f3a519c · 4e3ab33 · f4134f9 · 91c51e7 · b7b4f54
@@ -21,3 +21,13 @@
Not done yet: a hosted "deploy this pack" press, a stable follow link from each
An admin brings each https `source` in a marked pack's `pack.json` in once as a public repository `packs/<app>` (owner `packs`, an account nobody signs in as), from any of three doors: the "Mirror the upstreams" button on `/packs`, the "Mirror the packs' upstreams" screen in the terminal palette (admins only), or `repo_settings` with `{ mirrorPacks: true }` over MCP, which answers `{ made, kept, failed, says }`. The request only reads each upstream's default branch, creates the repository and its follow, and stops at 20 seconds in all: what it did not reach is listed as failed ("press again"). The first sync is the scheduled follow's, as is every later one; it moves the default branch to the upstream's tip instead of opening a pull, and a failed sync is noted on the follow's row. Running it again leaves existing mirrors as they are.
Read-only is enforced where writes are decided: `canWrite` is false for every `packs/*` repository except for its owner, which only the follow acts as, so pushes (http and ssh, told why), web file edits, the contents and branch API, and opening or merging a pull are all refused, admins included. Open on purpose: issues and comments, and a repository admin's settings (visibility, delete, transfer). A mirror tracks the branch that was the upstream's HEAD when it was made; if the upstream renames its default branch, delete the mirror and mirror again.
## Curated packs (#11006)
`/packs` shows **curated packs**: a pack is a named, ordered list of public repos on this forge, with a one-line pitch and a crew brief. They live in the forge's database (`curated_pack*`, `src/packs/curated.ts`), not in code or on GitHub, and a site admin who is a person edits them on the pack's page: rename, change the pitch and brief, add a repo (type to search the repos you can see), remove one, move one up or down; every change is saved at once and kept as who, what, when under History. **New pack** on `/packs` makes one. The same rule is the API: `GET /api/v1/packs`, `GET/PUT /api/v1/packs/{name}` with `{title, pitch, brief, repos:["owner/name"…]}` (a new name makes the pack). Anyone reads `shown`, the public repos on this forge; only a person admin also gets `repos` (the list as kept) and `left_out` (each left one with why), because those name private and missing repos. The same holds on the page: "Left out for now" is an admin's.
**The terminal has it too** (`src/tui/screens/packs.ts`, palette "Forge packs"): the list opens curated packs first, then the deployable ones; a pack's screen shows its shown repos and brief, **s** opens the new-forge form with the pack's repos and brief as they stand, and for a person admin **a** adds a repo, **x** removes, **u**/**d** move, **t**/**p**/**b** edit title, pitch and brief, and **n** on the list makes a pack. It goes through `changeRepos`/`editPack` as the page does, reads the database on every draw, so a change in either door is on the other at once. A guest's screen names no private or missing repo and the edit keys do nothing. Test: `test/packs-tui.test.ts`.
Each card shows the repos inside with a live link when the repo runs an app here, how many there are and how fresh, and **Start a forge from this** (`/forges/new?pack=name`): the form opens with the pack as it stands now (its repos ticked, the brief as the direction), so what you post is what is copied, and a later edit never reaches a forge that exists. A repo that is missing or not public is left out and named on the pack's page. Two packs, **Business** and **Gamer**, are seeded with the owner's lists; trim them on their pages.
The seeded repo lists are the owner's and are not checked against a forge here: a name that is missing or not public is left out of the cards and named to an admin, who trims it on the pack's page. Not done: drag to reorder (the arrows do it), a repo's "Add to pack…" menu, an MCP tool (the API is the door), a preview image on each card, and the crew brief is carried as the child's direction, not as a per-agent brief. The older `pack.json` packs still list under "Deploy on your own machine".
@@ -0,0 +1,3 @@
import type { Route } from "../shared.ts";
export const route: Route = { method: "get", path: "/api/v1/packs", summary: "The curated packs: { items: [{ name, title, pitch, brief, repos, shown }] }; shown is the public repos on this forge; repos (the list as kept) and left_out come only to a person admin", auth: false, role: "anonymous" };
@@ -0,0 +1,3 @@
import type { Route } from "../shared.ts";
export const route: Route = { method: "get", path: "/api/v1/packs/{name}", summary: "One curated pack: { name, title, pitch, brief, shown } (shown: the public repos on this forge), and for a person admin also repos, left_out and the history of who changed what and when", auth: false, role: "anonymous", refusals: { not_found: "404: no such pack" } };
@@ -104,6 +104,8 @@
export { route as getApiV1OpenapiJson } from "./getApiV1OpenapiJson.ts";
export { route as getApiV1OrgsOrg } from "./getApiV1OrgsOrg.ts";
export { route as getApiV1OrgsOrgTeams } from "./getApiV1OrgsOrgTeams.ts";
export { route as getApiV1OrgsOrgTeamsTeamMembers } from "./getApiV1OrgsOrgTeamsTeamMembers.ts";
export { route as getApiV1Packs } from "./getApiV1Packs.ts";
export { route as getApiV1PacksName } from "./getApiV1PacksName.ts";
export { route as getApiV1PassportHealth } from "./getApiV1PassportHealth.ts";
export { route as getApiV1Releases } from "./getApiV1Releases.ts";
export { route as getApiV1Repos } from "./getApiV1Repos.ts";
@@ -374,6 +376,7 @@
export { route as putApiV1FeaturesSlug } from "./putApiV1FeaturesSlug.ts";
export { route as putApiV1ForgeEconomics } from "./putApiV1ForgeEconomics.ts";
export { route as putApiV1ForgesNameCredit } from "./putApiV1ForgesNameCredit.ts";
export { route as putApiV1Front } from "./putApiV1Front.ts";
export { route as putApiV1PacksName } from "./putApiV1PacksName.ts";
export { route as putApiV1ReposOwnerNameAppEnvVar } from "./putApiV1ReposOwnerNameAppEnvVar.ts";
export { route as putApiV1ReposOwnerNameAppMembers } from "./putApiV1ReposOwnerNameAppMembers.ts";
export { route as putApiV1ReposOwnerNameCrewUsername } from "./putApiV1ReposOwnerNameCrewUsername.ts";
@@ -0,0 +1,15 @@
import type { Route } from "../shared.ts";
export const route: Route = {
  method: "put",
  path: "/api/v1/packs/{name}",
  summary: "Curate a pack (a person admin's token, rw scope): the fields sent replace the pack's, a new {name} makes it (201); repos is the ordered list of owner/name, at most 20; every change is kept with who and when; answers the pack",
  auth: true,
  role: "admin",
  body: { title: "string, at most 80", pitch: "string, at most 300", brief: "string, at most 4000", repos: "list of owner/name" },
  refusals: {
    forbidden: "the caller is not a site admin who is a person (403)",
    invalid: "a field is the wrong shape, or a repo is not owner/name (422)",
    not_found: "no such pack (404)",
  },
};
@@ -0,0 +1,1 @@
1f6c282db35364773b0e12624c96b4b8b7580ce869c8a0d9c840dad59d0d2a1a
@@ -0,0 +1,44 @@
// Curated packs (#11006): a pack is a named, ordered list of repos on this
// forge that an admin edits in the forge itself, with a pitch and a crew
// brief and a kept history. Additive. The first two, Business and Gamer, are
// seeded with the owner's lists; repos that are missing or not public are
// left out when the page is drawn, and named there.
export default `
  CREATE TABLE curated_pack (
    name TEXT PRIMARY KEY,
    title TEXT NOT NULL,
    pitch TEXT NOT NULL DEFAULT '',
    brief TEXT NOT NULL DEFAULT '',
    position INTEGER NOT NULL DEFAULT 0,
    created_at TEXT NOT NULL,
    updated_at TEXT NOT NULL
  );
  CREATE TABLE curated_pack_repo (
    pack TEXT NOT NULL REFERENCES curated_pack(name) ON DELETE CASCADE ON UPDATE CASCADE,
    repo TEXT NOT NULL,
    position INTEGER NOT NULL,
    PRIMARY KEY (pack, repo)
  );
  CREATE TABLE curated_pack_change (
    id INTEGER PRIMARY KEY AUTOINCREMENT,
    pack TEXT NOT NULL,
    actor TEXT NOT NULL,
    what TEXT NOT NULL,
    at TEXT NOT NULL
  );
  CREATE INDEX curated_pack_change_pack ON curated_pack_change (pack, id);
  INSERT INTO curated_pack (name, title, pitch, brief, position, created_at, updated_at) VALUES
    ('business', 'Business', 'Leads, listings, forms and money: the tools a small business runs on.',
     'You work for a small business. Put leads, forms and money first: answer a new lead fast, keep every form working, and keep the deal and payment numbers right. Say plainly what you changed and what a customer would notice.',
     0, strftime('%Y-%m-%dT%H:%M:%fZ','now'), strftime('%Y-%m-%dT%H:%M:%fZ','now')),
    ('gamer', 'Gamer', 'Games to play and make yours: a shelf, a sandbox, classics and a shooter engine.',
     'You make games feel good to play. Put play feel and animation first: input that answers on the next frame, motion with weight, sound and feedback on every hit. Say plainly what you changed and how it plays now.',
     1, strftime('%Y-%m-%dT%H:%M:%fZ','now'), strftime('%Y-%m-%dT%H:%M:%fZ','now'));
  INSERT INTO curated_pack_repo (pack, repo, position) VALUES
    ('business','trevato/realty-desk',0),('business','trevato/deal-clock',1),('business','trevato/listing-launch',2),
    ('business','trevato/speed-to-lead',3),('business','trevato/form-engines',4),('business','trevato/business-spawner',5),
    ('business','trevato/bazaar',6),
    ('gamer','trevato/games-shelf',0),('gamer','trevato/sandbox-game',1),('gamer','trevato/pixel-plays',2),
    ('gamer','trevato/scrims',3),('gamer','trevato/chess',4),('gamer','trevato/pong',5),('gamer','trevato/voxel',6),
    ('gamer','trevato/gamers',7),('gamer','trevato/cs-engine',8),('gamer','trevato/survivor-guide',9);
  `;
@@ -347,6 +347,7 @@
import { passportRoutes } from "./passport_edge.ts";
import { egressGrantRoutes } from "./api/egress_grants.ts";
import { printRoutes } from "./api/print.ts";
import { forgeRoutes } from "./api/forges.ts";
import { packRoutes } from "./api/packs.ts";
import { forgeViewRoutes } from "./api/forge_view.ts";
import { economicsRoutes } from "./api/economics.ts";
import { releasesRoutes } from "./api/releases.ts";
@@ -3573,6 +3574,7 @@
export function apiRoutes(router: Router<Handler>): void {
  });
  forgeRoutes(router);
  packRoutes(router);
  forgeViewRoutes(router);
  economicsRoutes(router);
  releasesRoutes(router);
@@ -0,0 +1,51 @@
/**
 * Curated packs over the API (#11006): `GET /api/v1/packs`,
 * `GET /api/v1/packs/{name}` and `PUT /api/v1/packs/{name}` with
 * `{title, pitch, brief, repos:[owner/name…]}`. The rules live in
 * `packs/curated.ts`, the same ones the page uses. A PUT makes the pack when
 * the name is new; an admin who is not an agent, and a token that may write.
 */
import { notePhase, takeSessionTime } from "../../core/route_timing.ts";
import { editPack, getPack, history, listPacks, mayCurate, resolveRepos, type CuratedPack } from "../../packs/curated.ts";
import { crossOrigin, type Ctx, type Handler } from "../context.ts";
import { apiError, body, forbidden, json, requireScope } from "../respond.ts";
import type { Router } from "../router.ts";
const view = (ctx: Ctx, p: CuratedPack) => ({
  name: p.name,
  title: p.title,
  pitch: p.pitch,
  brief: p.brief,
  shown: resolveRepos(ctx.app.db, p, ctx.auth.user).filter((r) => r.left === undefined).map((r) => r.full),
      
        sentinelcrew
        22h ago
        outdated
      
      HIGH: repos: p.repos exposes private and missing repo names to anonymous callers. Return shown only, unless the caller is a person admin.
    
  // The list as kept, with why each left one is left out, names private and missing repos: a person admin's only.
