@cat-factory/app 0.90.0 → 0.91.1

package/app/components/board/RecurringPipelineModal.vue

@@ -86,6 +86,7 @@ const selectedPipelineLabel = computed(
 const template = computed<ScheduleTemplate>(() => {
   if (pipelineId.value === 'pl_tech_debt') return 'tech-debt'
   if (pipelineId.value === 'pl_dep_update') return 'dep-update'
+  if (pipelineId.value === 'pl_bug_triage') return 'bug-triage'
   return 'custom'
 })
 const isTechDebt = computed(() => template.value === 'tech-debt')

package/app/components/settings/KubernetesEnvironmentForm.vue

@@ -3,9 +3,11 @@
 // environment tab's backend-type selector (the other being the BYO HTTP manifest editor).
 // It builds the discriminated `{ kind: 'kubernetes', kubernetes }` config plus the
 // `apiToken` secret bundle and emits test/save to the parent tab (which calls the shared
-// provider-connections store). The K8s env config differs from the runner K8s config
-// (manifest source + URL derivation vs an executor image + namespace), so it has its own
-// form rather than reusing KubernetesRunnerForm.
+// provider-connections store). The K8s env config has manifest-source + URL-derivation
+// (discriminated-union) fields a flat descriptor form can't yet express, so — unlike the
+// runner backends, which now self-describe via `configTemplate` and render through the
+// generic form — the environment axis keeps this bespoke form until it, too, is descriptor-
+// driven (see docs/initiatives/descriptor-driven-infra-forms.md).
 import { computed, reactive, ref, watch } from 'vue'
 import { KUBERNETES_ENV_TOKEN_SECRET_KEY } from '@cat-factory/contracts'
 import type { ProviderConnection } from '~/types/providerConnections'

package/app/components/settings/ProviderConnectionTab.vue

@@ -1,16 +1,20 @@
 <script setup lang="ts">
 // One tab of the Infrastructure window — the connect surface for a single provider kind
 // (container agents → runner pool, or test environments → environment provider). Both
-// self-describe via a ProviderDescriptor, so this renders either without hard-coding them:
-//   - a NATIVE provider (ships a `manifestTemplate`) → the friendly flat field form, whose
-//     values are overlaid back onto the manifest before saving (the single storage path).
+// self-describe via a ProviderDescriptor, so this renders every backend WITHOUT hard-coding
+// which optional kinds (Kubernetes, EKS, a custom kind) exist:
+//   - a NATIVE MANIFEST provider (ships a `manifestTemplate`) → the flat field form, whose
+//     values are overlaid back onto the manifest before saving.
+//   - a NATIVE CONFIG backend (ships a `configTemplate` — the runner backends Kubernetes/EKS
+//     and any custom native kind) → the SAME flat field form, whose values are overlaid onto
+//     the discriminated `{ kind, <payload> }` config the backend described. The SPA never
+//     names a backend; it reads the single payload key off the skeleton.
 //   - a MANIFEST-driven provider (no template) → the full JSON manifest editor
 //     (ProviderManifestEditor), which replaces the old "use the API" disclaimer.
 import { computed, ref, toRaw, watch } from 'vue'
-import type { ProviderConnectionKind } from '~/types/providerConnections'
+import type { ProviderConfigField, ProviderConnectionKind } from '~/types/providerConnections'
 import ProvisioningLogsDrawer from '~/components/provisioning/ProvisioningLogsDrawer.vue'
 import ProviderManifestEditor from '~/components/settings/ProviderManifestEditor.vue'
-import KubernetesRunnerForm from '~/components/settings/KubernetesRunnerForm.vue'
 import KubernetesEnvironmentForm from '~/components/settings/KubernetesEnvironmentForm.vue'
 
 const props = defineProps<{
@@ -56,17 +60,28 @@ const testResult = ref<{ ok: boolean; message?: string } | null>(null)
 const testing = ref(false)
 const busy = ref(false)
 
