + <span>{{.Ref}}</span>
48 + {{icon "chevron-down" "size-3.5"}}
49 + </button>
50 + <div class="dropdown-menu" data-dropdown-menu role="menu" style="min-width:13rem;">
51 + <div class="palette-group-title">{{t .Lang "repo.branches"}} ({{len .Branches}})</div>
52 + {{range .Branches}}
53 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/tree/{{.}}{{if $.SubPath}}/{{$.SubPath}}{{end}}" class="dropdown-item font-mono {{if eq . $.Ref}}active{{end}}" role="menuitem">
54 + <span class="flex items-center gap-2">{{icon "git-branch" "size-3.5"}} {{.}}</span>
55 + {{if eq . $.Ref}}{{icon "check" "size-3.5"}}{{end}}
56 + </a>
57 + {{end}}
58 + {{if .Tags}}
59 + <hr class="separator" style="margin:0.25rem 0;">
60 + <div class="palette-group-title">{{t .Lang "repo.tags"}} ({{len .Tags}})</div>
61 + {{range .Tags}}
62 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/tree/{{.}}{{if $.SubPath}}/{{$.SubPath}}{{end}}" class="dropdown-item font-mono {{if eq . $.Ref}}active{{end}}" role="menuitem">
63 + <span class="flex items-center gap-2">{{icon "tag" "size-3.5"}} {{.}}</span>
64 + {{if eq . $.Ref}}{{icon "check" "size-3.5"}}{{end}}
65 + </a>
66 + {{end}}
67 + {{end}}
68 + </div>
69 + </div>
70 +
71 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/branches" class="btn btn-ghost btn-sm font-mono" title="{{t .Lang "repo.tab.branches"}}">
72 + {{icon "git-branch" "size-3.5"}}
73 + <span class="text-xs">{{len .Branches}}</span>
74 + </a>
75 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/commits/{{.Ref}}" class="btn btn-ghost btn-sm font-mono" title="{{t .Lang "repo.tab.commits"}}">
76 + {{icon "history" "size-3.5"}}
77 + <span class="text-xs">{{t .Lang "repo.tab.commits"}}</span>
78 + </a>
79 +
80 + {{if .Breadcrumbs}}
81 + <nav class="breadcrumb font-mono text-xs" aria-label="Directory path">
82 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/tree/{{.Ref}}" class="text-muted">{{.Repo.Name}}</a>
83 + {{range .Breadcrumbs}}
84 + <span class="breadcrumb-sep">/</span>
85 + {{if .IsLast}}
86 + <span class="font-semibold">{{.Name}}</span>
87 + {{else}}
88 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/tree/{{$.Ref}}/{{.Path}}" class="text-muted">{{.Name}}</a>
89 + {{end}}
90 + {{end}}
91 + </nav>
92 + {{end}}
93 + </div>
94 +
95 + <div class="flex items-center" style="position:relative;">
96 + <input type="text" class="input" style="height:1.75rem;width:13rem;padding-right:1.75rem;font-size:0.78rem;" placeholder="{{t .Lang "repo.find_file"}}" data-file-filter>
97 + <kbd class="kbd" style="position:absolute;right:0.35rem;pointer-events:none;">t</kbd>
98 + </div>
99 + </div>
100 +
101 + <!-- Unified Repository Card: Latest Commit Header + File List -->
102 + <div class="card mb-4">
103 + {{if .LatestCommit}}
104 + <div class="card-header text-xs" style="padding:0.5rem 0.8rem;background:hsl(var(--muted)/0.3);">
105 + <div class="flex items-center gap-2 min-w-0">
106 + <span class="avatar" style="width:1.25rem;height:1.25rem;font-size:0.62rem;">{{avatarInitial .LatestCommit.AuthorName}}</span>
107 + <span class="font-medium">{{.LatestCommit.AuthorName}}</span>
108 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/commit/{{.LatestCommit.Hash}}" class="text-muted truncate">{{.LatestCommit.Subject}}</a>
109 + </div>
110 + <div class="flex items-center gap-2 text-muted font-mono">
111 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/commit/{{.LatestCommit.Hash}}" class="badge badge-outline font-mono">{{.LatestCommit.ShortHash}}</a>
112 + <span>{{timeAgo .LatestCommit.AuthoredAt .Lang}}</span>
113 + </div>
114 + </div>
115 + {{end}}
116 +
117 + <div class="dense-list">
118 + {{if .SubPath}}
119 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/tree/{{.Ref}}{{if ne .ParentPath "."}}/{{.ParentPath}}{{end}}" class="dense-row font-mono text-xs text-muted">
120 + <span class="flex items-center gap-2">{{icon "arrow-left" "size-3.5"}} ..</span>
121 + </a>
122 + {{end}}
123 + {{range .Entries}}
124 + <div class="dense-row" data-tree-row data-tree-name="{{.Name}}">
125 + <div class="flex items-center gap-2 min-w-0" style="flex:1 1 40%;">
126 + {{if eq .Type "tree"}}
127 + {{icon "folder" "size-4"}}
128 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/tree/{{$.Ref}}/{{.Path}}" class="font-medium truncate">{{.Name}}</a>
129 + {{else}}
130 + {{icon "file" "size-4"}}
131 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/blob/{{$.Ref}}/{{.Path}}" class="truncate">{{.Name}}</a>
132 + {{end}}
133 + </div>
134 + <div class="hidden md-flex text-xs text-muted truncate" style="flex:1 1 45%;">
135 + {{if .CommitHash}}
136 + <a href="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/commit/{{.CommitHash}}" class="truncate text-muted">{{.CommitMsg}}</a>
137 + {{end}}
138 + </div>
139 + <div class="text-xs text-muted font-mono" style="text-align:right;min-width:5rem;">
140 + {{if not .CommitTime.IsZero}}
141 + {{timeAgo .CommitTime $.Lang}}
142 + {{else if eq .Type "blob"}}
143 + {{formatSize .Size}}
144 + {{end}}
145 + </div>
146 + </div>
147 + {{end}}
148 + </div>
149 + </div>
150 +
151 + {{if .ReadmeHTML}}
152 + <section class="card">
153 + <div class="card-header" style="padding:0.55rem 0.85rem;">
154 + <span class="font-semibold text-xs flex items-center gap-2 font-mono">
155 + {{icon "book-open" "size-3.5"}}
156 + <span>{{.ReadmeName}}</span>
157 + </span>
158 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/blob/{{.Ref}}/{{.ReadmeName}}" class="text-xs text-muted">{{t .Lang "repo.view_file"}}</a>
159 + </div>
160 + <div class="card-body markdown-body">
161 + {{.ReadmeHTML}}
162 + </div>
163 + </section>
164 + {{end}}
165 + </div>
166 +
167 + <aside class="repo-side">
168 + <div class="side-card">
169 + <div class="side-card-header">{{icon "info" "size-3.5"}} {{t .Lang "repo.about"}}</div>
170 + <div class="side-card-body">
171 + {{if .Repo.Description}}
172 + <p style="margin:0;">{{.Repo.Description}}</p>
173 + {{end}}
174 + {{if .Repo.ForkedFromRepoID}}
175 + <div class="meta-row">
176 + <span>{{t .Lang "fork.forked_from"}}</span>
177 + <a href="/{{.Repo.ForkedFromOwner}}/{{.Repo.ForkedFromName}}" class="font-medium font-mono">{{.Repo.ForkedFromOwner}}/{{.Repo.ForkedFromName}}</a>
178 + </div>
179 + {{end}}
180 + <div class="meta-row">
181 + <span>{{t .Lang "repo.default_branch"}}</span>
182 + <span class="badge badge-outline font-mono">{{.Repo.DefaultBranch}}</span>
183 + </div>
184 + <div class="meta-row">
185 + <span>{{t .Lang "fork.forks"}}</span>
186 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/forks" class="font-mono">{{.Repo.ForkCount}}</a>
187 + </div>
188 + <div class="meta-row">
189 + <span>{{t .Lang "repo.created"}}</span>
190 + <span class="font-mono">{{formatDate .Repo.CreatedAt}}</span>
191 + </div>
192 + <div class="meta-row">
193 + <span>{{t .Lang "repo.updated"}}</span>
194 + <span class="font-mono">{{formatDate .Repo.UpdatedAt}}</span>
195 + </div>
196 + </div>
197 + </div>
198 +
199 + <div class="side-card">
200 + <div class="side-card-header">{{icon "terminal" "size-3.5"}} {{t .Lang "repo.clone_title"}}</div>
201 + <div class="side-card-body">
202 + <div class="clone-box">
203 + <code>{{.CloneURL}}</code>
204 + <button type="button" class="btn btn-ghost btn-icon" style="width:1.6rem;height:1.6rem;" data-copy="{{.CloneURL}}" title="{{t .Lang "common.copy"}}">