  ...(mayCurate(ctx.auth.user)
    ? { repos: p.repos, left_out: resolveRepos(ctx.app.db, p, ctx.auth.user).filter((r) => r.left !== undefined).map((r) => ({ repo: r.full, why: r.left })) }
    : {}),
});
export function packRoutes(router: Router<Handler>): void {
  router.add("GET", "/api/v1/packs", (ctx) => {
    notePhase(ctx.request, "session", takeSessionTime(ctx.request));
    return json({ items: listPacks(ctx.app.db).map((p) => view(ctx, p)), next_cursor: null });
  });
  router.add("GET", "/api/v1/packs/:name", (ctx) => {
    notePhase(ctx.request, "session", takeSessionTime(ctx.request));
    const pack = getPack(ctx.app.db, ctx.params.name ?? "");
    if (pack === undefined) return apiError("not_found", 404, "no such pack");
    return json({ ...view(ctx, pack), ...(mayCurate(ctx.auth.user) ? { history: history(ctx.app.db, pack.name) } : {}) });
  });
  router.add("PUT", "/api/v1/packs/:name", async (ctx) => {
    notePhase(ctx.request, "session", takeSessionTime(ctx.request));
    const denied = requireScope(ctx, "rw");
    if (denied) return denied;
    if (crossOrigin(ctx.request, ctx.url, ctx.app.log)) return forbidden();
    if (!mayCurate(ctx.auth.user)) return forbidden();
    const input = await body(ctx.request);
    const name = ctx.params.name ?? "";
    const create = getPack(ctx.app.db, name) === undefined;
    const done = editPack(ctx.app.db, ctx.auth.user, name, { title: input["title"], pitch: input["pitch"], brief: input["brief"], repos: input["repos"] }, create);
    if (!done.ok) return apiError(done.error, done.error === "not_found" ? 404 : done.error === "forbidden" ? 403 : done.error === "exists" ? 409 : 422, done.says);
    return json(view(ctx, done.pack), create ? 201 : 200);
  });
}
@@ -291,7 +291,7 @@
import { HOME_REGIONS } from "../web/studio/home_last.ts";
import { serviceWorker } from "../web/sw.ts";
import { explorePage } from "../web/studio/explore.ts";
import { isPacksMirror, MIRROR_PUSH_REFUSED } from "../packs/owner.ts";
import { packPage, packsMirror, packsPage } from "../web/pages/packs.ts";
import { packEdit, packNew, packPage, packRepos, packsMirror, packsPage } from "../web/pages/packs.ts";
import {
  makeItYoursPage,
  makeItYoursReceipt,
@@ -846,6 +846,9 @@
export function buildRouter(): Router<Handler> {
  // Forge packs: premade forges to deploy, and the way to help build their apps.
  router.add("GET", "/packs", packsPage);
  router.add("POST", "/packs/mirror", packsMirror);
  router.add("POST", "/packs/new", packNew);
  router.add("POST", "/packs/:name/edit", packEdit);
  router.add("POST", "/packs/:name/repos", packRepos);
  router.add("GET", "/packs/:name", packPage);
  router.add("POST", "/front", frontUpdate);
  router.add("POST", "/home/archive", homeArchive);
@@ -0,0 +1,202 @@
/**
 * Curated packs (#11006): a pack is a named, ordered list of repos on this
 * forge, with a pitch and a crew brief, that an admin edits in the forge
 * itself (tables `curated_pack*`). Plain data in, plain data out: every write
 * goes through `editPack`, which checks, saves and keeps who/what/when, so the
 * page, the API and any agent share one rule. Starting a forge reads the list
 * as it stands at that moment; a forge already started keeps its own copy.
 */
import type { Database } from "bun:sqlite";
import { canRead, getRepo, repoDatesFor } from "../core/repos.ts";
import type { User } from "../core/users.ts";
import { isSafeName } from "../git/guard.ts";
export const MAX_PACKS = 50;
export const MAX_PACK_REPOS = 20;
const NAME = /^[a-z][a-z0-9-]{0,39}$/;
export interface CuratedPack {
  readonly name: string;
  readonly title: string;
  readonly pitch: string;
  readonly brief: string;
  readonly repos: readonly string[];
}
export interface Change {
  readonly actor: string;
  readonly what: string;
  readonly at: string;
}
type Admin = Pick<User, "id" | "username" | "isAdmin" | "kind">;
export const mayCurate = (u: Admin | undefined): u is Admin => u !== undefined && u.isAdmin && u.kind !== "agent";
export const slugOf = (title: string): string =>
  title.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").replace(/^[^a-z]+/, "").slice(0, 40).replace(/-+$/, "");
export function listPacks(db: Database): CuratedPack[] {
  const reposOf = new Map<string, string[]>();
  for (const r of db.query<{ pack: string; repo: string }, []>("SELECT pack, repo FROM curated_pack_repo ORDER BY pack, position").all())
    reposOf.set(r.pack, [...(reposOf.get(r.pack) ?? []), r.repo]);
  return db
    .query<{ name: string; title: string; pitch: string; brief: string }, []>(
      "SELECT name, title, pitch, brief FROM curated_pack ORDER BY position, name",
    )
    .all()
    .map((p) => ({ ...p, repos: reposOf.get(p.name) ?? [] }));
}
/** One pack by name: two reads keyed on the name, not every pack. */
export function getPack(db: Database, name: string): CuratedPack | undefined {
  const row = db
    .query<{ name: string; title: string; pitch: string; brief: string }, [string]>("SELECT name, title, pitch, brief FROM curated_pack WHERE name = ?1")
    .get(name);
  if (row === null) return undefined;
  const repos = db.query<{ repo: string }, [string]>("SELECT repo FROM curated_pack_repo WHERE pack = ?1 ORDER BY position").all(name).map((r) => r.repo);
  return { ...row, repos };
}
export function history(db: Database, name: string, limit = 20): Change[] {
  return db
    .query<Change, [string, number]>("SELECT actor, what, at FROM curated_pack_change WHERE pack = ?1 ORDER BY id DESC LIMIT ?2")
    .all(name, limit);
}
/** A repo word as `owner/name`, lowercase, or undefined. */
export function repoWord(v: unknown): string | undefined {
  if (typeof v !== "string") return undefined;
  const [owner = "", name = "", ...rest] = v.trim().split("/");
  return rest.length > 0 || !isSafeName(owner) || !isSafeName(name) ? undefined : `${owner}/${name}`.toLowerCase();
}
export type Edit = { title?: unknown; pitch?: unknown; brief?: unknown; repos?: unknown };
export type EditResult = { ok: true; pack: CuratedPack } | { ok: false; error: "forbidden" | "not_found" | "invalid" | "exists"; says: string };
const bad = (says: string): EditResult => ({ ok: false, error: "invalid", says });
const clean = (v: unknown, max: number): string | undefined =>
  typeof v === "string" && v.length <= max && !/[\u0000-\u0008\u000b\u000c\u000e-\u001f]/.test(v) ? v.trim() : undefined;
/** What changed between two packs, in one sentence per change. */
function describe(from: CuratedPack | undefined, to: CuratedPack): string[] {
  if (from === undefined) return [`made the pack with ${to.repos.length} repos`];
  const out: string[] = [];
  if (from.title !== to.title) out.push(`renamed it to "${to.title}"`);
  if (from.pitch !== to.pitch) out.push("changed the pitch");
  if (from.brief !== to.brief) out.push("changed the crew brief");
  for (const r of to.repos) if (!from.repos.includes(r)) out.push(`added ${r}`);
  for (const r of from.repos) if (!to.repos.includes(r)) out.push(`removed ${r}`);
  const kept = to.repos.filter((r) => from.repos.includes(r));
  if (kept.join() !== from.repos.filter((r) => to.repos.includes(r)).join()) out.push("reordered the repos");
  return out;
}
/**
 * The one door. Creates the pack when `name` is new (`create`), else changes
 * the fields given; `repos` replaces the list. An admin who is not an agent.
 */
export function editPack(db: Database, user: Admin | undefined, name: string, edit: Edit, create = false): EditResult {
  if (!mayCurate(user)) return { ok: false, error: "forbidden", says: "only a site admin edits packs" };
  if (!NAME.test(name)) return bad("a pack name is lowercase letters, digits and dashes");
  const before = getPack(db, name);
  if (create && before !== undefined) return { ok: false, error: "exists", says: `there is already a pack named ${name}` };
  if (!create && before === undefined) return { ok: false, error: "not_found", says: "no such pack" };
  const title = edit.title === undefined ? (before?.title ?? name) : clean(edit.title, 80);
  const pitch = edit.pitch === undefined ? (before?.pitch ?? "") : clean(edit.pitch, 300);
  const brief = edit.brief === undefined ? (before?.brief ?? "") : clean(edit.brief, 4000);
  if (title === undefined || title === "") return bad("a title is 1 to 80 characters");
  if (pitch === undefined) return bad("a pitch is at most 300 characters");
  if (brief === undefined) return bad("a crew brief is at most 4000 characters");
  let repos: string[] = [...(before?.repos ?? [])];
  if (edit.repos !== undefined) {
    if (!Array.isArray(edit.repos) || edit.repos.length > MAX_PACK_REPOS) return bad(`repos is a list of at most ${MAX_PACK_REPOS} owner/name words`);
    repos = [];
    for (const w of edit.repos) {
      const r = repoWord(w);
      if (r === undefined) return bad("each repo is written owner/name");
      if (!repos.includes(r)) repos.push(r);
    }
  }
  if (before === undefined && (db.query<{ n: number }, []>("SELECT count(*) AS n FROM curated_pack").get()?.n ?? 0) >= MAX_PACKS)
    return bad(`at most ${MAX_PACKS} packs`);
  const after: CuratedPack = { name, title, pitch, brief, repos };
  const said = describe(before, after);
  const at = new Date().toISOString();
  db.transaction(() => {
    if (before === undefined)
      db.query(
        `INSERT INTO curated_pack (name, title, pitch, brief, position, created_at, updated_at)
         VALUES (?1, ?2, ?3, ?4, (SELECT COALESCE(MAX(position), -1) + 1 FROM curated_pack), ?5, ?5)`,
      ).run(name, title, pitch, brief, at);
    else db.query("UPDATE curated_pack SET title = ?2, pitch = ?3, brief = ?4, updated_at = ?5 WHERE name = ?1").run(name, title, pitch, brief, at);
    db.query("DELETE FROM curated_pack_repo WHERE pack = ?1").run(name);
    for (const [i, r] of repos.entries()) db.query("INSERT INTO curated_pack_repo (pack, repo, position) VALUES (?1, ?2, ?3)").run(name, r, i);
    for (const what of said) db.query("INSERT INTO curated_pack_change (pack, actor, what, at) VALUES (?1, ?2, ?3, ?4)").run(name, user.username, what, at);
  })();
  return { ok: true, pack: after };
}
export type RepoOp = "add" | "remove" | "up" | "down";
export const isRepoOp = (v: unknown): v is RepoOp => v === "add" || v === "remove" || v === "up" || v === "down";
/**
 * One change to a pack's repo list, through `editPack`: the page and the terminal share it.
 * A repo to add must exist here; one to move or remove must be in the pack.
 */
export function changeRepos(db: Database, user: Admin | undefined, name: string, op: unknown, word: unknown): EditResult {
  if (!mayCurate(user)) return { ok: false, error: "forbidden", says: "only a site admin edits packs" };
  const pack = getPack(db, name);
  if (pack === undefined) return { ok: false, error: "not_found", says: "no such pack" };
  const repo = repoWord(word);
  if (repo === undefined) return bad("Write the repo as owner/name.");
  if (!isRepoOp(op)) return bad("Choose add, remove, up or down.");
  const repos = [...pack.repos];
  const at = repos.indexOf(repo);
  if (op === "add") {
    const [owner = "", rname = ""] = repo.split("/");
    if (getRepo(db, owner, rname) === undefined) return bad(`${repo} is not a repository on this forge.`);
    if (at < 0) repos.push(repo);
  } else if (at < 0) return bad(`${repo} is not in this pack.`);
  else if (op === "remove") repos.splice(at, 1);
  else if (op === "up" && at > 0) [repos[at - 1], repos[at]] = [repos[at]!, repos[at - 1]!];
  else if (op === "down" && at < repos.length - 1) [repos[at + 1], repos[at]] = [repos[at]!, repos[at + 1]!];
  return editPack(db, user, name, { repos });
}
export interface PackRepo {
  readonly full: string;
  readonly description: string;
  /** Runs an app on this forge: it has a live link. */
  readonly live: boolean;
  /** The newest push, or null. */
  readonly pushedAt: string | null;
  /** Why it is not shown, when it is not: missing, or not public. */
  readonly left?: string;
}
/** A pack's repos as `viewer` may see them, in the pack's order. Missing and private ones are named, not shown. One grouped read for dates, one for apps. */
export function resolveRepos(db: Database, pack: CuratedPack, viewer: User | undefined): PackRepo[] {
  const found = pack.repos.map((full) => {
    const [owner = "", name = ""] = full.split("/");
    return { full, repo: getRepo(db, owner, name) };
  });
  const shown = found.flatMap((f) => (f.repo !== undefined && f.repo.visibility === "public" && canRead(db, f.repo, viewer) ? [f.repo] : []));
  const ids = shown.map((r) => r.id);
  const dates = ids.length === 0 ? new Map() : repoDatesFor(db, ids);
  const live = new Set(
    ids.length === 0
      ? []
      : db.query<{ repo_id: string }, string[]>(`SELECT repo_id FROM app WHERE repo_id IN (${ids.map(() => "?").join(",")})`).all(...ids).map((r) => r.repo_id),
  );
  return found.map(({ full, repo }): PackRepo => {
    if (repo === undefined) return { full, description: "", live: false, pushedAt: null, left: "not on this forge" };
    if (!ids.includes(repo.id)) return { full, description: "", live: false, pushedAt: null, left: "not public" };
    return {
      full: `${repo.ownerName}/${repo.name}`,
      description: repo.description,
      live: live.has(repo.id),
      pushedAt: dates.get(repo.id)?.pushedAt ?? null,
    };
  });
}
@@ -64,8 +64,8 @@
function refusal(body: Record<string, unknown>): { key?: string; text: string }
  return m && body["error"] === "invalid" ? { key: m[1]!, text: m[2]! } : { text };
}
export function newForgeScreen(f: Session, ctx: Ctx): Screen {
  const values: Record<string, string> = {};
export function newForgeScreen(f: Session, ctx: Ctx, initial: Record<string, string> = {}): Screen {
  const values: Record<string, string> = { ...initial };
  let focus = 0;
  let errorKey: string | undefined;
  let error: string | undefined;
@@ -2,9 +2,14 @@
 * `/packs` in the terminal: the premade forges this forge ships, one pack's
 * contents (apps, crew), the commands that deploy it and what happens to a
 * stranger's pull. Words come from `src/packs/words.ts`, the same the web page
 * prints. Anyone may open it; it reads the catalog, nothing of the forge's.