-/** A native provider ships a manifest scaffold ⇒ render the friendly flat field form. */
-const isNative = computed(() => !!descriptor.value?.manifestTemplate)
+// A native provider renders the friendly flat field form. Two flavours self-describe it:
+// `manifestTemplate` (overlay onto a manifest) and `configTemplate` (overlay onto a
+// discriminated backend config — the Kubernetes/EKS/custom runner backends).
+const isNativeManifest = computed(() => !!descriptor.value?.manifestTemplate)
+const isNativeConfig = computed(() => !!descriptor.value?.configTemplate)
+const isNative = computed(() => isNativeManifest.value || isNativeConfig.value)
 const secretFieldCount = computed(
   () => (descriptor.value?.configFields ?? []).filter((f) => f.secret).length,
 )
 const hasSecretFields = computed(() => secretFieldCount.value > 0)
 
-// Seed the flat-form draft from the saved manifest so an edit starts from the CURRENT
-// non-secret config (baseUrl + providerConfig). Secret fields are never prefilled.
+// Seed the flat-form draft from the CURRENT non-secret config so an edit starts populated.
+// Secret fields are never prefilled. A `configTemplate` backend gets its flat values straight
+// from `descriptor.values`; a `manifestTemplate` backend reads them off the saved manifest
+// (baseUrl + providerConfig). On a fresh Kubernetes connect a `k3s` preset prefills local defaults.
 function resetDraft() {
   testResult.value = null
+  if (isNativeConfig.value) {
+    values.value = { ...descriptor.value?.values }
+    applyPresetDefaults()
+    return
+  }
   const saved = descriptor.value?.savedManifest
   const cfg = (saved?.providerConfig as Record<string, unknown> | undefined) ?? {}
   const next: Record<string, string> = {}
@@ -82,6 +97,24 @@ function resetDraft() {
   values.value = next
 }
 
+// The low-config `k3s` preset (an execution-axis radio the picker synthesises) prefills the
+// local-cluster defaults into the generic Kubernetes runner form. Only on a FRESH connect —
+// never clobbering a stored connection's values. Kept SPA-local because the preset is a UI
+// affordance of the picker, not a backend concept.
+function applyPresetDefaults() {
+  if (props.preset !== 'k3s' || connection.value) return
+  const seed: Record<string, string> = {
+    label: 'Local k3s',
+    apiServerUrl: 'https://127.0.0.1:6443',
+    namespace: 'cat-factory',
+    insecureSkipTlsVerify: 'true',
+  }
+  if (props.suggestedImage) seed.image = props.suggestedImage
+  for (const [k, val] of Object.entries(seed)) {
+    if (!(values.value[k] ?? '').trim()) values.value[k] = val
+  }
+}
+
 /** A flat-form field is satisfied when filled now, or already stored, or it has a default. */
 function satisfied(key: string): boolean {
   const f = descriptor.value?.configFields.find((cf) => cf.key === key)
@@ -124,6 +157,51 @@ function buildManifestPayload(): {
   return { manifest, secrets, backendKind: props.backendKind }
 }
 
+/** Coerce a flat string form value to the JSON type the backend config expects for its field. */
+function coerceFieldValue(field: ProviderConfigField, raw: string): unknown {
+  if (field.type === 'number') return Number(raw)
+  if (field.type === 'checkbox') return raw === 'true'
+  return raw
+}
+
+/**
+ * Overlay the flat field values onto a NATIVE backend's discriminated `configTemplate`. The
+ * skeleton is `{ kind, <payload> }`, so every non-secret field is written to the single
+ * non-`kind` payload key (typed via the field's `type`), each secret to the write-only bundle,
+ * and a cleared field is dropped so it reverts to absent. Because the template is the STORED
+ * config on an edit, advanced API-only keys the flat form never renders are preserved.
+ */
+function buildConfigPayload(): {
+  config: Record<string, unknown>
+  secrets: Record<string, string>
+} | null {
+  const template = descriptor.value?.configTemplate
+  if (!template) return null
+  const config: Record<string, unknown> = structuredClone(toRaw(template))
+  const payloadKey = Object.keys(config).find((k) => k !== 'kind')
+  if (!payloadKey) return null
+  const payload: Record<string, unknown> = {
+    ...(config[payloadKey] as Record<string, unknown> | undefined),
+  }
+  const secrets: Record<string, string> = {}
+  for (const f of descriptor.value?.configFields ?? []) {
+    const raw = (values.value[f.key] ?? '').trim()
+    if (f.secret) {
+      if (raw) secrets[f.key] = raw
+      continue
+    }
+    if (!raw) delete payload[f.key]
+    else payload[f.key] = coerceFieldValue(f, raw)
+  }
+  config[payloadKey] = payload
+  return { config, secrets }
+}
+
+/** The payload for the active native flavour (discriminated config or manifest overlay). */
+function buildFlatPayload() {
+  return isNativeConfig.value ? buildConfigPayload() : buildManifestPayload()
+}
+
 function notifyError(title: string, e: unknown) {
   toast.add({
     title,
@@ -141,9 +219,9 @@ function toastSaved() {
   })
 }
 
