diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0
diff --git a/@ 8de77c0 b/@ 8de77c0

1	+	# dependencies (bun install)
2	+	node_modules
3	+
4	+	# output
5	+	out
6	+	dist
7	+	*.tgz
8	+
9	+	# code coverage
10	+	coverage
11	+	*.lcov
12	+
13	+	# logs
14	+	logs
15	+	_.log
16	+	report.[0-9]_.[0-9]_.[0-9]_.[0-9]_.json
17	+
18	+	# caches
19	+	.eslintcache
20	+	.cache
21	+	*.tsbuildinfo
22	+
23	+	# IntelliJ based IDEs
24	+	.idea
25	+
26	+	# Finder (MacOS) folder config
27	+	.DS_Store
28	+
29	+	memory/
30	+	public/assets/simplewebauthn-browser.js
31	+	public/assets/jxl-polyfill.js
32	+	public/assets/*.wasm
33	+
34	+	# Hearthforge data
35	+	data/
36	+	.env
37	+
38	+	# Test data
39	+	data-test/

1	+	FROM oven/bun:1 AS base
2	+	WORKDIR /app
3	+
4	+	RUN apt-get --update install -y --no-install-recommends \
5	+	tini openssh-client git-core zstd \
6	+	&& rm -rf /var/lib/apt/lists/*
7	+
8	+	# Copy public first so postinstall can write vendor files into it
9	+	COPY public ./public
10	+
11	+	# Install dependencies (postinstall vendors simplewebauthn + jxl-polyfill into public/)
12	+	COPY package.json bun.lock* ./
13	+	RUN bun install --frozen-lockfile --production
14	+
15	+	# Copy source
16	+	COPY src ./src
17	+	COPY tsconfig.json ./
18	+
19	+	EXPOSE 3000
20	+
21	+	ENV DATA_DIR=/data
22	+	VOLUME ["/data"]
23	+
24	+	ENTRYPOINT ["/usr/bin/tini", "--"]
25	+	CMD ["sh", "-c", "bun run db:init && bun run start"]

1	+	# Hearthforge ![](public/assets/favicon.svg)
2	+	![](preview.png)
3	+
4	+	A self-hosted git forge designed to host your own repositories, but allow others to interact with them via issues and patch proposals.
5	+	Frontend works without any JS at all enabled, just required for WebAuthn (with graceful fallback to password-only).
6	+
7	+	## Features
8	+
9	+	- Repository browser — file tree, blob view, commit log, README rendering
10	+	- Issues — create, comment, react
11	+	- Patches — submit diffs for review & comments. Admin can merge applicable patches directly into the repository.
12	+	- Releases — tag-based releases with source archives and extra uploaded assets
13	+	- SSH push/pull — built-in SSH server, no external git daemon needed
14	+	- Auth — password login or passkeys (WebAuthn/FIDO2)
15	+	- Optional registration — others can create accounts to file issues and patches; can be disabled
16	+
17	+	## Stack
18	+
19	+	- [Bun](https://bun.sh) — runtime and package manager
20	+	- [ElysiaJS](https://elysiajs.com) — HTTP framework
21	+	- SQLite — single-file database via Kysely
22	+	- Server-side JSX via @kitajs/html (no client-side framework)
23	+	- Shiki — syntax highlighting
24	+
25	+	## Running
26	+
27	+	```bash
28	+	bun install
29	+	bun run db:init # creates database and admin account
30	+	bun run start # http://localhost:3000, SSH on port 2222
31	+	```
32	+
33	+	Default admin credentials: `admin` / `changeme`
34	+
35	+	## Manual repository creation
36	+
37	+	Repositories can bei either created through the UI, or existing ones can be copied manually to the `data/repos` directory.
38	+	Non-bare repos are automatically converted to bare repos on startup, discarding uncomitted changes and worktrees.
39	+
40	+	### Docker / Podman
41	+	Container images are provided.
42	+	```bash
43	+	docker compose up # or
44	+	podman compose up
45	+	```
46	+
47	+	### Configuration
48	+
49	+	All settings are environment variables:
50	+
51	+	\| Variable \| Default \| Description \|
52	+	\|-------------------------\|-------------------------\|-------------------------------------------------\|
53	+	\| `PORT` \| `3000` \| HTTP port \|
54	+	\| `SSH_PORT` \| `2222` \| SSH port \|
55	+	\| `DATA_DIR` \| `./data` \| Repos, database, uploads \|
56	+	\| `ADMIN_PASSWORD` \| `changeme` \| Initial admin password \|
57	+	\| `OWNER_DISPLAY_NAME` \| `Admin` \| Display name for the owner \|
58	+	\| `BASE_URL` \| `http://localhost:3000` \| Used in clone URLs and links \|
59	+	\| `REGISTRATION_DISABLED` \| `0` \| Set to `1` to disable signups \|
60	+	\| `MAX_UPLOAD_BYTES` \| `10485760` \| Max request body size (any uploads/requests) \|
61	+	\| `MAX_USER_UPLOAD_BYTES` \| `2097152` \| Max request body size (user uploads) \|
62	+	\| `INLINE_MAX_BYTES` \| `524288` \| Max file size to render inline in the file view \|
63	+	\| `SSH_DISABLED` \| `0` \| Disable the embedded SSH-server \|
64	+	\| `TRUSTED_PROXY` \| `0` \| Trust `X-Forwarded-For` \|
65	+	\| `RATE_LIMIT_DISABLED` \| `0` \| Set to `1` to disable rate limiting \|
66	+	\| `HIGHLIGHT_WORKERS` \| `4` \| Number of syntax highlighting workers* \|
67	+	\* More workers mean more CPU cores can be used to parallelize highlighting of files.
68	+	Because of the language grammars, which can't be shared across workers, the memory usage per worker is quite high, at about 200MB.
69	+	So be careful when increasing this.
70	+	### SSH access
71	+
72	+	Add your public key under Settings → SSH keys, then clone with:
73	+
74	+	```
75	+	git clone ssh://git@localhost:{SSH_PORT}/{REPO_NAME}
76	+	```
77	+
78	+	Pushing is also supported for the admin.
79	+
80	+	## Development
81	+
82	+	```bash
83	+	bun run dev # watch mode
84	+	bun run lint # Biome lint
85	+	bun run format # Biome format
86	+	bun run test # Playwright E2E tests (don't use bun test, it doesn't respect the timeout)
87	+	```
88	+
89	+	## Roadmap
90	+	- Use [git-bug](https://github.com/git-bug/git-bug) for issue tracking instead of custom implementation
91	+	- Issue labels
92	+	- Repository list reordering (e.g. last committed) and starring
93	+	- redirect image urls in readme