205 + {{icon "copy" "size-3.5"}}
206 + </button>
207 + </div>
208 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/archive/{{.Ref}}.zip" class="btn btn-outline btn-sm w-full justify-center">
209 + {{icon "download" "size-3.5"}}
210 + <span>{{t .Lang "repo.download_zip"}}</span>
211 + </a>
212 + </div>
213 + </div>
214 + </aside>
215 + </div>
216 + {{end}}
217 +</div>
218 +{{end}}
internal/web/views/pages/repo_new.html
+55 -0
... ... @@ -0,0 +1,55 @@
1 +{{define "content"}}
2 +<div class="container" style="max-width:32rem;">
3 + <div class="card">
4 + <div class="card-header">
5 + <h1 class="text-base font-semibold" style="margin:0;">{{t .Lang "repo.new.title"}}</h1>
6 + </div>
7 +
8 + <form method="post" action="/new" class="card-body flex flex-col gap-3">
9 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
10 +
11 + <div>
12 + <label class="label" for="name">{{t .Lang "repo.name"}}</label>
13 + <div class="flex items-center gap-2">
14 + <span class="text-sm text-muted font-mono flex-shrink-0">{{.CurrentUser.Username}} /</span>
15 + <input id="name" name="name" type="text" class="input font-mono flex-1 min-w-0" value="{{.FormName}}" placeholder="project" required autofocus pattern="^[a-zA-Z0-9][a-zA-Z0-9._-]{0,63}$">
16 + </div>
17 + <div class="field-hint">{{t .Lang "repo.name_hint"}}</div>
18 + </div>
19 +
20 + <div>
21 + <label class="label" for="description">{{t .Lang "repo.description"}}</label>
22 + <input id="description" name="description" type="text" class="input" value="{{.FormDescription}}" maxlength="500" placeholder="{{t .Lang "repo.description_ph"}}">
23 + </div>
24 +
25 + <div>
26 + <span class="label">{{t .Lang "repo.visibility"}}</span>
27 + <div class="flex flex-col gap-2">
28 + <label class="card p-3 flex items-start gap-2.5" style="cursor:pointer;">
29 + <input type="radio" name="visibility" value="public" checked style="margin-top:0.2rem;">
30 + <div>
31 + <div class="font-medium text-sm flex items-center gap-1.5">{{icon "globe" "size-4"}} {{t .Lang "repo.public"}}</div>
32 + <div class="text-xs text-muted mt-1">{{t .Lang "repo.public_desc"}}</div>
33 + </div>
34 + </label>
35 + <label class="card p-3 flex items-start gap-2.5" style="cursor:pointer;">
36 + <input type="radio" name="visibility" value="private" style="margin-top:0.2rem;">
37 + <div>
38 + <div class="font-medium text-sm flex items-center gap-1.5">{{icon "lock" "size-4"}} {{t .Lang "repo.private"}}</div>
39 + <div class="text-xs text-muted mt-1">{{t .Lang "repo.private_desc"}}</div>
40 + </div>
41 + </label>
42 + </div>
43 + </div>
44 +
45 + <div class="flex items-center justify-end gap-2 pt-2">
46 + <a href="/repos" class="btn btn-outline">{{t .Lang "common.cancel"}}</a>
47 + <button type="submit" class="btn btn-primary">
48 + {{icon "plus" "size-4"}}
49 + <span>{{t .Lang "repo.create_btn"}}</span>
50 + </button>
51 + </div>
52 + </form>
53 + </div>
54 +</div>
55 +{{end}}
internal/web/views/pages/repo_settings.html
+210 -0
... ... @@ -0,0 +1,210 @@
1 +{{define "content"}}
2 +<div class="container">
3 + {{template "repo_header" .}}
4 +
5 + <!-- General Settings -->
6 + <section class="card mb-4">
7 + <div class="card-header">
8 + <span class="font-semibold flex items-center gap-2">{{icon "settings" "size-4"}} {{t .Lang "repo.tab.settings"}}</span>
9 + </div>
10 + <form method="post" action="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/settings" class="card-body flex flex-col gap-3">
11 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
12 +
13 + <div>
14 + <label class="label" for="description">{{t .Lang "repo.description"}}</label>
15 + <input id="description" name="description" type="text" class="input" value="{{.Repo.Description}}" maxlength="500" placeholder="{{t .Lang "repo.description_ph"}}">
16 + </div>
17 +
18 + <div class="grid-2">
19 + <div>
20 + <label class="label" for="default_branch">{{t .Lang "repo.default_branch"}}</label>
21 + <select id="default_branch" name="default_branch" class="select font-mono">
22 + {{if .Branches}}
23 + {{range .Branches}}
24 + <option value="{{.}}" {{if eq . $.Repo.DefaultBranch}}selected{{end}}>{{.}}</option>
25 + {{end}}
26 + {{else}}
27 + <option value="{{.Repo.DefaultBranch}}" selected>{{.Repo.DefaultBranch}}</option>
28 + {{end}}
29 + </select>
30 + </div>
31 +
32 + <div>
33 + <label class="label" for="visibility">{{t .Lang "repo.visibility"}}</label>
34 + <select id="visibility" name="visibility" class="select">
35 + <option value="public" {{if not .Repo.IsPrivate}}selected{{end}}>{{t .Lang "repo.public"}}</option>
36 + <option value="private" {{if .Repo.IsPrivate}}selected{{end}}>{{t .Lang "repo.private"}}</option>
37 + </select>
38 + </div>
39 + </div>
40 +
41 + <!-- Feature Toggles for Repository -->
42 + <div class="card p-3 mt-1" style="background:hsl(var(--muted) / 0.25);">
43 + <div class="font-semibold text-xs text-muted mb-2 uppercase" style="letter-spacing:0.04em;">{{t .Lang "repo.features"}}</div>
44 + <div class="flex flex-col gap-2.5">
45 + <label class="flex items-center justify-between cursor-pointer">
46 + <span class="flex items-center gap-2 text-sm font-medium">
47 + {{icon "issue" "size-4"}}
48 + <span>{{t .Lang "repo.tab.issues"}}</span>
49 + </span>
50 + <input type="checkbox" name="enable_issues" value="true" class="switch" {{if .Repo.EnableIssues}}checked{{end}}>
51 + </label>
52 + <label class="flex items-center justify-between cursor-pointer">
53 + <span class="flex items-center gap-2 text-sm font-medium">
54 + {{icon "git-pull-request" "size-4"}}
55 + <span>{{t .Lang "repo.tab.pulls"}}</span>
56 + </span>
57 + <input type="checkbox" name="enable_pulls" value="true" class="switch" {{if .Repo.EnablePulls}}checked{{end}}>
58 + </label>
59 + <label class="flex items-center justify-between cursor-pointer">
60 + <span class="flex items-center gap-2 text-sm font-medium">
61 + {{icon "tag" "size-4"}}
62 + <span>{{t .Lang "repo.tab.releases"}}</span>
63 + </span>
64 + <input type="checkbox" name="enable_releases" value="true" class="switch" {{if .Repo.EnableReleases}}checked{{end}}>
65 + </label>
66 + <label class="flex items-center justify-between cursor-pointer">
67 + <span class="flex items-center gap-2 text-sm font-medium">
68 + {{icon "activity" "size-4"}}
69 + <span>{{t .Lang "repo.tab.activity"}}</span>
70 + </span>
71 + <input type="checkbox" name="enable_activity" value="true" class="switch" {{if .Repo.EnableActivity}}checked{{end}}>
72 + </label>
73 + </div>
74 + </div>
75 +
76 + <div class="flex items-center justify-end">
77 + <button type="submit" class="btn btn-primary btn-sm">{{t .Lang "repo.save"}}</button>
78 + </div>
79 + </form>
80 + </section>
81 +
82 + <!-- Collaborators -->
83 + <section class="card mb-4" id="collaborators">
84 + <div class="card-header">
85 + <span class="font-semibold flex items-center gap-2">{{icon "users" "size-4"}} {{t .Lang "collab.title"}}</span>
86 + <span class="text-xs text-muted">{{t .Lang "collab.desc"}}</span>
87 + </div>
88 +
89 + <div class="dense-list" style="border-bottom:1px solid hsl(var(--border));">
90 + <div class="dense-row" style="min-height:2.6rem;padding:0.45rem 0.85rem;">
91 + <div class="flex items-center gap-2.5 min-w-0">
92 + {{avatar .Repo.OwnerUsername .Repo.OwnerAvatarURL}}
93 + <div class="min-w-0">
