@nilsr0711/drydock 0.1.2 → 0.1.4

package/bin/drydock.mjs

@@ -6,13 +6,43 @@
 // step or TypeScript runtime so it works straight from the published tarball.
 
 import { spawn } from "node:child_process";
-import { existsSync, mkdirSync, readFileSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync, realpathSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 
 const DEFAULT_HOST = "127.0.0.1";
 const DEFAULT_PORT = 3737;
+
+/**
+ * Returns true when the given host address binds only to the local machine.
+ * Loopback addresses (127.0.0.1, ::1, localhost) are safe because they are
+ * unreachable from the network; all other values expand the attack surface.
+ *
+ * @param {string} host
+ */
+export function isLoopbackHost(host) {
+  return host === "127.0.0.1" || host === "::1" || host === "localhost";
+}
+
+/**
+ * Throws an informative Error when `host` is a non-loopback address and the
+ * operator has not set DRYDOCK_ALLOW_REMOTE=1. This is the only gate between
+ * the unauthenticated dashboard and the network.
+ *
+ * @param {string} host
+ * @param {Record<string, string | undefined>} [env]
+ */
+export function assertSafeHost(host, env = process.env) {
+  if (isLoopbackHost(host)) return;
+  if (env.DRYDOCK_ALLOW_REMOTE) return;
+  throw new Error(
+    `Refusing to bind to "${host}": the Drydock dashboard has no authentication and ` +
+      `would be reachable by anyone on the network.\n` +
+      `To opt in and accept this risk, set DRYDOCK_ALLOW_REMOTE=1:\n` +
+      `  DRYDOCK_ALLOW_REMOTE=1 drydock --host ${host}`,
+  );
+}
 const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "..");
 
 /**
@@ -129,20 +159,107 @@ export function detectInstallKind(packageRoot) {
   return "local";
 }
 
+/** The npm package name this CLI is published under. */
+const PACKAGE_NAME = "@nilsr0711/drydock";
+
 /** The command that updates a global install to the latest published version. */
 export function updateCommand() {
-  return { command: "npm", args: ["install", "--global", "@nilsr0711/drydock@latest"] };
+  return { command: "npm", args: ["install", "--global", `${PACKAGE_NAME}@latest`] };
+}
+
+/**
+ * Compare two `x.y.z` versions (a leading `v` is tolerated). Returns 1 if `a` is
+ * newer, -1 if older, 0 if equal. Throws if either version is unparseable so
+ * callers can fall back rather than silently mis-ordering.
+ */
+export function compareVersions(a, b) {
+  const parse = (v) => {
+    const m = /^v?(\d+)\.(\d+)\.(\d+)/.exec(String(v).trim());
+    if (!m) throw new Error(`unparseable version: ${v}`);
+    return [Number(m[1]), Number(m[2]), Number(m[3])];
+  };
+  const pa = parse(a);
+  const pb = parse(b);
+  for (let i = 0; i < 3; i++) {
+    if (pa[i] > pb[i]) return 1;
+    if (pa[i] < pb[i]) return -1;
+  }
+  return 0;
+}
+
+/**
+ * Decide what `drydock update` should do given the installed version and the
+ * latest published version (which may be null/unparseable when the check fails).
+ * Degrades gracefully: when the latest version can't be determined, still
+ * attempts the install rather than blocking the user.
+ *
+ * @returns {{ action: "skip" | "install", reason: string, latestVersion?: string }}
+ */
+export function planUpdate(currentVersion, latestVersion) {
+  if (!latestVersion) return { action: "install", reason: "unknown-latest" };
+  let cmp;
+  try {
+    cmp = compareVersions(latestVersion, currentVersion);
+  } catch {
+    return { action: "install", reason: "unknown-latest" };
+  }
+  if (cmp <= 0) return { action: "skip", reason: "up-to-date" };
+  return { action: "install", reason: "update-available", latestVersion };
+}
+
+/**
+ * Resolve the latest published version from the npm registry's `latest`
+ * dist-tag. Never throws: returns null on any network/HTTP/parse failure so the
+ * caller can fall back to a blind install.
+ *
+ * @param {string} pkg The (possibly scoped) package name.
+ * @param {{ fetchImpl?: typeof fetch }} [opts]
+ * @returns {Promise<string | null>}
+ */
+export async function resolveLatestVersion(pkg, { fetchImpl = fetch } = {}) {
+  try {
+    const url = `https://registry.npmjs.org/${encodeURIComponent(pkg)}/latest`;
+    const res = await fetchImpl(url, {
+      headers: { Accept: "application/json", "User-Agent": "drydock-update" },
+    });
+    if (!res.ok) return null;
+    const body = await res.json();
+    return typeof body?.version === "string" ? body.version : null;
+  } catch {
+    return null;
+  }
 }
 
