@nzpr/kb 0.1.10 → 0.1.12

package/README.md

@@ -169,14 +169,7 @@ export KB_EMBEDDING_API_KEY=...
 
 If `KB_EMBEDDING_MODE` is omitted, the CLI uses local hash embeddings for development.
 
-Publishing needs one more privileged environment variable:
-
-```bash
-export KB_GITHUB_REPO=owner/repo
-export GITHUB_TOKEN=...
-```
-
-Publishing is allowed when the provided `GITHUB_TOKEN` can read `KB_GITHUB_REPO`. Normal readers do not need GitHub credentials.
+Publishing uses the local docs directory and the database only. It does not need GitHub credentials.
 
 When `kb init-repo` is given `--repo`, it uses the same token to:
 
@@ -194,8 +187,6 @@ If you run `kb init-repo` without the repo or database inputs, it still scaffold
 
 ```bash
 export KB_DATABASE_URL=postgresql://kb:kb@localhost:5432/kb
-export KB_GITHUB_REPO=owner/repo
-export GITHUB_TOKEN=...
 docker compose -f docker-compose.pgvector.yml up -d
 kb publish --docs-root ./docs
 kb catalog --json

package/lib/cli-common.js

@@ -67,7 +67,9 @@ optional GitHub API override:
 }
 
 export function publishHelp() {
-  return `required publish authorization:
-  KB_GITHUB_REPO=OWNER/REPO
-  GITHUB_TOKEN=...`;
+  return `publish runtime:
+  KB_DATABASE_URL=postgresql://USER:PASSWORD@HOST:5432/DB
+
+publish reads local docs and writes to the database.
+GitHub credentials are not required.`;
 }

package/lib/cli.js

@@ -102,9 +102,7 @@ export async function main(argv) {
           console.log("no files created");
         }
         printInitRepoStatus(result);
-        printRepoConfiguration(result.configuration);
         printInitRepoNextStep(result);
-        printInitRepoChecklist(result);
         return result.ok ? 0 : 1;
       }
       case "search": {
@@ -167,14 +165,6 @@ export async function main(argv) {
         return 0;
       }
       case "publish": {
-        const repo = flags.repo ?? resolveGitHubRepository();
-        const apiBaseUrl = resolveGitHubApiBaseUrl();
-        const token = process.env.GITHUB_TOKEN ?? null;
-        await requirePublishAccess({
-          repo,
-          token,
-          apiBaseUrl
-        });
         const knowledgeRoot = flags["knowledge-root"]
           ? path.resolve(flags["knowledge-root"])
           : tryResolveKnowledgeRoot();
@@ -280,7 +270,7 @@ function printCommandHelp(command) {
     ask: `usage: kb ask <question> [options]\n\n${databaseHelp()}\n  --limit N`,
     list: `usage: kb list\n\n${databaseHelp()}`,
     catalog: `usage: kb catalog [--json]\n\n${databaseHelp()}`,
-    publish: `usage: kb publish [--docs-root PATH] [--knowledge-root PATH] [--repo OWNER/REPO]\n\n${databaseHelp()}\n\n${publishHelp()}`,
+    publish: `usage: kb publish [--docs-root PATH] [--knowledge-root PATH]\n\n${databaseHelp()}\n\n${publishHelp()}`,
     doctor: `usage: kb doctor [--knowledge-root PATH] [--docs-root PATH]\n\n${databaseHelp()}`
   };
   console.log(commandHelp[command] ?? `unknown command: ${command}`);
@@ -294,68 +284,8 @@ function requireDatabaseUrl() {
   return databaseUrl;
 }
 
-async function requirePublishAccess({ repo, token, apiBaseUrl }) {
-  if (!repo) {
-    throw new Error("KB_GITHUB_REPO or --repo OWNER/REPO is required to publish knowledge");
-  }
-  if (!token) {
-    throw new Error("GITHUB_TOKEN is required to publish knowledge");
-  }
-
-  const response = await fetch(`${apiBaseUrl.replace(/\/$/, "")}/repos/${repo}`, {
-    headers: {
-      accept: "application/vnd.github+json",
-      authorization: `Bearer ${token}`,
-      "user-agent": "@nzpr/kb"
-    }
-  });
-
-  if (!response.ok) {
-    const errorText = await response.text().catch(() => "");
-    throw new Error(
-      `failed to verify GitHub repo access: ${response.status} ${response.statusText}${errorText ? ` - ${errorText}` : ""}`
-    );
-  }
-
-  const payload = await response.json();
-  const permissions = payload?.permissions ?? null;
-  if (!permissions) {
-    return;
-  }
-  if (permissions.admin || permissions.maintain || permissions.push || permissions.triage || permissions.pull) {
