@open-mercato/cezar 0.13.0 → 0.14.0

package/dist/server/server.js

@@ -38,6 +38,7 @@ import { discoverClaudeModels } from '../core/claude-model-catalog.js';
 import { discoverCodexModels } from '../core/codex-model-catalog.js';
 import { discoverCursorModels } from '../core/cursor-model-catalog.js';
 import { discoverOpencodeModels } from '../core/opencode-model-catalog.js';
+import { discoverJunieModels } from '../core/junie-model-catalog.js';
 import { PROVIDER_IDS, ProviderAuthService, providerAuthChecksDisabled, } from '../core/provider-auth.js';
 import { applyProviderEnablement } from '../core/provider-availability.js';
 import { RunnerModelCatalog } from '../core/runner-model-catalog.js';
@@ -49,8 +50,9 @@ import { QUICK_TASK_WORKFLOW, normalizeWorkflowDoc, skillStackOf, skillsToSteps,
 import { planChain, slugify } from '../planner.js';
 import { discoverSkills } from '../skills.js';
 import { SkillsUpdateConflictError, SkillsUpdateCoordinator, SkillsUpdateService } from '../skills-update.js';
-import { selfUpdateApplyRequestSchema, selfUpdateChannelRequestSchema } from '../contract/index.js';
+import { selfUpdateApplyRequestSchema, selfUpdateChannelRequestSchema, selfUpdateDevelopmentQuerySchema } from '../contract/index.js';
 import { SelfUpdateBusyError, SelfUpdateService } from '../self-update/service.js';
+import { StarCountReader } from './star-count.js';
 import { getTeamSkillsCached, refreshTeamSkills, waitForTeamSkills } from '../skills-remote.js';
 import { appendHandoffHeartbeat, handoffProgressExcerpt, readHandoff } from '../handoff.js';
 import { markStarted, onTodosChanged, readTodos, removeTodo, todoTaskText } from '../todos.js';
@@ -464,6 +466,11 @@ const uiStateSchema = z
     // The GitHub tab's last-selected sub-tab (#417): issues or PRs. ADDITIVE — an old
     // ui-state.json without the key behaves as the default (issues).
     githubView: z.enum(['issues', 'prs']).optional(),
+    // The GitHub tab's list order: newest first (what `gh` returns) or oldest first, for working
+    // the backlog from the long-waiting end. ADDITIVE, like `githubView` above — an old
+    // ui-state.json without the key behaves as the default (newest), and the sort is applied
+    // client-side, so this key changes presentation only, never what `GET /github` fetches.
+    githubSort: z.enum(['newest', 'oldest']).optional(),
     // Settings → Appearance (redesign R6): accent + density. ADDITIVE — the theme itself
     // stays in the browser (`cez-theme` localStorage, pre-paint). The cockpit always PUTs
     // the whole object because the top-level merge below is shallow.
@@ -741,10 +748,11 @@ export function createApp(deps) {
             claude: { discover: () => discoverClaudeModels({ cwd: bootRoot }) },
             codex: { discover: () => discoverCodexModels({ cwd: bootRoot }) },
             opencode: { discover: () => discoverOpencodeModels({ cwd: bootRoot }) },
+            junie: { discover: () => discoverJunieModels({ cwd: bootRoot }) },
             cursor: { discover: () => discoverCursorModels() },
         },
     });
-    const providerAuth = deps.providerAuth ?? new ProviderAuthService();
+    const providerAuth = deps.providerAuth ?? new ProviderAuthService({ cwd: bootRoot });
     const workspaceConfig = deps.workspaceConfig ?? {
         load: loadWorkspaceConfig,
         mergeWrite: mergeWriteWorkspaceConfig,
@@ -805,6 +813,7 @@ export function createApp(deps) {
             readOnly: true,
             trimPaths: () => !capabilities().localHandoff,
         });
+    const starCount = deps.starCount ?? new StarCountReader();
     // ---- workspace boot-project identity (multi-project spec) ----------------
     // The boot flow (`initWorkspace` in src/index.ts) registers the boot repo
     // and plumbs its registry id in via `deps.bootProjectId`. Legacy callers and
@@ -1365,7 +1374,7 @@ export function createApp(deps) {
         // `modelDiscoveryRunnerSchema` is the contract's own list of the runners with an
         // authoritative host-local catalog (#794, #784), so the client compiles against exactly what
         // this validates. A runner absent from it has no discovery path and this 400s.
