@open-cr-agent/cli 0.4.0 → 0.6.0

package/dist/review/target.js

@@ -1,207 +0,0 @@
-import { dirname } from "node:path";
-import { OcraError, } from "@open-cr-agent/core";
-import { DEFAULT_BOT_LOGIN, GitHubApi } from "@open-cr-agent/vcs-github/internal";
-import { GitLabApi } from "@open-cr-agent/vcs-gitlab/internal";
-import { ensureCommits, filesChangedSince, LocalGitAdapter, } from "@open-cr-agent/vcs-local/internal";
-import { ConfigError, loadConfig } from "./config.js";
-import { loadExternalPlugins } from "./plugins.js";
-export async function localTarget(args, cwd, root, env, warn, fetchImpl) {
-    const config = await loadConfig(root, env, {
-        repository: !args.ignoreRepoConfig,
-        ...(args.configFile ? { file: args.configFile } : {}),
-        warn,
-        ...(fetchImpl ? { fetch: fetchImpl } : {}),
-    });
-    return {
-        config,
-        // Plugins named by the user's own file are resolved from where it is.
-        plugins: await loadExternalPlugins(config.plugins, args.configFile ? dirname(args.configFile) : root),
-        createVcs: (registry) => registry.createVcs("local", { cwd, target: args.target }),
-        ...(args.ignoreRepoConfig ? { readTrusted: untrustedTreeReader(args, cwd) } : {}),
-        publish: false,
-    };
-}
-// --no-repo-config is for code you do not trust, so the files that steer a
-// review (.ocra/memory.json can silence findings, rules and AGENTS.md shape
-// the prompts) are not taken from it either: from the base of a range, which
-// you chose, and otherwise not at all.
-function untrustedTreeReader(args, cwd) {
-    if (args.target.mode !== "range")
-        return async () => undefined;
-    const base = new LocalGitAdapter({ cwd, target: { mode: "commit", commit: args.target.from } });
-    return (path) => base.readFile(path);
-}
-// The pull request's own files are untrusted: configuration, guidelines and
-// rules come from its base commit, and repository plugins never load.
-export async function pullRequestTarget(pr, cwd, root, env, warn, fetchImpl, ignoreRepoConfig = false, configFile) {
-    const token = env.GITHUB_TOKEN ?? env.GH_TOKEN;
-    if (!token) {
-        throw new OcraError("CONFIG_CREDENTIALS_MISSING", "--pr needs a GitHub token in GITHUB_TOKEN or GH_TOKEN");
-    }
-    const [owner = "", repo = ""] = (pr.repo ?? (await repositoryName(root, env))).split("/");
-    const apiOptions = { token, ...(env.GITHUB_API_URL ? { baseUrl: env.GITHUB_API_URL } : {}) };
-    const api = new GitHubApi({ owner, repo }, fetchImpl ? { ...apiOptions, fetch: fetchImpl } : apiOptions);
-    const pull = await api.getPullRequest(pr.number);
-    await ensureCommits(root, [pull.base.sha, pull.head.sha], [`pull/${pr.number}/head`]);
-    const base = new LocalGitAdapter({ cwd, target: { mode: "commit", commit: pull.base.sha } });
-    const readTrusted = (path) => base.readFile(path);
-    const config = await loadConfig(root, env, {
-        repository: !ignoreRepoConfig,
-        read: readTrusted,
-        ...(configFile ? { file: configFile } : {}),
-        warn,
-        ...(fetchImpl ? { fetch: fetchImpl } : {}),
-    });
-    if (config.plugins.length > 0) {
-        warn("plugins in the configuration are not loaded for pull requests");
-    }
-    const code = new LocalGitAdapter({
-        cwd,
-        target: { mode: "range", from: pull.base.sha, to: pull.head.sha },
-    });
-    return {
-        config,
-        plugins: [],
-        createVcs: (registry) => registry.createVcs("github", {
-            owner,
-            repo,
-            number: pr.number,
-            token,
-            ...(env.GITHUB_API_URL ? { apiUrl: env.GITHUB_API_URL } : {}),
-            botLogin: config.github.botLogin ?? DEFAULT_BOT_LOGIN,
-            requestChanges: config.github.requestChanges ?? false,
-            code,
-            snapshot: pull,
-            history: {
-                filesChangedSince: (from, to) => filesChangedSince(root, from, to),
-            },
-            ...(fetchImpl ? { fetch: fetchImpl } : {}),
-        }),
-        readTrusted,
-        publish: pr.publish,
-        publishesTo: "pull request",
-    };
-}
-const GITLAB_API = "https://gitlab.com/api/v4";
-// Like a pull request: configuration, guidelines and rules come from the
-// target branch the merge request was based on, and repository plugins never
-// load. GitLab CI sets CI_API_V4_URL and CI_PROJECT_ID; GITLAB_TOKEN must be
-// a token that may write notes, which CI_JOB_TOKEN may not.