94 + <a href="/{{.Repo.OwnerUsername}}" class="font-semibold text-sm">{{.Repo.OwnerUsername}}</a>
95 + </div>
96 + </div>
97 + <span class="badge badge-outline">{{t .Lang "collab.owner"}}</span>
98 + </div>
99 + {{range .Collaborators}}
100 + <div class="dense-row" style="min-height:2.6rem;padding:0.45rem 0.85rem;">
101 + <div class="flex items-center gap-2.5 min-w-0">
102 + {{avatar .Username .AvatarURL}}
103 + <div class="min-w-0">
104 + <a href="/{{.Username}}" class="font-semibold text-sm">{{.Username}}</a>
105 + {{if .FullName}}<div class="text-xs text-muted truncate">{{.FullName}}</div>{{end}}
106 + </div>
107 + </div>
108 + <div class="flex items-center gap-2">
109 + <span class="badge badge-outline font-mono">{{if eq .Role "read"}}{{t $.Lang "collab.role_read"}}{{else}}{{t $.Lang "collab.role_write"}}{{end}}</span>
110 + {{if $.CanManageCollab}}
111 + <form method="post" action="/{{$.Repo.OwnerUsername}}/{{$.Repo.Name}}/settings/collaborators/remove" style="margin:0;">
112 + <input type="hidden" name="_csrf" value="{{$.CSRFToken}}">
113 + <input type="hidden" name="user_id" value="{{.UserID}}">
114 + <button type="submit" class="btn btn-ghost btn-icon" style="width:1.75rem;height:1.75rem;" title="{{t $.Lang "collab.remove"}}">
115 + {{icon "close" "size-3.5"}}
116 + </button>
117 + </form>
118 + {{end}}
119 + </div>
120 + </div>
121 + {{else}}
122 + <div class="card-body text-xs text-muted">{{t .Lang "collab.empty"}}</div>
123 + {{end}}
124 + </div>
125 +
126 + {{if .CanManageCollab}}
127 + <form method="post" action="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/settings/collaborators/add" class="card-body flex items-end gap-2 flex-wrap">
128 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
129 + <div style="flex:1 1 12rem;">
130 + <label class="label" for="collab_username">{{t .Lang "collab.username"}}</label>
131 + <input id="collab_username" name="username" type="text" class="input font-mono" placeholder="{{t .Lang "collab.username_ph"}}" required>
132 + </div>
133 + <div>
134 + <label class="label" for="collab_role">{{t .Lang "collab.role"}}</label>
135 + <select id="collab_role" name="role" class="select">
136 + <option value="write">{{t .Lang "collab.role_write"}}</option>
137 + <option value="read">{{t .Lang "collab.role_read"}}</option>
138 + </select>
139 + </div>
140 + <button type="submit" class="btn btn-primary btn-sm">
141 + {{icon "plus" "size-3.5"}}
142 + <span>{{t .Lang "collab.add"}}</span>
143 + </button>
144 + </form>
145 + {{end}}
146 + </section>
147 +
148 + <!-- Rename Repository --> <section class="card mb-4">
149 + <div class="card-header">
150 + <span class="font-semibold flex items-center gap-2">{{icon "edit" "size-4"}} {{t .Lang "repo.rename"}}</span>
151 + </div>
152 + <form method="post" action="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/settings/rename" class="card-body flex items-center gap-2">
153 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
154 + <input name="new_name" type="text" class="input font-mono" value="{{.Repo.Name}}" required pattern="^[a-zA-Z0-9][a-zA-Z0-9._-]{0,63}$">
155 + <button type="submit" class="btn btn-outline">{{t .Lang "repo.rename"}}</button>
156 + </form>
157 + </section>
158 +
159 + <!-- Danger Zone -->
160 + <section class="card" style="border-color:hsl(var(--destructive) / 0.45);">
161 + <div class="card-header" style="border-bottom-color:hsl(var(--destructive) / 0.2);">
162 + <span class="font-semibold text-destructive flex items-center gap-2">{{icon "alert-circle" "size-4"}} {{t .Lang "repo.danger_zone"}}</span>
163 + </div>
164 + <div class="card-body flex items-center justify-between flex-wrap gap-3">
165 + <div>
166 + <div class="font-medium text-sm">{{t .Lang "repo.delete"}}</div>
167 + <div class="text-xs text-muted">{{t .Lang "repo.delete_desc"}}</div>
168 + </div>
169 + <button type="button" class="btn btn-destructive btn-sm" data-dialog-open="delete-repo-dialog">
170 + {{icon "trash" "size-3.5"}}
171 + <span>{{t .Lang "repo.delete"}}</span>
172 + </button>
173 + </div>
174 + </section>
175 +</div>
176 +
177 +<!-- Delete Confirmation Modal -->
178 +<div id="delete-repo-dialog" class="backdrop" role="dialog" aria-modal="true" aria-label="{{t .Lang "repo.delete"}}" aria-hidden="true">
179 + <div class="dialog-box">
180 + <div class="card-header">
181 + <span class="font-semibold text-destructive flex items-center gap-2">{{icon "trash" "size-4"}} {{t .Lang "repo.delete"}}</span>
182 + <button type="button" class="btn btn-ghost btn-icon" data-dialog-close aria-label="{{t .Lang "common.close"}}">{{icon "close" "size-4"}}</button>
183 + </div>
184 + <form method="post" action="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/settings/delete">
185 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
186 + <div class="card-body flex flex-col gap-3">
187 + <p class="text-sm text-muted" style="margin:0;">
188 + {{t .Lang "repo.delete_confirm"}}: <strong class="font-mono" style="color:hsl(var(--foreground));">{{.Repo.Name}}</strong>
189 + </p>
190 + <input
191 + type="text"
192 + name="confirm_name"
193 + class="input font-mono"
194 + placeholder="{{.Repo.Name}}"
195 + autocomplete="off"
196 + required
197 + data-confirm-input="{{.Repo.Name}}"
198 + data-confirm-button="confirm-delete-btn">
199 + </div>
200 + <div class="card-footer flex items-center justify-end gap-2">
201 + <button type="button" class="btn btn-outline btn-sm" data-dialog-close>{{t .Lang "common.cancel"}}</button>
202 + <button id="confirm-delete-btn" type="submit" class="btn btn-destructive btn-sm" disabled>
203 + {{icon "trash" "size-3.5"}}
204 + <span>{{t .Lang "repo.delete"}}</span>
205 + </button>
206 + </div>
207 + </form>
208 + </div>
209 +</div>
210 +{{end}}
internal/web/views/pages/repos.html
+78 -0
... ... @@ -0,0 +1,78 @@
1 +{{define "content"}}
2 +<div class="container">
3 + {{if .ProfileUser}}
4 + <div class="card p-4 mb-4 flex items-center justify-between flex-wrap gap-3">
5 + <div class="flex items-center gap-3">
6 + <span class="avatar avatar-lg">{{avatarInitial .ProfileUser.Username}}</span>
7 + <div>
8 + <div class="flex items-center gap-2">
9 + <h1 class="text-lg font-semibold" style="margin:0;">{{.ProfileUser.Username}}</h1>
10 + {{if .ProfileUser.IsAdmin}}
11 + <span class="badge">{{t .Lang "admin.role.admin"}}</span>
12 + {{end}}
13 + </div>
14 + {{if .ProfileUser.Bio}}
15 + <p class="text-sm text-muted mt-1" style="margin-bottom:0;">{{.ProfileUser.Bio}}</p>
16 + {{end}}
17 + </div>
18 + </div>
19 + {{if .CurrentUser}}
20 + {{if eq .CurrentUser.ID .ProfileUser.ID}}
21 + <a href="/settings" class="btn btn-outline btn-sm">{{icon "settings" "size-3.5"}} {{t .Lang "nav.settings"}}</a>
22 + {{end}}
23 + {{end}}
24 + </div>
25 + {{end}}
26 +
27 + <div class="flex items-center justify-between flex-wrap gap-3 mb-4">
28 + <h2 class="text-lg font-semibold" style="margin:0;">{{.PageHeading}}</h2>
29 + <div class="flex items-center gap-2">
30 + <div class="flex items-center" style="position:relative;">
31 + <input type="text" class="input" style="height:1.9rem;width:14rem;padding-right:1.8rem;" placeholder="{{t .Lang "repo.filter_ph"}}" data-search-input data-file-filter>
32 + <kbd class="kbd" style="position:absolute;right:0.4rem;pointer-events:none;">/</kbd>
33 + </div>
34 + {{if .CurrentUser}}
35 + <a href="/new" class="btn btn-primary">
