codekin 0.6.1 → 0.6.2

package/server/dist/webhook-config.js

@@ -1,6 +1,7 @@
-import { existsSync, readFileSync } from 'fs';
+import { existsSync, readFileSync, writeFileSync, mkdirSync, renameSync } from 'fs';
 import { homedir } from 'os';
-import { join } from 'path';
+import { join, dirname } from 'path';
+import { randomBytes } from 'crypto';
 const CONFIG_FILE = join(homedir(), '.codekin', 'webhook-config.json');
 /**
  * Load webhook configuration from environment variables and optional config file.
@@ -12,6 +13,7 @@ export function loadWebhookConfig() {
     let maxConcurrentSessions = 3;
     let logLinesToInclude = 200;
     let actorAllowlist = [];
+    let secret = '';
     // Try loading config file
     if (existsSync(CONFIG_FILE)) {
         try {
@@ -26,6 +28,8 @@ export function loadWebhookConfig() {
             if (Array.isArray(file.actorAllowlist) && file.actorAllowlist.every(v => typeof v === 'string')) {
                 actorAllowlist = file.actorAllowlist;
             }
+            if (typeof file.secret === 'string')
+                secret = file.secret;
         }
         catch (err) {
             console.warn('[webhook] Failed to parse config file:', err);
@@ -52,7 +56,10 @@ export function loadWebhookConfig() {
     if (envActorAllowlist !== undefined) {
         actorAllowlist = envActorAllowlist.split(',').map(s => s.trim()).filter(Boolean);
     }
-    const secret = process.env.GITHUB_WEBHOOK_SECRET || '';
+    const envSecret = process.env.GITHUB_WEBHOOK_SECRET;
+    if (envSecret !== undefined) {
+        secret = envSecret;
+    }
     return {
         enabled,
         secret,
@@ -61,4 +68,35 @@ export function loadWebhookConfig() {
         actorAllowlist,
     };
 }
+// ---------------------------------------------------------------------------
+// Config persistence for auto-setup
+// ---------------------------------------------------------------------------
+/**
+ * Generate a cryptographically random webhook secret.
+ */
+export function generateWebhookSecret() {
+    return randomBytes(32).toString('hex');
+}
+/**
+ * Persist webhook config updates to the config file (atomic read-merge-write).
+ * Only writes fields that are explicitly provided; preserves existing values.
+ */
+export function saveWebhookConfig(updates) {
+    let existing = {};
+    if (existsSync(CONFIG_FILE)) {
+        try {
+            existing = JSON.parse(readFileSync(CONFIG_FILE, 'utf-8'));
+        }
+        catch {
+            // Start fresh if file is corrupt
+        }
+    }
+    const merged = { ...existing, ...updates };
+    // Ensure directory exists
+    mkdirSync(dirname(CONFIG_FILE), { recursive: true });
+    // Atomic write: write to tmp file then rename
+    const tmpFile = CONFIG_FILE + '.tmp';
+    writeFileSync(tmpFile, JSON.stringify(merged, null, 2) + '\n', 'utf-8');
+    renameSync(tmpFile, CONFIG_FILE);
+}
 //# sourceMappingURL=webhook-config.js.map