-        .get('/models', queryZodValidator(z.object({ runner: z.union([z.string(), z.array(z.string()).transform((v) => v[0])]).pipe(modelDiscoveryRunnerSchema) }), { message: 'runner must be claude, codex, opencode, or cursor' }), async (c) => {
+        .get('/models', queryZodValidator(z.object({ runner: z.union([z.string(), z.array(z.string()).transform((v) => v[0])]).pipe(modelDiscoveryRunnerSchema) }), { message: 'runner must be claude, codex, opencode, cursor, or junie' }), async (c) => {
         const query = { data: c.req.valid('query') };
         return c.json(await modelCatalog.get(query.data.runner));
     });
@@ -1466,7 +1475,7 @@ export function createApp(deps) {
             workspaceEvents.emit('provider-status', row);
         return c.json(result);
     })
-        .post('/providers/connect', jsonZodValidator(providerConnectSchema, { message: 'provider must be claude, codex, opencode, cursor, or pi' }), async (c) => {
+        .post('/providers/connect', jsonZodValidator(providerConnectSchema, { message: 'provider must be claude, codex, opencode, cursor, pi, or copilot' }), async (c) => {
         const body = { data: c.req.valid('json') };
         const provider = body.data.provider;
         // A NAMED account is refused in hosted mode before anything is resolved, exactly like every
@@ -2493,10 +2502,19 @@ export function createApp(deps) {
     // registry, so the request cannot inject code, and a VPS behind the installer's Basic auth
     // is exactly where "update from the cockpit" replaces `cezar server-deploy` — but hosted
     // applies are FORWARD-ONLY (see the guard on /apply below).
+    // ---- chained family: the star ask (workspace-level) ----------------------
+    // cezar's own star count, for the cockpit's ⭐ button. Workspace-level and single-mount, like
+    // `/health`: it says nothing about any project, and there is nothing for a project scope to
+    // change about it. Never fails — `{ available: false }` is the ordinary offline answer, so the
+    // cockpit's chip simply is not there rather than showing an error nobody asked for.
+    const starCountRoutes = new Hono().get('/star-count', async (c) => c.json(await starCount.read()));
     const selfUpdateRoutes = new Hono()
         .get('/workspace/self-update', async (c) => c.json(await selfUpdate.status()))
         .post('/workspace/self-update/refresh', async (c) => c.json(await selfUpdate.status({ refresh: true })))
-        .put('/workspace/self-update/channel', jsonZodValidator(selfUpdateChannelRequestSchema, { message: 'body must be { channel: "stable" | "nightly" }' }), async (c) => {
+        // The development channel's pickers: cezar's own worktrees and its open PRs' preview builds.
+        // A separate read because it costs a git call per worktree and a GitHub round trip.
