4a6a373f1e
UI: ported flit/wisp's dark, JetBrains-Mono-accented theme wholesale (same CSS vars, same card/button/input vocabulary) so stash reads as part of the same family of tools instead of a bare unstyled list. List view is now card-based with unread indicators; reader view got proper article typography. Delete: the list and reader views now have a delete button (with a confirm prompt) wired to the existing DELETE /api/articles/:id via a new POST /delete/:id UI route, since browser forms can't issue DELETE directly. express.urlencoded() added to parse the form posts this and the existing mark-read buttons need. Token management: added listTokens/revokeToken to db.ts, plus `npm run tokens` (lists label/created_at/last-4-chars only — never re-prints a full secret) and `npm run revoke-token -- <label>`. This was a real, previously-missing gap: there was no way to invalidate a single compromised token short of wiping the entire database. Built after a token got printed in plaintext during a debugging session and there was no way to kill just that one credential. Verified: full theme renders correctly (screenshotted list + reader views), revoke-token correctly 401s the targeted token while leaving others untouched (tested against a real leaked-then-revoked token), list-tokens never displays a recoverable secret. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
28 lines
709 B
JSON
28 lines
709 B
JSON
{
|
|
"name": "stash",
|
|
"version": "0.1.0",
|
|
"license": "MIT",
|
|
"type": "module",
|
|
"scripts": {
|
|
"dev:server": "tsx watch --env-file=.env src/server/index.ts",
|
|
"token": "tsx src/server/gen-token.ts",
|
|
"tokens": "tsx src/server/list-tokens.ts",
|
|
"revoke-token": "tsx src/server/revoke-token.ts",
|
|
"build": "tsc",
|
|
"start": "node --env-file=.env dist/server/index.js"
|
|
},
|
|
"dependencies": {
|
|
"express": "^4.19.2",
|
|
"better-sqlite3": "^11.3.0",
|
|
"cors": "^2.8.5"
|
|
},
|
|
"devDependencies": {
|
|
"@types/express": "^4.17.21",
|
|
"@types/node": "^22.0.0",
|
|
"@types/better-sqlite3": "^7.6.11",
|
|
"@types/cors": "^2.8.17",
|
|
"tsx": "^4.15.0",
|
|
"typescript": "^5.5.0"
|
|
}
|
|
}
|