1	+	{
2	+	"$schema": "https://biomejs.dev/schemas/2.4.7/schema.json",
3	+	"vcs": {
4	+	"enabled": true,
5	+	"clientKind": "git",
6	+	"useIgnoreFile": true
7	+	},
8	+	"files": {
9	+	"ignoreUnknown": true,
10	+	"includes": ["src/**"]
11	+	},
12	+	"formatter": {
13	+	"enabled": true,
14	+	"indentStyle": "space",
15	+	"indentWidth": 4
16	+	},
17	+	"linter": {
18	+	"enabled": true,
19	+	"rules": {
20	+	"recommended": true,
21	+	"style": {
22	+	"noNonNullAssertion": "off"
23	+	}
24	+	}
25	+	},
26	+	"javascript": {
27	+	"formatter": {
28	+	"quoteStyle": "double",
29	+	"trailingCommas": "all"
30	+	}
31	+	},
32	+	"assist": {
33	+	"enabled": true,
34	+	"actions": {
35	+	"source": {
36	+	"organizeImports": "on"
37	+	}
38	+	}
39	+	}
40	+	}

1	+	services:
2	+	hearthforge:
3	+	build:
4	+	context: .
5	+	ports:
6	+	- "3000:3000"
7	+	- "2222:2222"
8	+	volumes:
9	+	- ./data:/data
10	+	environment:
11	+	DATA_DIR: /data
12	+	PORT: 3000
13	+	SSH_PORT: 2222
14	+	OWNER_DISPLAY_NAME: Admin
15	+	BASE_URL: "http://localhost:3000"
16	+	# ADMIN_PASSWORD: change-me
17	+	# SSH_DISABLED: 0
18	+	# ARCHIVE_ZST_ENABLED: 0
19	+	# TRUSTED_PROXY: 1
20	+	# REGISTRATION_DISABLED: 0