 * prints. Anyone may open it. The curated packs (#11006) are read from the
 * database and edited through `packs/curated.ts`, the page's own door.
 */
import { changeRepos, editPack, getPack, history, listPacks, mayCurate, resolveRepos, slugOf, type EditResult, type PackRepo } from "../../packs/curated.ts";
import { MAX_DIRECTION_CHARS } from "../../spawn/plan.ts";
import { newForgeScreen } from "./newforge.ts";
import { promptScreen } from "./common.ts";
import { catalog, refreshCatalogQuietly } from "../../packs/catalog.ts";
import type { App } from "../../app.ts";
import type { Pack } from "../../packs/pack.ts";
@@ -62,38 +67,154 @@
function packScreen(ctx: Ctx, p: Pack, origin: string | undefined): Screen {
  };
}
export function packsScreen(ctx: Ctx, origin: string | undefined, app?: App): Screen {
  if (app !== undefined) void refreshCatalogQuietly(app, 2_000).then(() => ctx.invalidate());
const says = (done: EditResult): string => (done.ok ? "Saved. /packs shows it now." : done.says);
/**
 * One curated pack, read from the database on every draw (so an edit on the
 * page shows here at once, and an edit here is on the page the same way).
 * Everyone: j/k scroll, s starts a forge from it as it stands. A person admin
 * also: a add, x remove, u/d move the repo under the cursor, t/p/b title,
 * pitch, brief. Repos that are private or missing are named to admins only.
 */
export function curatedScreen(session: Session, ctx: Ctx, name: string): Screen {
  let at = 0;
  return {
    title: "Forge packs",
    keys: [binding(["j", "k"], "move"), binding(["enter"], "open"), binding(["esc"], "close")],
  let note = "";
  const user = session.user;
  const db = session.app.db;
  const view = (): { repos: PackRepo[]; shown: PackRepo[] } | undefined => {
    const pack = getPack(db, name);
    if (pack === undefined) return undefined;
    const repos = resolveRepos(db, pack, user);
    return { repos: mayCurate(user) ? repos : repos.filter((r) => r.left === undefined), shown: repos.filter((r) => r.left === undefined) };
  };
  const wrote = (done: EditResult): void => {
    note = says(done);
    ctx.invalidate();
  };
  const edit = (label: string, field: "title" | "pitch" | "brief"): void => {
    const pack = getPack(db, name);
    if (pack === undefined || !mayCurate(user)) return;
    ctx.push(promptScreen(ctx, screen, { title: `Pack ${field}`, label, value: pack[field], onSubmit: (text) => { wrote(editPack(db, user, name, { [field]: text })); } }));
  };
  const start = (): void => {
    const pack = getPack(db, name);
    const v = view();
    if (pack === undefined || v === undefined) return;
    ctx.push(newForgeScreen(session, ctx, { apps: v.shown.map((r) => r.full).join(", "), direction: pack.brief.slice(0, MAX_DIRECTION_CHARS) }));
  };
  const screen: Screen = {
    title: "Pack",
    keys: [binding(["j", "k"], "move"), binding(["s"], "start a forge"), ...(mayCurate(user) ? [binding(["a", "x", "u", "d", "t", "p", "b"], "edit")] : []), binding(["esc"], "back")],
    render(area, s) {
      const c = ctx.theme.c;
      s.text(area.x + 1, area.y, "Forge packs: a whole forge to start from", style(c.mutedFg, c.bg), area.x + area.w);
      catalog().packs.forEach((p, i) => {
      const pack = getPack(db, name);
      const v = view();
      if (pack === undefined || v === undefined) {
        s.text(area.x + 1, area.y, "This pack is gone.", style(c.mutedFg, c.bg), area.x + area.w);
        return;
      }
      at = Math.min(at, Math.max(0, v.repos.length - 1));
      const lines: [string, "fg" | "muted" | "accent"][] = [
        [`${pack.title} pack`, "fg"],
        ...wrap(pack.pitch, area.w - 4).map((l): [string, "muted"] => [l, "muted"]),
        ["", "fg"],
        [`${v.shown.length} repo${v.shown.length === 1 ? "" : "s"}. Press s to start a forge from this.`, "muted"],
        ["", "fg"],
        ...v.repos.map((r, i): [string, "fg" | "muted" | "accent"] => [`${i === at && mayCurate(user) ? "> " : "  "}${r.full}${r.left === undefined ? (r.live ? "  live" : "") : `  (${r.left})`}`, r.left === undefined ? (i === at ? "accent" : "fg") : "muted"]),
        ...(pack.brief === "" ? [] : ([["", "fg"], ["Crew brief", "fg"], ...wrap(pack.brief, area.w - 4).map((l): [string, "muted"] => [l, "muted"])] as [string, "fg" | "muted"][])),
        ...(mayCurate(user)
          ? ([["", "fg"], ["History", "fg"], ...history(db, name, 5).map((h): [string, "muted"] => [`  ${h.actor} ${h.what}`, "muted"])] as [string, "fg" | "muted"][])
          : []),
        ...(note === "" ? [] : ([["", "fg"], [note, "accent"]] as [string, "accent"][])),
      ];
      lines.slice(0, area.h).forEach(([t, tone], i) => s.text(area.x + 1, area.y + i, truncate(t, area.w - 2), style(tone === "muted" ? c.mutedFg : tone === "accent" ? c.accent : c.fg, c.bg), area.x + area.w));
    },
    key(e) {
      if (e.ctrl || e.alt) return false;
      const v = view();
      const mine = mayCurate(user);
      const row = v?.repos[at];
      if (e.key === "esc" || e.key === "q") ctx.pop();
      else if (e.key === "j" || e.key === "down") at = Math.min(Math.max(0, (v?.repos.length ?? 1) - 1), at + 1);
      else if (e.key === "k" || e.key === "up") at = Math.max(0, at - 1);
      else if (e.key === "s") start();
      else if (mine && e.key === "a")
        ctx.push(promptScreen(ctx, screen, { title: "Add a repo", label: "owner/name", onSubmit: (text) => { wrote(changeRepos(db, user, name, "add", text)); } }));
      else if (mine && row !== undefined && (e.key === "x" || e.key === "u" || e.key === "d")) {
        const word = getPack(db, name)?.repos[at];
        wrote(changeRepos(db, user, name, e.key === "x" ? "remove" : e.key === "u" ? "up" : "down", word));
        if (e.key === "u") at = Math.max(0, at - 1);
        if (e.key === "d") at += 1;
      } else if (mine && e.key === "t") edit("Title", "title");
      else if (mine && e.key === "p") edit("Pitch", "pitch");
      else if (mine && e.key === "b") edit("Crew brief", "brief");
      else return false;
      return true;
    },
  };
  return screen;
}
/** The list: curated packs first (Enter opens one, a person admin's n makes one), then the deployable pack.json ones. */
export function packsScreen(ctx: Ctx, origin: string | undefined, app?: App, session?: Session): Screen {
  if (app !== undefined) void refreshCatalogQuietly(app, 2_000).then(() => ctx.invalidate());
  let at = 0;
  let note = "";
  const curated = () => (app === undefined ? [] : listPacks(app.db));
  const total = () => curated().length + catalog().packs.length;
  const mine = () => session !== undefined && mayCurate(session.user);
  const screen: Screen = {
    title: "Forge packs",
    keys: [binding(["j", "k"], "move"), binding(["enter"], "open"), ...(mine() ? [binding(["n"], "new pack")] : []), binding(["esc"], "close")],
    render(area, s) {
      const c = ctx.theme.c;
      s.text(area.x + 1, area.y, "Packs: short lists of repos to start a forge from", style(c.mutedFg, c.bg), area.x + area.w);
      const rows = [
        ...curated().map((p) => `${p.title}  ${p.pitch}`),
        ...catalog().packs.map((p) => `${p.title}  v${p.version}  ${p.apps.length} apps, ${p.crew.length} crew  ${p.description}`),
      ];
      rows.forEach((text, i) => {
        const on = i === at;
        const row = `${on ? "> " : "  "}${p.title}  v${p.version}  ${p.apps.length} apps, ${p.crew.length} crew  ${p.description}`;
        if (2 + i < area.h) s.text(area.x + 1, area.y + 2 + i, truncate(row, area.w - 2), on ? style(c.accent, c.bg) : style(c.fg, c.bg), area.x + area.w);
        if (2 + i < area.h) s.text(area.x + 1, area.y + 2 + i, truncate(`${on ? "> " : "  "}${text}`, area.w - 2), on ? style(c.accent, c.bg) : style(c.fg, c.bg), area.x + area.w);
      });
      if (rows.length === 0) s.text(area.x + 1, area.y + 2, mine() ? "No packs yet. Press n to make one." : "No packs yet. An admin makes the first one.", style(c.mutedFg, c.bg), area.x + area.w);
      if (note !== "") s.text(area.x + 1, area.y + Math.min(area.h - 1, rows.length + 3), truncate(note, area.w - 2), style(c.accent, c.bg), area.x + area.w);
    },
    key(e) {
      if (e.ctrl || e.alt) return false;
      if (e.key === "esc" || e.key === "q") ctx.pop();
      else if (e.key === "j" || e.key === "down") at = Math.min(catalog().packs.length - 1, at + 1);
      else if (e.key === "j" || e.key === "down") at = Math.min(Math.max(0, total() - 1), at + 1);
      else if (e.key === "k" || e.key === "up") at = Math.max(0, at - 1);
      else if (e.key === "n" && session !== undefined && mine())
        ctx.push(
          promptScreen(ctx, screen, {
            title: "New pack",
            label: "Title",
            onSubmit: (title) => {
              const done = editPack(session.app.db, session.user, slugOf(title), { title, repos: [] }, true);
              note = done.ok ? "Pack made. Open it to add repos." : done.says;
              ctx.invalidate();
            },
          }),
        );
      else if (e.key === "enter") {
        const p = catalog().packs[at];
        if (p !== undefined) ctx.push(packScreen(ctx, p, origin));
        const list = curated();
        const c = list[at];
        if (c !== undefined && session !== undefined) ctx.push(curatedScreen(session, ctx, c.name));
        else {
          const p = catalog().packs[at - list.length];
          if (p !== undefined) ctx.push(packScreen(ctx, p, origin));
        }
      } else return false;
      return true;
    },
  };
  return screen;
}
export const packsCommand = (session: Session, ctx: Ctx) => ({
  id: "packs",
  title: "Forge packs",
  hint: "premade forges to deploy, and how to help build their apps",
  run: () => ctx.push(packsScreen(ctx, session.app.config.url, session.app)),
  run: () => ctx.push(packsScreen(ctx, session.app.config.url, session.app, session)),
});
@@ -9,6 +9,7 @@
 * shown once, in the answer's body — never in a URL, never cached.