-// --- Native flat-form actions -------------------------------------------------------
+// --- Native flat-form actions (both manifest-overlay and config-overlay flavours) ---
 async function testNative() {
-  const payload = buildManifestPayload()
+  const payload = buildFlatPayload()
   if (!payload) return
   testing.value = true
   testResult.value = null
@@ -159,7 +237,7 @@ async function testNative() {
 async function saveNative() {
   busy.value = true
   try {
-    const payload = buildManifestPayload()
+    const payload = buildFlatPayload()
     if (payload) await store.register(props.kind, payload)
     emit('connected')
     resetDraft()
@@ -332,23 +410,12 @@ function fieldHelp(key: string): string | undefined {
       }}
     </div>
 
-    <!-- Native Kubernetes runner backend (runner-pool). -->
-    <KubernetesRunnerForm
-      v-if="kind === 'runner-pool' && backendKind === 'kubernetes'"
-      :connection="connection"
-      :preset="preset"
-      :suggested-image="suggestedImage"
-      :supports-test="descriptor.supportsTest"
-      :testing="testing"
-      :busy="busy"
-      :test-result="testResult"
-      @test="testConfig"
-      @save="saveConfig"
-    />
-
-    <!-- Native Kubernetes ephemeral-environment backend (environment). -->
+    <!-- Native Kubernetes ephemeral-environment backend (environment). The runner-pool
+         Kubernetes/EKS backends now self-describe via `configTemplate` and render through the
+         generic flat form below — no per-kind component. The env axis keeps its bespoke form
+         until it, too, is descriptor-driven (see docs/initiatives/descriptor-driven-infra-forms.md). -->
     <KubernetesEnvironmentForm
-      v-else-if="kind === 'environment' && backendKind === 'kubernetes'"
+      v-if="kind === 'environment' && backendKind === 'kubernetes'"
       :connection="connection"
       :supports-test="descriptor.supportsTest"
       :testing="testing"
@@ -396,6 +463,26 @@ function fieldHelp(key: string): string | undefined {
           :items="(field.options ?? []).map((o) => ({ label: o.label, value: o.value }))"
           :placeholder="field.default ?? field.placeholder"
         />
+        <USwitch
+          v-else-if="field.type === 'checkbox'"
+          :model-value="values[field.key] === 'true'"
+          @update:model-value="values[field.key] = $event ? 'true' : 'false'"
+        />
+        <UTextarea
+          v-else-if="field.type === 'textarea'"
+          v-model="values[field.key]"
+          :rows="4"
+          class="w-full font-mono"
+          :placeholder="field.default ?? field.placeholder"
+        />
+        <UInput
+          v-else-if="field.type === 'number'"
+          :model-value="values[field.key] ?? ''"
+          type="number"
+          class="font-mono"
+          :placeholder="field.default ?? field.placeholder"
+          @update:model-value="values[field.key] = String($event ?? '')"
+        />
         <UInput
           v-else
           v-model="values[field.key]"