36 + {{icon "plus" "size-4"}}
37 + <span>{{t .Lang "nav.new_repo"}}</span>
38 + </a>
39 + {{end}}
40 + </div>
41 + </div>
42 +
43 + {{if .Repos}}
44 + <div class="card">
45 + {{range .Repos}}
46 + <div class="dense-row" style="min-height:2.5rem;padding:0.4rem 0.85rem;" data-tree-row data-tree-name="{{.OwnerUsername}}/{{.Name}} {{.Description}}">
47 + <div class="flex items-center gap-2 min-w-0">
48 + {{if .IsPrivate}}
49 + {{icon "lock" "size-4"}}
50 + {{else}}
51 + {{icon "git-branch" "size-4"}}
52 + {{end}}
53 + <a href="/{{.OwnerUsername}}/{{.Name}}" class="font-medium text-sm">
54 + <span class="text-muted">{{.OwnerUsername}} /</span> <strong>{{.Name}}</strong>
55 + </a>
56 + {{if .IsPrivate}}
57 + <span class="badge badge-outline">{{t $.Lang "repo.private"}}</span>
58 + {{end}}
59 + {{if .Description}}
60 + <span class="text-xs text-muted truncate">— {{.Description}}</span>
61 + {{end}}
62 + </div>
63 + <div class="flex items-center gap-2.5 text-xs text-muted">
64 + <span class="font-mono">{{.DefaultBranch}}</span>
65 + <span>{{timeAgo .UpdatedAt $.Lang}}</span>
66 + </div>
67 + </div>
68 + {{end}}
69 + </div>
70 + {{else}}
71 + {{if .CurrentUser}}
72 + {{template "ui_empty_state" (dict "Icon" "git-branch" "Title" (t .Lang "repo.empty_list") "Subtitle" (t .Lang "repo.empty_list_sub") "ActionHref" "/new" "ActionLabel" (t .Lang "repo.new.title") "ActionIcon" "plus")}}
73 + {{else}}
74 + {{template "ui_empty_state" (dict "Icon" "git-branch" "Title" (t .Lang "repo.empty_list"))}}
75 + {{end}}
76 + {{end}}
77 +</div>
78 +{{end}}
internal/web/views/pages/settings.html
+184 -0
... ... @@ -0,0 +1,184 @@
1 +{{define "content"}}
2 +<div class="container">
3 + <div class="flex items-center justify-between mb-4">
4 + <h1 class="text-lg font-semibold" style="margin:0;">{{t .Lang "settings.title"}}</h1>
5 + <a href="/{{.CurrentUser.Username}}" class="btn btn-outline btn-sm">
6 + {{icon "user" "size-3.5"}}
7 + <span>@{{.CurrentUser.Username}}</span>
8 + </a>
9 + </div>
10 +
11 + <!-- Avatar & Profile -->
12 + <section class="card mb-4">
13 + <div class="card-header">
14 + <span class="font-semibold flex items-center gap-2">{{icon "user" "size-4"}} {{t .Lang "settings.profile"}}</span>
15 + </div>
16 + <form method="post" action="/settings/profile" enctype="multipart/form-data" class="card-body flex flex-col gap-4">
17 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
18 + <input type="hidden" id="avatar-data-input" name="avatar_data" value="">
19 + <input type="hidden" id="remove-avatar-input" name="remove_avatar" value="false">
20 +
21 + <!-- Avatar Picker Row -->
22 + <div class="flex items-center gap-4 flex-wrap pb-3" style="border-bottom:1px solid hsl(var(--border));">
23 + <div id="avatar-preview-wrap">
24 + {{avatar .CurrentUser.Username .CurrentUser.AvatarURL "avatar-xl"}}
25 + </div>
26 + <div class="flex flex-col gap-1.5">
27 + <div class="text-sm font-medium">{{t .Lang "settings.avatar"}}</div>
28 + <div class="flex items-center gap-2 flex-wrap">
29 + <label class="btn btn-outline btn-sm" style="cursor:pointer;">
30 + {{icon "image" "size-3.5"}}
31 + <span>{{t .Lang "settings.avatar_upload"}}</span>
32 + <input id="avatar-file-input" name="avatar_file" type="file" accept="image/png,image/jpeg,image/webp,image/gif" style="display:none;">
33 + </label>
34 + {{if .CurrentUser.AvatarURL}}
35 + <button type="button" id="remove-avatar-btn" class="btn btn-ghost btn-sm text-destructive">
36 + {{icon "trash" "size-3.5"}}
37 + <span>{{t .Lang "settings.avatar_remove"}}</span>
38 + </button>
39 + {{end}}
40 + </div>
41 + <div class="field-hint" style="margin:0;">{{t .Lang "settings.avatar_hint"}}</div>
42 + </div>
43 + </div>
44 +
45 + <div class="grid-2">
46 + <div>
47 + <label class="label">{{t .Lang "auth.username"}}</label>
48 + <input type="text" class="input font-mono" value="{{.CurrentUser.Username}}" disabled>
49 + </div>
50 + <div>
51 + <label class="label" for="full_name">{{t .Lang "settings.full_name"}}</label>
52 + <input id="full_name" name="full_name" type="text" class="input" value="{{.CurrentUser.FullName}}" maxlength="80" placeholder="{{t .Lang "settings.full_name_ph"}}">
53 + </div>
54 + </div>
55 +
56 + <div class="grid-2">
57 + <div>
58 + <label class="label" for="email">{{t .Lang "auth.email"}}</label>
59 + <input id="email" name="email" type="email" class="input" value="{{.CurrentUser.Email}}" required>
60 + </div>
61 + <div>
62 + <label class="label" for="location">{{t .Lang "settings.location"}}</label>
63 + <input id="location" name="location" type="text" class="input" value="{{.CurrentUser.Location}}" maxlength="80" placeholder="{{t .Lang "settings.location_ph"}}">
64 + </div>
65 + </div>
66 +
67 + <div class="grid-2">
68 + <div>
69 + <label class="label" for="bio">{{t .Lang "settings.bio"}}</label>
70 + <input id="bio" name="bio" type="text" class="input" value="{{.CurrentUser.Bio}}" maxlength="280" placeholder="{{t .Lang "settings.bio_ph"}}">
71 + </div>
72 + <div>
73 + <label class="label" for="website">{{t .Lang "settings.website"}}</label>
74 + <input id="website" name="website" type="text" class="input" value="{{.CurrentUser.Website}}" maxlength="200" placeholder="{{t .Lang "settings.website_ph"}}">
75 + </div>
76 + </div>
77 +
78 + <div class="flex items-center justify-between flex-wrap gap-2 pt-2">
79 + <div class="flex items-center gap-1.5 flex-wrap">
80 + <span class="text-xs text-muted">{{t .Lang "nav.theme"}}:</span>
81 + <button type="button" class="btn btn-outline btn-sm" data-set-theme="light">{{t .Lang "theme.light"}}</button>
82 + <button type="button" class="btn btn-outline btn-sm" data-set-theme="dark">{{t .Lang "theme.dark"}}</button>
83 + <button type="button" class="btn btn-outline btn-sm" data-set-theme="system">{{t .Lang "theme.system"}}</button>
84 + </div>
85 + <button type="submit" class="btn btn-primary btn-sm">{{t .Lang "repo.save"}}</button>
86 + </div>
87 + </form>
88 + </section>
89 +
90 + <!-- Personal Access Tokens -->
91 + <section id="tokens" class="card mb-4">
92 + <div class="card-header">
93 + <span class="font-semibold flex items-center gap-2">{{icon "key" "size-4"}} {{t .Lang "settings.tokens"}}</span>
94 + </div>
95 + <div class="card-body flex flex-col gap-3">
96 + <p class="text-xs text-muted" style="margin:0;">{{t .Lang "settings.tokens.desc"}}</p>
97 +
98 + {{if .NewRawToken}}
99 + <div class="card p-3" style="border-color:hsl(var(--primary));background:hsl(var(--muted)/0.5);">
100 + <div class="text-xs font-medium mb-2">{{t .Lang "settings.token.created_once"}}</div>
101 + <div class="flex items-center justify-between gap-2">
102 + <code class="font-mono text-sm select-all" id="created-token-val">{{.NewRawToken}}</code>
103 + <button type="button" class="btn btn-secondary btn-sm" data-copy="{{.NewRawToken}}">
104 + {{icon "copy" "size-3.5"}}
105 + <span>{{t .Lang "common.copy"}}</span>
106 + </button>
107 + </div>
108 + </div>
109 + {{end}}
110 +
111 + <form method="post" action="/settings/tokens" class="flex items-center gap-2">
112 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
113 + <input name="name" type="text" class="input" placeholder="{{t .Lang "settings.token.name"}}" required maxlength="64">
114 + <button type="submit" class="btn btn-primary">
115 + {{icon "plus" "size-4"}}