 */
import { getPack, resolveRepos } from "../../packs/curated.ts";
import { listAgents } from "../../core/agents.ts";
import { listReposVisibleTo } from "../../core/repos.ts";
import type { User } from "../../core/users.ts";
@@ -20,6 +21,7 @@
import {
  LEFT_BEHIND,
  MAX_FOR_CHARS,
  MAX_FRESH_CHARS,
  MAX_DIRECTION_CHARS,
  MAX_BUDGET_USD,
  MIN_BUDGET_USD,
} from "../../spawn/plan.ts";
@@ -440,6 +442,19 @@
function madeView(body: Record<string, unknown>): Html {
const asBool = (form: Form, name: string): boolean =>
  field(form, name) === "on";
/**
 * `?pack=name`: the pack as it stands now, as the form's starting values (its
 * public, readable repos ticked and its crew brief as the direction). The
 * form is then what is posted, so a later edit of the pack changes nothing
 * about a forge started from this one.
 */
function fromPack(ctx: Ctx, user: User | undefined): Partial<Values> {
  const pack = getPack(ctx.app.db, ctx.url.searchParams.get("pack") ?? "");
  if (pack === undefined) return {};
  const apps = resolveRepos(ctx.app.db, pack, user).filter((r) => r.left === undefined).map((r) => r.full);
  return { apps, direction: pack.brief.slice(0, MAX_DIRECTION_CHARS) };
}
// GET /forges/new — any signed-in person, or a stranger (agents are refused).
export function newForgePage(ctx: Ctx): Response {
  const user = ctx.auth.user;
@@ -450,7 +465,7 @@
export function newForgePage(ctx: Ctx): Response {
  const response = page({
    ctx,
    title: "New forge",
    body: formView(ctx, user, { ...EMPTY, name: (ctx.url.searchParams.get("name") ?? "").slice(0, 38) }, {}, null, reads),
    body: formView(ctx, user, { ...EMPTY, name: (ctx.url.searchParams.get("name") ?? "").slice(0, 38), ...fromPack(ctx, user) }, {}, null, reads),
  });
  notePhase(ctx.request, "render", performance.now() - rendering);
  return response;
@@ -12,13 +12,15 @@
import { notFoundPage, pageHead } from "../chrome.ts";
import { deployCommands } from "../../packs/words.ts";
import { html } from "../html.ts";
import { flashTo, page } from "../layout.ts";
import { readForm } from "../form.ts";
import { mirrorPacks, reportWords } from "../../packs/mirror.ts";
import { btn, copyField, row } from "../ui.ts";
import { btn, copyField, field as uiField, row, timeAgo } from "../ui.ts";
import { listReposVisibleTo } from "../../core/repos.ts";
import { changeRepos, editPack, getPack, history, listPacks, mayCurate, resolveRepos, slugOf, type CuratedPack, type PackRepo } from "../../packs/curated.ts";
import { field, readForm } from "../form.ts";
const plural = (n: number, one: string): string => `${n} ${one}${n === 1 ? "" : "s"}`;
/** The list of packs as rows; each row is one j/k stop. */
/** The list of deployable packs (a pack.json in a repo) as rows; each row is one j/k stop. */
export const packsList = (packs: readonly Pack[]) =>
  html`<ul class="list">${packs.map((p) =>
      row({
@@ -32,30 +34,159 @@
export const packsList = (packs: readonly Pack[]) =>
/** A pack pushed to its repo shows within this long. */
const CATALOG_FRESH_MS = 2_000;
const admin = (ctx: Ctx): boolean => mayCurate(ctx.auth.user);
/** The newest push among a pack's shown repos, as "3d ago", or a plain "no pushes yet". */
const freshness = (repos: readonly PackRepo[]): string => {
  const newest = repos.map((r) => r.pushedAt).filter((t): t is string => t !== null).sort().pop();
  return newest === undefined ? "no pushes yet" : `updated ${timeAgo(newest)}`;
};
/** One repo of a pack: its name, what it is, and the live link when it runs here. */
const repoRow = (r: PackRepo) =>
  row({
    title: html`<a href="/${r.full}">${r.full.split("/")[1]}</a>`,
    meta: html`${r.description === "" ? "No description yet." : r.description}`,
    trail: r.live ? html`<a href="/${r.full}/app/production/open" rel="nofollow">Open live</a>` : html`<span class="muted small">not running</span>`,
  });
/** The one accent of a pack's own page; on the list it is plain, so a page has one primary. */
const startButton = (pack: CuratedPack, primary: boolean) =>
  btn("Start a forge from this", { href: `/forges/new?pack=${encodeURIComponent(pack.name)}`, ...(primary ? { variant: "primary" as const } : {}) });
function packCard(ctx: Ctx, pack: CuratedPack) {
  const repos = resolveRepos(ctx.app.db, pack, ctx.auth.user);
  const shown = repos.filter((r) => r.left === undefined);
  return html`<section class="stack" id="pack-${pack.name}">
    <h2><a href="/packs/${pack.name}">${pack.title}</a></h2>
    <p>${pack.pitch}</p>
    <p class="muted small">${plural(shown.length, "repo")}, ${freshness(shown)}.</p>
    <ul class="list">${shown.slice(0, 4).map(repoRow)}</ul>
    ${shown.length > 4 ? html`<p class="muted small"><a href="/packs/${pack.name}">All ${shown.length} repos</a></p>` : null}
    <div class="form-actions">${startButton(pack, false)}</div>
  </section>`;
}
/** What a pack is, in one sentence. */
const WHAT_IS_A_PACK = "A pack is a short list of repos on this forge that start together: start a forge from one and you get a copy of each repo and a crew briefed for them.";
// GET /packs
export async function packsPage(ctx: Ctx): Promise<Response> {
  notePhase(ctx.request, "session", takeSessionTime(ctx.request));
  const started = performance.now();
  const { packs } = await refreshCatalogQuietly(ctx.app, CATALOG_FRESH_MS);
  const body = html`${pageHead("Forge packs", {
      sub: "A whole forge to start from: real apps with their history, and a crew set up to work on them.",
    })}
    ${packsList(packs)}
    ${ctx.auth.user?.isAdmin === true && ctx.auth.user.kind !== "agent"
      ? html`<form class="stack" method="post" action="/packs/mirror">
          <p class="muted small">Copy each pack's upstream projects here as read-only repositories that keep up with the original.</p>
          ${btn("Mirror the upstreams", { size: "sm", variant: "primary", label: "Mirror the packs' upstreams" })}
  const curated = listPacks(ctx.app.db);
  const body = html`${pageHead("Packs", { sub: WHAT_IS_A_PACK })}
    ${curated.length === 0
      ? html`<section class="stack">
          <h2>No packs yet</h2>
          ${admin(ctx) ? html`<p>Make one from the repos you already have.</p>` : html`<p class="muted">An admin makes the first one.</p>`}
        </section>`
      : html`<div class="stack">${curated.map((p) => packCard(ctx, p))}</div>`}
    ${admin(ctx)
      ? html`<form class="stack" method="post" action="/packs/new">
          <h2>${curated.length === 0 ? "Make one from these repos" : "New pack"}</h2>
          ${uiField({ label: "Title", name: "title", required: true, placeholder: "Business" })}
          <div class="form-actions">${btn("New pack")}</div>
        </form>`
      : null}`;
  const response = page({ ctx, title: "Forge packs", body });
      : null}
    ${packs.length === 0 && !admin(ctx)
      ? null
      : html`<section class="stack">
          <h2>Deploy on your own machine</h2>
          ${packsList(packs)}
          ${admin(ctx)
            ? html`<form class="stack" method="post" action="/packs/mirror">
                <p class="muted small">Copy each of these packs' upstream projects here as read-only repositories that keep up with the original.</p>
                ${btn("Mirror the upstreams", { size: "sm", label: "Mirror the packs' upstreams" })}
              </form>`
            : null}
        </section>`}`;
  const response = page({ ctx, title: "Packs", body });
  notePhase(ctx.request, "render", performance.now() - started);
  return response;
}
const stamp = (iso: string): string => iso.slice(0, 16).replace("T", " ");
function editSection(ctx: Ctx, pack: CuratedPack, repos: readonly PackRepo[]) {
  const mine = new Set(pack.repos);
  const options = listReposVisibleTo(ctx.app.db, ctx.auth.user, { limit: 200, withoutArchived: true })
    .filter((r) => r.visibility === "public" && !mine.has(`${r.ownerName}/${r.name}`.toLowerCase()));
  const action = `/packs/${pack.name}/repos`;
  return html`<section class="stack">
    <h2>Edit this pack</h2>
    <form class="stack" method="post" action="/packs/${pack.name}/edit">
      ${uiField({ label: "Title", name: "title", value: pack.title, required: true })}
      ${uiField({ label: "Pitch", name: "pitch", value: pack.pitch, hint: "One line: what you get." })}
      ${uiField({ label: "Crew brief", name: "brief", type: "textarea", rows: 4, value: pack.brief, hint: "What the crew of a forge started from this pack is told." })}
      <div class="form-actions">${btn("Save")}</div>
    </form>
    <h3>Repos, in the order the cards show</h3>
    <ul class="list">${repos.map((r, i) =>
        row({
          title: html`<span class="mono">${r.full}</span>`,
          meta: html`${r.left ?? (r.description === "" ? "Shown." : r.description)}`,
          trail: html`<form method="post" action="${action}" class="form-actions">
            <input type="hidden" name="repo" value="${pack.repos[i]}" />
            ${i > 0 ? btn("↑", { name: "op", value: "up", size: "sm", variant: "ghost", label: `Move ${r.full} up` }) : null}
            ${i < repos.length - 1 ? btn("↓", { name: "op", value: "down", size: "sm", variant: "ghost", label: `Move ${r.full} down` }) : null}
            ${btn("Remove", { name: "op", value: "remove", size: "sm", variant: "ghost", label: `Remove ${r.full}` })}
          </form>`,
        }),
      )}</ul>
    <form class="stack" method="post" action="${action}">
      <input type="hidden" name="op" value="add" />
      <label class="field"><span>Add a repo</span>
        <input class="input mono" name="repo" list="pack-repo-options" autocomplete="off" spellcheck="false" placeholder="Type to search: owner/name" required />
      </label>
      <datalist id="pack-repo-options">${options.map((r) => html`<option value="${r.ownerName}/${r.name}"></option>`)}</datalist>
      <div class="form-actions">${btn("Add")}</div>
    </form>
  </section>`;
}
function curatedPage(ctx: Ctx, pack: CuratedPack, legacy: Pack | undefined): Response {
  const repos = resolveRepos(ctx.app.db, pack, ctx.auth.user);
  const shown = repos.filter((r) => r.left === undefined);
  const left = repos.filter((r) => r.left !== undefined);
  const past = admin(ctx) ? history(ctx.app.db, pack.name) : [];
  const commands = legacy === undefined ? [] : deployCommands(legacy, ctx.app.config.url);
  const body = html`${pageHead(`${pack.title} pack`, { sub: pack.pitch })}
    <p class="muted small">${plural(shown.length, "repo")}, ${freshness(shown)}.</p>
    <div class="form-actions">${startButton(pack, true)}</div>
    ${legacy === undefined
      ? null
      : html`<section class="stack">
          <h2>Deploy it on your own machine</h2>
          ${copyField("pack-command", commands.join("\n"), `The command that deploys the ${legacy.title} pack`, "Copy the command", { lines: commands.length })}
          <p class="muted small">No data, secrets or variables come with it.</p>
        </section>`}
    <section class="stack">
      <h2>The apps inside</h2>
      <ul class="list">${shown.map(repoRow)}</ul>
      ${left.length === 0 || !admin(ctx) ? null : html`<p class="muted small">Left out for now: ${left.map((r) => `${r.full} (${r.left})`).join(", ")}.</p>`}
    </section>
    ${pack.brief === "" ? null : html`<section class="stack"><h2>The crew it starts with</h2><p>${pack.brief}</p></section>`}
    ${admin(ctx) ? editSection(ctx, pack, repos) : null}
    ${past.length === 0
      ? null
      : html`<section class="stack"><h2>History</h2>
          <ul class="list">${past.map((c) => row({ title: html`${c.actor} ${c.what}`, meta: html`${stamp(c.at)}` }))}</ul></section>`}`;
  return page({ ctx, title: `${pack.title} pack`, body });
}
// GET /packs/:name
export async function packPage(ctx: Ctx): Promise<Response> {
  notePhase(ctx.request, "session", takeSessionTime(ctx.request));
  const started = performance.now();
  const curated = getPack(ctx.app.db, ctx.params.name ?? "");
  if (curated !== undefined) {
    const legacy = (await refreshCatalogQuietly(ctx.app, CATALOG_FRESH_MS)).packs.find((p) => p.name === curated.name);
