@saeed42/worktree-worker 1.4.1 → 1.6.2

package/dist/main.js

@@ -1058,13 +1058,24 @@ var WorktreeService = class {
     await gitService.pruneWorktrees(baseRepoDir);
     const localBranchExists = await gitService.branchExists(branchName, baseRepoDir);
     const remoteBranchExists = await gitService.branchExists(`origin/${branchName}`, baseRepoDir);
+    const createWorktreeWithCreds = async (operation) => {
+      if (options.githubToken) {
+        await gitService.withCredentials(options.githubToken, operation);
+      } else {
+        await operation();
+      }
+    };
     if (localBranchExists) {
       log.info("Creating worktree from existing local branch", { branchName });
-      await gitService.execOrThrow(["worktree", "add", worktreePath, branchName], baseRepoDir);
+      await createWorktreeWithCreds(async () => {
+        await gitService.execOrThrow(["worktree", "add", worktreePath, branchName], baseRepoDir);
+      });
     } else if (remoteBranchExists) {
       log.info("Creating worktree from remote branch", { branchName });
-      await gitService.exec(["fetch", "origin", `${branchName}:${branchName}`], baseRepoDir);
-      await gitService.execOrThrow(["worktree", "add", worktreePath, branchName], baseRepoDir);
+      await createWorktreeWithCreds(async () => {
+        await gitService.exec(["fetch", "origin", `${branchName}:${branchName}`], baseRepoDir);
+        await gitService.execOrThrow(["worktree", "add", worktreePath, branchName], baseRepoDir);
+      });
     } else {
       let baseRef = `origin/${baseBranch}`;
       const baseBranchExistsOnRemote = await gitService.branchExists(baseRef, baseRepoDir);
@@ -1100,7 +1111,9 @@ var WorktreeService = class {
         }
       }
       log.info("Creating worktree with new branch from base", { baseRef, branchName });
-      await gitService.addWorktreeWithNewBranch(worktreePath, branchName, baseRef, baseRepoDir);
+      await createWorktreeWithCreds(async () => {
+        await gitService.addWorktreeWithNewBranch(worktreePath, branchName, baseRef, baseRepoDir);
+      });
     }
     await gitService.exec(["config", "--local", "user.name", "origin-agent[bot]"], worktreePath).catch(() => {
     });
@@ -1651,6 +1664,170 @@ git.delete("/config", async (c) => {
     );
   }
 });
+var gitExecSchema = z3.object({
+  args: z3.array(z3.string()).min(1, "At least one git argument is required"),
+  cwd: z3.string().optional()
+});
+git.post("/exec", async (c) => {
+  const log = logger.child({ route: "git/exec" });
+  try {
+    const body = await c.req.json().catch(() => ({}));
+    const parsed = gitExecSchema.safeParse(body);
+    if (!parsed.success) {
+      return c.json(
+        { success: false, error: { code: "VALIDATION_ERROR", message: parsed.error.message } },
+        400
+      );
+    }
+    const { args, cwd } = parsed.data;
+    const command = args[0];
+    const allowedCommands = [
+      "log",
+      "show",
+      "diff",
+      "status",
+      "branch",
+      "rev-list",
+      "rev-parse",
+      "ls-files",
+      "ls-tree",
+      "cat-file",
+      "describe",
+      "shortlog",
+      "blame",
+      "stash",
+      // Allow stash list
+      "remote",
+      // Allow remote -v
+      "config"
+      // Allow config --get
+    ];
+    const blockedCommands = [
+      "push",
+      "pull",
+      "fetch",
+      "clone",
+      "reset",
+      "checkout",
+      "merge",
+      "rebase",
+      "cherry-pick",
+      "revert",
+      "rm",
+      "mv",
+      "clean",
+      "gc",
+      "prune",
+      "filter-branch",
+      "reflog"
+    ];
+    if (blockedCommands.includes(command)) {
+      log.warn("Blocked dangerous git command", { command, args });