package/app/utils/catalog.ts

@@ -410,6 +410,19 @@ export const SYSTEM_AGENT_META: Record<string, AgentArchetype> = {
     description:
       'Files a tracker ticket (GitHub issue / Jira) from the analysis before work starts.',
   },
+  // The inbound dual of `tracker`: a one-shot engine step that PULLS one matching open issue
+  // from the schedule's configured tracker board, marks it in-progress with a "taken by
+  // cat-factory" comment, and reseeds the recurring block from it. Runs no model; seeded only
+  // into the recurring bug-triage pipeline, so it is a display-metadata system kind (like
+  // `tracker`), not a palette archetype.
+  'bug-intake': {
+    kind: 'bug-intake',
+    label: 'Bug Intake',
+    icon: 'i-lucide-inbox',
+    color: '#fb923c',
+    description:
+      'Pulls one matching open issue from the configured tracker board, marks it in-progress, and seeds the run from it.',
+  },
   conflicts: {
     kind: 'conflicts',
     label: 'Conflicts Gate',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/app",
-  "version": "0.90.0",
+  "version": "0.91.1",
   "description": "Reusable Nuxt layer for the Agent Architecture Board SPA (components, stores, composables, pages). Consume it from a thin deployment app via `extends: ['@cat-factory/app']` and point it at your backend with NUXT_PUBLIC_API_BASE. See deploy/frontend for an example.",
   "repository": {
     "type": "git",
@@ -34,7 +34,7 @@
     "valibot": "^1.4.2",
     "vue": "^3.5.39",
     "wretch": "^3.0.9",
-    "@cat-factory/contracts": "0.97.0"
+    "@cat-factory/contracts": "0.99.0"
   },
   "devDependencies": {
     "@toad-contracts/testing": "0.3.2",