package/server/dist/webhook-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"webhook-config.js","sourceRoot":"","sources":["../webhook-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAA;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAA;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAA;AAMtE;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAC/B,WAAW;IACX,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,qBAAqB,GAAG,CAAC,CAAA;IAC7B,IAAI,iBAAiB,GAAG,GAAG,CAAA;IAC3B,IAAI,cAAc,GAAa,EAAE,CAAA;IAEjC,0BAA0B;IAC1B,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAA;YACtD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS;gBAAE,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;YAC7D,IAAI,OAAO,IAAI,CAAC,qBAAqB,KAAK,QAAQ;gBAAE,qBAAqB,GAAG,IAAI,CAAC,qBAAqB,CAAA;YACtG,IAAI,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ;gBAAE,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAA;YAC1F,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;gBAChG,cAAc,GAAG,IAAI,CAAC,cAAc,CAAA;YACtC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAA;QAC7D,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAA;IACrD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,GAAG,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,GAAG,CAAA;IACvD,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAA;IAC9D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;QACtC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,qBAAqB,GAAG,CAAC,CAAA;IACnD,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAA;IACxD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QACnC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,iBAAiB,GAAG,CAAC,CAAA;IAC/C,CAAC;IAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAA;IACpE,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,cAAc,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAClF,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAA;IAEtD,OAAO;QACL,OAAO;QACP,MAAM;QACN,qBAAqB;QACrB,iBAAiB;QACjB,cAAc;KACf,CAAA;AACH,CAAC"}
+{"version":3,"file":"webhook-config.js","sourceRoot":"","sources":["../webhook-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,IAAI,CAAA;AACnF,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAA;AAC5B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAA;AAGpC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAA;AAMtE;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAC/B,WAAW;IACX,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,qBAAqB,GAAG,CAAC,CAAA;IAC7B,IAAI,iBAAiB,GAAG,GAAG,CAAA;IAC3B,IAAI,cAAc,GAAa,EAAE,CAAA;IACjC,IAAI,MAAM,GAAG,EAAE,CAAA;IAEf,0BAA0B;IAC1B,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiD,CAAA;YAC5E,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS;gBAAE,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;YAC7D,IAAI,OAAO,IAAI,CAAC,qBAAqB,KAAK,QAAQ;gBAAE,qBAAqB,GAAG,IAAI,CAAC,qBAAqB,CAAA;YACtG,IAAI,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ;gBAAE,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAA;YAC1F,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;gBAChG,cAAc,GAAG,IAAI,CAAC,cAAc,CAAA;YACtC,CAAC;YACD,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;gBAAE,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAA;QAC7D,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAA;IACrD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,GAAG,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,GAAG,CAAA;IACvD,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAA;IAC9D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;QACtC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,qBAAqB,GAAG,CAAC,CAAA;IACnD,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAA;IACxD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QACnC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,iBAAiB,GAAG,CAAC,CAAA;IAC/C,CAAC;IAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAA;IACpE,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,cAAc,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAClF,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAA;IACnD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,GAAG,SAAS,CAAA;IACpB,CAAC;IAED,OAAO;QACL,OAAO;QACP,MAAM;QACN,qBAAqB;QACrB,iBAAiB;QACjB,cAAc;KACf,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AACxC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAmC;IACnE,IAAI,QAAQ,GAA4B,EAAE,CAAA;IAE1C,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAA4B,CAAA;QACtF,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;QACnC,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAA;IAE1C,0BAA0B;IAC1B,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEpD,8CAA8C;IAC9C,MAAM,OAAO,GAAG,WAAW,GAAG,MAAM,CAAA;IACpC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IACvE,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;AAClC,CAAC"}

package/server/dist/webhook-github-setup.d.ts

@@ -0,0 +1,48 @@
+/**
+ * GitHub API helpers for webhook discovery and management.
+ *
+ * Used by the integration health-check and setup-wizard endpoints.
+ * Follows the same patterns as webhook-github.ts: injectable ghRunner,
+ * graceful degradation, console warnings on failure.
+ */
+import type { GitHubWebhook, GitHubDelivery, SetupPreview } from './webhook-types.js';
+type GhRunner = (args: string[]) => Promise<string>;
+/** @internal Test-only: override the gh CLI runner */
+export declare function _setGhRunner(runner: GhRunner): void;
+/** @internal Test-only: reset to default gh CLI runner */
+export declare function _resetGhRunner(): void;
+/**
+ * List all webhooks configured on a GitHub repository.
+ * Requires admin access to the repo.
+ */
+export declare function listRepoWebhooks(repo: string): Promise<GitHubWebhook[]>;
+/**
+ * Find the Codekin webhook on a repo by matching the configured URL.
+ */
+export declare function findCodekinWebhook(repo: string, webhookUrl: string): Promise<GitHubWebhook | null>;
+/**
+ * Fetch recent webhook deliveries for a specific hook.
+ */
+export declare function getWebhookDeliveries(repo: string, hookId: number, count?: number): Promise<GitHubDelivery[]>;
+/**
+ * Create a new webhook on a GitHub repository.
+ */
+export declare function createRepoWebhook(repo: string, url: string, secret: string, events: string[]): Promise<GitHubWebhook>;
+/**
+ * Update an existing webhook on a GitHub repository.
+ */
+export declare function updateRepoWebhook(repo: string, hookId: number, updates: {
+    url?: string;
+    events?: string[];
+    active?: boolean;
+    secret?: string;
+}): Promise<GitHubWebhook>;
+/**
+ * Send a ping event to a webhook.
+ */
+export declare function pingWebhook(repo: string, hookId: number): Promise<boolean>;
+/**
+ * Preview what a webhook setup would do (create vs update vs nothing).
+ */
+export declare function previewWebhookSetup(repo: string, webhookUrl: string): Promise<SetupPreview>;
+export {};