116 + <span>{{t .Lang "settings.token.create"}}</span>
117 + </button>
118 + </form>
119 +
120 + {{if .Tokens}}
121 + <div class="table-wrap">
122 + <table class="table">
123 + <thead>
124 + <tr>
125 + <th>{{t .Lang "settings.token.col_name"}}</th>
126 + <th>{{t .Lang "settings.token.col_prefix"}}</th>
127 + <th>{{t .Lang "settings.token.col_created"}}</th>
128 + <th>{{t .Lang "settings.token.col_used"}}</th>
129 + <th style="text-align:right;"></th>
130 + </tr>
131 + </thead>
132 + <tbody>
133 + {{range .Tokens}}
134 + <tr>
135 + <td class="font-medium">{{.Name}}</td>
136 + <td><code class="font-mono text-xs text-muted">{{.TokenPrefix}}…</code></td>
137 + <td class="text-xs text-muted">{{timeAgo .CreatedAt $.Lang}}</td>
138 + <td class="text-xs text-muted">
139 + {{if .LastUsedAt}}{{timeAgo .LastUsedAt $.Lang}}{{else}}{{t $.Lang "common.never"}}{{end}}
140 + </td>
141 + <td style="text-align:right;">
142 + <form method="post" action="/settings/tokens/{{.ID}}/revoke" style="display:inline;">
143 + <input type="hidden" name="_csrf" value="{{$.CSRFToken}}">
144 + <button type="submit" class="btn btn-destructive btn-sm">
145 + {{icon "trash" "size-3.5"}}
146 + <span>{{t $.Lang "settings.token.revoke"}}</span>
147 + </button>
148 + </form>
149 + </td>
150 + </tr>
151 + {{end}}
152 + </tbody>
153 + </table>
154 + </div>
155 + {{else}}
156 + <div class="text-xs text-muted">{{t .Lang "settings.token.empty"}}</div>
157 + {{end}}
158 + </div>
159 + </section>
160 +
161 + <!-- Change Password -->
162 + <section class="card">
163 + <div class="card-header">
164 + <span class="font-semibold flex items-center gap-2">{{icon "lock" "size-4"}} {{t .Lang "auth.password"}}</span>
165 + </div>
166 + <form method="post" action="/settings/password" class="card-body flex flex-col gap-3">
167 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
168 + <div class="grid-2">
169 + <div>
170 + <label class="label" for="current_password">{{t .Lang "settings.password.current"}}</label>
171 + <input id="current_password" name="current_password" type="password" class="input" required>
172 + </div>
173 + <div>
174 + <label class="label" for="new_password">{{t .Lang "settings.password.new"}}</label>
175 + <input id="new_password" name="new_password" type="password" class="input" minlength="8" required>
176 + </div>
177 + </div>
178 + <div class="flex items-center justify-end">
179 + <button type="submit" class="btn btn-outline btn-sm">{{t .Lang "settings.password.update"}}</button>
180 + </div>
181 + </form>
182 + </section>
183 +</div>
184 +{{end}}
internal/web/views/partials/components.html
+160 -0
... ... @@ -0,0 +1,160 @@
1 +{{define "ui_button"}}
2 + <button
3 + type="{{if .Type}}{{.Type}}{{else}}button{{end}}"
4 + class="btn {{if .Variant}}btn-{{.Variant}}{{else}}btn-default{{end}} {{if .Size}}btn-{{.Size}}{{end}} {{.Class}}"
5 + {{if .ID}}id="{{.ID}}"{{end}}
6 + {{if .Disabled}}disabled{{end}}>
7 + {{if .Icon}}{{icon .Icon "size-4"}}{{end}}
8 + {{if .Label}}<span>{{.Label}}</span>{{end}}
9 + </button>
10 +{{end}}
11 +
12 +{{define "ui_badge"}}
13 + <span class="badge {{if .Variant}}badge-{{.Variant}}{{end}}">
14 + {{if .Icon}}{{icon .Icon "size-3.5"}}{{end}}
15 + <span>{{.Text}}</span>
16 + </span>
17 +{{end}}
18 +
19 +{{define "ui_kbd"}}
20 + <kbd class="kbd">{{.}}</kbd>
21 +{{end}}
22 +
23 +{{define "ui_avatar"}}
24 + {{if .Large}}{{avatar .Username .AvatarURL "avatar-lg"}}{{else}}{{avatar .Username .AvatarURL}}{{end}}
25 +{{end}}
26 +
27 +{{define "ui_empty_state"}}
28 + <div class="empty-state">
29 + {{if .Icon}}
30 + <div class="mb-2" style="color:hsl(var(--muted-foreground));">{{icon .Icon "size-6"}}</div>
31 + {{end}}
32 + <div class="font-semibold text-base" style="color:hsl(var(--foreground));">{{.Title}}</div>
33 + {{if .Subtitle}}<div class="text-sm text-muted mt-1">{{.Subtitle}}</div>{{end}}
34 + {{if .ActionHref}}
35 + <div class="mt-4">
36 + <a href="{{.ActionHref}}" class="btn btn-primary btn-sm">
37 + {{if .ActionIcon}}{{icon .ActionIcon "size-3.5"}}{{end}}
38 + <span>{{.ActionLabel}}</span>
39 + </a>
40 + </div>
41 + {{end}}
42 + </div>
43 +{{end}}
44 +
45 +{{define "repo_header"}}
46 + <div class="repo-banner mb-3">
47 + <div class="repo-banner-main">
48 + <a href="/{{.Repo.OwnerUsername}}" class="flex-shrink-0">{{avatar .Repo.OwnerUsername .Repo.OwnerAvatarURL}}</a>
49 + <div class="min-w-0">
50 + <div class="flex items-center gap-2 flex-wrap">
51 + <nav class="breadcrumb" aria-label="Repository breadcrumb">
52 + <a href="/{{.Repo.OwnerUsername}}" class="text-sm font-medium text-muted">{{.Repo.OwnerUsername}}</a>
53 + <span class="breadcrumb-sep">/</span>
54 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}" class="font-semibold text-lg tracking-tight" style="color:hsl(var(--foreground));">{{.Repo.Name}}</a>
55 + </nav>
56 + {{if .Repo.IsPrivate}}
57 + <span class="badge badge-outline">{{icon "lock" "size-3.5"}} {{t .Lang "repo.private"}}</span>
58 + {{else}}
59 + <span class="badge badge-outline">{{icon "globe" "size-3.5"}} {{t .Lang "repo.public"}}</span>
60 + {{end}}
61 + </div>
62 + <div class="text-xs text-muted mt-1 flex items-center gap-2 flex-wrap">
63 + {{if .Repo.ForkedFromRepoID}}
64 + <span class="flex items-center gap-1.5">
65 + {{icon "git-branch" "size-3.5"}}
66 + {{t .Lang "fork.forked_from"}}
67 + <a class="font-medium" style="color:hsl(var(--foreground));" href="/{{.Repo.ForkedFromOwner}}/{{.Repo.ForkedFromName}}">{{.Repo.ForkedFromOwner}}/{{.Repo.ForkedFromName}}</a>
68 + </span>
69 + {{else if .Repo.Description}}
70 + <span class="truncate" style="max-width:36rem;">{{.Repo.Description}}</span>
71 + {{end}}
72 + </div>
73 + </div>
74 + </div>
75 +
76 + <div class="repo-banner-actions">
77 + {{if .CurrentUser}}
78 + {{if .IsRepoOwner}}
79 + <a class="btn btn-outline btn-sm" href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/forks">{{icon "git-branch" "size-3.5"}}<span>{{if gt .Repo.ForkCount 0}}{{.Repo.ForkCount}} {{end}}{{t .Lang "fork.forks_btn"}}</span></a>
80 + {{else if .ViewerFork}}
81 + <a class="btn btn-outline btn-sm" href="/{{.ViewerFork.OwnerUsername}}/{{.ViewerFork.Name}}" title="{{t .Lang "fork.your_fork_desc"}}">{{icon "git-branch" "size-3.5"}}<span>{{t .Lang "fork.your_fork"}}</span></a>
82 + {{else}}
83 + <form method="post" action="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/fork" style="margin:0;">
84 + <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
85 + <button class="btn btn-outline btn-sm" type="submit" title="{{t .Lang "fork.fork_btn_desc"}}">{{icon "git-branch" "size-3.5"}}<span>{{t .Lang "fork.fork_btn"}}</span></button>
86 + </form>
87 + {{end}}
88 + {{else}}
89 + <a class="btn btn-outline btn-sm" href="/login?next=/{{.Repo.OwnerUsername}}/{{.Repo.Name}}">{{icon "git-branch" "size-3.5"}}<span>{{t .Lang "fork.fork_btn"}}</span></a>
90 + {{end}}
91 + {{if .Repo.EnableIssues}}
92 + <a class="btn btn-ghost btn-sm" href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/issues/new">{{icon "issue" "size-3.5"}}<span class="hidden md-flex">{{t .Lang "issues.new"}}</span></a>
93 + {{end}}
94 + {{if .Repo.EnablePulls}}
95 + <a class="btn btn-ghost btn-sm" href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/pulls/new">{{icon "git-pull-request" "size-3.5"}}<span class="hidden md-flex">{{t .Lang "pulls.new"}}</span></a>
96 + {{end}}