-export async function mergeRequestTarget(mr, cwd, root, env, warn, fetchImpl, ignoreRepoConfig = false, configFile) {
-    const token = env.GITLAB_TOKEN;
-    if (!token) {
-        throw new OcraError("CONFIG_CREDENTIALS_MISSING", "--mr needs a GitLab token in GITLAB_TOKEN with the api scope and the Developer role: a project access token, or on GitLab.com Free a personal access token of a dedicated account (CI_JOB_TOKEN cannot post comments)");
-    }
-    const origin = await originUrl(root);
-    const project = mr.project ?? env.CI_PROJECT_ID ?? gitlabProject(origin);
-    const apiUrl = gitlabApi(env.CI_API_V4_URL, remoteHost(origin), warn);
-    const api = new GitLabApi(project, {
-        token,
-        baseUrl: apiUrl,
-        ...(fetchImpl ? { fetch: fetchImpl } : {}),
-    });
-    const merge = await api.getMergeRequest(mr.iid);
-    const refs = merge.diff_refs;
-    if (!refs) {
-        throw new OcraError("VCS_NOT_READY", `merge request !${mr.iid} has no diff yet; try again shortly`);
-    }
-    await ensureCommits(root, [refs.start_sha, refs.head_sha], [`refs/merge-requests/${mr.iid}/head`]);
-    const base = new LocalGitAdapter({ cwd, target: { mode: "commit", commit: refs.start_sha } });
-    const readTrusted = (path) => base.readFile(path);
-    const config = await loadConfig(root, env, {
-        repository: !ignoreRepoConfig,
-        read: readTrusted,
-        ...(configFile ? { file: configFile } : {}),
-        warn,
-        ...(fetchImpl ? { fetch: fetchImpl } : {}),
-    });
-    if (config.plugins.length > 0) {
-        warn("plugins in the configuration are not loaded for merge requests");
-    }
-    const code = new LocalGitAdapter({
-        cwd,
-        target: { mode: "range", from: refs.start_sha, to: refs.head_sha },
-    });
-    return {
-        config,
-        plugins: [],
-        createVcs: (registry) => registry.createVcs("gitlab", {
-            project: /^\d+$/.test(project) ? Number(project) : project,
-            iid: mr.iid,
-            token,
-            apiUrl,
-            code,
-            snapshot: merge,
-            history: {
-                filesChangedSince: (from, to) => filesChangedSince(root, from, to),
-            },
-            ...(fetchImpl ? { fetch: fetchImpl } : {}),
-        }),
-        readTrusted,
-        publish: mr.publish,
-        publishesTo: "merge request",
-    };
-}
-function originUrl(root) {
-    return new LocalGitAdapter({ cwd: root, target: { mode: "workspace" } })
-        .remoteUrl("origin")
-        .catch(() => undefined);
-}
-// Where GITLAB_TOKEN goes: to CI_API_V4_URL, which GitLab CI sets, or else
-// to gitlab.com, but only when origin is there too or is no remote host. A
-// token for a self-managed instance must not travel to gitlab.com because
-// the address was left out.
-function gitlabApi(configured, origin, warn) {
-    if (configured) {
-        const api = remoteHost(configured);
-        if (api && origin && site(api) !== site(origin)) {
-            warn(`CI_API_V4_URL is on ${api} but origin is on ${origin}; GITLAB_TOKEN goes to ${api}`);
-        }
-        return configured;
-    }
-    if (origin && site(origin) !== "gitlab.com") {
-        throw new ConfigError(`origin is on ${origin}, not gitlab.com: set CI_API_V4_URL to its API, such as https://${origin}/api/v4, so that GITLAB_TOKEN goes only there`);
-    }
-    return GITLAB_API;
-}
-// GitLab.com answers on subdomains too, such as altssh.gitlab.com for SSH.
-function site(host) {
-    return host === "gitlab.com" || host.endsWith(".gitlab.com") ? "gitlab.com" : host;
-}
-// The host of https://host/…, ssh://user@host:port/… or user@host:path; none
-// for a local path, including C:\ on Windows.
-function remoteHost(url) {
-    if (!url)
-        return undefined;
-    if (/^[\w+.-]+:\/\//.test(url)) {
-        try {
-            const parsed = new URL(url);
-            return parsed.protocol === "file:" ? undefined : parsed.hostname.toLowerCase() || undefined;
-        }
-        catch {
-            return undefined;
-        }
-    }
-    return /^(?:[^@\s/]+@)?([^:/\s\\]+):(?![\\/])/.exec(url)?.[1]?.toLowerCase();
-}
-// The project behind the origin remote: any host, since GitLab runs on many.
-function gitlabProject(url) {
-    const match = url && /^(?:[\w+.-]+:\/\/[^/]+\/|[^@\s]+@[^:]+:)(.+?)(?:\.git)?\/?$/.exec(url);
-    if (!match?.[1]) {
-        throw new ConfigError("Cannot tell which GitLab project this is; pass --project <id|path>");
-    }
-    return match[1];
-}
-async function repositoryName(root, env) {
-    if (env.GITHUB_REPOSITORY)
-        return env.GITHUB_REPOSITORY;
-    const url = await new LocalGitAdapter({ cwd: root, target: { mode: "workspace" } })
-        .remoteUrl("origin")
-        .catch(() => undefined);
-    const match = url && /github\.com[:/]([\w.-]+\/[\w.-]+?)(?:\.git)?$/.exec(url);
-    if (!match?.[1]) {
-        throw new ConfigError("Cannot tell which GitHub repository this is; pass --repo owner/name");
-    }
-    return match[1];
-}
-//# sourceMappingURL=target.js.map