package/app/components/settings/KubernetesRunnerForm.vue

@@ -1,252 +0,0 @@
-<script setup lang="ts">
-// The Kubernetes "agent runner backend" connect form — one option of the runner-pool tab's
-// backend-type selector (the other being the manifest pool). It builds the discriminated
-// `{ kind: 'kubernetes', kubernetes }` config + the `apiToken` secret bundle and emits
-// test/save to the parent tab (which calls the shared provider-connections store).
-import { computed, reactive, ref, watch } from 'vue'
-import { KUBERNETES_RUNNER_TOKEN_SECRET_KEY } from '@cat-factory/contracts'
-import type { ProviderConnection } from '~/types/providerConnections'
-
-const props = defineProps<{
-  connection: ProviderConnection | null
-  /** A low-config preset to seed the form with (today: local k3s). */
-  preset?: 'k3s'
-  /** The deployment's executor image, used to prefill the k3s preset's image field. */
-  suggestedImage?: string
-  supportsTest: boolean
-  testing: boolean
-  busy: boolean
-  testResult: { ok: boolean; message?: string } | null
-}>()
-
-const emit = defineEmits<{
-  test: [payload: { config: Record<string, unknown>; secrets: Record<string, string> }]
-  save: [payload: { config: Record<string, unknown>; secrets: Record<string, string> }]
-}>()
-
-const { t } = useI18n()
-
-const form = reactive({
-  label: '',
-  apiServerUrl: '',
-  namespace: '',
-  image: '',
-  imageUi: '',
-  caCertPem: '',
-  harnessPort: '',
-  insecureSkipTlsVerify: false,
-})
-const apiToken = ref('')
-
-// A registered k8s connection exposes its non-secret config, so prefill every non-secret
-// field from it (never the token — secrets are write-only and re-entered on update). This
-// lets an edit change one field without re-typing the whole form.
-watch(
-  () => props.connection,
-  (c) => {
-    if (c?.kind !== 'kubernetes') return
-    form.label = c.label
-    form.apiServerUrl = c.baseUrl
-    const k =
-      c.config && (c.config as { kind?: string }).kind === 'kubernetes'
-        ? (c.config as { kubernetes: Record<string, unknown> }).kubernetes
-        : undefined
-    if (k) {
-      form.namespace = typeof k.namespace === 'string' ? k.namespace : ''
-      form.image = typeof k.image === 'string' ? k.image : ''
-      form.imageUi = typeof k.imageUi === 'string' ? k.imageUi : ''
-      form.caCertPem = typeof k.caCertPem === 'string' ? k.caCertPem : ''
-      form.harnessPort = typeof k.harnessPort === 'number' ? String(k.harnessPort) : ''
-      form.insecureSkipTlsVerify = k.insecureSkipTlsVerify === true
-    }
-  },
-  { immediate: true },
-)
-
-// Low-config k3s preset: seed the local-cluster defaults so the operator only pastes a
-// ServiceAccount token (and an image, unless the deployment surfaced one). Only seeds a
-// fresh form — never clobbers an existing connection's config on edit.
-watch(
-  () => props.preset,
-  (preset) => {
-    if (preset !== 'k3s' || props.connection) return
-    form.label = 'Local k3s'
-    form.apiServerUrl = 'https://127.0.0.1:6443'
-    form.namespace = 'cat-factory'
-    form.insecureSkipTlsVerify = true
-    if (props.suggestedImage) form.image = props.suggestedImage
-  },
-  { immediate: true },
-)
-
-const canSave = computed(
-  () =>
-    !!form.label.trim() &&
-    !!form.apiServerUrl.trim() &&
-    !!form.namespace.trim() &&
-    !!form.image.trim() &&
-    !!apiToken.value.trim(),
-)
-
-// Why the Connect button is disabled, surfaced as a red hint next to it so a mandatory-field gap
-// is visible rather than a dead button. Lists the empty required fields by their on-screen label.
-const connectBlockedReason = computed(() => {
-  if (canSave.value) return ''
-  const missing: string[] = []
-  if (!form.label.trim()) missing.push(t('settings.providerConnection.kubernetes.label'))
-  if (!form.apiServerUrl.trim())
-    missing.push(t('settings.providerConnection.kubernetes.apiServerUrl'))
-  if (!form.namespace.trim()) missing.push(t('settings.providerConnection.kubernetes.namespace'))
-  if (!form.image.trim()) missing.push(t('settings.providerConnection.kubernetes.image'))
-  if (!apiToken.value.trim()) missing.push(t('settings.providerConnection.kubernetes.apiToken'))
-  return t('settings.providerConnection.form.missingFields', { fields: missing.join(', ') })
-})
-
-function buildPayload(): { config: Record<string, unknown>; secrets: Record<string, string> } {
-  const kubernetes: Record<string, unknown> = {
-    label: form.label.trim(),
-    apiServerUrl: form.apiServerUrl.trim(),
-    namespace: form.namespace.trim(),
-    image: form.image.trim(),
-  }
-  if (form.imageUi.trim()) kubernetes.imageUi = form.imageUi.trim()