97 + </div>
98 + </div>
99 +
100 + <div class="repo-stats mb-3">
101 + {{if .Repo.EnableIssues}}
102 + <a class="stat-chip" href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/issues">{{icon "issue" "size-3.5"}}<span>{{t .Lang "repo.tab.issues"}}</span> <b>{{.Repo.OpenIssueCount}}</b></a>
103 + {{end}}
104 + {{if .Repo.EnablePulls}}
105 + <a class="stat-chip" href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/pulls">{{icon "git-pull-request" "size-3.5"}}<span>{{t .Lang "repo.tab.pulls"}}</span> <b>{{.Repo.OpenPRCount}}</b></a>
106 + {{end}}
107 + {{if .Repo.EnableReleases}}
108 + <a class="stat-chip" href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/releases">{{icon "tag" "size-3.5"}}<span>{{t .Lang "repo.tab.releases"}}</span> <b>{{.Repo.ReleaseCount}}</b></a>
109 + {{end}}
110 + <a class="stat-chip" href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/forks">{{icon "git-branch" "size-3.5"}}<span>{{t .Lang "fork.forks"}}</span> <b>{{.Repo.ForkCount}}</b></a>
111 + <a class="stat-chip" href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/branches">{{icon "history" "size-3.5"}}<span>{{t .Lang "repo.tab.branches"}}</span></a>
112 + </div>
113 +
114 + <div class="tabs-nav" role="tablist">
115 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}" class="tab-link {{if eq .ActiveTab "code"}}active{{end}}" role="tab">
116 + {{icon "code" "size-4"}}
117 + <span>{{t .Lang "repo.tab.code"}}</span>
118 + </a>
119 + {{if .Repo.EnableIssues}}
120 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/issues" class="tab-link {{if eq .ActiveTab "issues"}}active{{end}}" role="tab">
121 + {{icon "issue" "size-4"}}
122 + <span>{{t .Lang "repo.tab.issues"}}</span>
123 + {{if gt .Repo.OpenIssueCount 0}}
124 + <span class="badge" style="padding:0 0.35rem;font-size:0.68rem;">{{.Repo.OpenIssueCount}}</span>
125 + {{end}}
126 + </a>
127 + {{end}}
128 + {{if .Repo.EnablePulls}}
129 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/pulls" class="tab-link {{if eq .ActiveTab "pulls"}}active{{end}}" role="tab">
130 + {{icon "git-pull-request" "size-4"}}
131 + <span>{{t .Lang "repo.tab.pulls"}}</span>
132 + {{if gt .Repo.OpenPRCount 0}}
133 + <span class="badge" style="padding:0 0.35rem;font-size:0.68rem;">{{.Repo.OpenPRCount}}</span>
134 + {{end}}
135 + </a>
136 + {{end}}
137 + {{if .Repo.EnableReleases}}
138 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/releases" class="tab-link {{if eq .ActiveTab "releases"}}active{{end}}" role="tab">
139 + {{icon "tag" "size-4"}}
140 + <span>{{t .Lang "repo.tab.releases"}}</span>
141 + {{if gt .Repo.ReleaseCount 0}}
142 + <span class="badge" style="padding:0 0.35rem;font-size:0.68rem;">{{.Repo.ReleaseCount}}</span>
143 + {{end}}
144 + </a>
145 + {{end}}
146 + {{if .Repo.EnableActivity}}
147 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/activity" class="tab-link {{if eq .ActiveTab "activity"}}active{{end}}" role="tab">
148 + {{icon "activity" "size-4"}}
149 + <span>{{t .Lang "repo.tab.activity"}}</span>
150 + </a>
151 + {{end}}
152 + {{if .CanWrite}}
153 + <a href="/{{.Repo.OwnerUsername}}/{{.Repo.Name}}/settings" class="tab-link {{if eq .ActiveTab "settings"}}active{{end}}" role="tab">
154 + {{icon "settings" "size-4"}}
155 + <span>{{t .Lang "repo.tab.settings"}}</span>
156 + </a>
157 + {{end}}
158 + </div>
159 +{{end}}
160 +
internal/web/views/views.go
+342 -0
... ... @@ -0,0 +1,342 @@
1 +package views
2 +
3 +import (
4 + "bytes"
5 + "embed"
6 + "fmt"
7 + "html"
8 + "html/template"
9 + "io"
10 + "strings"
11 + "time"
12 +
13 + "polar/internal/i18n"
14 + "polar/internal/web/static"
15 +
16 + "github.com/alecthomas/chroma/v2"
17 + chromahtml "github.com/alecthomas/chroma/v2/formatters/html"
18 + "github.com/alecthomas/chroma/v2/lexers"
19 + "github.com/alecthomas/chroma/v2/styles"
20 + "github.com/microcosm-cc/bluemonday"
21 + "github.com/yuin/goldmark"
22 + "github.com/yuin/goldmark/extension"
23 + "github.com/yuin/goldmark/parser"
24 +)
25 +
26 +//go:embed layouts/*.html partials/*.html pages/*.html
27 +var templatesFS embed.FS
28 +
29 +type HighlightedLine struct {
30 + Num int
31 + HTML template.HTML
32 +}
33 +
34 +type Engine struct {
35 + pages map[string]*template.Template
36 +}
37 +
38 +func NewEngine() (*Engine, error) {
39 + funcMap := template.FuncMap{
40 + "icon": renderIcon,
41 + "sprite": func() template.HTML { return template.HTML(static.SpriteSVG) },
42 + "inlineCSS": func() template.CSS { return template.CSS(static.AppCSS) },
43 + "assetVer": static.AssetVersion,
44 + "t": i18n.T,
45 + "timeAgo": formatTimeAgo,
46 + "pluralT": pluralT,
47 + "activityBadge": activityBadge,
48 + "formatDate": func(tm time.Time) string { return tm.UTC().Format("2006-01-02 15:04 UTC") },
49 + "formatShortDate": func(tm time.Time) string { return tm.UTC().Format("2006-01-02") },
50 + "formatSize": formatBytes,
51 + "avatarInitial": avatarInitial,
52 + "avatar": renderAvatar,
53 + "renderMD": func(s string) template.HTML { return RenderMarkdown([]byte(s)) },
54 + "add": func(a, b int) int { return a + b },
55 + "sub": func(a, b int) int { return a - b },
56 + "dict": makeDict,
57 + "safeHTML": func(s string) template.HTML { return template.HTML(s) },
58 + "upper": strings.ToUpper,
59 + "lower": strings.ToLower,
60 + }
61 +
62 + entries, err := templatesFS.ReadDir("pages")
63 + if err != nil {
64 + return nil, fmt.Errorf("read pages dir: %w", err)
65 + }
66 +
67 + pages := make(map[string]*template.Template, len(entries))
68 + for _, entry := range entries {
69 + if entry.IsDir() || !strings.HasSuffix(entry.Name(), ".html") {
70 + continue
71 + }
72 + name := strings.TrimSuffix(entry.Name(), ".html")
73 + tmpl, err := template.New("base.html").Funcs(funcMap).ParseFS(
74 + templatesFS,
75 + "layouts/base.html",
76 + "partials/components.html",
77 + "pages/"+entry.Name(),
78 + )
79 + if err != nil {
80 + return nil, fmt.Errorf("parse template %s: %w", entry.Name(), err)
81 + }
82 + pages[name] = tmpl
83 + }
84 +
85 + return &Engine{pages: pages}, nil
86 +}
87 +
88 +func (e *Engine) Render(w io.Writer, page string, data any) error {
89 + tmpl, ok := e.pages[page]
90 + if !ok {
91 + return fmt.Errorf("template %q not found", page)
92 + }
93 + return tmpl.ExecuteTemplate(w, "base.html", data)
94 +}
95 +
96 +func renderIcon(name string, classes ...string) template.HTML {
97 + cls := "size-4"
98 + if len(classes) > 0 && strings.TrimSpace(classes[0]) != "" {
99 + cls = strings.Join(classes, " ")
100 + }
101 + safeName := html.EscapeString(strings.TrimSpace(name))
102 + safeCls := html.EscapeString(cls)
103 + return template.HTML(fmt.Sprintf(
104 + `<svg class="icon %s" aria-hidden="true"><use href="#hi-%s"></use></svg>`,
105 + safeCls, safeName,
106 + ))
107 +}
108 +
109 +func makeDict(values ...any) (map[string]any, error) {
110 + if len(values)%2 != 0 {
111 + return nil, fmt.Errorf("dict requires an even number of arguments")
112 + }
113 + m := make(map[string]any, len(values)/2)
114 + for i := 0; i < len(values); i += 2 {
115 + k, ok := values[i].(string)
116 + if !ok {
117 + return nil, fmt.Errorf("dict keys must be strings")
118 + }
119 + m[k] = values[i+1]
120 + }
121 + return m, nil
122 +}
123 +
124 +func avatarInitial(username string) string {
125 + username = strings.TrimSpace(username)
126 + if username == "" {
127 + return "?"