-    return;
-  }
-  throw new Error(`GITHUB_TOKEN does not have repository access to ${repo}`);
-}
-
-function printRepoConfiguration(configuration) {
-  console.log("");
-  console.log("configuration reference:");
-  console.log("");
-  console.log("required secrets:");
-  for (const entry of configuration.requiredSecrets) {
-    console.log(`  ${entry.name} - ${entry.purpose}`);
-  }
-  console.log("");
-  console.log("optional secrets:");
-  for (const entry of configuration.optionalSecrets) {
-    console.log(`  ${entry.name} - ${entry.purpose}`);
-  }
-  console.log("");
-  console.log("optional variables:");
-  for (const entry of configuration.optionalVariables) {
-    console.log(`  ${entry.name}=${entry.value} - ${entry.purpose}`);
-  }
-  console.log("");
-  console.log("publish workflow auth:");
-  console.log("  KB_GITHUB_REPO is set automatically to github.repository in the scaffolded workflow");
-  console.log("  GITHUB_TOKEN is provided automatically by GitHub Actions and only needs repository read access for publish");
-  console.log("  the token used for kb init-repo itself must have admin access if you want the CLI to configure repo Actions settings")
-}
-
 function printInitRepoStatus(result) {
   console.log("");
-  console.log("what happened:");
   printInitRepoScaffoldStatus(result);
   printInitRepoDatabaseStatus(result.database);
   printInitRepoGitHubStatus(result.github);
@@ -364,118 +294,71 @@ function printInitRepoStatus(result) {
 function printInitRepoScaffoldStatus(result) {
   const reusedOnly = !result.created.length && result.skipped.length > 0;
   if (reusedOnly) {
-    console.log(`  scaffold: reused the existing knowledge repo files in ${result.root}`);
+    console.log(`scaffold: reused existing files in ${result.root}`);
   } else if (result.created.length) {
-    console.log(`  scaffold: created or updated the knowledge repo scaffold in ${result.root}`);
+    console.log(`scaffold: created or updated files in ${result.root}`);
   } else {
-    console.log(`  scaffold: nothing changed in ${result.root}`);
+    console.log(`scaffold: nothing changed in ${result.root}`);
   }
-  console.log(`  docs: documents live in ${result.docsRootRelative}/`);
-  console.log(`  files: created=${result.created.length} kept=${result.skipped.length}`);
+  console.log(`docs: ${result.docsRootRelative}/`);
 }
 
 function printInitRepoDatabaseStatus(database) {
   if (database.status === "verified") {
-    console.log(
-      `  database: verified ${database.database} current=${database.currentVersion} applied=${database.appliedCount}`
-    );
+    console.log(`database: ok ${database.database} current=${database.currentVersion} applied=${database.appliedCount}`);
     return;
   }
   if (database.status === "failed") {
-    const target = database.target ? ` ${database.target}` : "";
-    console.log(`  database: attempted verification${target}`);
-    console.log(`  database result: failed - ${formatCliError(new Error(database.error))}`);
-    console.log("  database effect: no schema changes were confirmed");
+    console.log(`database: failed - ${formatCliError(new Error(database.error))}`);
     return;
   }
-  if (database.target) {
-    console.log(`  database: pending verification for ${database.target}`);
-  }
-  console.log(`  database result: pending - ${database.message}`);
+  console.log("database: skipped");
 }
 
 function printInitRepoGitHubStatus(github) {
   if (github.status === "configured") {
-    console.log(`  github: configured ${github.repo}`);
+    console.log(`github: ok ${github.repo}`);
     if (github.actions) {
       console.log(
-        `  github actions: enabled=${github.actions.enabled} workflow_permissions=${github.actions.defaultWorkflowPermissions} pr_creation=${github.actions.canApprovePullRequestReviews}`
+        `github actions: enabled=${github.actions.enabled} workflow_permissions=${github.actions.defaultWorkflowPermissions} pr_creation=${github.actions.canApprovePullRequestReviews}`
