@pleri/olam-cli 0.1.151 → 0.1.153

package/host-cp/src/server.mjs

@@ -128,6 +128,10 @@ const OLAM_HOME_HOST_PATH = process.env.OLAM_HOME_HOST_PATH ?? '';
 const OLAM_DOCKER_SOCK_HOST_PATH = process.env.OLAM_DOCKER_SOCK_HOST_PATH ?? '/var/run/docker.sock';
 // Operator's olam repo path on the host. Bound into the upgrader at /workspace
 // so the npm-installed CLI can find packages/host-cp/compose.yaml.
+// Issue #713: npm-only operators legitimately omit this mount. When empty,
+// the /api/admin/upgrade endpoint returns 400 not_configured and /api/prs
+// silently returns [] (gh will fail with "not a git repository"). All other
+// endpoints are unaffected — host-cp stays healthy without the repo mount.
 const OLAM_REPO_HOST_PATH = process.env.OLAM_REPO_HOST_PATH ?? '';
 // gh config bind for the upgrader so it can `gh auth token | docker login ghcr.io ...`.
 // Optional — when empty, the upgrader will fail at the docker-login step
@@ -2051,6 +2055,12 @@ const server = http.createServer(async (req, res) => {
   // Wraps `gh pr list` with a 60s in-process TTL cache so repeated
   // palette opens don't hammer the GitHub API.
   if (url.pathname === '/api/prs' && req.method === 'GET') {
+    // Issue #713: npm-only operators don't have an operator repo mount.
+    // Return [] instead of spawning gh (which would fail with "not a git repository").
+    const repoPath = process.env.OLAM_REPO_PATH || OLAM_REPO_HOST_PATH ? (process.env.OLAM_REPO_PATH || '/operator-repo') : null;
+    if (!repoPath) {
+      return jsonReply(res, 200, []);
+    }
     const now = Date.now();
     if (prListCacheEntry && now - prListCacheEntry.fetchedAt < 60_000) {
       return jsonReply(res, 200, prListCacheEntry.data);
@@ -2070,7 +2080,7 @@ const server = http.createServer(async (req, res) => {
         '--json', 'number,title,state,headRefName',
       ], {
         timeout: 10_000,
-        cwd: process.env.OLAM_REPO_PATH || '/operator-repo',
+        cwd: repoPath,
       });
       const data = JSON.parse(stdout.trim() || '[]');
       prListCacheEntry = { data, fetchedAt: Date.now() };
@@ -2930,6 +2940,13 @@ server.listen(PORT, '0.0.0.0', () => {
   console.log(`  mode=${HOST_CP_MODE} world-host=${HOST_FOR_WORLD}`);
   console.log(`  engine=${hostCpEngine.engineName}${hostCpEngine.context ? ` ctx=${hostCpEngine.context}` : ''}`);
   console.log(`  (override: OLAM_HOST_CP_MODE=container|bare, OLAM_HOST_FOR_WORLD=<host>)`);
+  // Issue #713: surface npm-only mode at boot so the operator can confirm
+  // graceful degrade in `kubectl logs deploy/olam-host-cp -n olam`.
+  // /api/admin/upgrade and /api/prs are the only features that need the repo
+  // mount; all other endpoints are unaffected.
+  if (!OLAM_REPO_HOST_PATH) {
+    console.log('  [npm-only] OLAM_REPO_HOST_PATH unset — /api/admin/upgrade returns 400 (not_configured); /api/prs returns []. All other endpoints healthy.');
+  }
   // Surface the auth wiring state at boot. An empty OLAM_AUTH_SECRET
   // here is silently fatal for the credential surfaces — the operator
   // would otherwise only see "0 credentials" in the SPA with no hint

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pleri/olam-cli",
-  "version": "0.1.151",
+  "version": "0.1.153",
   "type": "module",
   "bin": {
     "olam": "./bin/olam.cjs"