128 + }
129 + runes := []rune(username)
130 + return strings.ToUpper(string(runes[0]))
131 +}
132 +
133 +func renderAvatar(args ...any) template.HTML {
134 + if len(args) == 0 {
135 + return template.HTML(`<span class="avatar">?</span>`)
136 + }
137 + var username, avatarURL, extraClass string
138 + if args[0] != nil {
139 + username = fmt.Sprint(args[0])
140 + }
141 + if len(args) > 1 && args[1] != nil {
142 + avatarURL = fmt.Sprint(args[1])
143 + }
144 + if len(args) > 2 {
145 + var classes []string
146 + for _, c := range args[2:] {
147 + if c != nil && fmt.Sprint(c) != "" {
148 + classes = append(classes, fmt.Sprint(c))
149 + }
150 + }
151 + extraClass = strings.Join(classes, " ")
152 + }
153 + if strings.HasPrefix(avatarURL, "avatar-") && extraClass == "" {
154 + extraClass = avatarURL
155 + avatarURL = ""
156 + }
157 +
158 + cls := "avatar"
159 + if extraClass != "" {
160 + cls = "avatar " + extraClass
161 + }
162 + safeCls := html.EscapeString(cls)
163 + safeUser := html.EscapeString(strings.TrimSpace(username))
164 + avatarURL = strings.TrimSpace(avatarURL)
165 + if avatarURL != "" && (strings.HasPrefix(avatarURL, "data:image/") || strings.HasPrefix(avatarURL, "http://") || strings.HasPrefix(avatarURL, "https://") || strings.HasPrefix(avatarURL, "/")) {
166 + safeURL := html.EscapeString(avatarURL)
167 + return template.HTML(fmt.Sprintf(
168 + `<span class="%s" title="%s"><img src="%s" alt="%s" class="avatar-img" loading="lazy"></span>`,
169 + safeCls, safeUser, safeURL, safeUser,
170 + ))
171 + }
172 + return template.HTML(fmt.Sprintf(
173 + `<span class="%s" title="%s">%s</span>`,
174 + safeCls, safeUser, html.EscapeString(avatarInitial(username)),
175 + ))
176 +}
177 +
178 +func formatBytes(b int64) string {
179 + if b < 1024 {
180 + return fmt.Sprintf("%d B", b)
181 + }
182 + kb := float64(b) / 1024.0
183 + if kb < 1024 {
184 + return fmt.Sprintf("%.1f KB", kb)
185 + }
186 + mb := kb / 1024.0
187 + return fmt.Sprintf("%.1f MB", mb)
188 +}
189 +
190 +func formatTimeAgo(tm time.Time, lang i18n.Lang) string {
191 + if tm.IsZero() {
192 + return "—"
193 + }
194 + d := time.Since(tm)
195 + isEN := i18n.Normalize(string(lang)) == i18n.EN
196 + switch {
197 + case d < time.Minute:
198 + if isEN {
199 + return "just now"
200 + }
201 + return "только что"
202 + case d < time.Hour:
203 + m := int(d.Minutes())
204 + if isEN {
205 + return fmt.Sprintf("%dm ago", m)
206 + }
207 + return fmt.Sprintf("%d мин. назад", m)
208 + case d < 24*time.Hour:
209 + h := int(d.Hours())
210 + if isEN {
211 + return fmt.Sprintf("%dh ago", h)
212 + }
213 + return fmt.Sprintf("%d ч. назад", h)
214 + case d < 30*24*time.Hour:
215 + days := int(d.Hours() / 24)
216 + if isEN {
217 + return fmt.Sprintf("%dd ago", days)
218 + }
219 + return fmt.Sprintf("%d дн. назад", days)
220 + default:
221 + return tm.UTC().Format("2006-01-02")
222 + }
223 +}
224 +
225 +// pluralT returns the count-dependent form of key ("<key>_one", "<key>_few",
226 +// "<key>_many") for the given language, falling back to the base key.
227 +func pluralT(lang i18n.Lang, n int, key string) string {
228 + suffix := "_many"
229 + if i18n.Normalize(string(lang)) == i18n.EN {
230 + if n == 1 {
231 + suffix = "_one"
232 + }
233 + } else {
234 + mod10, mod100 := n%10, n%100
235 + switch {
236 + case mod10 == 1 && mod100 != 11:
237 + suffix = "_one"
238 + case mod10 >= 2 && mod10 <= 4 && (mod100 < 12 || mod100 > 14):
239 + suffix = "_few"
240 + }
241 + }
242 + k := key + suffix
243 + if v := i18n.T(lang, k); v != k {
244 + return v
245 + }
246 + return i18n.T(lang, key)
247 +}
248 +
249 +// activityBadge localizes the status badge of an activity feed entry.
250 +func activityBadge(lang i18n.Lang, itemType, badge string) string {
251 + switch itemType {
252 + case "commit":
253 + return i18n.T(lang, "activity.badge_commit")
254 + case "release":
255 + return i18n.T(lang, "activity.badge_release")
256 + case "pull":
257 + return i18n.T(lang, "pulls.status."+badge)
258 + case "issue":
259 + return i18n.T(lang, "issue.status."+badge)
260 + default:
261 + return badge
262 + }
263 +}
264 +
265 +var mdParser = goldmark.New(
266 + goldmark.WithExtensions(
267 + extension.GFM,
268 + ),
269 + goldmark.WithParserOptions(
270 + parser.WithAutoHeadingID(),
271 + ),
272 +)
273 +
274 +func RenderMarkdown(src []byte) template.HTML {
275 + var buf bytes.Buffer
276 + if err := mdParser.Convert(src, &buf); err != nil {
277 + return template.HTML("<pre>" + html.EscapeString(string(src)) + "</pre>")
278 + }
279 + policy := bluemonday.UGCPolicy()
280 + policy.AllowAttrs("class").OnElements("code", "pre", "span")
281 + policy.AllowAttrs("type", "checked", "disabled").OnElements("input")
282 + sanitized := policy.SanitizeBytes(buf.Bytes())
283 + return template.HTML(sanitized)
284 +}
285 +
286 +func HighlightCode(filename, code string) []HighlightedLine {
287 + code = strings.ReplaceAll(code, "\r\n", "\n")
288 + lexer := lexers.Match(filename)
289 + if lexer == nil {
290 + lexer = lexers.Fallback
291 + }
292 + lexer = chroma.Coalesce(lexer)
293 +
294 + formatter := chromahtml.New(
295 + chromahtml.WithClasses(true),
296 + chromahtml.PreventSurroundingPre(true),
297 + )
298 + style := styles.Get("monokai")
299 + if style == nil {
300 + style = styles.Fallback
301 + }
302 +
303 + rawLines := strings.Split(code, "\n")
304 + if len(rawLines) > 0 && rawLines[len(rawLines)-1] == "" {
305 + rawLines = rawLines[:len(rawLines)-1]
306 + }
307 +
308 + result := make([]HighlightedLine, 0, len(rawLines))
309 + iterator, err := lexer.Tokenise(nil, code)
310 + if err != nil {
311 + for idx, l := range rawLines {
312 + result = append(result, HighlightedLine{
313 + Num: idx + 1,
314 + HTML: template.HTML(html.EscapeString(l)),
315 + })
316 + }
317 + return result
318 + }
319 +
320 + var buf bytes.Buffer
321 + if err := formatter.Format(&buf, style, iterator); err != nil {
322 + for idx, l := range rawLines {
323 + result = append(result, HighlightedLine{
324 + Num: idx + 1,
325 + HTML: template.HTML(html.EscapeString(l)),
326 + })
327 + }
328 + return result
329 + }
330 +
331 + htmlLines := strings.Split(buf.String(), "\n")
332 + if len(htmlLines) > 0 && htmlLines[len(htmlLines)-1] == "" {
333 + htmlLines = htmlLines[:len(htmlLines)-1]
334 + }
335 + for idx, hl := range htmlLines {
336 + result = append(result, HighlightedLine{
337 + Num: idx + 1,
338 + HTML: template.HTML(hl),
339 + })
340 + }
341 + return result
342 +}
polar.example.toml
+14 -0
... ... @@ -0,0 +1,14 @@
1 +[server]
2 +host = "0.0.0.0"
3 +port = 3000
4 +base_url = "http://localhost:3000"
5 +
6 +[storage]
7 +data_dir = "./data"
8 +
9 +[auth]
10 +registration_enabled = true
11 +
12 +[landing]
13 +enabled = true
14 +default_lang = "en"
scripts/git-credential-polar.ps1
+155 -0
... ... @@ -0,0 +1,155 @@
1 +# Git credential helper for Polar (RFC 8628 device flow).
2 +#
3 +# Usage:
4 +# git config --global credential.helper "!powershell -NoProfile -ExecutionPolicy Bypass -File C:/path/to/polar/scripts/git-credential-polar.ps1"
5 +#
6 +# On "get" the helper reuses a cached token for the server, otherwise it starts
7 +# a device authorization flow, opens the verification page in the browser and
8 +# waits until the request is approved. Tokens are cached in
9 +# ~/.polar/credentials.json.
