tracker

9.2 KB

1. # tracker.worldapi.org
3. The new tracker: a Hybriel app that will track the TV shows (and later movies) the creator
4. follows and watches. **`CONCEPT.md` (the creator's) is the source of truth** — read it first;
5. nothing is built that it does not describe. Built step by step, one ticket per step
6. (tracker.worldapi.org#1, #2, …).
8. **Built so far — step 1 (ticket #1)**: the shell. The header carries the ident login (an
9. identity selector, like calendar/gitoria) and sign-out; the homepage itself stays empty. No
10. design carried over from the old app.
12. **Step 2 (ticket #2)**: the old tracker's MongoDB export is now in `storage/mpackdb/` (new
13. mpackdb ids, every reference re-pointed) — see "Data" and `STATUS.md`. Nothing is shown in the
14. UI yet; the homepage still renders empty. That is a later step, from the creator.
16. Written in **Hybriel** on **hl:web**, same stack and conventions as `ident.worldapi.org`
17. (vendored plugins/binary copied from there, see "Vendored Hybriel").
19. ## Run (dev, Loreana)
21. ```bash
22. cd /media/STORAGE/projects/tracker.worldapi.org
23. TRACKER_PORT=8700 setsid nohup ./bin/hybriel project.hl > server.log 2>&1 < /dev/null & echo $! > server.pid
24. # stop: kill $(cat server.pid)
25. ```
27. * Config (env; the real environment outranks nothing here — there is no `.env` reader in
28. project.hl, unlike ident's SMTP settings — set these in the shell or `docker-compose.yml`):
30. | Variable | Default | |
31. |---|---|---|
32. | `TRACKER_PORT` | 45008 | |
33. | `TRACKER_URL` | `http://127.0.0.1:<port>` | this app's own origin — the ident login button's `return=` is built from it |
34. | `IDENT_URL` | `https://ident.worldapi.org` | |
35. | `TRACKER_KEY` / `TRACKER_SECRET` | `''` | this app's API key + secret, from ident's `/apps` (register once, origin = `TRACKER_URL`) — **not set yet on Byrodin**: the first deploy (architect) registers the app in the live ident and puts these in `.env` next to `docker-compose.yml`, exactly like ident's own `.env` holds its SMTP settings |
36. | `TRACKER_WATCH` | on | `0` = no dev watcher (the container) |
37. | `TRACKER_STORAGE` | `./storage/mpackdb` | the `usersTable` directory |
38. | `TRACKER_SESSIONS` | `./.sessions` (hl:web's own default) | this app's own session store |
39. | `HL_HOST` (or `HOST`) | 0.0.0.0 | interface to bind; `127.0.0.1` on Byrodin |
41. Without `TRACKER_KEY`/`TRACKER_SECRET`, `/` still renders (signed out, the selector and "Log
42. in with ident" show in the header); a login attempt answers `'login is not set up on this
43. server (TRACKER_KEY / TRACKER_SECRET missing)'` instead of exchanging a code — so the app is
44. never a dead 500 while waiting for that one-time setup.
46. ## What it does (step 1)
48. * **Login, copied unchanged from calendar.worldapi.org** (rejected once for a centered
49. sign-in and no header selector — architect, 2026-09-27): ident only, no own passwords
50. (ident's login button flow, ident.worldapi.org README "How apps use ident"), the identity
51. selector (`<ident-selector>`, ident's `/selector.js`) sits in the header
52. (`components/main.hl`, `userBox`), a plain "Log in with ident" link beside it when signed
53. out. Choosing an identity in the selector fires `ident-login` (one-time code); `login.js`
54. (an external-component bridge, allowed per the creator: "login.js is correct, as thats for
55. externals in general") hands the code to a hidden input, whose `change` calls the server
56. face `trackerLogin` (`users.hl` `exchangeCode`, `POST <ident>/api/exchange` — nothing else:
57. ident does not hand over a display name yet, ident#23 done / ident#11 on hold), which makes
58. or finds this app's own user record (`usersTable`, `storage/mpackdb/users.db`) and sets
59. `session.user = { id }`. `/login/callback` is the same exchange as a plain redirect (the
60. login button's return URL) for a client that has no socket yet. "Log out" in the header
61. calls `trackerLogOut`; ident's own login is untouched. This app's own session cookie is
62. `trackersid` (cookies ignore ports, an own name keeps it apart from ident's `identsid` on
63. the same dev host, hybriel#10/#17).
64. * **The empty homepage** (`/`, `components/home.hl`): no content at all, signed in or out —
65. the header alone carries the login state. Nothing else.
66. * **One mpackdb table**: `storage/mpackdb/users.db` (`identity` → this app's user id — no
67. display name, no other per-user data yet). Step 2 (tracker.worldapi.org#2, open) brings the
68. old tracker's data across.
70. ## Test
72. ```bash
73. node tests/browser.mjs # THE GATE: this app's own server + its OWN ident (a copy of
74. # ident's code without .env, codes to a mail sink — no live
75. # ident, no real mail; tests/identkit.mjs, same as calendar's
76. # gate) + a real headless Chrome: signed out (header shows the
77. # selector + "Log in with ident", the page itself is empty) ->
78. # sign in -> header shows "Log out", page still empty -> sign
79. # out -> signed out again -> a reload stays signed out. Also
80. # checks the header has no bottom border and filled buttons
81. # (incl. the ident selector's) have none, while inverted ones
82. # ("Log out") keep theirs.
