{"entries":[{"lastCommit":{"author":{"email":"tim@timtrautmann.com","name":"Tim Trautmann","when":"2026-05-29T12:10:11.000000-07:00"},"committer":{"email":"tim@timtrautmann.com","name":"Tim Trautmann","when":"2026-05-29T12:10:11.000000-07:00"},"hash":"3955ba8d68fb06fc23baaa6cefa9a6555cca02b3","message":"Auto-install Ghost webhooks via Admin API\n\n@tryghost/admin-api exposes webhooks as a resource — we can create the\nfour required hooks (post.published / post.published.edited /\npost.unpublished / post.deleted) via the Admin API instead of asking\nthe operator to paste a URL + secret into Ghost's UI four times.\n\nlib/ghost.ts gains ensureWebhooks(site, bridgeUrl): walks the required\nevent list, browses existing webhooks for the integration, creates only\nthe missing ones. Idempotent — safe to re-run after a credentials\nrotation or to confirm post-deploy.\n\nSetup wizard calls it automatically after publication bootstrap and\nsuppresses the 'wire these up by hand' instructions when it succeeds.\nOn failure (network, permissions, integration restrictions) it falls\nback to printing the manual snippet — operator sees what to do\nthemselves.\n\nNew standalone command:\n gs webhooks [] — for upgrading existing installs\n\nReports created vs already-present vs failed per event.\n","tree":"dee8d4e26971e53baeab4bab476a09f4d4fe6d0a"},"mode":"0100644","name":"cli.ts","size":4560},{"lastCommit":{"author":{"email":"tim@timtrautmann.com","name":"Tim Trautmann","when":"2026-05-29T12:17:09.000000-07:00"},"committer":{"email":"tim@timtrautmann.com","name":"Tim Trautmann","when":"2026-05-29T12:17:09.000000-07:00"},"hash":"7fcc1085c1e5660644f8513eef138420df7931e1","message":"Setup: include Caddy + nginx snippets for the .well-known file\n\nThe wizard's '① .well-known file' section now prints ready-to-paste\nreverse-proxy snippets with the operator's actual AT-URI substituted in\n— Caddy (covers the bundled-Caddy pattern in the official Ghost docker\ncompose) and nginx (covers Ghost-CLI's default and most custom setups).\nPlus a reload reminder.\n\nCuts the 'figure out your reverse proxy's syntax' step out of the loop\nfor the most common deployments. Operators on more exotic setups\n(Cloudflare Workers, Traefik, etc.) still have to translate the intent\nthemselves, but the pattern is the same: serve the AT-URI as text/plain\nat the exact path, before any catch-all proxy directive.\n","tree":"c4ef3071d265eddcefea3a02f7b4e63bcde02e14"},"mode":"0040000","name":"commands","size":0},{"lastCommit":{"author":{"email":"tim@timtrautmann.com","name":"Tim Trautmann","when":"2026-07-06T21:21:25.000000-07:00"},"committer":{"email":"tim@timtrautmann.com","name":"Tim Trautmann","when":"2026-07-06T21:21:25.000000-07:00"},"hash":"b1c6b6b9cdbc1a6fcfe6d780f2b22f5936723154","message":"test: node:test harness + vendored markpub lexicon fixtures\n\nCo-Authored-By: Claude Fable 5 \n","tree":"ede9e96e44e3f02cc3c9b7dabe285b8ed8a29817"},"mode":"0040000","name":"lexicons","size":0},{"lastCommit":{"author":{"email":"tim@timtrautmann.com","name":"Tim Trautmann","when":"2026-07-06T21:43:55.000000-07:00"},"committer":{"email":"tim@timtrautmann.com","name":"Tim Trautmann","when":"2026-07-06T21:43:55.000000-07:00"},"hash":"50d7215997c9235c0541e12339f723799248bb95","message":"fix: copy tsconfig.build.json into Docker builder stage\n\nReview ride-alongs: restore package.json bin alignment, cover the\nimgless kg-image-card branch, note unescaped-caption limitation.\n\nCo-Authored-By: Claude Fable 5 \n","tree":"94769f4e5e330c4d41b4f00ec0cb8274f812be44"},"mode":"0040000","name":"lib","size":0},{"lastCommit":{"author":{"email":"tim@timtrautmann.com","name":"Tim Trautmann","when":"2026-05-29T10:08:08.000000-07:00"},"committer":{"email":"tim@timtrautmann.com","name":"Tim Trautmann","when":"2026-05-29T10:08:08.000000-07:00"},"hash":"ea0619455dd6508a63d439f7a1be844730a5d0f2","message":"Refactor: multi-tenant — one bridge, many Ghost↔PDS sites\n\nReplaces single-tenant config-as-credentials with a sites table. One\nghoststandard instance can now bridge multiple Ghost blogs to multiple\nStandard.site publications — each with its own handle, app password,\npublication metadata, theme, icon, and webhook secret.\n\nSchema:\n sites id, slug, name, atproto_*, ghost_*, webhook_secret,\n publication_*, timestamps\n post_mapping site_id FK + ghost_post_id PRIMARY KEY (site_id,\n ghost_post_id). ON DELETE CASCADE for site removal.\n config stays for genuinely global keys (bridge_url).