10 +param([Parameter(Position = 0)][string]$Operation = 'get')
11 +
12 +$ErrorActionPreference = 'Stop'
13 +
14 +function Read-CredentialInput {
15 + $values = @{}
16 + while ($null -ne ($line = [Console]::In.ReadLine())) {
17 + if ($line -match '^([^=]+)=(.*)$') {
18 + $values[$Matches[1]] = $Matches[2]
19 + }
20 + }
21 + return $values
22 +}
23 +
24 +function Get-ServerBase([hashtable]$values) {
25 + if ($env:POLAR_URL) { return $env:POLAR_URL.TrimEnd('/') }
26 + $hostName = $values['host']
27 + if ($hostName) {
28 + $scheme = $values['protocol']
29 + if (-not $scheme) { $scheme = 'https' }
30 + return ('{0}://{1}' -f $scheme, $hostName).TrimEnd('/')
31 + }
32 + return 'http://localhost:3100'
33 +}
34 +
35 +function Get-CachePath {
36 + $dir = Join-Path $HOME '.polar'
37 + if (-not (Test-Path $dir)) { New-Item -ItemType Directory -Path $dir | Out-Null }
38 + return (Join-Path $dir 'credentials.json')
39 +}
40 +
41 +function Read-Cache {
42 + $path = Get-CachePath
43 + if (-not (Test-Path $path)) { return @{} }
44 + try {
45 + $raw = Get-Content -Raw -Path $path | ConvertFrom-Json
46 + $table = @{}
47 + foreach ($prop in $raw.PSObject.Properties) {
48 + $table[$prop.Name] = @{ username = $prop.Value.username; token = $prop.Value.token }
49 + }
50 + return $table
51 + } catch {
52 + return @{}
53 + }
54 +}
55 +
56 +function Write-Cache([hashtable]$cache) {
57 + $obj = [ordered]@{}
58 + foreach ($key in $cache.Keys) { $obj[$key] = @{ username = $cache[$key].username; token = $cache[$key].token } }
59 + ($obj | ConvertTo-Json -Depth 4) | Set-Content -Path (Get-CachePath) -Encoding UTF8
60 +}
61 +
62 +function Write-Credential([string]$user, [string]$token) {
63 + [Console]::Out.WriteLine('username=' + $user)
64 + [Console]::Out.WriteLine('password=' + $token)
65 +}
66 +
67 +function Read-ErrorBody($exception) {
68 + try {
69 + $stream = $exception.Response.GetResponseStream()
70 + $reader = New-Object System.IO.StreamReader($stream)
71 + return $reader.ReadToEnd()
72 + } catch {
73 + return ''
74 + }
75 +}
76 +
77 +$values = Read-CredentialInput
78 +$base = Get-ServerBase $values
79 +$cache = Read-Cache
80 +
81 +switch ($Operation) {
82 + 'get' {
83 + if ($cache.ContainsKey($base)) {
84 + Write-Credential $cache[$base].username $cache[$base].token
85 + exit 0
86 + }
87 +
88 + $clientId = 'git-credential-polar'
89 + $code = $null
90 + try {
91 + $code = Invoke-RestMethod -Method Post -Uri "$base/api/v1/device/code" -Body @{ client_id = $clientId }
92 + } catch {
93 + [Console]::Error.WriteLine("polar: could not reach $base/api/v1/device/code: $($_.Exception.Message)")
94 + exit 1
95 + }
96 +
97 + [Console]::Error.WriteLine('')
98 + [Console]::Error.WriteLine("polar: open $($code.verification_uri) and enter code $($code.user_code)")
99 + [Console]::Error.WriteLine('polar: waiting for approval...')
100 + try { Start-Process $code.verification_uri_complete | Out-Null } catch { }
101 +
102 + $interval = 5
103 + if ($code.interval) { $interval = [int]$code.interval }
104 + if ($interval -lt 3) { $interval = 3 }
105 + $expiresIn = 900
106 + if ($code.expires_in) { $expiresIn = [int]$code.expires_in }
107 + $deadline = (Get-Date).AddSeconds($expiresIn)
108 +
109 + while ((Get-Date) -lt $deadline) {
110 + Start-Sleep -Seconds $interval
111 + try {
112 + $resp = Invoke-RestMethod -Method Post -Uri "$base/api/v1/device/token" -Body @{ device_code = $code.device_code; client_id = $clientId }
113 + if ($resp.access_token) {
114 + $username = $resp.username
115 + if (-not $username) { $username = 'x-access-token' }
116 + $cache[$base] = @{ username = $username; token = $resp.access_token }
117 + Write-Cache $cache
118 + Write-Credential $username $resp.access_token
119 + exit 0
120 + }
121 + } catch {
122 + $status = 0
123 + try { $status = [int]$_.Exception.Response.StatusCode } catch { }
124 + if ($status -eq 429) { continue }
125 + $body = Read-ErrorBody $_.Exception
126 + if ($body -match 'access_denied') {
127 + [Console]::Error.WriteLine('polar: access denied')
128 + exit 1
129 + }
130 + if ($body -match 'expired_token') {
131 + [Console]::Error.WriteLine('polar: device code expired, run the command again')
132 + exit 1
133 + }
134 + [Console]::Error.WriteLine("polar: authorization failed: $body")
135 + exit 1
136 + }
137 + }
138 + [Console]::Error.WriteLine('polar: timed out waiting for approval')
139 + exit 1
140 + }
141 + 'store' {
142 + # The helper keeps its own cache; nothing to do.
143 + exit 0
144 + }
145 + 'erase' {
146 + if ($cache.ContainsKey($base)) {
147 + $cache.Remove($base)
148 + Write-Cache $cache
149 + }
150 + exit 0
151 + }
152 + default {
153 + exit 0
154 + }
155 +}
scripts/git-credential-polar.sh
+110 -0
... ... @@ -0,0 +1,110 @@
1 +#!/bin/sh
2 +# Git credential helper for Polar (RFC 8628 device flow).
3 +#
4 +# Usage:
5 +# git config --global credential.helper '!sh /path/to/polar/scripts/git-credential-polar.sh'
6 +#
7 +# On "get" the helper reuses a cached token for the server, otherwise it starts
8 +# a device authorization flow, opens the verification page in the browser and
9 +# waits until the request is approved. Tokens are cached in
10 +# ~/.polar/credentials.json.
11 +
12 +op="${1:-get}"
13 +base="${POLAR_URL:-}"
14 +cache_dir="${HOME}/.polar"
15 +cache_file="${cache_dir}/credentials.json"
16 +client_id="git-credential-polar"
17 +
18 +input="$(cat)"
19 +if [ -z "$base" ]; then
20 + host="$(printf '%s\n' "$input" | sed -n 's/^host=//p' | head -n1)"
21 + proto="$(printf '%s\n' "$input" | sed -n 's/^protocol=//p' | head -n1)"
22 + [ -z "$proto" ] && proto="https"
23 + if [ -n "$host" ]; then
24 + base="${proto}://${host}"
25 + else
26 + base="http://localhost:3100"
27 + fi
28 +fi
29 +base="${base%/}"
30 +
31 +json_field() {
32 + # $1 = json, $2 = field
33 + printf '%s' "$1" | sed -n 's/.*"'"$2"'"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' | head -n1
34 +}
35 +
36 +case "$op" in
37 + get)
38 + if [ -f "$cache_file" ]; then
39 + cached="$(grep -F "\"${base}\":" "$cache_file" | head -n1)"
40 + if [ -n "$cached" ]; then
41 + token="$(json_field "$cached" token)"
42 + username="$(json_field "$cached" username)"
43 + if [ -n "$token" ] && [ -n "$username" ]; then
44 + printf 'username=%s\npassword=%s\n' "$username" "$token"
45 + exit 0
46 + fi
47 + fi
48 + fi
49 +
50 + code="$(curl -fsS -X POST "${base}/api/v1/device/code" -d "client_id=${client_id}" 2>/dev/null)" || {
51 + echo "polar: could not reach ${base}/api/v1/device/code" >&2
52 + exit 1
53 + }
54 + device_code="$(json_field "$code" device_code)"
55 + user_code="$(json_field "$code" user_code)"
56 + verify_uri="$(json_field "$code" verification_uri)"
57 + verify_full="$(json_field "$code" verification_uri_complete)"
58 + interval="$(json_field "$code" interval)"
59 + [ -z "$interval" ] && interval=5
60 + [ "$interval" -lt 3 ] && interval=3
61 +
62 + echo "" >&2
63 + echo "polar: open ${verify_uri} and enter code ${user_code}" >&2
64 + echo "polar: waiting for approval..." >&2
65 + if command -v xdg-open >/dev/null 2>&1; then
66 + xdg-open "$verify_full" >/dev/null 2>&1 &
67 + elif command -v open >/dev/null 2>&1; then
68 + open "$verify_full" >/dev/null 2>&1 &
69 + fi
70 +
71 + elapsed=0
72 + while [ "$elapsed" -lt 900 ]; do
73 + sleep "$interval"
74 + elapsed=$((elapsed + interval))
75 + resp="$(curl -sS -X POST "${base}/api/v1/device/token" -d "device_code=${device_code}&client_id=${client_id}" 2>/dev/null)"
76 + token="$(json_field "$resp" access_token)"
77 + if [ -n "$token" ]; then
78 + username="$(json_field "$resp" username)"
79 + [ -z "$username" ] && username="x-access-token"
80 + mkdir -p "$cache_dir"
81 + printf '{"%s":{"username":"%s","token":"%s"}}\n' "$base" "$username" "$token" >>"$cache_file"
82 + printf 'username=%s\npassword=%s\n' "$username" "$token"
83 + exit 0
84 + fi
85 + case "$resp" in
86 + *authorization_pending*) continue ;;
87 + *access_denied*)
88 + echo "polar: access denied" >&2
89 + exit 1
90 + ;;
91 + *expired_token*)
92 + echo "polar: device code expired, run the command again" >&2
93 + exit 1
94 + ;;
95 + *)
96 + echo "polar: authorization failed: $resp" >&2
97 + exit 1
98 + ;;
99 + esac
100 + done
101 + echo "polar: timed out waiting for approval" >&2
102 + exit 1
103 + ;;
104 + store|erase)
105 + exit 0
106 + ;;
107 + *)
108 + exit 0
109 + ;;
110 +esac