1	+	{
2	+	"name": "hearthforge",
3	+	"module": "src/index.tsx",
4	+	"scripts": {
5	+	"dev": "bun run --watch src/index.tsx",
6	+	"start": "bun run src/index.tsx",
7	+	"db:init": "bun run src/db/init.ts",
8	+	"db:seed": "bun run src/db/seed.ts",
9	+	"test": "bun test tests/e2e.test.ts --timeout 60000",
10	+	"vendor:simplewebauthn": "bun build node_modules/@simplewebauthn/browser/esm/index.js --outfile public/assets/simplewebauthn-browser.js --format esm",
11	+	"vendor:jxl-polyfill": "cp node_modules/jxl-rs-polyfill/dist/auto.js public/assets/jxl-polyfill.js",
12	+	"postinstall": "bun run vendor:simplewebauthn && bun run vendor:jxl-polyfill",
13	+	"lint": "biome check src/",
14	+	"format": "biome check --write src/"
15	+	},
16	+	"type": "module",
17	+	"private": true,
18	+	"devDependencies": {
19	+	"@biomejs/biome": "^2.4.7",
20	+	"@types/argon2": "^0.15.4",
21	+	"@types/bun": "latest",
22	+	"@types/ssh2": "^1.15.5",
23	+	"playwright": "^1.58.2"
24	+	},
25	+	"peerDependencies": {
26	+	"typescript": "^5"
27	+	},
28	+	"dependencies": {
29	+	"@elysiajs/static": "^1.4.7",
30	+	"@jsquash/jxl": "^1.3.0",
31	+	"@kitajs/html": "^4.2.13",
32	+	"@simplewebauthn/browser": "^13.3.0",
33	+	"@simplewebauthn/server": "^13.3.0",
34	+	"argon2": "^0.44.0",
35	+	"elysia": "^1.4.27",
36	+	"file-type": "^21.3.2",
37	+	"isomorphic-dompurify": "^3.3.0",
38	+	"jxl-rs-polyfill": "^0.1.1",
39	+	"kysely": "^0.28.12",
40	+	"kysely-bun-sqlite": "^0.4.0",
41	+	"linguist-languages": "^9.3.1",
42	+	"marked": "^17.0.4",
43	+	"sharp": "^0.34.5",
44	+	"shiki": "^4.0.2",
45	+	"ssh2": "^1.17.0"
46	+	}
47	+	}

1	+	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 32 32">
2	+	<!-- Hearth stone base -->
3	+	<rect x="3" y="23" width="26" height="7" rx="2" fill="#6b2e0c"/>
4	+	<!-- Stone highlight band -->
5	+	<rect x="5" y="24" width="22" height="2" rx="1" fill="#8b4220"/>
6	+
7	+	<!-- Outer flame (deep red-orange) -->
8	+	<path d="M16 3 C21 7 26.5 12 25 19 C24 23 21 26 16 26 C11 26 8 23 7 19 C5.5 12 11 7 16 3Z" fill="#b83c14"/>
9	+
10	+	<!-- Mid flame (bright orange) -->
11	+	<path d="M16 8 C19.5 11 22.5 15.5 21.5 20 C21 22.5 19 26 16 26 C13 26 11 22.5 10.5 20 C9.5 15.5 12.5 11 16 8Z" fill="#e06018"/>
12	+
13	+	<!-- Inner glow (amber) -->
14	+	<path d="M16 13 C18.2 16 19.5 19 18.8 21.5 C18.4 23 17.2 25 16 25 C14.8 25 13.6 23 13.2 21.5 C12.5 19 13.8 16 16 13Z" fill="#f5a020"/>
15	+
16	+	<!-- Hot core (golden yellow) -->
17	+	<path d="M16 17.5 C17 19.5 17.5 21.5 17 23 C16.8 23.8 16 24.8 16 24.8 C16 24.8 15.2 23.8 15 23 C14.5 21.5 15 19.5 16 17.5Z" fill="#ffe060"/>
18	+	</svg>

1	+	import path from "node:path";
2	+
3	+	//env configs
4	+	export const OWNER_DISPLAY_NAME = process.env.OWNER_DISPLAY_NAME ?? "Admin";
5	+	export const INLINE_MAX_BYTES =
6	+	parseInt(process.env.INLINE_MAX_BYTES ?? "", 10) \|\| 524288;
7	+	export const MAX_UPLOAD_BYTES =
8	+	parseInt(process.env.MAX_UPLOAD_BYTES ?? "", 10) \|\| 10 * 1024 * 1024;
9	+	export const MAX_USER_UPLOAD_BYTES =
10	+	parseInt(process.env.MAX_USER_UPLOAD_BYTES ?? "", 10) \|\| 2 * 1024 * 1024;
11	+	export const TRUSTED_PROXY = !!process.env.TRUSTED_PROXY;
12	+	export const RATE_LIMIT_DISABLED = !!process.env.RATE_LIMIT_DISABLED;
13	+	export const SSH_DISABLED = !!process.env.SSH_DISABLED;
14	+	export const PORT = parseInt(process.env.PORT ?? "", 10) \|\| 3000;
15	+	export const SSH_PORT = parseInt(process.env.SSH_PORT ?? "", 10) \|\| 2222;
16	+	export const REGISTRATION_DISABLED = !!process.env.REGISTRATION_DISABLED;
17	+	export const BASE_URL = process.env.BASE_URL ?? `http://localhost:${PORT}`;
18	+	export const DATA_DIR = path.resolve(process.env.DATA_DIR ?? "./data");
19	+	export const HIGHLIGHT_WORKERS =
20	+	parseInt(process.env.HIGHLIGHT_WORKERS ?? "", 10) \|\| 4;