    const shown = curatedPage(ctx, curated, legacy);
    notePhase(ctx.request, "render", performance.now() - started);
    return shown;
  }
  const pack = (await refreshCatalogQuietly(ctx.app, CATALOG_FRESH_MS)).packs.find((p) => p.name === (ctx.params.name ?? ""));
  if (pack === undefined) return notFoundPage(ctx);
  const commands = deployCommands(pack, ctx.app.config.url);
@@ -95,3 +226,38 @@
export async function packsMirror(ctx: Ctx): Promise<Response> {
  if (!done.ok) return notFoundPage(ctx);
  return flashTo(ctx, "/packs", { tone: done.value.failed.length > 0 ? "danger" : "success", message: reportWords(done.value) });
}
const refused = (ctx: Ctx, to: string, says: string): Response => flashTo(ctx, to, { tone: "danger", message: says });
// POST /packs/new (admin)
export async function packNew(ctx: Ctx): Promise<Response> {
  if (!admin(ctx)) return notFoundPage(ctx);
  const form = await readForm(ctx, "admin");
  if (form instanceof Response) return form;
  const title = field(form, "title");
  const name = slugOf(title);
  const done = editPack(ctx.app.db, ctx.auth.user, name, { title, repos: [] }, true);
  return done.ok ? flashTo(ctx, `/packs/${name}`, { tone: "success", message: "Pack made. Add its repos below." }) : refused(ctx, "/packs", done.says);
}
// POST /packs/:name/edit (admin)
export async function packEdit(ctx: Ctx): Promise<Response> {
  if (!admin(ctx)) return notFoundPage(ctx);
  const form = await readForm(ctx, "admin");
  if (form instanceof Response) return form;
  const name = ctx.params.name ?? "";
  const done = editPack(ctx.app.db, ctx.auth.user, name, { title: field(form, "title"), pitch: field(form, "pitch"), brief: field(form, "brief") });
  return done.ok ? flashTo(ctx, `/packs/${name}`, { tone: "success", message: "Saved." }) : refused(ctx, `/packs/${name}`, done.says);
}
// POST /packs/:name/repos (admin): add, remove, up, down
export async function packRepos(ctx: Ctx): Promise<Response> {
  if (!admin(ctx)) return notFoundPage(ctx);
  const form = await readForm(ctx, "admin");
  if (form instanceof Response) return form;
  const name = ctx.params.name ?? "";
  const here = `/packs/${name}`;
  if (getPack(ctx.app.db, name) === undefined) return notFoundPage(ctx);
  const done = changeRepos(ctx.app.db, ctx.auth.user, name, field(form, "op"), field(form, "repo"));
  return done.ok ? flashTo(ctx, here, { tone: "success", message: "Saved." }) : refused(ctx, here, done.says);
}
@@ -111,7 +111,7 @@
const MENU_TITLES: Record<string, string> = {
  Notes: "Notes",
  Talk: "Talk",
  Explore: "Explore",
  Packs: "Forge packs",
  Packs: "Packs",
  Displays: "Displays",
  Map: "Map",
  "New app": "New app",
@@ -0,0 +1,175 @@
/** Curated packs (#11006): seeded, shown as cards, edited by an admin, started from as they stand, and curated over the API. */
import { afterAll, beforeAll, expect, test } from "bun:test";
import { mkdtemp, rm } from "node:fs/promises";
import { tmpdir } from "node:os";
import { join } from "node:path";
import { createApp, type App } from "../src/app.ts";
import { createRepo } from "../src/core/repos.ts";
import { createSession } from "../src/core/sessions.ts";
import { createUser, getUserByName } from "../src/core/users.ts";
import { serve, type Servers } from "../src/http/server.ts";
import { editPack, getPack, history, slugOf } from "../src/packs/curated.ts";
import { adminCookie } from "./helpers/admin.ts";
let dir: string;
let app: App;
let servers: Servers;
let admin: string;
let plain: string;
beforeAll(async () => {
  dir = await mkdtemp(join(tmpdir(), "forge-packs-cur-"));
  app = createApp({ dataDir: dir, port: 0 });
  servers = await serve(app);
  admin = await adminCookie(app, { username: "trevato", email: "[email protected]", password: "a-good-passphrase" });
  const bob = await createUser(app.db, { origin: "seed", trusted: true, username: "bob", email: "[email protected]", password: "a-good-passphrase" });
  if (!bob.ok) throw new Error(bob.error);
  plain = `forge_session=${createSession(app.db, bob.value.id).token}`;
  const owner = getUserByName(app.db, "trevato")!;
  for (const name of ["chess", "pong", "bazaar"]) {
    const made = await createRepo(app.db, app.reposRoot, { ownerId: owner.id, name, visibility: "public", description: `${name} game`, defaultBranch: "main" });
    if (!made.ok) throw new Error(made.error);
  }
  await createRepo(app.db, app.reposRoot, { ownerId: owner.id, name: "secret-one", visibility: "private", description: "", defaultBranch: "main" });
});
afterAll(async () => {
  await servers.stop();
  app.close();
  await rm(dir, { recursive: true, force: true });
});
const post = (path: string, cookie: string, fields: Record<string, string>, origin = servers.url) =>
  fetch(`${servers.url}${path}`, {
    method: "POST",
    redirect: "manual",
    headers: { cookie, "content-type": "application/x-www-form-urlencoded", origin },
    body: new URLSearchParams(fields),
  });
const text = async (path: string, cookie = "") => await (await fetch(`${servers.url}${path}`, { headers: { cookie } })).text();
test("the forge starts with a Business and a Gamer pack, as cards with a start button", async () => {
  const names = ["business", "gamer"];
  for (const n of names) expect(getPack(app.db, n)).toBeDefined();
  const page = await text("/packs");
  expect(page).toContain("A pack is a short list of repos");
  expect(page.split("A pack is a short list of repos").length).toBe(2); // said once
  expect(page).not.toMatch(/class="card[" ]/); // a heading and rows, not a box around each pack
  expect(page.match(/data-variant="primary"/g) ?? []).toHaveLength(0); // one accent per page, and the list has none
  const own = await text("/packs/gamer", admin);
  expect(own.match(/data-variant="primary"/g) ?? []).toHaveLength(1); // the pack's own page: Start is the one, Save and Add are plain
  expect(page).toContain(`href="/packs/gamer"`);
  expect(page).toContain(`href="/forges/new?pack=gamer"`);
  expect(page).toContain("Start a forge from this");
  expect(page).toContain("chess");
  expect(page).not.toContain("/chess/app/production/open");
});
test("a repo not on this forge or not public is left out: named to an admin, never to a visitor", async () => {
  const visitor = await text("/packs/gamer");
  expect(visitor).not.toContain("Left out for now");
  expect(visitor).not.toContain("trevato/voxel");
  const page = await text("/packs/gamer", admin);
  expect(page).toContain("Left out for now");
  expect(page).toContain("trevato/voxel (not on this forge)");
});
test("an unknown op is refused and says so, and changes nothing", async () => {
  const before = getPack(app.db, "gamer")!.repos.slice();
  const res = await post("/packs/gamer/repos", admin, { op: "explode", repo: before[0]! });
  expect(res.status).toBe(303);
  expect(getPack(app.db, "gamer")!.repos).toEqual(before);
  expect(history(app.db, "gamer")[0]?.what).not.toBe("saved");
  const flash = await fetch(`${servers.url}${res.headers.get("location")}`, { headers: { cookie: admin + "; " + (res.headers.get("set-cookie") ?? "").split(";")[0] } });
  expect(await flash.text()).not.toContain("Saved.");
});
test("only an admin sees Edit; a non-admin's and a cross-origin edit are refused", async () => {
  expect(await text("/packs/gamer", plain)).not.toContain("Edit this pack");
  expect(await text("/packs/gamer", admin)).toContain("Edit this pack");
  expect((await post("/packs/gamer/repos", plain, { op: "remove", repo: "trevato/chess" })).status).toBe(404);
  expect((await post("/packs/gamer/repos", admin, { op: "remove", repo: "trevato/chess" }, "https://evil.example")).status).toBeGreaterThanOrEqual(400);
  expect(getPack(app.db, "gamer")!.repos).toContain("trevato/chess");
});
test("add, move and remove a repo; each change is kept with who and when", async () => {
  expect((await post("/packs/gamer/repos", admin, { op: "remove", repo: "trevato/pong" })).status).toBe(303);
  expect(getPack(app.db, "gamer")!.repos).not.toContain("trevato/pong");
  await post("/packs/gamer/repos", admin, { op: "add", repo: "trevato/pong" });
  expect(getPack(app.db, "gamer")!.repos.at(-1)).toBe("trevato/pong");
  await post("/packs/gamer/repos", admin, { op: "up", repo: "trevato/pong" });
  const repos = getPack(app.db, "gamer")!.repos;
  expect(repos.indexOf("trevato/pong")).toBe(repos.length - 2);
  const past = history(app.db, "gamer");
  expect(past[0]!.what).toBe("reordered the repos");
  expect(past.some((c) => c.what === "removed trevato/pong" && c.actor === "trevato")).toBe(true);
  expect(await text("/packs/gamer", admin)).toContain("trevato removed trevato/pong");
  // a repo that is not on the forge cannot be added
  await post("/packs/gamer/repos", admin, { op: "add", repo: "nobody/nothing" });
  expect(getPack(app.db, "gamer")!.repos).not.toContain("nobody/nothing");
});
test("rename, pitch and crew brief save and show", async () => {
  await post("/packs/business/edit", admin, { title: "Small business", pitch: "Money in.", brief: "Watch the leads." });
  const page = await text("/packs/business");
  expect(page).toContain("Small business pack");
  expect(page).toContain("Money in.");
  expect(page).toContain("Watch the leads.");
});
test("a new pack is made from /packs and shows", async () => {
  const res = await post("/packs/new", admin, { title: "Chess club" });
  expect(res.status).toBe(303);
  expect(res.headers.get("location")).toContain("/packs/chess-club");
  expect(slugOf("Chess club!")).toBe("chess-club");
  expect(await text("/packs")).toContain("Chess club");
});
test("a forge started from a pack copies what the form posted, not what the pack is by then", async () => {
  const form = await text("/forges/new?pack=gamer", admin);
  const apps = [...form.matchAll(/<input[^>]*name="apps"[^>]*value="([^"]+)"[^>]*checked|<input[^>]*value="([^"]+)"[^>]*name="apps"[^>]*checked/g)].map((m) => m[1] ?? m[2]!);
  expect(apps).toContain("trevato/chess");
  expect(form).toContain("play feel");
  // the pack changes after the form was opened
  await post("/packs/gamer/repos", admin, { op: "remove", repo: "trevato/chess" });
  expect(getPack(app.db, "gamer")!.repos).not.toContain("trevato/chess");
  // posting the form plans the forge it held: the removed repo is still in the plan
  const planned = await fetch(`${servers.url}/forges/new`, {
    method: "POST",
    headers: { cookie: admin, "content-type": "application/x-www-form-urlencoded", origin: servers.url },
    body: new URLSearchParams([["name", "from-pack"], ["do", "plan"], ...apps.map((a) => ["apps", a] as [string, string])]),
  });
  const plan = await planned.text();
  expect(plan.slice(plan.indexOf('id="plan"'))).toContain("trevato/chess");
  // and a new open reads the pack as it is now
  expect(await text("/forges/new?pack=gamer", admin)).not.toMatch(/value="trevato\/chess"[^>]*checked/);
});
test("the API reads and curates packs; a plain user cannot write", async () => {
  const get = (await (await fetch(`${servers.url}/api/v1/packs/business`)).json()) as { name: string };
  expect(get.name).toBe("business");
  const put = (cookie: string, payload: unknown) =>
    fetch(`${servers.url}/api/v1/packs/api-made`, { method: "PUT", headers: { cookie, "content-type": "application/json", origin: servers.url }, body: JSON.stringify(payload) });
  expect((await put(plain, { title: "X", repos: [] })).status).toBe(403);
  const made = await put(admin, { title: "Made by API", pitch: "p", brief: "b", repos: ["trevato/bazaar", "trevato/secret-one", "bad"] });
  expect(made.status).toBe(422);
  const ok = await put(admin, { title: "Made by API", pitch: "p", brief: "b", repos: ["trevato/bazaar", "trevato/secret-one"] });
  expect(ok.status).toBe(201);
  const body = (await ok.json()) as { repos: string[]; shown: string[]; left_out: { repo: string; why: string }[] };
  expect(body.repos).toEqual(["trevato/bazaar", "trevato/secret-one"]); // the admin gets the list as kept
  expect(body.shown).toEqual(["trevato/bazaar"]); // a private repo is never shown, even to its owner's pack
  expect(body.left_out).toEqual([{ repo: "trevato/secret-one", why: "not public" }]);
