@goodandready/dsh-kanban 0.2.17 → 0.2.19

package/lib/index.js

@@ -55,7 +55,7 @@ import {
   runBatch, queueTask, unqueueTask, liveSessions, dispatchNextQueuedTask,
   PERMISSION_RANKS,
 } from './launcher.js'
-import { cleanupTaskWorktree, checkWorktreeDirty, getTaskDiff, getTaskCommits, mergeTaskWorktree } from './worktree.js'
+import { cleanupTaskWorktree, checkWorktreeDirty, getTaskDiff, getTaskCommits, mergeTaskWorktree, defaultGitRunner } from './worktree.js'
 import { dispatchMove, MOVE_DETAIL, stopWork, STOP_DETAIL } from './commands.js'
 import { createGiteaClient } from './gitea.js'
 import { createGitHubClient } from './github.js'
@@ -75,7 +75,7 @@ import {
   boardDecomposeDefinition,
   boardChecklistItemDefinition,
 } from './board-tool.js'
-import { verifySignature, parseEvent } from './webhook.js'
+import { verifySignature, parseEvent, detectWebhookProvider } from './webhook.js'
 import { planOutbound, planAssign, createOutbox } from './outbound.js'
 import { computeNextRun } from './cron.js'
 import { PowerInhibitor } from './power.js'
@@ -659,7 +659,10 @@ export function apply(ctx, config) {
   ctx.effect(() => ctx.webServer.register({
     kind: 'exact',
     path: '/dsh-kanban/sessions',
-    handler: (req, res) => { reply(res, { sessions: liveSessions({ store, agents: ctx.agents }) }) },
+    handler: (req, res) => {
+      if (req.method !== 'GET') { writeJson(res, 405, { error: 'method-not-allowed' }); return }
+      reply(res, { sessions: liveSessions({ store, agents: ctx.agents }) })
+    },
   }), 'dsh-kanban: live sessions')
 
   ctx.effect(() => ctx.webServer.register({
@@ -697,7 +700,10 @@ export function apply(ctx, config) {
   ctx.effect(() => ctx.webServer.register({
     kind: 'exact',
     path: '/dsh-kanban/archive',
-    handler: (req, res) => { reply(res, listArchive({ store })) },
+    handler: (req, res) => {
+      if (req.method !== 'GET') { writeJson(res, 405, { error: 'method-not-allowed' }); return }
+      reply(res, listArchive({ store }))
+    },
   }), 'dsh-kanban: archive')
 
   ctx.effect(() => ctx.webServer.register({
@@ -721,7 +727,7 @@ export function apply(ctx, config) {
       if (req.method !== 'POST') { writeJson(res, 405, { error: 'method-not-allowed' }); return }
       try {
         const raw = await readRaw(req)
-        const isGithub = Boolean(req.headers['x-github-event'] || req.headers['x-hub-signature-256'])
+        const isGithub = detectWebhookProvider(req.headers) === 'github'
         const secretRef = isGithub
           ? (getConfig().githubWebhookSecretRef || getConfig().webhookSecretRef)
           : getConfig().webhookSecretRef
@@ -804,6 +810,7 @@ export function apply(ctx, config) {
     kind: 'exact',
     path: '/dsh-kanban/board',
     handler: (req, res) => {
+      if (req.method !== 'GET') { writeJson(res, 405, { error: 'method-not-allowed' }); return }
       const url = urlOf(req)
       reply(res, buildBoard({
         store,
@@ -849,6 +856,7 @@ export function apply(ctx, config) {
     kind: 'exact',
     path: '/dsh-kanban/metrics',
     handler: (req, res) => {
+      if (req.method !== 'GET') { writeJson(res, 405, { error: 'method-not-allowed' }); return }
       const url = urlOf(req)
       const days = Number(url.searchParams.get('staleDays'))
       reply(res, boardMetrics({
@@ -864,13 +872,17 @@ export function apply(ctx, config) {
     path: '/dsh-kanban/whoami',
     // Пустой логин — законный ответ: Gitea может быть не настроен или не
     // отвечать. Браузер по нему просто не рисует «Мои», а не показывает ноль.
-    handler: async (req, res) => { reply(res, { login: await whoAmI() }) },
+    handler: async (req, res) => {
+      if (req.method !== 'GET') { writeJson(res, 405, { error: 'method-not-allowed' }); return }
+      reply(res, { login: await whoAmI() })
+    },
   }), 'dsh-kanban: whoami')
 
