@cat-factory/local-server 0.7.2 → 0.7.3

package/dist/server.js

@@ -0,0 +1,100 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { start } from '@cat-factory/node-server';
+import { logger } from '@cat-factory/server';
+import { applyLocalDefaults } from './config.js';
+import { buildLocalContainer } from './container.js';
+import { githubPatCreationUrl } from './github.js';
+import { createLocalContainerTransportFromEnv } from './LocalContainerRunnerTransport.js';
+import { createRuntimeAdapter, resolveRuntimeId } from './runtimes/index.js';
+const execFileAsync = promisify(execFile);
+// Boot the local-mode service. It reuses the Node facade's `start()` — Postgres +
+// pg-boss + the execution worker + sweepers, served over @hono/node-server — passing
+// the local composition root so agent jobs run in local containers (Docker/Podman/
+// OrbStack/Colima/Apple `container`) and GitHub is reached via a PAT. Requires
+// DATABASE_URL (point it at the local Postgres); set LOCAL_HARNESS_IMAGE to run
+// repo-operating agent jobs (without it the board still serves and only container
+// kinds fail, loudly).
+//
+// `environmentProvider` injects a NATIVE ephemeral-environment adapter (e.g. Kargo)
+// in place of the generic HttpEnvironmentProvider — this is the supported seam for a
+// local deployment to wire its own provider while keeping local mode's preflight
+// (orphan reaping, PAT/auth warnings) and differentiators (local container transport,
+// PAT-backed GitHub client). It threads straight through to `buildNodeContainer`'s
+// `environmentProvider` option. `buildContainer` is intentionally NOT exposed: overriding
+// it would discard local mode's differentiators.
+export async function startLocal(options = {}) {
+    const env = options.env ?? process.env;
+    // The auth gate defaults OPEN in local mode and the listener binds to all interfaces
+    // (so on native Linux Docker the agent containers can reach the LLM proxy via the
+    // bridge gateway). That combination means anyone on your network can reach the API —
+    // surface it so it is a choice, not a surprise. Lock it down with AUTH_DEV_OPEN=false,
+    // or HOST=127.0.0.1 on Docker Desktop (where host.docker.internal still resolves).
+    const localized = applyLocalDefaults(env);
+    // Container-runtime preflight: log the selected runtime + its capabilities + the host
+    // alias the harness will use to reach this service, and probe that the CLI is present.
+    // A misconfigured runtime then fails loud at boot rather than on the first dispatch.
+    await preflightRuntime(localized);
+    // Best-effort: reap per-run containers a previous run orphaned (a crash or hard kill
+    // can leave exited managed containers behind, since their `release()` never ran).
+    // Skipped when no image is configured (nothing to reap).
+    if (localized.LOCAL_HARNESS_IMAGE?.trim()) {
+        try {
+            const reaped = await createLocalContainerTransportFromEnv(localized).reapExited();
+            if (reaped > 0)
+                logger.info({ reaped }, 'reaped orphaned local job containers');
+        }
+        catch (err) {
+            logger.warn({ err: err instanceof Error ? err.message : String(err) }, 'could not reap orphaned local job containers');
+        }
+    }
+    // GitHub is reached via a PAT in local mode (there is no GitHub-App connect flow). Without
+    // one the board still serves, but every repo-operating agent step — clone, push, open PR,
+    // the CI gate, the real merge — fails. Surface it at boot with a click-through URL that
+    // pre-selects the scopes, so it is a one-step fix rather than a runtime surprise.
+    if (!localized.GITHUB_PAT?.trim()) {
+        logger.warn(`local mode: GITHUB_PAT is not set — agent steps that clone, push, open PRs, gate on ` +
+            `CI or merge will fail. Create a token (scopes pre-selected) at ${githubPatCreationUrl()} ` +
+            `then set GITHUB_PAT and restart.`);
+    }
+    if (localized.AUTH_DEV_OPEN !== 'false' && !env.HOST?.trim()) {
+        logger.warn('local mode: the auth gate is OPEN and the server binds to all interfaces — anyone ' +
+            'on your network can reach the API. Set AUTH_DEV_OPEN=false, or HOST=127.0.0.1 on ' +
+            'Docker Desktop, to restrict it.');
+    }
+    return start({
+        env,
+        host: options.host,
+        buildContainer: (o) => buildLocalContainer({ ...o, environmentProvider: options.environmentProvider }),
+    });
+}
+/**
+ * Log the resolved container runtime + capabilities + networking, and probe that its CLI
+ * is installed. Non-fatal: the board still boots if the binary is missing (only
+ * container-backed agent kinds then fail), mirroring how a missing image is handled.
