@cat-factory/local-server 0.6.0

package/dist/server.js

@@ -0,0 +1,50 @@
+import { start } from '@cat-factory/node-server';
+import { logger } from '@cat-factory/server';
+import { applyLocalDefaults } from './config.js';
+import { buildLocalContainer } from './container.js';
+import { githubPatCreationUrl } from './github.js';
+import { createLocalDockerTransportFromEnv } from './LocalDockerRunnerTransport.js';
+// Boot the local-mode service. It reuses the Node facade's `start()` — Postgres +
+// pg-boss + the execution worker + sweepers, served over @hono/node-server — passing
+// the local composition root so agent jobs run in local Docker containers and GitHub
+// is reached via a PAT. Requires DATABASE_URL (point it at the local Postgres); set
+// LOCAL_HARNESS_IMAGE to run repo-operating agent jobs (without it the board still
+// serves and only container kinds fail, loudly).
+export async function startLocal(options = {}) {
+    const env = options.env ?? process.env;
+    // Best-effort: reap per-job containers a previous run orphaned (a crash or hard kill
+    // can leave exited `cat-factory.managed=local-docker` containers behind, since their
+    // `release()` never ran). Skipped when no image is configured (nothing to reap).
+    if (env.LOCAL_HARNESS_IMAGE?.trim()) {
+        try {
+            const reaped = await createLocalDockerTransportFromEnv(env).reapExited();
+            if (reaped > 0)
+                logger.info({ reaped }, 'reaped orphaned local job containers');
+        }
+        catch (err) {
+            logger.warn({ err: err instanceof Error ? err.message : String(err) }, 'could not reap orphaned local job containers');
+        }
+    }
+    // The auth gate defaults OPEN in local mode and the listener binds to all interfaces
+    // (so on native Linux Docker the agent containers can reach the LLM proxy via the
+    // bridge gateway). That combination means anyone on your network can reach the API —
+    // surface it so it is a choice, not a surprise. Lock it down with AUTH_DEV_OPEN=false,
+    // or HOST=127.0.0.1 on Docker Desktop (where host.docker.internal still resolves).
+    const localized = applyLocalDefaults(env);
+    // GitHub is reached via a PAT in local mode (there is no GitHub-App connect flow). Without
+    // one the board still serves, but every repo-operating agent step — clone, push, open PR,
+    // the CI gate, the real merge — fails. Surface it at boot with a click-through URL that
+    // pre-selects the scopes, so it is a one-step fix rather than a runtime surprise.
+    if (!localized.GITHUB_PAT?.trim()) {
+        logger.warn(`local mode: GITHUB_PAT is not set — agent steps that clone, push, open PRs, gate on ` +
+            `CI or merge will fail. Create a token (scopes pre-selected) at ${githubPatCreationUrl()} ` +
+            `then set GITHUB_PAT and restart.`);
+    }
+    if (localized.AUTH_DEV_OPEN !== 'false' && !env.HOST?.trim()) {
+        logger.warn('local mode: the auth gate is OPEN and the server binds to all interfaces — anyone ' +
+            'on your network can reach the API. Set AUTH_DEV_OPEN=false, or HOST=127.0.0.1 on ' +
+            'Docker Desktop, to restrict it.');
+    }
+    return start({ env, buildContainer: buildLocalContainer });
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAA;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,iCAAiC,EAAE,MAAM,iCAAiC,CAAA;AAEnF,kFAAkF;AAClF,qFAAqF;AACrF,qFAAqF;AACrF,oFAAoF;AACpF,mFAAmF;AACnF,iDAAiD;AACjD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAO,GAAgC,EAAE;IAEzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IAEtC,qFAAqF;IACrF,qFAAqF;IACrF,iFAAiF;IACjF,IAAI,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,iCAAiC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAA;YACxE,IAAI,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,sCAAsC,CAAC,CAAA;QACjF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACzD,8CAA8C,CAC/C,CAAA;QACH,CAAC;IACH,CAAC;IAED,qFAAqF;IACrF,kFAAkF;IAClF,qFAAqF;IACrF,uFAAuF;IACvF,mFAAmF;IACnF,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;IAEzC,2FAA2F;IAC3F,0FAA0F;IAC1F,wFAAwF;IACxF,kFAAkF;IAClF,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CACT,sFAAsF;YACpF,kEAAkE,oBAAoB,EAAE,GAAG;YAC3F,kCAAkC,CACrC,CAAA;IACH,CAAC;IAED,IAAI,SAAS,CAAC,aAAa,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;QAC7D,MAAM,CAAC,IAAI,CACT,oFAAoF;YAClF,mFAAmF;YACnF,iCAAiC,CACpC,CAAA;IACH,CAAC;IAED,OAAO,KAAK,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,mBAAmB,EAAE,CAAC,CAAA;AAC5D,CAAC"}

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@cat-factory/local-server",
+  "version": "0.6.0",
+  "description": "Local-mode runtime facade for the Agent Architecture Board: the @cat-factory/node-server stack with agent jobs run as local Docker/Podman containers and GitHub accessed via a personal access token — a developer can run the whole product on their own machine.",
+  "files": [
+    "dist"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "drizzle-orm": "1.0.0-rc.3",
+    "@cat-factory/agents": "0.6.0",
+    "@cat-factory/contracts": "0.6.0",
+    "@cat-factory/kernel": "0.6.0",
+    "@cat-factory/orchestration": "0.6.0",
+    "@cat-factory/node-server": "0.6.0",
+    "@cat-factory/server": "0.6.0"
+  },
+  "devDependencies": {
+    "@types/node": "^24.13.2",
+    "typescript": "7.0.1-rc",
+    "vitest": "^4.1.9",
+    "@cat-factory/conformance": "0.6.0"
+  },
+  "scripts": {
+    "build": "tsc -b tsconfig.build.json",
+    "build:watch": "tsc -b tsconfig.build.json --watch",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "start": "node dist/main.js",
+    "dev": "node --watch dist/main.js",
+    "link:repo": "node dist/link-repo.js",
+    "test": "vitest run",
+    "test:run": "vitest run"
+  }
+}