 /** Run the self-update, inheriting stdio so npm's progress is visible. */
-function runUpdate() {
+async function runUpdate() {
+  const current = readVersion();
+  console.error(`Current version: drydock v${current}`);
+
+  const latest = await resolveLatestVersion(PACKAGE_NAME);
+  const plan = planUpdate(current, latest);
+
+  if (plan.action === "skip") {
+    console.error(`drydock is already up to date (v${current}).`);
+    process.exit(0);
+  }
+
+  if (plan.reason === "unknown-latest") {
+    console.error("Could not determine the latest version; attempting update anyway…");
+  } else {
+    console.error(`Updating drydock ${current} → ${plan.latestVersion} …`);
+  }
+
   const { command, args } = updateCommand();
-  console.error(`Updating drydock: ${command} ${args.join(" ")}`);
   const child = spawn(command, args, {
     shell: process.platform === "win32",
     stdio: "inherit",
   });
-  child.on("exit", (code) => process.exit(code ?? 0));
+  child.on("exit", (code) => {
+    if (code === 0 && plan.reason === "update-available") {
+      console.error(`Updated to drydock v${plan.latestVersion}.`);
+    }
+    process.exit(code ?? 0);
+  });
   child.on("error", (err) => {
     console.error(`Update failed: ${err.message}`);
     process.exit(1);
@@ -183,6 +300,8 @@ async function waitForServer(url, { attempts = 100, intervalMs = 100 } = {}) {
 }
 
 async function serve({ host, port, open }) {
+  assertSafeHost(host);
+
   const serverEntry = join(PACKAGE_ROOT, ".next", "standalone", "server.js");
   if (!existsSync(serverEntry)) {
     throw new Error(
@@ -244,15 +363,34 @@ async function main(argv) {
       console.log(readVersion());
       return;
     case "update":
-      runUpdate();
+      await runUpdate();
       return;
     default:
       await serve(directive);
   }
 }
 
+/**
+ * Decide whether this module is the program entry point. A plain string compare
+ * against `process.argv[1]` breaks for global/npx installs, where the bin is a
+ * symlink in a bin directory and argv[1] is that link rather than the real file.
+ * Resolving the entry path through symlinks (realpath) makes the two comparable,
+ * so `drydock`, `drydock --version`, etc. actually run when installed.
+ *
+ * @param {string} modulePath Absolute path to this module (resolved import.meta.url).
+ * @param {string | undefined} entryPath The invoked entry path (process.argv[1]).
+ */
+export function isMainModule(modulePath, entryPath) {
+  if (!entryPath) return false;
+  try {
+    return modulePath === realpathSync(entryPath);
+  } catch {
+    return false;
+  }
+}
+
 // Only run when executed directly, not when imported by tests.
-if (process.argv[1] && fileURLToPath(import.meta.url) === resolve(process.argv[1])) {
+if (isMainModule(fileURLToPath(import.meta.url), process.argv[1])) {
   main(process.argv.slice(2)).catch((err) => {
     console.error(err instanceof Error ? err.message : String(err));
     process.exit(1);

package/drizzle/0010_one_shot_costs.sql

@@ -0,0 +1,12 @@
+CREATE TABLE `one_shot_costs` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`repo_id` integer NOT NULL,
+	`type` text NOT NULL,
+	`cost_usd` real DEFAULT 0 NOT NULL,
+	`input_tokens` integer DEFAULT 0 NOT NULL,
+	`output_tokens` integer DEFAULT 0 NOT NULL,
+	`created_at` integer DEFAULT (unixepoch()) NOT NULL,
+	FOREIGN KEY (`repo_id`) REFERENCES `repos`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE INDEX `one_shot_costs_repo_idx` ON `one_shot_costs` (`repo_id`);

