@ipul-labs/forge 1.16.8 → 1.17.0

package/server/forge/core/localRepo.js

@@ -1,163 +0,0 @@
-/**
- * server/forge/core/localRepo.js
- *
- * Shared helpers for maintaining a shallow working clone of a repo under
- * ~/.forge/cache/<repo>/ and overlaying proposed file changes onto it.
- *
- * Used by:
- *   - validator.js → run lint/typecheck/test against the overlaid tree
- *   - ForgeAgent.refineIssue → give the refine model real Read/Glob/Grep access
- *     against the current state of the working tree (FORGE_REFINE_REPO_ACCESS)
- *
- * Scope matches validator v1: GitLab HTTPS clones only. GitHub / Azure DevOps
- * raise a clear "not supported yet" error so the caller can fall back cleanly.
- */
-
-import { spawn } from "child_process";
-import { writeFileSync, unlinkSync } from "fs";
-import fs from "fs/promises";
-import os from "os";
-import path from "path";
-
-import { getConnection } from "./configStore.js";
-
-const CACHE_ROOT = process.env.FORGE_VALIDATE_CACHE
-	?? path.join(os.homedir(), ".forge", "cache");
-
-function runGit(args, opts = {}, onLog) {
-	return new Promise((resolve) => {
-		const proc = spawn("git", args, {
-			...opts,
-			env: { ...process.env, ...(opts.env ?? {}), FORCE_COLOR: "0", NO_COLOR: "1", TERM: "dumb" },
-			stdio: ["ignore", "pipe", "pipe"],
-		});
-		const lines = [];
-		const collect = (buf) => {
-			for (const raw of buf.toString().split("\n")) {
-				const line = raw.replace(/\r$/, "");
-				if (!line) continue;
-				lines.push(line);
-				onLog?.(line);
-			}
-		};
-		proc.stdout.on("data", collect);
-		proc.stderr.on("data", collect);
-		proc.on("error", (err) => resolve({ code: -1, output: lines.join("\n"), error: err.message }));
-		proc.on("close", (code) => resolve({ code: code ?? -1, output: lines.join("\n"), error: null }));
-	});
-}
-
-async function exists(p) {
-	try { await fs.access(p); return true; } catch { return false; }
-}
-
-function sanitizeRepo(repo) {
-	return repo.replace(/[^a-zA-Z0-9_./-]/g, "_");
-}
-
-function gitlabCloneUrl(project) {
-	return `https://gitlab.com/${project}.git`;
-}
-
-function createAskpassScript(token) {
-	const script = path.join(os.tmpdir(), `.forge-askpass-${process.pid}-${Date.now()}`);
-	writeFileSync(script, `#!/bin/sh\ncase "$1" in *Username*) echo oauth2;; *) echo "${token}";; esac\n`, { mode: 0o700 });
-	return script;
-}
-
-function gitEnvWithToken() {
-	const { token } = getConnection("gitlab");
-	if (!token) throw new Error("GitLab token is required to clone the repo locally. Set it in Settings → Connections or via GITLAB_TOKEN env var.");
-	const askpass = createAskpassScript(token);
-	return {
-		env: {
-			GIT_ASKPASS: askpass,
-			GIT_TERMINAL_PROMPT: "0",
-		},
-		cleanup: () => { try { unlinkSync(askpass); } catch {} },
-	};
-}
-
-function resolveCloneUrl(repoInput) {
-	const colon = repoInput.indexOf(":");
-	if (colon > 0) {
-		const prefix = repoInput.slice(0, colon).toLowerCase();
-		if (prefix === "gitlab") return gitlabCloneUrl(repoInput.slice(colon + 1));
-		if (prefix === "github" || prefix === "azuredevops" || prefix === "azure") {
-			throw new Error(`Local clone for ${prefix} repos isn't supported yet — GitLab only.`);
-		}
-	}
-	return gitlabCloneUrl(repoInput);
-}
-
-export function cachePathFor(repo) {
-	return path.join(CACHE_ROOT, sanitizeRepo(repo));
-}
-
-/**
- * Ensures the repo is cloned and reset to a clean branch at origin/main.
- * Reuses any existing clone under ~/.forge/cache/<repo>/.
