@nilsr0711/drydock 0.1.3 → 0.1.5

package/bin/drydock.mjs

@@ -13,6 +13,36 @@ import { fileURLToPath } from "node:url";
 
 const DEFAULT_HOST = "127.0.0.1";
 const DEFAULT_PORT = 3737;
+
+/**
+ * Returns true when the given host address binds only to the local machine.
+ * Loopback addresses (127.0.0.1, ::1, localhost) are safe because they are
+ * unreachable from the network; all other values expand the attack surface.
+ *
+ * @param {string} host
+ */
+export function isLoopbackHost(host) {
+  return host === "127.0.0.1" || host === "::1" || host === "localhost";
+}
+
+/**
+ * Throws an informative Error when `host` is a non-loopback address and the
+ * operator has not set DRYDOCK_ALLOW_REMOTE=1. This is the only gate between
+ * the unauthenticated dashboard and the network.
+ *
+ * @param {string} host
+ * @param {Record<string, string | undefined>} [env]
+ */
+export function assertSafeHost(host, env = process.env) {
+  if (isLoopbackHost(host)) return;
+  if (env.DRYDOCK_ALLOW_REMOTE) return;
+  throw new Error(
+    `Refusing to bind to "${host}": the Drydock dashboard has no authentication and ` +
+      `would be reachable by anyone on the network.\n` +
+      `To opt in and accept this risk, set DRYDOCK_ALLOW_REMOTE=1:\n` +
+      `  DRYDOCK_ALLOW_REMOTE=1 drydock --host ${host}`,
+  );
+}
 const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "..");
 
 /**
@@ -270,6 +300,8 @@ async function waitForServer(url, { attempts = 100, intervalMs = 100 } = {}) {
 }
 
 async function serve({ host, port, open }) {
+  assertSafeHost(host);
+
   const serverEntry = join(PACKAGE_ROOT, ".next", "standalone", "server.js");
   if (!existsSync(serverEntry)) {
     throw new Error(

package/drizzle/0010_one_shot_costs.sql

@@ -0,0 +1,12 @@
+CREATE TABLE `one_shot_costs` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`repo_id` integer NOT NULL,
+	`type` text NOT NULL,
+	`cost_usd` real DEFAULT 0 NOT NULL,
+	`input_tokens` integer DEFAULT 0 NOT NULL,
+	`output_tokens` integer DEFAULT 0 NOT NULL,
+	`created_at` integer DEFAULT (unixepoch()) NOT NULL,
+	FOREIGN KEY (`repo_id`) REFERENCES `repos`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE INDEX `one_shot_costs_repo_idx` ON `one_shot_costs` (`repo_id`);

package/drizzle/0021_robust_wind_dancer.sql

@@ -0,0 +1,48 @@
+PRAGMA foreign_keys=OFF;--> statement-breakpoint
+CREATE TABLE `__new_repos` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`path` text NOT NULL,
+	`name` text NOT NULL,
+	`default_branch` text DEFAULT 'main' NOT NULL,
+	`queue_label` text DEFAULT 'drydock:queue' NOT NULL,
+	`working_label` text DEFAULT 'drydock:working' NOT NULL,
+	`needs_human_label` text DEFAULT 'drydock:needs-human' NOT NULL,
+	`default_model` text DEFAULT 'claude-opus-4-8' NOT NULL,
+	`agent` text DEFAULT 'claude' NOT NULL,
+	`platform` text DEFAULT 'github' NOT NULL,
+	`api_base_url` text,
+	`api_token` text,
+	`daily_cost_limit_usd` real DEFAULT 10 NOT NULL,
+	`adr_gating` integer DEFAULT false NOT NULL,
+	`sequential` integer DEFAULT true NOT NULL,
+	`auto_triage_enabled` integer DEFAULT false NOT NULL,
+	`auto_process_enabled` integer DEFAULT false NOT NULL,
+	`auto_heal_ci` integer DEFAULT false NOT NULL,
+	`auto_review_feedback` integer DEFAULT false NOT NULL,
+	`auto_resolve_merge_conflicts` integer DEFAULT false NOT NULL,
+	`include_progress_replies` integer DEFAULT false NOT NULL,
+	`auto_decompose` integer DEFAULT false NOT NULL,
+	`verify_pr` integer DEFAULT false NOT NULL,
+	`auto_heal_deployments` integer DEFAULT false NOT NULL,
+	`deployment_platform` text,
+	`trusted_reviewers` text DEFAULT '[]' NOT NULL,
+	`ignored_bots` text DEFAULT '["dependabot[bot]","github-actions[bot]","codecov[bot]"]' NOT NULL,
+	`ready_labels` text DEFAULT '["ready","ready-for-agent","ready-to-work"]' NOT NULL,
+	`blocking_labels` text DEFAULT '["blocked","question","needs-human","needs-discussion","wontfix","duplicate","invalid"]' NOT NULL,
+	`auto_label_whitelist` text DEFAULT '["bug","enhancement","documentation","ready"]' NOT NULL,
+	`priority_authors` text DEFAULT '[]' NOT NULL,
+	`min_author_association` text DEFAULT 'approved' NOT NULL,
+	`max_attempts` integer DEFAULT 3 NOT NULL,
+	`max_job_minutes` integer,
+	`max_ci_wait_minutes` integer,
+	`max_job_cost_usd` real,
+	`agent_instructions` text,
+	`release_enabled` integer DEFAULT false NOT NULL,
+	`webhook_secret` text,
+	`created_at` integer DEFAULT (unixepoch()) NOT NULL
+);
+--> statement-breakpoint
+INSERT INTO `__new_repos`("id", "path", "name", "default_branch", "queue_label", "working_label", "needs_human_label", "default_model", "agent", "platform", "api_base_url", "api_token", "daily_cost_limit_usd", "adr_gating", "sequential", "auto_triage_enabled", "auto_process_enabled", "auto_heal_ci", "auto_review_feedback", "auto_resolve_merge_conflicts", "include_progress_replies", "auto_decompose", "verify_pr", "auto_heal_deployments", "deployment_platform", "trusted_reviewers", "ignored_bots", "ready_labels", "blocking_labels", "auto_label_whitelist", "priority_authors", "min_author_association", "max_attempts", "max_job_minutes", "max_ci_wait_minutes", "max_job_cost_usd", "agent_instructions", "release_enabled", "webhook_secret", "created_at") SELECT "id", "path", "name", "default_branch", "queue_label", "working_label", "needs_human_label", "default_model", "agent", "platform", "api_base_url", "api_token", "daily_cost_limit_usd", "adr_gating", "sequential", "auto_triage_enabled", "auto_process_enabled", "auto_heal_ci", "auto_review_feedback", "auto_resolve_merge_conflicts", "include_progress_replies", "auto_decompose", "verify_pr", "auto_heal_deployments", "deployment_platform", "trusted_reviewers", "ignored_bots", "ready_labels", "blocking_labels", "auto_label_whitelist", "priority_authors", "min_author_association", "max_attempts", "max_job_minutes", "max_ci_wait_minutes", "max_job_cost_usd", "agent_instructions", "release_enabled", "webhook_secret", "created_at" FROM `repos`;--> statement-breakpoint
+DROP TABLE `repos`;--> statement-breakpoint
+ALTER TABLE `__new_repos` RENAME TO `repos`;--> statement-breakpoint
+PRAGMA foreign_keys=ON;

package/drizzle/0022_issue_model_override.sql

@@ -0,0 +1,2 @@
+ALTER TABLE `issues` ADD COLUMN `model_override` text;--> statement-breakpoint
+ALTER TABLE `issues` ADD COLUMN `agent_override` text;