       );
     }
-    console.log(`  github labels: ${github.labels.join(", ")}`);
-    if (github.secrets.length) {
-      console.log(`  github secrets: ${github.secrets.join(", ")}`);
-    }
-    if (github.variables.length) {
-      console.log(`  github variables: ${github.variables.join(", ")}`);
-    }
     return;
   }
   if (github.status === "failed") {
-    const repo = github.repo ? ` ${github.repo}` : "";
-    console.log(`  github: attempted repo bootstrap${repo}`);
-    console.log(`  github result: failed - ${github.error}`);
+    console.log(`github: failed - ${github.error}`);
     return;
   }
-  if (github.repo) {
-    console.log(`  github: pending bootstrap for ${github.repo}`);
-  }
-  console.log(`  github result: ${github.status} - ${github.message}`);
+  console.log("github: skipped");
 }
 
 function printInitRepoNextStep(result) {
-  const failures = [];
-  if (result.database.status === "failed") {
-    failures.push("database verification failed");
-  }
-  if (result.github.status === "failed") {
-    failures.push("GitHub bootstrap failed");
-  }
-
   if (!result.ok) {
     console.log("");
-    console.log(
-      `next: fix ${failures.join(" and ")} and rerun kb init-repo; rerunning is safe because the scaffold is idempotent`
-    );
+    console.log("next:");
+    if (result.database.status === "failed") {
+      console.log("  fix the database connection and rerun kb init-repo");
+    }
+    if (result.github.status === "failed") {
+      console.log("  fix GitHub access or repo settings and rerun kb init-repo");
+    }
     return;
   }
   if (result.database.status === "verified" && result.github.status === "configured") {
     console.log("");
-    console.log("next: commit the scaffold in the knowledge repo, push it, and let that repo own KB publishing");
+    console.log("next:");
+    console.log("  create a knowledge proposal with kb create");
+    console.log("  add kb-approved to open the PR");
+    console.log("  merge the PR and let publish sync the database");
     return;
   }
   console.log("");
-  console.log(
-    "next: rerun kb init-repo with the missing repo or database inputs when you are ready, or commit the scaffold now and finish remote setup later"
-  );
-}
-
-function printInitRepoChecklist(result) {
-  console.log("");
-  console.log("next steps:");
-  const steps = [];
-  if (result.created.length || result.skipped.length) {
-    steps.push(`commit and push the scaffolded knowledge repo files, including ${result.docsRootRelative}/`);
-  }
+  console.log("next:");
   if (result.github.status !== "configured") {
-    steps.push("make sure the target repo exists and rerun with --repo once GitHub setup is ready");
+    console.log("  rerun init-repo with --repo and admin GitHub access");
   }
   if (result.database.status !== "verified") {
-    steps.push("rerun with --database-url once the target database is reachable");
-  }
-  steps.push("use kb create to open a proposal issue for the first knowledge entry");
-  steps.push("review the issue, add kb-approved, merge the generated PR, and let publish sync the live KB");
-  steps.forEach((step, index) => {
-    console.log(`  ${index + 1}. ${step}`);
-  });
-  console.log("");
-  console.log("changes in this run:");
-  if (result.created.length) {
-    console.log(`  created files: ${result.created.join(", ")}`);
-  } else {
-    console.log("  created files: none");
-  }
-  if (result.skipped.length) {
-    console.log(`  kept existing files: ${result.skipped.join(", ")}`);
+    console.log("  rerun init-repo with a reachable --database-url");
   }
+  console.log("  after that, create a knowledge proposal with kb create");
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nzpr/kb",
-  "version": "0.1.10",
+  "version": "0.1.12",
   "description": "Knowledge base CLI for proposing, publishing, and querying curated agent knowledge.",
   "repository": {
     "type": "git",