@cat-factory/local-server 0.6.0 → 0.7.2

package/dist/linkRepo.js

@@ -1,113 +0,0 @@
-import { createDbClient, schema } from '@cat-factory/node-server';
-import { and, eq, ne } from 'drizzle-orm';
-import { syntheticInstallationId } from './installations.js';
-// Link a real GitHub repo to a board service frame for LOCAL mode. Container agent
-// steps resolve which repo to operate on from the `github_repos` /
-// `github_installations` projection (`buildResolveRepoTarget`). The cloud facades
-// populate those rows from the GitHub App connect/sync flow; local mode has no App, so
-// this helper seeds them directly from the repo's public metadata read with the PAT:
-//   - a synthetic per-workspace `github_installations` row (the executor's PAT token
-//     source ignores the installation id, but `resolveRepoTarget` requires a row to
-//     exist + reads its id back), and
-//   - a `github_repos` row linked to the frame via `block_id` (the legacy projection
-//     link `resolveRepoTarget` walks the block ancestry to find).
-// Idempotent: re-linking the same repo/frame updates the rows in place.
-const GITHUB_API_BASE = 'https://api.github.com';
-export async function linkRepo(options) {
-    const env = options.env ?? process.env;
-    const pat = options.pat ?? env.GITHUB_PAT?.trim();
-    if (!pat)
-        throw new Error('A GitHub PAT is required (set GITHUB_PAT or pass options.pat)');
-    const apiBase = (options.apiBase ?? env.GITHUB_API_BASE?.trim() ?? GITHUB_API_BASE).replace(/\/+$/, '');
-    const slash = options.repo.indexOf('/');
-    if (slash <= 0 || slash === options.repo.length - 1) {
-        throw new Error(`Invalid repo '${options.repo}' — expected 'owner/name'`);
-    }
-    const owner = options.repo.slice(0, slash);
-    const name = options.repo.slice(slash + 1);
-    const fetchImpl = options.fetchImpl ?? fetch;
-    const res = await fetchImpl(`${apiBase}/repos/${owner}/${name}`, {
-        headers: {
-            authorization: `Bearer ${pat}`,
-            accept: 'application/vnd.github+json',
-            'user-agent': 'cat-factory',
-        },
-    });
-    if (!res.ok) {
-        const text = await res.text().catch(() => '');
-        throw new Error(`GitHub repo lookup failed (HTTP ${res.status}): ${text.slice(0, 200)}`);
-    }
-    const meta = (await res.json());
-    const installationId = syntheticInstallationId(options.workspaceId);
-    const defaultBranch = meta.default_branch ?? 'main';
-    const now = Date.now();
-    let db = options.db;
-    let close;
-    if (!db) {
-        const url = options.databaseUrl ?? env.DATABASE_URL;
-        if (!url)
-            throw new Error('DATABASE_URL is required to link a repo (or pass options.db)');
-        const client = createDbClient(url);
-        db = client.db;
-        close = () => client.pool.end();
-    }
-    try {
-        const installationValues = {
-            installation_id: installationId,
-            workspace_id: options.workspaceId,
-            account_id: meta.owner?.id != null ? String(meta.owner.id) : null,
-            account_login: meta.owner?.login ?? owner,
-            target_type: meta.owner?.type === 'Organization' ? 'Organization' : 'User',
-            app_id: null,
-            cached_token: null,
-            token_expires_at: null,
-            created_at: now,
-            deleted_at: null,
-        };
-        // `github_installations` has a partial UNIQUE index on (workspace_id) WHERE
-        // deleted_at IS NULL, so a pre-existing live row for this workspace under a DIFFERENT
-        // id (e.g. from a real GitHub-App connect) would collide with our synthetic-id
-        // insert — and the upsert below keys on installation_id, not workspace_id, so it
-        // wouldn't catch it. Clear any such row first so re-linking is robust.
-        await db
-            .delete(schema.githubInstallations)
-            .where(and(eq(schema.githubInstallations.workspace_id, options.workspaceId), ne(schema.githubInstallations.installation_id, installationId)));
-        await db.insert(schema.githubInstallations).values(installationValues).onConflictDoUpdate({
-            target: schema.githubInstallations.installation_id,
-            set: installationValues,
-        });
-        const repoValues = {
-            workspace_id: options.workspaceId,
-            github_id: meta.id,
-            installation_id: installationId,
-            owner,
-            name,
-            default_branch: defaultBranch,
-            private: meta.private ? 1 : 0,
-            block_id: options.frameBlockId,
-            is_monorepo: 0,
-            etag: null,
-            synced_at: now,
-            deleted_at: null,
-        };
-        await db
-            .insert(schema.githubRepos)
-            .values(repoValues)
-            .onConflictDoUpdate({
-            target: [schema.githubRepos.workspace_id, schema.githubRepos.github_id],
-            set: repoValues,
-        });
-    }
-    finally {
-        await close?.();
-    }
-    return {
-        owner,
-        name,
-        githubId: meta.id,
-        installationId,
-        defaultBranch,
-        private: Boolean(meta.private),
-    };
-}
-//# sourceMappingURL=linkRepo.js.map