+        .get('/workspace/self-update/development', queryZodValidator(selfUpdateDevelopmentQuerySchema), async (c) => c.json(await selfUpdate.development({ refresh: c.req.valid('query').refresh === '1' })))
+        .put('/workspace/self-update/channel', jsonZodValidator(selfUpdateChannelRequestSchema, { message: 'body must be { channel: "stable" | "nightly" | "development" }' }), async (c) => {
         const { channel } = c.req.valid('json');
         await selfUpdate.setChannel(channel);
         return c.json(await selfUpdate.status());
@@ -2567,6 +2585,7 @@ export function createApp(deps) {
         resources: {
             maxParallel: config.resources.maxParallel,
             maxMonitoringSessions: config.resources.maxMonitoringSessions,
+            idleTimeoutMinutes: config.resources.idleTimeoutMinutes,
             monitoringWakeIntervalMinutes: config.resources.monitoringWakeIntervalMinutes,
             autoResumeOnUsageLimit: config.resources.autoResumeOnUsageLimit,
             memoryLimitMb: config.resources.memoryLimitMb,
@@ -2733,6 +2752,7 @@ export function createApp(deps) {
             .object({
             maxParallel: z.number().int().min(1).max(16).optional(),
             maxMonitoringSessions: z.number().int().min(0).max(16).optional(),
+            idleTimeoutMinutes: z.number().int().min(0).max(1440).nullable().optional(),
             monitoringWakeIntervalMinutes: z.number().int().min(1).max(60).nullable().optional(),
             autoResumeOnUsageLimit: z.boolean().optional(),
             memoryLimitMb: z.number().int().min(0).max(1_048_576).nullable().optional(),
@@ -2751,6 +2771,8 @@ export function createApp(deps) {
                 opencode: z.string().trim().min(1).max(200).nullable().optional(),
                 cursor: z.string().trim().min(1).max(200).nullable().optional(),
                 pi: z.string().trim().min(1).max(200).nullable().optional(),
+                junie: z.string().trim().min(1).max(200).nullable().optional(),
+                copilot: z.string().trim().min(1).max(200).nullable().optional(),
             })
                 .optional(),
         })
@@ -5660,6 +5682,8 @@ export function createApp(deps) {
             if (typeof number === 'number' && Number.isInteger(number) && number > 0)
                 numbers.push(number);
         }
+        for (const ref of run.prRefs ?? [])
+            numbers.push(ref.number);
         return numbers;
     };
     const runIndexEntry = (projectId, run) => {
@@ -5696,6 +5720,7 @@ export function createApp(deps) {
                 ? { referencedPullRequestUrl: run.referencedPullRequestUrl }
                 : {}),
             ...(run.prNumber !== undefined ? { prNumber: run.prNumber } : {}),
+            ...(run.prRefs !== undefined ? { prRefs: run.prRefs } : {}),
             ...(run.issueNumber !== undefined ? { issueNumber: run.issueNumber } : {}),
             ...(run.referencedIssueUrl !== undefined ? { referencedIssueUrl: run.referencedIssueUrl } : {}),
             ...(run.markerRefs !== undefined ? { markerRefs: run.markerRefs } : {}),
@@ -5828,6 +5853,7 @@ export function createApp(deps) {
         .route('/', agentProfilesRoutes)
         .route('/', skillsUpdateRoutes)
         .route('/', selfUpdateRoutes)
+        .route('/', starCountRoutes)
         .route('/', workspaceConfigRoutes)
         .route('/', fsBrowseRoutes)
         .route('/', automationChecksRoutes)
@@ -6172,6 +6198,12 @@ export function resumeCommand(runner, sessionId) {
     if (!isSafeSessionId(sessionId))
         return null;
     switch (runner) {
+        case 'junie':
+            // Verified live (`junie --help`, 26.9.22): `--resume` alone reopens the LAST session;
+            // the target session is named by the separate `--session-id=<id>` flag, not a positional
+            // argument (junie's positional slot is `[<task>]`) — `junie --resume ${sessionId}` would
+            // silently resume the wrong session and read the id as a task prompt instead.
+            return `junie --resume --session-id=${sessionId}`;
         case 'codex':
             return `codex resume ${sessionId}`;
         case 'opencode':
@@ -6182,6 +6214,9 @@ export function resumeCommand(runner, sessionId) {
         }
         case 'pi':
             return `pi --session ${sessionId}`;
+        case 'copilot':
+            // `--resume <id>` takes a session id, a task id or an id prefix (`copilot --help`, 1.0.88).
+            return `copilot --resume ${sessionId}`;
         default:
             return `claude --resume ${sessionId}`;
     }