   ctx.effect(() => ctx.webServer.register({
     kind: 'exact',
     path: '/dsh-kanban/export.csv',
     handler: async (req, res) => {
+      if (req.method !== 'GET') { writeJson(res, 405, { error: 'method-not-allowed' }); return }
       const u = urlOf(req)
       const board = u.searchParams.get('board') || 'main'
       const csv = exportTasksCsv({ store, board })
@@ -902,6 +914,7 @@ export function apply(ctx, config) {
     kind: 'exact',
     path: '/dsh-kanban/templates',
     handler: (req, res) => {
+      if (req.method !== 'GET') { writeJson(res, 405, { error: 'method-not-allowed' }); return }
       const u = new URL(req.url, 'http://localhost')
       const tid = u.searchParams.get('id')
       if (tid) {
@@ -1024,7 +1037,7 @@ export function apply(ctx, config) {
               provider: picked.provider,
               model: picked.model,
               mintSessionId: () => SessionId(`kanban-${id}-${randomUUID()}`),
-              gitRunner,
+              gitRunner: defaultGitRunner,
               workspaceRegistry: ctx.get('workspaceRegistry'),
               claimAs: await whoAmI(),
               permission: typeof input.permission === 'string' ? input.permission : undefined,
@@ -1317,6 +1330,7 @@ export function apply(ctx, config) {
     kind: 'exact',
     path: '/dsh-kanban/gitea/repos',
     handler: async (req, res) => {
+      if (req.method !== 'GET') { writeJson(res, 405, { error: 'method-not-allowed' }); return }
       const url = urlOf(req)
       reply(res, await searchRepos({ gitea: git, query: url.searchParams.get('q') || '' }))
     },
@@ -1326,6 +1340,7 @@ export function apply(ctx, config) {
     kind: 'exact',
     path: '/dsh-kanban/gitea/issues',
     handler: async (req, res) => {
+      if (req.method !== 'GET') { writeJson(res, 405, { error: 'method-not-allowed' }); return }
       const url = urlOf(req)
       reply(res, await listImportable({
         gitea: git,
@@ -1363,6 +1378,7 @@ export function apply(ctx, config) {
     kind: 'exact',
     path: '/dsh-kanban/models',
     handler: async (req, res) => {
+      if (req.method !== 'GET') { writeJson(res, 405, { error: 'method-not-allowed' }); return }
       const current = ctx.get('agentDefaultModel')?.currentSelection?.() ?? null
       const llmService = ctx.get('llm')
       let providers = []
@@ -1391,6 +1407,7 @@ export function apply(ctx, config) {
     kind: 'prefix',
     path: '/dsh-kanban/session',
     handler: (req, res) => {
+      if (req.method !== 'GET') { writeJson(res, 405, { error: 'method-not-allowed' }); return }
       const m = /^\/dsh-kanban\/session\/([^/]+)\/task\/?$/.exec(urlOf(req).pathname)
       if (m === null) { writeJson(res, 404, { error: 'not-found' }); return }
       reply(res, taskBySession({ store, sessionId: decodeURIComponent(m[1]), agents: ctx.agents }))

package/lib/intake.js

@@ -49,18 +49,18 @@ export function watchedRepos({ config, owner }) {
  */
 export function shouldTake({ store, owner, repo, issue }) {
   const number = issue?.number
-  if (typeof number !== 'number') return { take: false, why: 'без номера' }
+  if (typeof number !== 'number') return { take: false, why: 'missing-number' }
   // Pull request в Gitea — тоже issue, но работой на доске он не является:
   // он ход работы, а не сама работа.
   if (issue?.pull_request !== undefined && issue?.pull_request !== null) {
-    return { take: false, why: 'это pull request' }
+    return { take: false, why: 'pull-request-ignored' }
   }
-  if (issue?.state === 'closed') return { take: false, why: 'issue закрыт' }
+  if (issue?.state === 'closed') return { take: false, why: 'issue-closed' }
   if (store.findTaskByIssue({ owner, repo, issueNumber: number }) !== undefined) {
-    return { take: false, why: 'карточка уже есть' }
+    return { take: false, why: 'already-exists' }
   }
   if (store.isDismissed({ owner, repo, issueNumber: number })) {
-    return { take: false, why: 'карточку удалили — значит видеть её здесь не хотят' }
+    return { take: false, why: 'tombstone-ignored' }
   }
   return { take: true, why: '' }
 }