-  if (form.caCertPem.trim()) kubernetes.caCertPem = form.caCertPem.trim()
-  if (form.insecureSkipTlsVerify) kubernetes.insecureSkipTlsVerify = true
-  const port = Number(form.harnessPort)
-  if (form.harnessPort.trim() && Number.isFinite(port)) kubernetes.harnessPort = port
-  return {
-    config: { kind: 'kubernetes', kubernetes },
-    secrets: { [KUBERNETES_RUNNER_TOKEN_SECRET_KEY]: apiToken.value.trim() },
-  }
-}
-</script>
-
-<template>
-  <div class="rounded-lg border border-dashed border-slate-700 p-3 space-y-3">
-    <p class="text-[11px] font-semibold uppercase tracking-wide text-slate-400">
-      {{
-        connection?.kind === 'kubernetes'
-          ? t('settings.providerConnection.form.updateConfiguration')
-          : t('settings.providerConnection.form.connect')
-      }}
-    </p>
-
-    <UFormField :label="t('settings.providerConnection.kubernetes.label')">
-      <UInput
-        v-model="form.label"
-        :placeholder="t('settings.providerConnection.kubernetes.labelPlaceholder')"
-      />
-    </UFormField>
-
-    <UFormField
-      :label="t('settings.providerConnection.kubernetes.apiServerUrl')"
-      :help="t('settings.providerConnection.kubernetes.apiServerUrlHelp')"
-    >
-      <UInput v-model="form.apiServerUrl" class="font-mono" placeholder="https://10.0.0.1:6443" />
-    </UFormField>
-
-    <UFormField :label="t('settings.providerConnection.kubernetes.namespace')">
-      <UInput v-model="form.namespace" class="font-mono" placeholder="cat-factory" />
-    </UFormField>
-
-    <UFormField
-      :label="t('settings.providerConnection.kubernetes.image')"
-      :help="t('settings.providerConnection.kubernetes.imageHelp')"
-    >
-      <UInput
-        v-model="form.image"
-        class="font-mono"
-        placeholder="ghcr.io/acme/cat-factory-executor:latest"
-      />
-    </UFormField>
-
-    <UFormField
-      :label="
-        t('settings.providerConnection.form.optionalLabel', {
-          label: t('settings.providerConnection.kubernetes.imageUi'),
-        })
-      "
-    >
-      <UInput v-model="form.imageUi" class="font-mono" />
-    </UFormField>
-
-    <UFormField
-      :label="t('settings.providerConnection.kubernetes.apiToken')"
-      :help="t('settings.providerConnection.kubernetes.apiTokenHelp')"
-    >
-      <UInput v-model="apiToken" type="password" class="font-mono" />
-    </UFormField>
-
-    <UFormField
-      :label="
-        t('settings.providerConnection.form.optionalLabel', {
-          label: t('settings.providerConnection.kubernetes.caCertPem'),
-        })
-      "
-      :help="t('settings.providerConnection.kubernetes.caCertPemHelp')"
-    >
-      <UTextarea
-        v-model="form.caCertPem"
-        :rows="3"
-        class="font-mono"
-        placeholder="-----BEGIN CERTIFICATE-----"
-      />
-    </UFormField>
-
-    <UFormField :help="t('settings.providerConnection.kubernetes.insecureSkipTlsVerifyHelp')">
-      <UCheckbox
-        v-model="form.insecureSkipTlsVerify"
-        :label="t('settings.providerConnection.kubernetes.insecureSkipTlsVerify')"
-      />
-    </UFormField>
-
-    <UFormField
-      :label="
-        t('settings.providerConnection.form.optionalLabel', {
-          label: t('settings.providerConnection.kubernetes.harnessPort'),
-        })
-      "
-    >
-      <UInput v-model="form.harnessPort" type="number" class="font-mono" placeholder="8080" />
-    </UFormField>
-
-    <div v-if="supportsTest" class="flex items-center gap-2">
-      <UButton
-        color="neutral"
-        variant="soft"
-        size="sm"
-        icon="i-lucide-plug-zap"
-        :loading="testing"
-        :disabled="!canSave"
-        @click="emit('test', buildPayload())"
-      >
-        {{ t('settings.providerConnection.test.button') }}
-      </UButton>
-      <span v-if="testResult && testResult.ok" class="text-xs text-emerald-400">
-        {{ testResult.message ?? t('settings.providerConnection.test.ok') }}
-      </span>
-      <span v-else-if="testResult" class="text-xs text-rose-400">
-        {{ testResult.message ?? t('settings.providerConnection.test.failed') }}
-      </span>
-    </div>
-
-    <div class="flex items-center justify-end gap-3">
-      <p v-if="connectBlockedReason" class="flex-1 text-left text-xs text-rose-400">
-        {{ connectBlockedReason }}
-      </p>
-      <UButton
-        color="primary"
-        size="sm"
-        :loading="busy"
-        :disabled="!canSave"
-        @click="emit('save', buildPayload())"
-      >
-        {{
-          connection?.kind === 'kubernetes'
-            ? t('common.save')
-            : t('settings.providerConnection.form.connect')
-        }}
-      </UButton>
-    </div>
-  </div>
-</template>