\n\nWebhook routing:\n POST /webhooks/ghost/:slug — look up the site by slug, HMAC-verify\n with that site's secret, dispatch. Ghost gets four webhooks per site,\n all pointing at the slug-bearing URL.\n\nLib refactor:\n lib/atproto.ts and lib/ghost.ts shift from one cached agent/client to\n Map. Every exported function takes a Site argument. SSRF\n allowlist for cover images uses that site's ghost_url. Publication\n AT-URI cached per site.\n\nCLI:\n gs setup first-run: bridge_url + first site wizard\n gs site add subsequent sites\n gs site list tabular overview\n gs site show per-site details\n gs site rm remove (with optional PDS document cleanup)\n\n All operate commands (sync, unsync, backfill, set-icon, set-theme,\n status, config) now accept an optional first arg. When the\n first arg matches a known site slug it's the selector; otherwise we\n default to the single configured site (and error if there are\n multiple).\n\n Logs gain a [slug] column so multi-site setups stay readable.\n\nWizard tweaks while we're in there: URL prompt help text mentions\nsubpath installs explicitly (\"https://example.com/blog\" is a valid\nanswer); site slugs are auto-derived from the handle but overridable.\n\nREADME rewritten around the multi-site narrative.\n","tree":"bdcc96176f33bb07bd56c3b46839431fc1d7da90"},"mode":"0040000","name":"routes","size":0},{"lastCommit":{"author":{"email":"tim@timtrautmann.com","name":"Tim Trautmann","when":"2026-05-29T10:08:08.000000-07:00"},"committer":{"email":"tim@timtrautmann.com","name":"Tim Trautmann","when":"2026-05-29T10:08:08.000000-07:00"},"hash":"ea0619455dd6508a63d439f7a1be844730a5d0f2","message":"Refactor: multi-tenant — one bridge, many Ghost↔PDS sites\n\nReplaces single-tenant config-as-credentials with a sites table. One\nghoststandard instance can now bridge multiple Ghost blogs to multiple\nStandard.site publications — each with its own handle, app password,\npublication metadata, theme, icon, and webhook secret.\n\nSchema:\n sites id, slug, name, atproto_*, ghost_*, webhook_secret,\n publication_*, timestamps\n post_mapping site_id FK + ghost_post_id PRIMARY KEY (site_id,\n ghost_post_id). ON DELETE CASCADE for site removal.\n config stays for genuinely global keys (bridge_url).\n\nWebhook routing:\n POST /webhooks/ghost/:slug — look up the site by slug, HMAC-verify\n with that site's secret, dispatch. Ghost gets four webhooks per site,\n all pointing at the slug-bearing URL.\n\nLib refactor:\n lib/atproto.ts and lib/ghost.ts shift from one cached agent/client to\n Map. Every exported function takes a Site argument. SSRF\n allowlist for cover images uses that site's ghost_url. Publication\n AT-URI cached per site.\n\nCLI:\n gs setup first-run: bridge_url + first site wizard\n gs site add subsequent sites\n gs site list tabular overview\n gs site show per-site details\n gs site rm remove (with optional PDS document cleanup)\n\n All operate commands (sync, unsync, backfill, set-icon, set-theme,\n status, config) now accept an optional first arg. When the\n first arg matches a known site slug it's the selector; otherwise we\n default to the single configured site (and error if there are\n multiple).\n\n Logs gain a [slug] column so multi-site setups stay readable.\n\nWizard tweaks while we're in there: URL prompt help text mentions\nsubpath installs explicitly (\"https://example.com/blog\" is a valid\nanswer); site slugs are auto-derived from the handle but overridable.\n\nREADME rewritten around the multi-site narrative.\n","tree":"bdcc96176f33bb07bd56c3b46839431fc1d7da90"},"mode":"0100644","name":"server.ts","size":1120},{"lastCommit":{"author":{"email":"tim@timtrautmann.com","name":"Tim Trautmann","when":"2026-07-06T21:28:54.000000-07:00"},"committer":{"email":"tim@timtrautmann.com","name":"Tim Trautmann","when":"2026-07-06T21:28:54.000000-07:00"},"hash":"575abb781c71775dc09848da408bd6e7b6cacfe6","message":"feat: build at.markpub.markdown content from Ghost post HTML\n\nCo-Authored-By: Claude Fable 5 \n","tree":"44b4aa2f8eed68b44e9f453557f50a299d665cfd"},"mode":"0100644","name":"types.d.ts","size":1438}],"lastCommit":{"author":{"email":"tim@timtrautmann.com","name":"Tim Trautmann","when":"2026-07-06T21:43:55.000000-07:00"},"committer":{"email":"tim@timtrautmann.com","name":"Tim Trautmann","when":"2026-07-06T21:43:55.000000-07:00"},"hash":"50d7215997c9235c0541e12339f723799248bb95","message":"fix: copy tsconfig.build.json into Docker builder stage\n\nReview ride-alongs: restore package.json bin alignment, cover the\nimgless kg-image-card branch, note unescaped-caption limitation.\n\nCo-Authored-By: Claude Fable 5 \n","tree":"94769f4e5e330c4d41b4f00ec0cb8274f812be44"}}