package/dist/linkRepo.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"linkRepo.js","sourceRoot":"","sources":["../src/linkRepo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,cAAc,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AACjF,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAA;AAE5D,mFAAmF;AACnF,mEAAmE;AACnE,kFAAkF;AAClF,uFAAuF;AACvF,qFAAqF;AACrF,qFAAqF;AACrF,oFAAoF;AACpF,sCAAsC;AACtC,qFAAqF;AACrF,kEAAkE;AAClE,wEAAwE;AAExE,MAAM,eAAe,GAAG,wBAAwB,CAAA;AAgChD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAwB;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAA;IACjD,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;IAC1F,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,eAAe,CAAC,CAAC,OAAO,CACzF,MAAM,EACN,EAAE,CACH,CAAA;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACvC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,CAAC,IAAI,2BAA2B,CAAC,CAAA;IAC3E,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IAE1C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAA;IAC5C,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,UAAU,KAAK,IAAI,IAAI,EAAE,EAAE;QAC/D,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,GAAG,EAAE;YAC9B,MAAM,EAAE,6BAA6B;YACrC,YAAY,EAAE,aAAa;SAC5B;KACF,CAAC,CAAA;IACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;QAC7C,MAAM,IAAI,KAAK,CAAC,mCAAmC,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;IAC1F,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAK7B,CAAA;IAED,MAAM,cAAc,GAAG,uBAAuB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IACnE,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,IAAI,MAAM,CAAA;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAEtB,IAAI,EAAE,GAAG,OAAO,CAAC,EAAE,CAAA;IACnB,IAAI,KAAwC,CAAA;IAC5C,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC,YAAY,CAAA;QACnD,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAA;QACzF,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;QAClC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAA;QACd,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAA;IACjC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,kBAAkB,GAAG;YACzB,eAAe,EAAE,cAAc;YAC/B,YAAY,EAAE,OAAO,CAAC,WAAW;YACjC,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;YACjE,aAAa,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,IAAI,KAAK;YACzC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM;YAC1E,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,IAAI;YAClB,gBAAgB,EAAE,IAAI;YACtB,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,IAAI;SACjB,CAAA;QACD,4EAA4E;QAC5E,sFAAsF;QACtF,+EAA+E;QAC/E,iFAAiF;QACjF,uEAAuE;QACvE,MAAM,EAAE;aACL,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC;aAClC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,YAAY,EAAE,OAAO,CAAC,WAAW,CAAC,EAChE,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,eAAe,EAAE,cAAc,CAAC,CAC/D,CACF,CAAA;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,kBAAkB,CAAC;YACxF,MAAM,EAAE,MAAM,CAAC,mBAAmB,CAAC,eAAe;YAClD,GAAG,EAAE,kBAAkB;SACxB,CAAC,CAAA;QAEF,MAAM,UAAU,GAAG;YACjB,YAAY,EAAE,OAAO,CAAC,WAAW;YACjC,SAAS,EAAE,IAAI,CAAC,EAAE;YAClB,eAAe,EAAE,cAAc;YAC/B,KAAK;YACL,IAAI;YACJ,cAAc,EAAE,aAAa;YAC7B,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,QAAQ,EAAE,OAAO,CAAC,YAAY;YAC9B,WAAW,EAAE,CAAC;YACd,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,GAAG;YACd,UAAU,EAAE,IAAI;SACjB,CAAA;QACD,MAAM,EAAE;aACL,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;aAC1B,MAAM,CAAC,UAAU,CAAC;aAClB,kBAAkB,CAAC;YAClB,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC;YACvE,GAAG,EAAE,UAAU;SAChB,CAAC,CAAA;IACN,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,EAAE,EAAE,CAAA;IACjB,CAAC;IAED,OAAO;QACL,KAAK;QACL,IAAI;QACJ,QAAQ,EAAE,IAAI,CAAC,EAAE;QACjB,cAAc;QACd,aAAa;QACb,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;KAC/B,CAAA;AACH,CAAC"}

package/dist/main.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=main.d.ts.map

package/dist/main.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":""}

package/dist/main.js

@@ -1,10 +0,0 @@
-import { logger } from '@cat-factory/server';
-import { startLocal } from './server.js';
-// Default entrypoint: `pnpm build` then `node dist/main.js`. Requires DATABASE_URL
-// (the local Postgres) and LOCAL_HARNESS_IMAGE (the executor-harness image run per
-// job). Set PORT to override the listen port (PUBLIC_URL defaults from it).
-startLocal().catch((err) => {
-    logger.error({ err: err instanceof Error ? err.message : String(err) }, 'failed to start');
-    process.exit(1);
-});
-//# sourceMappingURL=main.js.map

package/dist/main.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,mFAAmF;AACnF,mFAAmF;AACnF,4EAA4E;AAC5E,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAClC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAA;IAC1F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}