1	+	import path from "node:path";
2	+	import { DATA_DIR, OWNER_DISPLAY_NAME } from "./config.ts";
3	+
4	+	// Auth / identity
5	+	export const WEBAUTHN_RP_NAME = `${OWNER_DISPLAY_NAME}'s Hearthforge`;
6	+	export const ADMIN_USERNAME = "admin";
7	+	export const VALID_USERNAME_RE = /^[a-zA-Z0-9_-]+$/;
8	+	export const VALID_REPO_NAME_RE = /^[a-zA-Z0-9._-]+$/;
9	+	export const ALLOWED_REACTIONS = new Set([
10	+	"👍",
11	+	"👎",
12	+	"❤️",
13	+	"🎉",
14	+	"😕",
15	+	"👀",
16	+	"🚀",
17	+	]);
18	+	export const VALID_KEY_TYPES = new Set([
19	+	"ssh-rsa",
20	+	"ssh-ed25519",
21	+	"ecdsa-sha2-nistp256",
22	+	"ecdsa-sha2-nistp384",
23	+	"ecdsa-sha2-nistp521",
24	+	"sk-ssh-ed25519@openssh.com",
25	+	"sk-ecdsa-sha2-nistp256@openssh.com",
26	+	]);
27	+	export const CHALLENGE_TTL_MS = 5 * 60 * 1000;
28	+
29	+	// Pagination
30	+	export const REPOS_PER_PAGE = 20;
31	+	export const COMMITS_PER_PAGE = 30;
32	+	export const ISSUES_PER_PAGE = 20;
33	+	export const PATCHES_PER_PAGE = 20;
34	+	export const RELEASES_PER_PAGE = 20;
35	+
36	+	// Cache sizes
37	+	export const MAX_MD_CACHE = 50;
38	+	export const MAX_FILE_CACHE = 500;
39	+	export const MAX_DIFF_CACHE = 500;
40	+	export const MAX_PATCH_CACHE = 100;
41	+
42	+	// Paths
43	+	export const DB_PATH = path.join(DATA_DIR, "hearthforge.db");
44	+	export const REPOS_DIR = path.join(DATA_DIR, "repos");
45	+	export const AVATARS_DIR = path.join(DATA_DIR, "avatars");
46	+	export const RELEASES_DIR = path.join(DATA_DIR, "releases");
47	+	export const SSH_HOST_KEY_PATH = path.join(DATA_DIR, "ssh_host_key");