package/lib/store.js

@@ -208,7 +208,6 @@ export function openStore({ dir }) {
   db.exec('PRAGMA journal_mode = WAL')
   db.exec('PRAGMA foreign_keys = ON')
   db.exec('PRAGMA busy_timeout = 5000')
-  db.exec('PRAGMA busy_timeout = 5000')
   db.exec(SCHEMA)
   // База могла быть создана прежней версией. Добавляем недостающие столбцы
   // поштучно: ALTER на существующий столбец бросает, и это штатный ответ

package/lib/templates.js

@@ -1,60 +1,60 @@
-// Шаблоны задач для быстрой постановки типовых работ (#220).
+// Task templates for rapid standard work decomposition (#220, #304).
 
 export const TASK_TEMPLATES = [
   {
     id: 'feature',
-    title: 'Новая функциональность (Feature)',
-    promptTemplate: 'Реализовать новую функциональность:\n- Цель:\n- Требования:\n- Границы изменений:',
+    title: 'New Feature',
+    promptTemplate: 'Implement new feature:\n- Goal:\n- Requirements:\n- Scope of changes:',
     checklist: [
-      { id: '1', text: 'Архитектурный план и дизайн-контракт согласованы', required: true, completed: false },
-      { id: '2', text: 'Код написан с соблюдением стандартов проекта', required: true, completed: false },
-      { id: '3', text: 'Написаны автоматические модульные/интеграционные тесты', required: true, completed: false },
-      { id: '4', text: 'Документация обновлена (README, docs/)', required: true, completed: false },
+      { id: '1', text: 'Architecture plan and design contract agreed', required: true, completed: false },
+      { id: '2', text: 'Code adheres to project guidelines and standards', required: true, completed: false },
+      { id: '3', text: 'Unit and integration tests added and passing', required: true, completed: false },
+      { id: '4', text: 'Documentation updated (README, docs/)', required: true, completed: false },
     ],
     priority: 'medium',
   },
   {
     id: 'bugfix',
-    title: 'Исправление ошибки (Bugfix)',
-    promptTemplate: 'Локализовать и исправить дефект:\n- Шаги воспроизведения:\n- Ожидаемое поведение:\n- Фактическое поведение:',
+    title: 'Bug Fix',
+    promptTemplate: 'Localize and resolve defect:\n- Reproduction steps:\n- Expected behavior:\n- Actual behavior:',
     checklist: [
-      { id: '1', text: 'Дефект воспроизведен изолированным тестом', required: true, completed: false },
-      { id: '2', text: 'Причина устранена без побочных эффектов', required: true, completed: false },
-      { id: '3', text: 'Регрессионный тест добавлен в test suite', required: true, completed: false },
+      { id: '1', text: 'Defect reproduced with isolated test case', required: true, completed: false },
+      { id: '2', text: 'Root cause fixed without regressions', required: true, completed: false },
+      { id: '3', text: 'Regression test added to test suite', required: true, completed: false },
     ],
     priority: 'high',
   },
   {
     id: 'refactor',
-    title: 'Рефакторинг и оптимизация (Refactoring)',
-    promptTemplate: 'Провести рефакторинг модуля без изменения внешнего поведения:\n- Целевой модуль:\n- Проблема архитектуры:\n- Критерии завершения:',
+    title: 'Refactoring & Optimization',
+    promptTemplate: 'Refactor module preserving external behavior:\n- Target module:\n- Architectural issue:\n- Completion criteria:',
     checklist: [
-      { id: '1', text: 'Покрыто существующими тестами (100% green)', required: true, completed: false },
-      { id: '2', text: 'Упрощена структура/устранен техдолг', required: true, completed: false },
-      { id: '3', text: 'Производительность не деградировала', required: true, completed: false },
+      { id: '1', text: 'Covered by existing tests (100% green)', required: true, completed: false },
+      { id: '2', text: 'Structure simplified and technical debt eliminated', required: true, completed: false },
+      { id: '3', text: 'Performance verified (no degradation)', required: true, completed: false },
     ],
     priority: 'low',
   },
   {
     id: 'security',
-    title: 'Аудит безопасности и зависимостей (Security)',
-    promptTemplate: 'Проверить безопасность и уязвимости зависимостей:\n- Область проверки:\n- Ревизия зависимостей:',
+    title: 'Security & Dependency Audit',
+    promptTemplate: 'Verify security and dependency vulnerabilities:\n- Audit scope:\n- Dependency revision:',
     checklist: [
-      { id: '1', text: 'Проверен supply-chain и лицензии зависимостей', required: true, completed: false },
-      { id: '2', text: 'Устранены известные CVE', required: true, completed: false },
-      { id: '3', text: 'Секреты и токены проверены на отсутствие утечек', required: true, completed: false },
+      { id: '1', text: 'Supply-chain and dependency licenses verified', required: true, completed: false },
+      { id: '2', text: 'Known CVEs mitigated or resolved', required: true, completed: false },
+      { id: '3', text: 'Secrets and credentials verified clean of leaks', required: true, completed: false },
     ],
     priority: 'high',
   },
   {
     id: 'release',
-    title: 'Подготовка и выпуск релиза (Release Prep)',
-    promptTemplate: 'Подготовить релиз пакета:\n- Версия:\n- Список изменений:\n- Проверки перед публикацией:',
+    title: 'Release Preparation',
+    promptTemplate: 'Prepare package release:\n- Version:\n- Changelog summary:\n- Pre-release verification:',
     checklist: [
-      { id: '1', text: 'Все тесты репозитория пройдены (npm test)', required: true, completed: false },
-      { id: '2', text: 'Совместимость с ядром подтверждена (npm run compat)', required: true, completed: false },
-      { id: '3', text: 'Размер упакованного пакета проверен (< 256 КБ)', required: true, completed: false },
-      { id: '4', text: 'Документация и changelog дополнены', required: true, completed: false },
+      { id: '1', text: 'All repository tests pass (npm test)', required: true, completed: false },
+      { id: '2', text: 'Core compatibility confirmed (npm run compat)', required: true, completed: false },
+      { id: '3', text: 'Package archive size verified (< 256 KiB)', required: true, completed: false },
+      { id: '4', text: 'Documentation and changelog updated', required: true, completed: false },
     ],
     priority: 'medium',
   },
@@ -62,4 +62,4 @@ export const TASK_TEMPLATES = [
 