package/dist/server.d.ts

@@ -1,5 +0,0 @@
-import { start } from '@cat-factory/node-server';
-export declare function startLocal(options?: {
-    env?: NodeJS.ProcessEnv;
-}): Promise<Awaited<ReturnType<typeof start>>>;
-//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAA;AAahD,wBAAsB,UAAU,CAC9B,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAO,GACxC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CA8C5C"}

package/dist/server.js

@@ -1,50 +0,0 @@
-import { start } from '@cat-factory/node-server';
-import { logger } from '@cat-factory/server';
-import { applyLocalDefaults } from './config.js';
-import { buildLocalContainer } from './container.js';
-import { githubPatCreationUrl } from './github.js';
-import { createLocalDockerTransportFromEnv } from './LocalDockerRunnerTransport.js';
-// Boot the local-mode service. It reuses the Node facade's `start()` — Postgres +
-// pg-boss + the execution worker + sweepers, served over @hono/node-server — passing
-// the local composition root so agent jobs run in local Docker containers and GitHub
-// is reached via a PAT. Requires DATABASE_URL (point it at the local Postgres); set
-// LOCAL_HARNESS_IMAGE to run repo-operating agent jobs (without it the board still
-// serves and only container kinds fail, loudly).
-export async function startLocal(options = {}) {
-    const env = options.env ?? process.env;
-    // Best-effort: reap per-job containers a previous run orphaned (a crash or hard kill
-    // can leave exited `cat-factory.managed=local-docker` containers behind, since their
-    // `release()` never ran). Skipped when no image is configured (nothing to reap).
-    if (env.LOCAL_HARNESS_IMAGE?.trim()) {
-        try {
-            const reaped = await createLocalDockerTransportFromEnv(env).reapExited();
-            if (reaped > 0)
-                logger.info({ reaped }, 'reaped orphaned local job containers');
-        }
-        catch (err) {
-            logger.warn({ err: err instanceof Error ? err.message : String(err) }, 'could not reap orphaned local job containers');
-        }
-    }
-    // The auth gate defaults OPEN in local mode and the listener binds to all interfaces
-    // (so on native Linux Docker the agent containers can reach the LLM proxy via the
-    // bridge gateway). That combination means anyone on your network can reach the API —
-    // surface it so it is a choice, not a surprise. Lock it down with AUTH_DEV_OPEN=false,
-    // or HOST=127.0.0.1 on Docker Desktop (where host.docker.internal still resolves).
-    const localized = applyLocalDefaults(env);
-    // GitHub is reached via a PAT in local mode (there is no GitHub-App connect flow). Without
-    // one the board still serves, but every repo-operating agent step — clone, push, open PR,
-    // the CI gate, the real merge — fails. Surface it at boot with a click-through URL that
-    // pre-selects the scopes, so it is a one-step fix rather than a runtime surprise.
-    if (!localized.GITHUB_PAT?.trim()) {
-        logger.warn(`local mode: GITHUB_PAT is not set — agent steps that clone, push, open PRs, gate on ` +
-            `CI or merge will fail. Create a token (scopes pre-selected) at ${githubPatCreationUrl()} ` +
-            `then set GITHUB_PAT and restart.`);
-    }
-    if (localized.AUTH_DEV_OPEN !== 'false' && !env.HOST?.trim()) {
-        logger.warn('local mode: the auth gate is OPEN and the server binds to all interfaces — anyone ' +
-            'on your network can reach the API. Set AUTH_DEV_OPEN=false, or HOST=127.0.0.1 on ' +
-            'Docker Desktop, to restrict it.');
-    }
-    return start({ env, buildContainer: buildLocalContainer });
-}
-//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,iCAAiC,EAAE,MAAM,iCAAiC,CAAA;AAEnF,kFAAkF;AAClF,qFAAqF;AACrF,qFAAqF;AACrF,oFAAoF;AACpF,mFAAmF;AACnF,iDAAiD;AACjD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAO,GAAgC,EAAE;IAEzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IAEtC,qFAAqF;IACrF,qFAAqF;IACrF,iFAAiF;IACjF,IAAI,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,iCAAiC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAA;YACxE,IAAI,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,sCAAsC,CAAC,CAAA;QACjF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACzD,8CAA8C,CAC/C,CAAA;QACH,CAAC;IACH,CAAC;IAED,qFAAqF;IACrF,kFAAkF;IAClF,qFAAqF;IACrF,uFAAuF;IACvF,mFAAmF;IACnF,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;IAEzC,2FAA2F;IAC3F,0FAA0F;IAC1F,wFAAwF;IACxF,kFAAkF;IAClF,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CACT,sFAAsF;YACpF,kEAAkE,oBAAoB,EAAE,GAAG;YAC3F,kCAAkC,CACrC,CAAA;IACH,CAAC;IAED,IAAI,SAAS,CAAC,aAAa,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;QAC7D,MAAM,CAAC,IAAI,CACT,oFAAoF;YAClF,mFAAmF;YACnF,iCAAiC,CACpC,CAAA;IACH,CAAC;IAED,OAAO,KAAK,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,mBAAmB,EAAE,CAAC,CAAA;AAC5D,CAAC"}