+ */
+async function preflightRuntime(localized) {
+    const adapter = createRuntimeAdapter(localized);
+    logger.info({
+        runtime: resolveRuntimeId(localized),
+        binary: adapter.binary,
+        localDind: adapter.capabilities.localDind,
+        hostAlias: adapter.hostAlias,
+        publicUrl: localized.PUBLIC_URL,
+    }, 'local mode: container runtime selected');
+    if (!adapter.capabilities.localDind) {
+        logger.info(`local mode: the '${resolveRuntimeId(localized)}' runtime cannot run the Tester's local ` +
+            `docker-compose infra (no Docker-in-Docker). Tasks must use the ephemeral test ` +
+            `environment (with an environment provider configured) or a 'No infra dependencies' ` +
+            `service; a local-infra Tester run is refused at start.`);
+    }
+    try {
+        await execFileAsync(adapter.binary, ['--version'], { timeout: 10_000 });
+    }
+    catch (err) {
+        logger.warn({ err: err instanceof Error ? err.message : String(err), binary: adapter.binary }, `local mode: container CLI '${adapter.binary}' is not runnable — repo-operating agent ` +
+            `steps will fail until it is installed and on PATH (or set LOCAL_DOCKER_BINARY / ` +
+            `LOCAL_CONTAINER_RUNTIME).`);
+    }
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAA;AAEhD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,oCAAoC,EAAE,MAAM,oCAAoC,CAAA;AACzF,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAE5E,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;AAEzC,kFAAkF;AAClF,qFAAqF;AACrF,mFAAmF;AACnF,+EAA+E;AAC/E,gFAAgF;AAChF,kFAAkF;AAClF,uBAAuB;AACvB,EAAE;AACF,oFAAoF;AACpF,qFAAqF;AACrF,iFAAiF;AACjF,sFAAsF;AACtF,mFAAmF;AACnF,0FAA0F;AAC1F,iDAAiD;AACjD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAO,GAIH,EAAE;IAEN,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IAEtC,qFAAqF;IACrF,kFAAkF;IAClF,qFAAqF;IACrF,uFAAuF;IACvF,mFAAmF;IACnF,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;IAEzC,sFAAsF;IACtF,uFAAuF;IACvF,qFAAqF;IACrF,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAA;IAEjC,qFAAqF;IACrF,kFAAkF;IAClF,yDAAyD;IACzD,IAAI,SAAS,CAAC,mBAAmB,EAAE,IAAI,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,oCAAoC,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,CAAA;YACjF,IAAI,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,sCAAsC,CAAC,CAAA;QACjF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACzD,8CAA8C,CAC/C,CAAA;QACH,CAAC;IACH,CAAC;IAED,2FAA2F;IAC3F,0FAA0F;IAC1F,wFAAwF;IACxF,kFAAkF;IAClF,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CACT,sFAAsF;YACpF,kEAAkE,oBAAoB,EAAE,GAAG;YAC3F,kCAAkC,CACrC,CAAA;IACH,CAAC;IAED,IAAI,SAAS,CAAC,aAAa,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;QAC7D,MAAM,CAAC,IAAI,CACT,oFAAoF;YAClF,mFAAmF;YACnF,iCAAiC,CACpC,CAAA;IACH,CAAC;IAED,OAAO,KAAK,CAAC;QACX,GAAG;QACH,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CACpB,mBAAmB,CAAC,EAAE,GAAG,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC;KAClF,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAAC,SAA4B;IAC1D,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAA;IAC/C,MAAM,CAAC,IAAI,CACT;QACE,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC;QACpC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,SAAS;QACzC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,SAAS,CAAC,UAAU;KAChC,EACD,wCAAwC,CACzC,CAAA;IACD,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CACT,oBAAoB,gBAAgB,CAAC,SAAS,CAAC,0CAA0C;YACvF,gFAAgF;YAChF,qFAAqF;YACrF,wDAAwD,CAC3D,CAAA;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;IACzE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EACjF,8BAA8B,OAAO,CAAC,MAAM,2CAA2C;YACrF,kFAAkF;YAClF,2BAA2B,CAC9B,CAAA;IACH,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/local-server",
-  "version": "0.7.2",
+  "version": "0.7.3",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/kibertoad/cat-factory.git",
@@ -27,9 +27,9 @@
     "drizzle-orm": "1.0.0-rc.3",
     "@cat-factory/agents": "0.7.2",
     "@cat-factory/contracts": "0.7.2",
-    "@cat-factory/kernel": "0.7.2",
     "@cat-factory/node-server": "0.7.2",
     "@cat-factory/orchestration": "0.7.2",
+    "@cat-factory/kernel": "0.7.2",
     "@cat-factory/server": "0.7.2"
   },
   "devDependencies": {