 export function getTemplateById(id) {
   return TASK_TEMPLATES.find((t) => t.id === id)
-}
+}

package/lib/workflow-bridge.js

@@ -13,6 +13,7 @@
 
 import { buildStartMessage, obtainAgent } from './launcher.js'
 import { applyMove } from './routes.js'
+import { defaultGitRunner } from './worktree.js'
 
 export const DEFAULT_COLUMN_ROLES = {
   backlog: 'spec',
@@ -22,7 +23,7 @@ export const DEFAULT_COLUMN_ROLES = {
   done: 'docs',
 }
 
-export const LABEL_ROLE_PATTERNS = [
+const LABEL_ROLE_PATTERNS = [
   { role: 'spec', patterns: ['spec', 'specification', 'requirements', 'requirements-analysis', 'анализ', 'тз'] },
   { role: 'architecture', patterns: ['architecture', 'архитектура', 'contract'] },
   { role: 'ui_design', patterns: ['ui', 'ui_design', 'design', 'ux', 'дизайн'] },
@@ -228,7 +229,7 @@ export class WorkflowBridge {
     provider,
     model,
     mintSessionId,
-    gitRunner,
+    gitRunner = defaultGitRunner,
     workspaceRegistry,
     claimAs,
     permission,

package/lib/worktree.js

@@ -23,7 +23,7 @@ const execFileAsync = promisify(execFile)
  * Стандартный исполнитель git-команд.
  * Принимает аргументы массивом, исключая шелл-инъекции.
  */
-async function defaultGitRunner(args, cwd) {
+export async function defaultGitRunner(args, cwd) {
   try {
     const { stdout, stderr } = await execFileAsync('git', args, {
       cwd,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-kanban",
-  "version": "0.2.17",
+  "version": "0.2.19",
   "description": "Visual Kanban board for DeepSeek Harness: Gitea and GitHub-backed tasks, workflow columns, and a dedicated agent session per task.",
   "type": "module",
   "main": "lib/index.js",