1	+	import { Database as BunDatabase } from "bun:sqlite";
2	+	import { type Generated, Kysely, type Selectable } from "kysely";
3	+	import { BunSqliteDialect } from "kysely-bun-sqlite";
4	+
5	+	import { DB_PATH } from "../constants.ts";
6	+
7	+	interface UserTable {
8	+	id: Generated<number>;
9	+	username: string;
10	+	password_hash: string \| null;
11	+	created_at: string;
12	+	avatar_version: Generated<number>;
13	+	}
14	+
15	+	interface PasskeyTable {
16	+	id: Generated<number>;
17	+	user_id: number;
18	+	credential_id: string;
19	+	public_key: string;
20	+	counter: number;
21	+	created_at: string;
22	+	}
23	+
24	+	interface SessionTable {
25	+	id: string;
26	+	user_id: number;
27	+	expires_at: string;
28	+	created_at: string;
29	+	}
30	+
31	+	interface RepositoryTable {
32	+	id: Generated<number>;
33	+	name: string;
34	+	description: string \| null;
35	+	is_private: number;
36	+	default_branch: string;
37	+	created_at: string;
38	+	issue_seq: Generated<number>;
39	+	patch_seq: Generated<number>;
40	+	}
41	+
42	+	interface IssueTable {
43	+	id: Generated<number>;
44	+	repo_id: number;
45	+	author_id: number \| null;
46	+	number: number;
47	+	title: string;
48	+	body: string;
49	+	status: string;
50	+	created_at: string;
51	+	updated_at: string;
52	+	edited_at: string \| null;
53	+	}
54	+
55	+	interface IssueCommentTable {
56	+	id: Generated<number>;
57	+	issue_id: number;
58	+	author_id: number \| null;
59	+	body: string;
60	+	created_at: string;
61	+	edited_at: string \| null;
62	+	}
63	+
64	+	interface IssueReactionTable {
65	+	id: Generated<number>;
66	+	issue_id: number;
67	+	comment_id: number \| null;
68	+	user_id: number;
69	+	emoji: string;
70	+	}
71	+
72	+	interface PatchTable {
73	+	id: Generated<number>;
74	+	repo_id: number;
75	+	author_id: number \| null;
76	+	number: number;
77	+	title: string;
78	+	description: string;
79	+	patch_content: string;
80	+	status: string;
81	+	created_at: string;
82	+	updated_at: string;
83	+	edited_at: string \| null;
84	+	}
85	+
86	+	interface PatchCommentTable {
87	+	id: Generated<number>;
88	+	patch_id: number;
89	+	author_id: number \| null;
90	+	body: string;
91	+	created_at: string;
92	+	edited_at: string \| null;
93	+	}
94	+
95	+	interface PatchReactionTable {
96	+	id: Generated<number>;
97	+	patch_id: number;
98	+	comment_id: number \| null;
99	+	user_id: number;
100	+	emoji: string;
101	+	}
102	+
103	+	interface SshKeyTable {
104	+	id: Generated<number>;
105	+	user_id: number;
106	+	name: string;
107	+	public_key: string;
108	+	fingerprint: string;
109	+	created_at: string;
110	+	}
111	+
112	+	interface ReleaseTable {
113	+	id: Generated<number>;
114	+	repo_id: number;
115	+	tag_name: string;
116	+	name: string \| null;
117	+	notes: string \| null;
118	+	commit_hash: string;
119	+	include_source_code: number;
120	+	created_at: string;
121	+	}
122	+
123	+	interface ReleaseAssetTable {
124	+	id: Generated<number>;
125	+	release_id: number;
126	+	filename: string;
127	+	size: number;
128	+	content_type: string;
129	+	created_at: string;
130	+	}
131	+
132	+	export interface Database {
133	+	users: UserTable;
134	+	passkeys: PasskeyTable;
135	+	sessions: SessionTable;
136	+	repositories: RepositoryTable;
137	+	issues: IssueTable;
138	+	issue_comments: IssueCommentTable;
139	+	issue_reactions: IssueReactionTable;
140	+	patches: PatchTable;
141	+	patch_comments: PatchCommentTable;
142	+	patch_reactions: PatchReactionTable;
143	+	ssh_keys: SshKeyTable;
144	+	releases: ReleaseTable;
145	+	release_assets: ReleaseAssetTable;
146	+	}
147	+
148	+	// Selectable row types (id is plain number, as returned by queries)
149	+	export type UserRow = Selectable<UserTable>;
150	+	export type PasskeyRow = Selectable<PasskeyTable>;
151	+	export type SessionRow = Selectable<SessionTable>;
152	+	export type RepositoryRow = Selectable<RepositoryTable>;
153	+	export type IssueRow = Selectable<IssueTable>;
154	+	export type IssueCommentRow = Selectable<IssueCommentTable>;
155	+	export type IssueReactionRow = Selectable<IssueReactionTable>;
156	+	export type PatchRow = Selectable<PatchTable>;
157	+	export type PatchCommentRow = Selectable<PatchCommentTable>;
158	+	export type PatchReactionRow = Selectable<PatchReactionTable>;
159	+	export type SshKeyRow = Selectable<SshKeyTable>;
160	+	export type ReleaseRow = Selectable<ReleaseTable>;
161	+	export type ReleaseAssetRow = Selectable<ReleaseAssetTable>;
162	+
163	+	const sqlite = new BunDatabase(DB_PATH);
164	+	sqlite.run("PRAGMA journal_mode=WAL");
165	+	sqlite.run("PRAGMA foreign_keys=ON");
166	+
167	+	export const db = new Kysely<Database>({
168	+	dialect: new BunSqliteDialect({ database: sqlite }),
169	+	});
170	+
171	+	export async function getRepo(name: string, isAdmin: boolean) {
172	+	const repo = await db
173	+	.selectFrom("repositories")
174	+	.selectAll()
175	+	.where("name", "=", name)
176	+	.executeTakeFirst();
177	+	if (!repo) return null;
178	+	if (repo.is_private && !isAdmin) return null;
179	+	return repo;
180	+	}