+      return c.json(
+        { success: false, error: { code: "FORBIDDEN", message: `Command '${command}' is not allowed` } },
+        403
+      );
+    }
+    if (!allowedCommands.includes(command)) {
+      log.warn("Unknown git command attempted", { command, args });
+      return c.json(
+        { success: false, error: { code: "FORBIDDEN", message: `Command '${command}' is not allowed` } },
+        403
+      );
+    }
+    log.debug("Executing git command", { args: args.slice(0, 3), cwd });
+    const result = await gitService.exec(args, cwd);
+    return c.json({
+      success: result.code === 0,
+      data: {
+        stdout: result.stdout,
+        stderr: result.stderr,
+        code: result.code
+      }
+    });
+  } catch (err) {
+    const error = err;
+    log.error("Failed to execute git command", { error: error.message });
+    return c.json(
+      { success: false, error: { code: "INTERNAL_ERROR", message: error.message } },
+      500
+    );
+  }
+});
+var commitsQuerySchema = z3.object({
+  cwd: z3.string().min(1, "Working directory is required"),
+  baseBranch: z3.string().optional().default("main"),
+  limit: z3.coerce.number().optional().default(50)
+});
+git.get("/commits", async (c) => {
+  const log = logger.child({ route: "git/commits" });
+  try {
+    const query = c.req.query();
+    const parsed = commitsQuerySchema.safeParse(query);
+    if (!parsed.success) {
+      return c.json(
+        { success: false, error: { code: "VALIDATION_ERROR", message: parsed.error.message } },
+        400
+      );
+    }
+    const { cwd, baseBranch, limit } = parsed.data;
+    const branchResult = await gitService.exec(["rev-parse", "--abbrev-ref", "HEAD"], cwd);
+    const currentBranch = branchResult.code === 0 ? branchResult.stdout.trim() : "unknown";
+    const logResult = await gitService.exec([
+      "log",
+      `origin/${baseBranch}..HEAD`,
+      `--format=%H|%h|%s|%an|%ae|%aI`,
+      "--no-merges",
+      `-n${limit}`
+    ], cwd);
+    let commits = [];
+    if (logResult.code === 0 && logResult.stdout.trim()) {
+      const lines = logResult.stdout.trim().split("\n").filter(Boolean);
+      commits = lines.map((line) => {
+        const [sha, shortSha, message, author, authorEmail, date] = line.split("|");
+        return { sha, shortSha, message, author, authorEmail, date };
+      });
+    }
+    let ahead = commits.length;
+    let behind = 0;
+    const revListResult = await gitService.exec([
+      "rev-list",
+      "--left-right",
+      "--count",
+      `origin/${baseBranch}...HEAD`
+    ], cwd);
+    if (revListResult.code === 0 && revListResult.stdout.trim()) {
+      const parts = revListResult.stdout.trim().split(/\s+/);
+      if (parts.length >= 2) {
+        behind = parseInt(parts[0], 10) || 0;
+        ahead = parseInt(parts[1], 10) || commits.length;
+      }
+    }
+    log.debug("Fetched commits", {
+      branch: currentBranch,
+      count: commits.length,
+      ahead,
+      behind
+    });
+    return c.json({
+      success: true,
+      data: {
+        commits,
+        branch: currentBranch,
+        baseBranch,
+        ahead,
+        behind
+      }
+    });
+  } catch (err) {
+    const error = err;
+    log.error("Failed to get commits", { error: error.message });
+    return c.json(
+      { success: false, error: { code: "INTERNAL_ERROR", message: error.message } },
+      500
+    );
+  }
+});
 
 // src/main.ts
 var app = new Hono5();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@saeed42/worktree-worker",
-  "version": "1.4.1",
+  "version": "1.6.2",
   "description": "Git worktree management service for AI agent trials",
   "type": "module",
   "main": "dist/main.js",