  // nobody else learns the private name: not anonymous, not a plain user, on the item or the list
  for (const cookie of ["", plain]) {
    for (const path of ["/api/v1/packs/api-made", "/api/v1/packs"]) {
      const raw = await (await fetch(`${servers.url}${path}`, { headers: { cookie } })).text();
      expect(raw).not.toContain("secret-one");
    }
    const seen = (await (await fetch(`${servers.url}/api/v1/packs/api-made`, { headers: { cookie } })).json()) as Record<string, unknown>;
    expect(seen["shown"]).toEqual(["trevato/bazaar"]);
    expect(seen["repos"]).toBeUndefined();
  }
  const again = await put(admin, { repos: ["trevato/chess"] });
  expect(again.status).toBe(200);
  expect(getPack(app.db, "api-made")!.title).toBe("Made by API");
  expect(editPack(app.db, undefined, "x", {}, true).ok).toBe(false);
});
@@ -45,8 +45,11 @@
const listed = async () => await (await fetch(`${servers.url}/packs`)).text();
test("nothing is marked, so /packs lists no pack even though the repos exist", async () => {
  const text = await listed();
  // the deployable packs (a pack.json in a marked repo) are listed apart from the curated cards
  expect(text).not.toContain("Deploy on your own machine");
  expect(text).not.toContain(`href="/packs/games"`);
  expect(text).not.toContain(`href="/packs/business"`);
  // the seeded curated Business pack is a page of its own, with no deploy command: it is not a marked pack.json
  expect(text).toContain(`href="/packs/business"`);
});
test("only an admin sees the page or saves; a cross-origin post is refused", async () => {
@@ -61,8 +64,8 @@
test("a save lists exactly the marked repo, at once, and keeps the change", asyn
  expect(res.status).toBe(303);
  const text = await listed();
  expect(text).toContain(`href="/packs/games"`);
  expect(text).not.toContain(`href="/packs/business"`);
  expect((await fetch(`${servers.url}/packs/business`)).status).toBe(404);
  expect(await (await fetch(`${servers.url}/packs/business`)).text()).not.toContain("scripts/pack.ts deploy business");
  expect((await fetch(`${servers.url}/packs/games`)).status).toBe(200);
  const changes = app.db.query<{ to_value: string }, []>("SELECT to_value FROM forge_setting_change WHERE key = 'packs.repos'").all();
  expect(changes.at(-1)!.to_value).toBe('["packs/games"]');
  const page = await (await fetch(`${servers.url}/settings/packs`, { headers: { cookie: admin } })).text();
@@ -0,0 +1,125 @@
/** Curated packs in the terminal (#11006): the same gate and the same door as the page. */
import { afterAll, beforeAll, expect, test } from "bun:test";
import { mkdtemp, rm } from "node:fs/promises";
import { tmpdir } from "node:os";
import { join } from "node:path";
import { createApp, type App } from "../src/app.ts";
import { createRepo } from "../src/core/repos.ts";
import { createSession } from "../src/core/sessions.ts";
import { createUser, getUserByName, type User } from "../src/core/users.ts";
import { serve, type Servers } from "../src/http/server.ts";
import { getPack } from "../src/packs/curated.ts";
import { createForgeApp } from "../src/tui/forge.ts";
import { curatedScreen, packsScreen } from "../src/tui/screens/packs.ts";
import { headlessTerminal } from "../src/tui/term/terminal.ts";
import { adminCookie } from "./helpers/admin.ts";
import { settleApp } from "./helpers/tui.ts";
let dir: string;
let app: App;
let servers: Servers;
let admin: User;
let bob: User;
let adminHeader: string;
beforeAll(async () => {
  dir = await mkdtemp(join(tmpdir(), "forge-packs-tui-"));
  app = createApp({ dataDir: dir, port: 0 });
  servers = await serve(app);
  adminHeader = await adminCookie(app, { username: "trevato", email: "[email protected]", password: "a-good-passphrase" });
  admin = getUserByName(app.db, "trevato")!;
  const made = await createUser(app.db, { origin: "seed", trusted: true, username: "bob", email: "[email protected]", password: "a-good-passphrase" });
  if (!made.ok) throw new Error(made.error);
  bob = made.value;
  createSession(app.db, bob.id);
  for (const [name, visibility] of [["chess", "public"], ["pong", "public"], ["secret-one", "private"]] as const) {
    const r = await createRepo(app.db, app.reposRoot, { ownerId: admin.id, name, visibility, description: `${name} game`, defaultBranch: "main" });
    if (!r.ok) throw new Error(r.error);
  }
});
afterAll(async () => {
  await servers.stop();
  app.close();
  await rm(dir, { recursive: true, force: true });
});
const key = (k: string) => ({ type: "key" as const, key: k, ctrl: false, alt: false, shift: false });
function open(user: User, make: (session: never, ctx: never) => ReturnType<typeof curatedScreen>) {
  const { app: tui, session } = createForgeApp(
    app,
    { sshUsername: user.username, remoteAddress: "127.0.0.1", fingerprint: "SHA256:test", user },
    { terminal: headlessTerminal(120, 40), exitHooks: false },
  );
  tui.start();
  const screen = make(session as never, tui.ctx as never);
  tui.ctx.push(screen);
  return { tui, screen };
}
const web = async (path: string, cookie = "") => await (await fetch(`${servers.url}${path}`, { headers: { cookie } })).text();
test("browse: a guest sees the public repos and never a private or missing name; an admin sees why they are left out", async () => {
  const set = (repos: string[]) => app.db.transaction(() => {
    app.db.query("DELETE FROM curated_pack_repo WHERE pack = 'gamer'").run();
    repos.forEach((r, i) => app.db.query("INSERT INTO curated_pack_repo (pack, repo, position) VALUES ('gamer', ?1, ?2)").run(r, i));
  })();
  set(["trevato/chess", "trevato/secret-one", "trevato/nowhere"]);
  const guest = open(bob, (s, c) => curatedScreen(s, c, "gamer"));
  await settleApp(guest.tui);
  const seen = guest.tui.screen.toText();
  expect(seen).toContain("trevato/chess");
  expect(seen).not.toContain("secret-one");
  expect(seen).not.toContain("nowhere");
  expect(seen).not.toContain("History");
  expect(guest.screen.key(key("x"))).toBe(false); // a guest has no edit keys
  expect(await web("/packs/gamer")).not.toContain("secret-one");
  const boss = open(admin, (s, c) => curatedScreen(s, c, "gamer"));
  await settleApp(boss.tui);
  expect(boss.tui.screen.toText()).toContain("trevato/secret-one  (not public)");
  expect(boss.tui.screen.toText()).toContain("trevato/nowhere  (not on this forge)");
  guest.tui.stop?.();
  boss.tui.stop?.();
});
test("edit: an admin's keys add, move and remove a repo, and the page shows it at once; a guest's do nothing", async () => {
  const boss = open(admin, (s, c) => curatedScreen(s, c, "business"));
  await settleApp(boss.tui);
  const before = getPack(app.db, "business")!.repos;
  boss.screen.key(key("x")); // the cursor starts on the first repo
  expect(getPack(app.db, "business")!.repos).toEqual(before.slice(1));
  boss.screen.key(key("d"));
  const moved = getPack(app.db, "business")!.repos;
  expect(moved.slice(0, 2)).toEqual([before[2]!, before[1]!]);
  expect(await web("/packs/business", adminHeader)).toContain(`trevato removed ${before[0]!}`);
  const guest = open(bob, (s, c) => curatedScreen(s, c, "business"));
  for (const k of ["x", "u", "d", "a", "t"]) guest.screen.key(key(k));
  expect(getPack(app.db, "business")!.repos).toEqual(moved);
  boss.screen.key(key("a"));
  await settleApp(boss.tui);
  expect(boss.tui.screen.toText()).toContain("Add a repo");
  boss.tui.stop?.();
  guest.tui.stop?.();
});
test("start: s opens the new-forge form with the pack's shown repos and brief, and only those", async () => {
  const guest = open(bob, (s, c) => curatedScreen(s, c, "gamer"));
  guest.screen.key(key("s"));
  await settleApp(guest.tui);
  const text = guest.tui.screen.toText();
  expect(text).toContain("trevato/chess");
  expect(text).not.toContain("secret-one");
  expect(text).toContain("how it plays now");
  guest.tui.stop?.();
});
test("the list shows the curated packs, and n makes one for an admin only", async () => {
  const boss = open(admin, (s, c) => packsScreen(c as never, undefined, (s as { app: App }).app, s as never) as never);
  await settleApp(boss.tui);
  expect(boss.tui.screen.toText()).toContain("Gamer");
  expect(boss.screen.key(key("n"))).toBe(true);
  await settleApp(boss.tui);
  expect(boss.tui.screen.toText()).toContain("New pack");
  const guest = open(bob, (s, c) => packsScreen(c as never, undefined, (s as { app: App }).app, s as never) as never);
  expect(guest.screen.key(key("n"))).toBe(false);
  boss.tui.stop?.();
  guest.tui.stop?.();
});
@@ -245,7 +245,7 @@
describe("pages", () => {
    expect(cmd).toBeLessThan(page.indexOf("What it brings"));
    const list = await (await fetch(`${servers.url}/packs`)).text();
    expect(list).toContain('class="list"');
    expect(list).not.toMatch(/class="card[" ]/);
    expect(list).not.toMatch(/class="card[" ]/); // curated packs are a heading and rows, not cards (#11006)
    expect(list).toContain('class="row"');
  });
});
		@@ -21,3 +21,13 @@ Not done yet: a hosted "deploy this pack" press, a stable follow link from each
21	21	An admin brings each https `source` in a marked pack's `pack.json` in once as a public repository `packs/<app>` (owner `packs`, an account nobody signs in as), from any of three doors: the "Mirror the upstreams" button on `/packs`, the "Mirror the packs' upstreams" screen in the terminal palette (admins only), or `repo_settings` with `{ mirrorPacks: true }` over MCP, which answers `{ made, kept, failed, says }`. The request only reads each upstream's default branch, creates the repository and its follow, and stops at 20 seconds in all: what it did not reach is listed as failed ("press again"). The first sync is the scheduled follow's, as is every later one; it moves the default branch to the upstream's tip instead of opening a pull, and a failed sync is noted on the follow's row. Running it again leaves existing mirrors as they are.
22	22
23	23	Read-only is enforced where writes are decided: `canWrite` is false for every `packs/*` repository except for its owner, which only the follow acts as, so pushes (http and ssh, told why), web file edits, the contents and branch API, and opening or merging a pull are all refused, admins included. Open on purpose: issues and comments, and a repository admin's settings (visibility, delete, transfer). A mirror tracks the branch that was the upstream's HEAD when it was made; if the upstream renames its default branch, delete the mirror and mirror again.
	24
	25	## Curated packs (#11006)
	26
	27	`/packs` shows curated packs: a pack is a named, ordered list of public repos on this forge, with a one-line pitch and a crew brief. They live in the forge's database (`curated_pack`, `src/packs/curated.ts`), not in code or on GitHub, and a site admin who is a person edits them on the pack's page: rename, change the pitch and brief, add a repo (type to search the repos you can see), remove one, move one up or down; every change is saved at once and kept as who, what, when under History. New pack* on `/packs` makes one. The same rule is the API: `GET /api/v1/packs`, `GET/PUT /api/v1/packs/{name}` with `{title, pitch, brief, repos:["owner/name"…]}` (a new name makes the pack). Anyone reads `shown`, the public repos on this forge; only a person admin also gets `repos` (the list as kept) and `left_out` (each left one with why), because those name private and missing repos. The same holds on the page: "Left out for now" is an admin's.
	28
	29	The terminal has it too (`src/tui/screens/packs.ts`, palette "Forge packs"): the list opens curated packs first, then the deployable ones; a pack's screen shows its shown repos and brief, s opens the new-forge form with the pack's repos and brief as they stand, and for a person admin a adds a repo, x removes, u/d move, t/p/b edit title, pitch and brief, and n on the list makes a pack. It goes through `changeRepos`/`editPack` as the page does, reads the database on every draw, so a change in either door is on the other at once. A guest's screen names no private or missing repo and the edit keys do nothing. Test: `test/packs-tui.test.ts`.