- *
- * @param {string} repo        Repo id (may carry a "gitlab:" prefix)
- * @param {string} branchName  Workspace branch to check out
- * @param {(msg: string) => void} [onLog]
- * @returns {Promise<string>}  Absolute path to the working tree
- */
-export async function ensureWorkingTree(repo, branchName, onLog) {
-	const dir = cachePathFor(repo);
-	const hasRepo = await exists(path.join(dir, ".git"));
-	const log = (m) => onLog?.(m);
-
-	const { env: gitEnv, cleanup } = gitEnvWithToken();
-	const envOpts = { env: { ...process.env, ...gitEnv } };
-	try {
-		if (!hasRepo) {
-			log(`Cloning ${repo} → ${dir}`);
-			await fs.mkdir(dir, { recursive: true });
-			const clone = await runGit(["clone", "--depth=1", resolveCloneUrl(repo), dir], envOpts, onLog);
-			if (clone.code !== 0) throw new Error(`git clone failed (code ${clone.code})`);
-		} else {
-			log(`Reusing clone at ${dir}`);
-		}
-
-		const fetch = await runGit(["fetch", "--depth=1", "origin", "main"], { cwd: dir, ...envOpts }, onLog);
-		if (fetch.code !== 0) throw new Error(`git fetch failed (code ${fetch.code})`);
-
-		const reset = await runGit(["reset", "--hard", "origin/main"], { cwd: dir }, onLog);
-		if (reset.code !== 0) throw new Error(`git reset failed (code ${reset.code})`);
-		await runGit(["clean", "-fd"], { cwd: dir }, onLog);
-
-		const checkout = await runGit(["checkout", "-B", branchName], { cwd: dir }, onLog);
-		if (checkout.code !== 0) throw new Error(`git checkout ${branchName} failed (code ${checkout.code})`);
-
-		return dir;
-	} finally {
-		cleanup();
-	}
-}
-
-/**
- * Writes proposed file contents into the working tree (or deletes files for
- * action="delete"). Refuses paths that escape the clone directory.
- *
- * @param {string} dir
- * @param {Array<{file: string, action: 'create'|'modify'|'delete', proposed?: string}>} changes
- * @param {(msg: string) => void} [onLog]
- */
-export async function overlayChanges(dir, changes, onLog) {
-	const realBase = await fs.realpath(dir);
-	for (const c of changes) {
-		const full = path.resolve(dir, c.file);
-		if (!full.startsWith(realBase + path.sep) && full !== realBase) {
-			throw new Error(`Refusing to write outside clone dir: ${c.file}`);
-		}
-		if (c.action === "delete") {
-			await fs.rm(full, { force: true });
-			onLog?.(`- ${c.file}`);
-		} else {
-			await fs.mkdir(path.dirname(full), { recursive: true });
-			await fs.writeFile(full, c.proposed ?? "");
-			onLog?.(`+ ${c.file} (${c.action})`);
-		}
-	}
-}

package/server/forge/core/openclawClient.js

@@ -1,125 +0,0 @@
-/**
- * server/forge/core/openclawClient.js
- *
- * Communicates with a locally-running OpenClaw Gateway over HTTP.
- * Configure with:
- *   OPENCLAW_GATEWAY_URL  — e.g. http://192.168.x.x:18789 (Tailscale) or SSH tunnel
- *   OPENCLAW_TOKEN        — Bearer token if your Gateway requires auth
- *
- * The Gateway runs on 127.0.0.1:18789 by default. Expose it remotely via:
- *   Tailscale: bind to tailnet interface
- *   SSH tunnel: ssh -N -L 18789:127.0.0.1:18789 user@host
- */
-
-import {
-	buildIdentifyFilesPrompt,
-	buildProposeFixPrompt,
-	buildRefineOrAskPrompt,
-	buildCheckResolutionPrompt,
-} from "./prompts.js";
-
-const GATEWAY_URL = process.env.OPENCLAW_GATEWAY_URL?.replace(/\/$/, "");
-const GATEWAY_TOKEN = process.env.OPENCLAW_TOKEN;
-const TIMEOUT_MS = 120_000;
-
-// ─── JSON output helpers ──────────────────────────────────────────────────────
-
-function extractJSON(text) {
-	const fenced = text.match(/```(?:json)?\s*([\s\S]*?)```/);
-	if (fenced) return JSON.parse(fenced[1].trim());
-	const start = text.indexOf("{");
-	const end = text.lastIndexOf("}");
-	if (start !== -1 && end !== -1) return JSON.parse(text.slice(start, end + 1));
-	throw new Error("No JSON found in OpenClaw response");
-}
-
-// ─── Gateway transport ────────────────────────────────────────────────────────
-
-/**
- * Send a prompt to the OpenClaw Gateway and return the text response.