package/drizzle/0021_robust_wind_dancer.sql

@@ -0,0 +1,48 @@
+PRAGMA foreign_keys=OFF;--> statement-breakpoint
+CREATE TABLE `__new_repos` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`path` text NOT NULL,
+	`name` text NOT NULL,
+	`default_branch` text DEFAULT 'main' NOT NULL,
+	`queue_label` text DEFAULT 'drydock:queue' NOT NULL,
+	`working_label` text DEFAULT 'drydock:working' NOT NULL,
+	`needs_human_label` text DEFAULT 'drydock:needs-human' NOT NULL,
+	`default_model` text DEFAULT 'claude-opus-4-8' NOT NULL,
+	`agent` text DEFAULT 'claude' NOT NULL,
+	`platform` text DEFAULT 'github' NOT NULL,
+	`api_base_url` text,
+	`api_token` text,
+	`daily_cost_limit_usd` real DEFAULT 10 NOT NULL,
+	`adr_gating` integer DEFAULT false NOT NULL,
+	`sequential` integer DEFAULT true NOT NULL,
+	`auto_triage_enabled` integer DEFAULT false NOT NULL,
+	`auto_process_enabled` integer DEFAULT false NOT NULL,
+	`auto_heal_ci` integer DEFAULT false NOT NULL,
+	`auto_review_feedback` integer DEFAULT false NOT NULL,
+	`auto_resolve_merge_conflicts` integer DEFAULT false NOT NULL,
+	`include_progress_replies` integer DEFAULT false NOT NULL,
+	`auto_decompose` integer DEFAULT false NOT NULL,
+	`verify_pr` integer DEFAULT false NOT NULL,
+	`auto_heal_deployments` integer DEFAULT false NOT NULL,
+	`deployment_platform` text,
+	`trusted_reviewers` text DEFAULT '[]' NOT NULL,
+	`ignored_bots` text DEFAULT '["dependabot[bot]","github-actions[bot]","codecov[bot]"]' NOT NULL,
+	`ready_labels` text DEFAULT '["ready","ready-for-agent","ready-to-work"]' NOT NULL,
+	`blocking_labels` text DEFAULT '["blocked","question","needs-human","needs-discussion","wontfix","duplicate","invalid"]' NOT NULL,
+	`auto_label_whitelist` text DEFAULT '["bug","enhancement","documentation","ready"]' NOT NULL,
+	`priority_authors` text DEFAULT '[]' NOT NULL,
+	`min_author_association` text DEFAULT 'approved' NOT NULL,
+	`max_attempts` integer DEFAULT 3 NOT NULL,
+	`max_job_minutes` integer,
+	`max_ci_wait_minutes` integer,
+	`max_job_cost_usd` real,
+	`agent_instructions` text,
+	`release_enabled` integer DEFAULT false NOT NULL,
+	`webhook_secret` text,
+	`created_at` integer DEFAULT (unixepoch()) NOT NULL
+);
+--> statement-breakpoint
+INSERT INTO `__new_repos`("id", "path", "name", "default_branch", "queue_label", "working_label", "needs_human_label", "default_model", "agent", "platform", "api_base_url", "api_token", "daily_cost_limit_usd", "adr_gating", "sequential", "auto_triage_enabled", "auto_process_enabled", "auto_heal_ci", "auto_review_feedback", "auto_resolve_merge_conflicts", "include_progress_replies", "auto_decompose", "verify_pr", "auto_heal_deployments", "deployment_platform", "trusted_reviewers", "ignored_bots", "ready_labels", "blocking_labels", "auto_label_whitelist", "priority_authors", "min_author_association", "max_attempts", "max_job_minutes", "max_ci_wait_minutes", "max_job_cost_usd", "agent_instructions", "release_enabled", "webhook_secret", "created_at") SELECT "id", "path", "name", "default_branch", "queue_label", "working_label", "needs_human_label", "default_model", "agent", "platform", "api_base_url", "api_token", "daily_cost_limit_usd", "adr_gating", "sequential", "auto_triage_enabled", "auto_process_enabled", "auto_heal_ci", "auto_review_feedback", "auto_resolve_merge_conflicts", "include_progress_replies", "auto_decompose", "verify_pr", "auto_heal_deployments", "deployment_platform", "trusted_reviewers", "ignored_bots", "ready_labels", "blocking_labels", "auto_label_whitelist", "priority_authors", "min_author_association", "max_attempts", "max_job_minutes", "max_ci_wait_minutes", "max_job_cost_usd", "agent_instructions", "release_enabled", "webhook_secret", "created_at" FROM `repos`;--> statement-breakpoint
+DROP TABLE `repos`;--> statement-breakpoint
+ALTER TABLE `__new_repos` RENAME TO `repos`;--> statement-breakpoint
+PRAGMA foreign_keys=ON;

package/drizzle/0022_issue_model_override.sql

@@ -0,0 +1,2 @@
+ALTER TABLE `issues` ADD COLUMN `model_override` text;--> statement-breakpoint
+ALTER TABLE `issues` ADD COLUMN `agent_override` text;