	30
	31	Each card shows the repos inside with a live link when the repo runs an app here, how many there are and how fresh, and Start a forge from this (`/forges/new?pack=name`): the form opens with the pack as it stands now (its repos ticked, the brief as the direction), so what you post is what is copied, and a later edit never reaches a forge that exists. A repo that is missing or not public is left out and named on the pack's page. Two packs, Business and Gamer, are seeded with the owner's lists; trim them on their pages.
	32
	33	The seeded repo lists are the owner's and are not checked against a forge here: a name that is missing or not public is left out of the cards and named to an admin, who trims it on the pack's page. Not done: drag to reorder (the arrows do it), a repo's "Add to pack…" menu, an MCP tool (the API is the door), a preview image on each card, and the crew brief is carried as the child's direction, not as a per-agent brief. The older `pack.json` packs still list under "Deploy on your own machine".
		@@ -0,0 +1,3 @@
	1	import type { Route } from "../shared.ts";
	2
	3	export const route: Route = { method: "get", path: "/api/v1/packs", summary: "The curated packs: { items: [{ name, title, pitch, brief, repos, shown }] }; shown is the public repos on this forge; repos (the list as kept) and left_out come only to a person admin", auth: false, role: "anonymous" };
		@@ -104,6 +104,8 @@ export { route as getApiV1OpenapiJson } from "./getApiV1OpenapiJson.ts";
104	104	export { route as getApiV1OrgsOrg } from "./getApiV1OrgsOrg.ts";
105	105	export { route as getApiV1OrgsOrgTeams } from "./getApiV1OrgsOrgTeams.ts";
106	106	export { route as getApiV1OrgsOrgTeamsTeamMembers } from "./getApiV1OrgsOrgTeamsTeamMembers.ts";
	107	export { route as getApiV1Packs } from "./getApiV1Packs.ts";
	108	export { route as getApiV1PacksName } from "./getApiV1PacksName.ts";
107	109	export { route as getApiV1PassportHealth } from "./getApiV1PassportHealth.ts";
108	110	export { route as getApiV1Releases } from "./getApiV1Releases.ts";
109	111	export { route as getApiV1Repos } from "./getApiV1Repos.ts";
		@@ -374,6 +376,7 @@ export { route as putApiV1FeaturesSlug } from "./putApiV1FeaturesSlug.ts";
374	376	export { route as putApiV1ForgeEconomics } from "./putApiV1ForgeEconomics.ts";
375	377	export { route as putApiV1ForgesNameCredit } from "./putApiV1ForgesNameCredit.ts";
376	378	export { route as putApiV1Front } from "./putApiV1Front.ts";
	379	export { route as putApiV1PacksName } from "./putApiV1PacksName.ts";
377	380	export { route as putApiV1ReposOwnerNameAppEnvVar } from "./putApiV1ReposOwnerNameAppEnvVar.ts";
378	381	export { route as putApiV1ReposOwnerNameAppMembers } from "./putApiV1ReposOwnerNameAppMembers.ts";
379	382	export { route as putApiV1ReposOwnerNameCrewUsername } from "./putApiV1ReposOwnerNameCrewUsername.ts";
		@@ -0,0 +1,15 @@
	1	import type { Route } from "../shared.ts";
	2
	3	export const route: Route = {
	4	method: "put",
	5	path: "/api/v1/packs/{name}",
	6	summary: "Curate a pack (a person admin's token, rw scope): the fields sent replace the pack's, a new {name} makes it (201); repos is the ordered list of owner/name, at most 20; every change is kept with who and when; answers the pack",
	7	auth: true,
	8	role: "admin",
	9	body: { title: "string, at most 80", pitch: "string, at most 300", brief: "string, at most 4000", repos: "list of owner/name" },
	10	refusals: {
	11	forbidden: "the caller is not a site admin who is a person (403)",
	12	invalid: "a field is the wrong shape, or a repo is not owner/name (422)",
	13	not_found: "no such pack (404)",
	14	},
	15	};
		@@ -0,0 +1,1 @@
	1	1f6c282db35364773b0e12624c96b4b8b7580ce869c8a0d9c840dad59d0d2a1a
		@@ -0,0 +1,44 @@
	1	// Curated packs (#11006): a pack is a named, ordered list of repos on this
	2	// forge that an admin edits in the forge itself, with a pitch and a crew
	3	// brief and a kept history. Additive. The first two, Business and Gamer, are
	4	// seeded with the owner's lists; repos that are missing or not public are
	5	// left out when the page is drawn, and named there.
	6	export default `
	7	CREATE TABLE curated_pack (
	8	name TEXT PRIMARY KEY,
	9	title TEXT NOT NULL,
	10	pitch TEXT NOT NULL DEFAULT '',
	11	brief TEXT NOT NULL DEFAULT '',
	12	position INTEGER NOT NULL DEFAULT 0,
	13	created_at TEXT NOT NULL,
	14	updated_at TEXT NOT NULL
	15	);
	16	CREATE TABLE curated_pack_repo (
	17	pack TEXT NOT NULL REFERENCES curated_pack(name) ON DELETE CASCADE ON UPDATE CASCADE,
	18	repo TEXT NOT NULL,
	19	position INTEGER NOT NULL,
	20	PRIMARY KEY (pack, repo)
	21	);
	22	CREATE TABLE curated_pack_change (
	23	id INTEGER PRIMARY KEY AUTOINCREMENT,
	24	pack TEXT NOT NULL,
	25	actor TEXT NOT NULL,
	26	what TEXT NOT NULL,
	27	at TEXT NOT NULL
	28	);
	29	CREATE INDEX curated_pack_change_pack ON curated_pack_change (pack, id);
	30	INSERT INTO curated_pack (name, title, pitch, brief, position, created_at, updated_at) VALUES
	31	('business', 'Business', 'Leads, listings, forms and money: the tools a small business runs on.',
	32	'You work for a small business. Put leads, forms and money first: answer a new lead fast, keep every form working, and keep the deal and payment numbers right. Say plainly what you changed and what a customer would notice.',
	33	0, strftime('%Y-%m-%dT%H:%M:%fZ','now'), strftime('%Y-%m-%dT%H:%M:%fZ','now')),
	34	('gamer', 'Gamer', 'Games to play and make yours: a shelf, a sandbox, classics and a shooter engine.',
	35	'You make games feel good to play. Put play feel and animation first: input that answers on the next frame, motion with weight, sound and feedback on every hit. Say plainly what you changed and how it plays now.',
	36	1, strftime('%Y-%m-%dT%H:%M:%fZ','now'), strftime('%Y-%m-%dT%H:%M:%fZ','now'));
	37	INSERT INTO curated_pack_repo (pack, repo, position) VALUES
	38	('business','trevato/realty-desk',0),('business','trevato/deal-clock',1),('business','trevato/listing-launch',2),
	39	('business','trevato/speed-to-lead',3),('business','trevato/form-engines',4),('business','trevato/business-spawner',5),
	40	('business','trevato/bazaar',6),
	41	('gamer','trevato/games-shelf',0),('gamer','trevato/sandbox-game',1),('gamer','trevato/pixel-plays',2),
	42	('gamer','trevato/scrims',3),('gamer','trevato/chess',4),('gamer','trevato/pong',5),('gamer','trevato/voxel',6),
	43	('gamer','trevato/gamers',7),('gamer','trevato/cs-engine',8),('gamer','trevato/survivor-guide',9);
	44	`;
		@@ -347,6 +347,7 @@ import { passportRoutes } from "./passport_edge.ts";
347	347	import { egressGrantRoutes } from "./api/egress_grants.ts";
348	348	import { printRoutes } from "./api/print.ts";
349	349	import { forgeRoutes } from "./api/forges.ts";
	350	import { packRoutes } from "./api/packs.ts";
350	351	import { forgeViewRoutes } from "./api/forge_view.ts";
351	352	import { economicsRoutes } from "./api/economics.ts";
352	353	import { releasesRoutes } from "./api/releases.ts";
		@@ -3573,6 +3574,7 @@ export function apiRoutes(router: Router<Handler>): void {
3573	3574	});
3574	3575
3575	3576	forgeRoutes(router);
	3577	packRoutes(router);
3576	3578	forgeViewRoutes(router);
3577	3579	economicsRoutes(router);
3578	3580	releasesRoutes(router);
		@@ -0,0 +1,51 @@
	1	/**
	2	* Curated packs over the API (#11006): `GET /api/v1/packs`,
	3	* `GET /api/v1/packs/{name}` and `PUT /api/v1/packs/{name}` with
	4	* `{title, pitch, brief, repos:[owner/name…]}`. The rules live in
	5	* `packs/curated.ts`, the same ones the page uses. A PUT makes the pack when
	6	* the name is new; an admin who is not an agent, and a token that may write.
	7	*/
	8
	9	import { notePhase, takeSessionTime } from "../../core/route_timing.ts";
	10	import { editPack, getPack, history, listPacks, mayCurate, resolveRepos, type CuratedPack } from "../../packs/curated.ts";
	11	import { crossOrigin, type Ctx, type Handler } from "../context.ts";
	12	import { apiError, body, forbidden, json, requireScope } from "../respond.ts";
	13	import type { Router } from "../router.ts";
	14
	15	const view = (ctx: Ctx, p: CuratedPack) => ({
	16	name: p.name,
	17	title: p.title,
	18	pitch: p.pitch,
	19	brief: p.brief,
	20	shown: resolveRepos(ctx.app.db, p, ctx.auth.user).filter((r) => r.left === undefined).map((r) => r.full),
		sentinelcrew 22h ago outdated HIGH: `repos: p.repos` exposes private and missing repo names to anonymous callers. Return `shown` only, unless the caller is a person admin.
	21	// The list as kept, with why each left one is left out, names private and missing repos: a person admin's only.
	22	...(mayCurate(ctx.auth.user)
	23	? { repos: p.repos, left_out: resolveRepos(ctx.app.db, p, ctx.auth.user).filter((r) => r.left !== undefined).map((r) => ({ repo: r.full, why: r.left })) }
	24	: {}),
	25	});
	26
	27	export function packRoutes(router: Router<Handler>): void {
	28	router.add("GET", "/api/v1/packs", (ctx) => {
	29	notePhase(ctx.request, "session", takeSessionTime(ctx.request));
	30	return json({ items: listPacks(ctx.app.db).map((p) => view(ctx, p)), next_cursor: null });
	31	});
	32	router.add("GET", "/api/v1/packs/:name", (ctx) => {
	33	notePhase(ctx.request, "session", takeSessionTime(ctx.request));
	34	const pack = getPack(ctx.app.db, ctx.params.name ?? "");
	35	if (pack === undefined) return apiError("not_found", 404, "no such pack");
	36	return json({ ...view(ctx, pack), ...(mayCurate(ctx.auth.user) ? { history: history(ctx.app.db, pack.name) } : {}) });
	37	});
	38	router.add("PUT", "/api/v1/packs/:name", async (ctx) => {
	39	notePhase(ctx.request, "session", takeSessionTime(ctx.request));
	40	const denied = requireScope(ctx, "rw");
	41	if (denied) return denied;
	42	if (crossOrigin(ctx.request, ctx.url, ctx.app.log)) return forbidden();
	43	if (!mayCurate(ctx.auth.user)) return forbidden();
	44	const input = await body(ctx.request);
	45	const name = ctx.params.name ?? "";
	46	const create = getPack(ctx.app.db, name) === undefined;
	47	const done = editPack(ctx.app.db, ctx.auth.user, name, { title: input["title"], pitch: input["pitch"], brief: input["brief"], repos: input["repos"] }, create);
	48	if (!done.ok) return apiError(done.error, done.error === "not_found" ? 404 : done.error === "forbidden" ? 403 : done.error === "exists" ? 409 : 422, done.says);
	49	return json(view(ctx, done.pack), create ? 201 : 200);
	50	});
	51	}
		@@ -291,7 +291,7 @@ import { HOME_REGIONS } from "../web/studio/home_last.ts";
291	291	import { serviceWorker } from "../web/sw.ts";
292	292	import { explorePage } from "../web/studio/explore.ts";
293	293	import { isPacksMirror, MIRROR_PUSH_REFUSED } from "../packs/owner.ts";
294		import { packPage, packsMirror, packsPage } from "../web/pages/packs.ts";
	294	import { packEdit, packNew, packPage, packRepos, packsMirror, packsPage } from "../web/pages/packs.ts";
295	295	import {
296	296	makeItYoursPage,
297	297	makeItYoursReceipt,
		@@ -846,6 +846,9 @@ export function buildRouter(): Router<Handler> {
846	846	// Forge packs: premade forges to deploy, and the way to help build their apps.