83. # 16 checks. Own servers :8700 (this app) / :8701 (ident copy);
84. # own storage .scratch/gate-store; Chrome on 8702-8709.
85. ps -eo pid,args | grep [h]l-browser-tier # must print nothing afterwards
86. ```
88. ## Deploy (Byrodin)
90. Target: `/CONTAINERS/projects/tracker.worldapi.org` on Byrodin, container
91. `tracker.worldapi.org` (`docker-compose.yml`: debian:12-slim, host network,
92. `HL_HOST=127.0.0.1`, `TRACKER_PORT=45008`, `TRACKER_WATCH=0`, the folder mounted at
93. `/home/tracker`, `./bin/hybriel project.hl`), public https://tracker.worldapi.org/ via
94. nginx (TLS ends there; no baseUrl/tls in the app, like ident/notes).
95. * **First deploy: done by the architect** (folder, nginx vhost with WebSocket Upgrade
96. headers, cert, DNS, **and registering this app in the live ident** — `/apps` → name +
97. origin `https://tracker.worldapi.org` → the API key + secret go into `.env` next to
98. `docker-compose.yml`, `TRACKER_KEY=… TRACKER_SECRET=…`).
99. * **Later: `./deploy.sh`** on Loreana, in this folder: runs the gate (refuses on a failure;
100. `--skip-tests` skips it LOUDLY), rsyncs the code to
101. `[email protected]:/CONTAINERS/projects/tracker.worldapi.org` (never `storage/`,
102. `.sessions/`, `.env`, `.scratch/`, `server.*`, logs — the preview is checked for them; no
103. `--delete`), `docker compose up -d && docker compose restart` over `ssh -F /dev/null`,
104. then waits for https://tracker.worldapi.org/ to answer 200.
105. * `./deploy.sh --dry-run` = the gate + `rsync -n` + the commands it would run (no restart, no
106. URL check). `--target DIR|HOST:DIR` and `--url URL` point it elsewhere (tested against a
107. local directory, see STATUS.md).
109. ## Data
111. `storage/mpackdb/`: `users.db` (`identity` → this app's own user id, `users.hl`) plus, since
112. step 2, the old tracker's data — `genres.db` (27), `persons.db` (15157), `shows.db` (9453),
113. `seasons.db` (6430), `episodes.db` (231584), `follows.db` (128), `watches.db` (11692), all with
114. fresh mpackdb ids and every reference re-pointed (`tools/migrate.hl`); the one old user is this
115. app's user for ident short id `az5b2`. Counts and the referential-integrity proof:
116. `STATUS.md` "ticket #2". Nothing of this is shown in the UI yet.
118. ## Files
120. | File | |
121. |---|---|
122. | `CONCEPT.md` | the creator's concept — do not edit |
123. | `project.hl` | manifest: routes (`/login/callback`, `/login/failed`, `/login.js`, `/` component Home), the app's own session cookie |
124. | `users.hl` | the ident exchange + the `usersTable`, copied from calendar.worldapi.org's `users.hl` |
125. | `login.js` | bridge between `<ident-selector>`'s `ident-login` event and the shell, copied verbatim from calendar.worldapi.org |
126. | `components/home.hl` | `/`: the empty homepage — no content, signed in or out |
127. | `components/main.hl` | the shell (header: brand, `<ident-selector>`, log in / log out) |
128. | `components/loginfailed.hl` | `/login/failed`: why a login didn't work |
129. | `styles.hl` | all CSS (imports the tokens from `shared/tokens.hl`; accent green `#4ec9b0`) |
130. | `shared/tokens.hl` | the WorldAPI tokens, vendored verbatim from `ident.worldapi.org/shared/tokens.hl` |
131. | `tests/browser.mjs` | the gate (above) |
132. | `tests/identkit.mjs` | starts a throwaway ident copy for the gate, copied from calendar.worldapi.org's `tests/` |
133. | `tests/cdp.mjs`, `tests/ports.mjs` | the CDP browser driver, copied from `ident.worldapi.org/tests/` |
134. | `docker-compose.yml`, `Dockerfile`, `deploy.sh` | Byrodin container; the deploy from Loreana (section "Deploy") |
135. | `tools/migrate.hl` | one-off: old MongoDB export → `storage/mpackdb/` (step 2, idempotent, see `STATUS.md`) |
136. | `tools/verify.hl` | one-off: proves the migrated data against a COPY of `storage/mpackdb/` (counts, zero dangling references, one show end to end) |
138. ## Vendored Hybriel
140. `bin/hybriel` + `plugins/` copied verbatim from `ident.worldapi.org` (2026-09-27), sha256
141. `9e5e95b33680eb68a016e9e48a76c9f92193fd2ffdbdf437c1aab1bda2731a0d` — hybriel master
142. 837fe120 (ident's mission 036), the newest vendored+gated build available locally. No local
143. patch. Re-vendor the same way: copy `bin/hybriel` + `plugins/` from a current worldapi app,
144. run the gate.