- *
- * @param {string} prompt
- * @param {string} [model]
- * @param {{ signal?: AbortSignal }} [opts]
- * @returns {Promise<string>}
- */
-async function callGateway(prompt, model, opts = {}) {
-	if (!GATEWAY_URL) {
-		throw new Error(
-			"OPENCLAW_GATEWAY_URL is not set. Add it to your .env and point it at your OpenClaw Gateway.",
-		);
-	}
-
-	const controller = new AbortController();
-	const timer = setTimeout(() => controller.abort(), TIMEOUT_MS);
-	// Chain the external cancel signal so a job cancel aborts the fetch in
-	// addition to the timeout.
-	const external = opts.signal;
-	const onExternalAbort = () => controller.abort();
-	if (external) {
-		if (external.aborted) controller.abort();
-		else external.addEventListener("abort", onExternalAbort, { once: true });
-	}
-
-	try {
-		const body = { message: prompt };
-		if (model) body.model = model;
-
-		const res = await fetch(`${GATEWAY_URL}/api/v1/agent`, {
-			method: "POST",
-			headers: {
-				"Content-Type": "application/json",
-				...(GATEWAY_TOKEN ? { Authorization: `Bearer ${GATEWAY_TOKEN}` } : {}),
-			},
-			body: JSON.stringify(body),
-			signal: controller.signal,
-		});
-
-		if (!res.ok) {
-			const text = await res.text().catch(() => "");
-			throw new Error(`OpenClaw gateway ${res.status}: ${text.slice(0, 300)}`);
-		}
-
-		const data = await res.json();
-		return data.result ?? data.message ?? data.content ?? data.text ?? JSON.stringify(data);
-	} catch (err) {
-		if (err.name === "AbortError") {
-			// External cancellation wins over "timeout" framing so the terminal
-			// event the job emits reflects the user action, not a stale timer.
-			if (external?.aborted) throw err;
-			throw new Error("OpenClaw gateway timed out after 2 minutes");
-		}
-		throw err;
-	} finally {
-		clearTimeout(timer);
-		external?.removeEventListener("abort", onExternalAbort);
-	}
-}
-
-// ─── Public API (mirrors claudeClient.js) ────────────────────────────────────
-
-export async function checkResolution(issue, diffs, model, opts = {}) {
-	const text = await callGateway(buildCheckResolutionPrompt(issue, diffs), model, opts);
-	const data = extractJSON(text);
-	return { ...data, cost: 0, serviceTier: "openclaw", inputTokens: 0, outputTokens: 0, cacheCreationTokens: 0, cacheReadTokens: 0 };
-}
-
-export async function identifyRelevantFiles(issue, fileTree, model, opts = {}) {
-	const text = await callGateway(buildIdentifyFilesPrompt(issue, fileTree), model, opts);
-	const data = extractJSON(text);
-	return { ...data, cost: 0, serviceTier: "openclaw", inputTokens: 0, outputTokens: 0, cacheCreationTokens: 0, cacheReadTokens: 0 };
-}
-
-export async function proposeFix(issue, fileContents, options = {}, model, opts = {}) {
-	const text = await callGateway(buildProposeFixPrompt(issue, fileContents, options), model, opts);
-	const data = extractJSON(text);
-	return { ...data, cost: 0, serviceTier: "openclaw", inputTokens: 0, outputTokens: 0, cacheCreationTokens: 0, cacheReadTokens: 0 };
-}
-
-export async function refineOrAsk(issue, fileContents, options = {}, model, _onEvent, opts = {}) {
-	// OpenClaw is a single HTTP round-trip — no streaming surface. The onEvent
-	// callback is accepted for signature parity with claudeClient and ignored.
-	const text = await callGateway(buildRefineOrAskPrompt(issue, fileContents, options), model, opts);
-	const data = extractJSON(text);
-	return { ...data, cost: 0, serviceTier: "openclaw", inputTokens: 0, outputTokens: 0, cacheCreationTokens: 0, cacheReadTokens: 0 };
-}