847	847	router.add("GET", "/packs", packsPage);
848	848	router.add("POST", "/packs/mirror", packsMirror);
	849	router.add("POST", "/packs/new", packNew);
	850	router.add("POST", "/packs/:name/edit", packEdit);
	851	router.add("POST", "/packs/:name/repos", packRepos);
849	852	router.add("GET", "/packs/:name", packPage);
850	853	router.add("POST", "/front", frontUpdate);
851	854	router.add("POST", "/home/archive", homeArchive);
		@@ -0,0 +1,202 @@
	1	/**
	2	* Curated packs (#11006): a pack is a named, ordered list of repos on this
	3	* forge, with a pitch and a crew brief, that an admin edits in the forge
	4	* itself (tables `curated_pack*`). Plain data in, plain data out: every write
	5	* goes through `editPack`, which checks, saves and keeps who/what/when, so the
	6	* page, the API and any agent share one rule. Starting a forge reads the list
	7	* as it stands at that moment; a forge already started keeps its own copy.
	8	*/
	9
	10	import type { Database } from "bun:sqlite";
	11	import { canRead, getRepo, repoDatesFor } from "../core/repos.ts";
	12	import type { User } from "../core/users.ts";
	13	import { isSafeName } from "../git/guard.ts";
	14
	15	export const MAX_PACKS = 50;
	16	export const MAX_PACK_REPOS = 20;
	17	const NAME = /^[a-z][a-z0-9-]{0,39}$/;
	18
	19	export interface CuratedPack {
	20	readonly name: string;
	21	readonly title: string;
	22	readonly pitch: string;
	23	readonly brief: string;
	24	readonly repos: readonly string[];
	25	}
	26
	27	export interface Change {
	28	readonly actor: string;
	29	readonly what: string;
	30	readonly at: string;
	31	}
	32
	33	type Admin = Pick<User, "id" \| "username" \| "isAdmin" \| "kind">;
	34	export const mayCurate = (u: Admin \| undefined): u is Admin => u !== undefined && u.isAdmin && u.kind !== "agent";
	35
	36	export const slugOf = (title: string): string =>
	37	title.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+\|-+$/g, "").replace(/^[^a-z]+/, "").slice(0, 40).replace(/-+$/, "");
	38
	39	export function listPacks(db: Database): CuratedPack[] {
	40	const reposOf = new Map<string, string[]>();
	41	for (const r of db.query<{ pack: string; repo: string }, []>("SELECT pack, repo FROM curated_pack_repo ORDER BY pack, position").all())
	42	reposOf.set(r.pack, [...(reposOf.get(r.pack) ?? []), r.repo]);
	43	return db
	44	.query<{ name: string; title: string; pitch: string; brief: string }, []>(
	45	"SELECT name, title, pitch, brief FROM curated_pack ORDER BY position, name",
	46	)
	47	.all()
	48	.map((p) => ({ ...p, repos: reposOf.get(p.name) ?? [] }));
	49	}
	50
	51	/** One pack by name: two reads keyed on the name, not every pack. */
	52	export function getPack(db: Database, name: string): CuratedPack \| undefined {
	53	const row = db
	54	.query<{ name: string; title: string; pitch: string; brief: string }, [string]>("SELECT name, title, pitch, brief FROM curated_pack WHERE name = ?1")
	55	.get(name);
	56	if (row === null) return undefined;
	57	const repos = db.query<{ repo: string }, [string]>("SELECT repo FROM curated_pack_repo WHERE pack = ?1 ORDER BY position").all(name).map((r) => r.repo);
	58	return { ...row, repos };
	59	}
	60
	61	export function history(db: Database, name: string, limit = 20): Change[] {
	62	return db
	63	.query<Change, [string, number]>("SELECT actor, what, at FROM curated_pack_change WHERE pack = ?1 ORDER BY id DESC LIMIT ?2")
	64	.all(name, limit);
	65	}
	66
	67	/** A repo word as `owner/name`, lowercase, or undefined. */
	68	export function repoWord(v: unknown): string \| undefined {
	69	if (typeof v !== "string") return undefined;
	70	const [owner = "", name = "", ...rest] = v.trim().split("/");
	71	return rest.length > 0 \|\| !isSafeName(owner) \|\| !isSafeName(name) ? undefined : `${owner}/${name}`.toLowerCase();
	72	}
	73
	74	export type Edit = { title?: unknown; pitch?: unknown; brief?: unknown; repos?: unknown };
	75	export type EditResult = { ok: true; pack: CuratedPack } \| { ok: false; error: "forbidden" \| "not_found" \| "invalid" \| "exists"; says: string };
	76
	77	const bad = (says: string): EditResult => ({ ok: false, error: "invalid", says });
	78	const clean = (v: unknown, max: number): string \| undefined =>
	79	typeof v === "string" && v.length <= max && !/[\u0000-\u0008\u000b\u000c\u000e-\u001f]/.test(v) ? v.trim() : undefined;
	80
	81	/** What changed between two packs, in one sentence per change. */
	82	function describe(from: CuratedPack \| undefined, to: CuratedPack): string[] {
	83	if (from === undefined) return [`made the pack with ${to.repos.length} repos`];
	84	const out: string[] = [];
	85	if (from.title !== to.title) out.push(`renamed it to "${to.title}"`);
	86	if (from.pitch !== to.pitch) out.push("changed the pitch");
	87	if (from.brief !== to.brief) out.push("changed the crew brief");
	88	for (const r of to.repos) if (!from.repos.includes(r)) out.push(`added ${r}`);
	89	for (const r of from.repos) if (!to.repos.includes(r)) out.push(`removed ${r}`);
	90	const kept = to.repos.filter((r) => from.repos.includes(r));
	91	if (kept.join() !== from.repos.filter((r) => to.repos.includes(r)).join()) out.push("reordered the repos");
	92	return out;
	93	}
	94
	95	/**
	96	* The one door. Creates the pack when `name` is new (`create`), else changes
	97	* the fields given; `repos` replaces the list. An admin who is not an agent.
	98	*/
	99	export function editPack(db: Database, user: Admin \| undefined, name: string, edit: Edit, create = false): EditResult {
	100	if (!mayCurate(user)) return { ok: false, error: "forbidden", says: "only a site admin edits packs" };
	101	if (!NAME.test(name)) return bad("a pack name is lowercase letters, digits and dashes");
	102	const before = getPack(db, name);
	103	if (create && before !== undefined) return { ok: false, error: "exists", says: `there is already a pack named ${name}` };
	104	if (!create && before === undefined) return { ok: false, error: "not_found", says: "no such pack" };
	105	const title = edit.title === undefined ? (before?.title ?? name) : clean(edit.title, 80);
	106	const pitch = edit.pitch === undefined ? (before?.pitch ?? "") : clean(edit.pitch, 300);
	107	const brief = edit.brief === undefined ? (before?.brief ?? "") : clean(edit.brief, 4000);
	108	if (title === undefined \|\| title === "") return bad("a title is 1 to 80 characters");
	109	if (pitch === undefined) return bad("a pitch is at most 300 characters");
	110	if (brief === undefined) return bad("a crew brief is at most 4000 characters");
	111	let repos: string[] = [...(before?.repos ?? [])];
	112	if (edit.repos !== undefined) {
	113	if (!Array.isArray(edit.repos) \|\| edit.repos.length > MAX_PACK_REPOS) return bad(`repos is a list of at most ${MAX_PACK_REPOS} owner/name words`);
	114	repos = [];
	115	for (const w of edit.repos) {
	116	const r = repoWord(w);
	117	if (r === undefined) return bad("each repo is written owner/name");
	118	if (!repos.includes(r)) repos.push(r);
	119	}
	120	}
	121	if (before === undefined && (db.query<{ n: number }, []>("SELECT count(*) AS n FROM curated_pack").get()?.n ?? 0) >= MAX_PACKS)
	122	return bad(`at most ${MAX_PACKS} packs`);
	123	const after: CuratedPack = { name, title, pitch, brief, repos };
	124	const said = describe(before, after);
	125	const at = new Date().toISOString();
	126	db.transaction(() => {
	127	if (before === undefined)
	128	db.query(
	129	`INSERT INTO curated_pack (name, title, pitch, brief, position, created_at, updated_at)
	130	VALUES (?1, ?2, ?3, ?4, (SELECT COALESCE(MAX(position), -1) + 1 FROM curated_pack), ?5, ?5)`,
	131	).run(name, title, pitch, brief, at);
	132	else db.query("UPDATE curated_pack SET title = ?2, pitch = ?3, brief = ?4, updated_at = ?5 WHERE name = ?1").run(name, title, pitch, brief, at);
	133	db.query("DELETE FROM curated_pack_repo WHERE pack = ?1").run(name);
	134	for (const [i, r] of repos.entries()) db.query("INSERT INTO curated_pack_repo (pack, repo, position) VALUES (?1, ?2, ?3)").run(name, r, i);
	135	for (const what of said) db.query("INSERT INTO curated_pack_change (pack, actor, what, at) VALUES (?1, ?2, ?3, ?4)").run(name, user.username, what, at);
	136	})();
	137	return { ok: true, pack: after };
	138	}
	139
	140	export type RepoOp = "add" \| "remove" \| "up" \| "down";
	141	export const isRepoOp = (v: unknown): v is RepoOp => v === "add" \|\| v === "remove" \|\| v === "up" \|\| v === "down";
	142
	143	/**
	144	* One change to a pack's repo list, through `editPack`: the page and the terminal share it.
	145	* A repo to add must exist here; one to move or remove must be in the pack.
	146	*/
	147	export function changeRepos(db: Database, user: Admin \| undefined, name: string, op: unknown, word: unknown): EditResult {
	148	if (!mayCurate(user)) return { ok: false, error: "forbidden", says: "only a site admin edits packs" };
	149	const pack = getPack(db, name);
	150	if (pack === undefined) return { ok: false, error: "not_found", says: "no such pack" };
	151	const repo = repoWord(word);
	152	if (repo === undefined) return bad("Write the repo as owner/name.");
	153	if (!isRepoOp(op)) return bad("Choose add, remove, up or down.");
	154	const repos = [...pack.repos];
	155	const at = repos.indexOf(repo);
	156	if (op === "add") {
	157	const [owner = "", rname = ""] = repo.split("/");
	158	if (getRepo(db, owner, rname) === undefined) return bad(`${repo} is not a repository on this forge.`);
	159	if (at < 0) repos.push(repo);
	160	} else if (at < 0) return bad(`${repo} is not in this pack.`);
	161	else if (op === "remove") repos.splice(at, 1);
	162	else if (op === "up" && at > 0) [repos[at - 1], repos[at]] = [repos[at]!, repos[at - 1]!];
	163	else if (op === "down" && at < repos.length - 1) [repos[at + 1], repos[at]] = [repos[at]!, repos[at + 1]!];
	164	return editPack(db, user, name, { repos });
	165	}
	166
	167	export interface PackRepo {
	168	readonly full: string;
	169	readonly description: string;
	170	/** Runs an app on this forge: it has a live link. */
	171	readonly live: boolean;
	172	/** The newest push, or null. */
	173	readonly pushedAt: string \| null;
	174	/** Why it is not shown, when it is not: missing, or not public. */
	175	readonly left?: string;
	176	}
	177
	178	/** A pack's repos as `viewer` may see them, in the pack's order. Missing and private ones are named, not shown. One grouped read for dates, one for apps. */
	179	export function resolveRepos(db: Database, pack: CuratedPack, viewer: User \| undefined): PackRepo[] {
	180	const found = pack.repos.map((full) => {
	181	const [owner = "", name = ""] = full.split("/");
	182	return { full, repo: getRepo(db, owner, name) };
	183	});
	184	const shown = found.flatMap((f) => (f.repo !== undefined && f.repo.visibility === "public" && canRead(db, f.repo, viewer) ? [f.repo] : []));
	185	const ids = shown.map((r) => r.id);
	186	const dates = ids.length === 0 ? new Map() : repoDatesFor(db, ids);
	187	const live = new Set(
	188	ids.length === 0
	189	? []
	190	: db.query<{ repo_id: string }, string[]>(`SELECT repo_id FROM app WHERE repo_id IN (${ids.map(() => "?").join(",")})`).all(...ids).map((r) => r.repo_id),
	191	);
	192	return found.map(({ full, repo }): PackRepo => {
	193	if (repo === undefined) return { full, description: "", live: false, pushedAt: null, left: "not on this forge" };
	194	if (!ids.includes(repo.id)) return { full, description: "", live: false, pushedAt: null, left: "not public" };
	195	return {
	196	full: `${repo.ownerName}/${repo.name}`,
	197	description: repo.description,
	198	live: live.has(repo.id),
	199	pushedAt: dates.get(repo.id)?.pushedAt ?? null,
	200	};
	201	});
	202	}