package/server/dist/webhook-github-setup.js

@@ -0,0 +1,172 @@
+/**
+ * GitHub API helpers for webhook discovery and management.
+ *
+ * Used by the integration health-check and setup-wizard endpoints.
+ * Follows the same patterns as webhook-github.ts: injectable ghRunner,
+ * graceful degradation, console warnings on failure.
+ */
+import { execFile } from 'child_process';
+import { promisify } from 'util';
+const execFileAsync = promisify(execFile);
+const GH_TIMEOUT_MS = 30_000;
+let ghRunner = async (args) => {
+    const { stdout } = await execFileAsync('gh', args, { timeout: GH_TIMEOUT_MS });
+    return stdout;
+};
+/** @internal Test-only: override the gh CLI runner */
+export function _setGhRunner(runner) {
+    ghRunner = runner;
+}
+/** @internal Test-only: reset to default gh CLI runner */
+export function _resetGhRunner() {
+    ghRunner = async (args) => {
+        const { stdout } = await execFileAsync('gh', args, { timeout: GH_TIMEOUT_MS });
+        return stdout;
+    };
+}
+// ---------------------------------------------------------------------------
+// Phase 1: Discovery
+// ---------------------------------------------------------------------------
+/**
+ * List all webhooks configured on a GitHub repository.
+ * Requires admin access to the repo.
+ */
+export async function listRepoWebhooks(repo) {
+    try {
+        const raw = await ghRunner(['api', `/repos/${repo}/hooks`, '--paginate']);
+        const hooks = JSON.parse(raw);
+        return Array.isArray(hooks) ? hooks : [];
+    }
+    catch (err) {
+        console.warn(`listRepoWebhooks: failed for ${repo}:`, err);
+        return [];
+    }
+}
+/**
+ * Find the Codekin webhook on a repo by matching the configured URL.
+ */
+export async function findCodekinWebhook(repo, webhookUrl) {
+    const hooks = await listRepoWebhooks(repo);
+    return hooks.find(h => h.config.url === webhookUrl) ?? null;
+}
+/**
+ * Fetch recent webhook deliveries for a specific hook.
+ */
+export async function getWebhookDeliveries(repo, hookId, count = 5) {
+    try {
+        const raw = await ghRunner([
+            'api',
+            `/repos/${repo}/hooks/${hookId}/deliveries?per_page=${count}`,
+        ]);
+        const deliveries = JSON.parse(raw);
+        return Array.isArray(deliveries) ? deliveries : [];
+    }
+    catch (err) {
+        console.warn(`getWebhookDeliveries: failed for ${repo} hook ${hookId}:`, err);
+        return [];
+    }
+}
+// ---------------------------------------------------------------------------
+// Phase 2: Setup & Management
+// ---------------------------------------------------------------------------
+/**
+ * Create a new webhook on a GitHub repository.
+ */
+export async function createRepoWebhook(repo, url, secret, events) {
+    const body = JSON.stringify({
+        name: 'web',
+        active: true,
+        events,
+        config: { url, content_type: 'json', secret, insecure_ssl: '0' },
+    });
+    const raw = await ghRunnerWithStdin(['api', `/repos/${repo}/hooks`, '--method', 'POST', '--input', '-'], body);
+    return JSON.parse(raw);
+}
+/**
+ * Update an existing webhook on a GitHub repository.
+ */
+export async function updateRepoWebhook(repo, hookId, updates) {
+    const body = {};
+    if (updates.events)
+        body.events = updates.events;
+    if (updates.active !== undefined)
+        body.active = updates.active;
+    const config = {};
+    if (updates.url)
+        config.url = updates.url;
+    if (updates.secret)
+        config.secret = updates.secret;
+    if (Object.keys(config).length > 0) {
+        config.content_type = 'json';
+        config.insecure_ssl = '0';
+        body.config = config;
+    }
+    const raw = await ghRunnerWithStdin(['api', `/repos/${repo}/hooks/${hookId}`, '--method', 'PATCH', '--input', '-'], JSON.stringify(body));
+    return JSON.parse(raw);
+}
+/**
+ * Send a ping event to a webhook.
+ */
+export async function pingWebhook(repo, hookId) {
+    try {
+        await ghRunner([
+            'api', `/repos/${repo}/hooks/${hookId}/pings`,
+            '--method', 'POST',
+        ]);
+        return true;
+    }
+    catch (err) {
+        console.warn(`pingWebhook: failed for ${repo} hook ${hookId}:`, err);
+        return false;
+    }
+}
+/**
+ * Preview what a webhook setup would do (create vs update vs nothing).
+ */
+export async function previewWebhookSetup(repo, webhookUrl) {
+    const existing = await findCodekinWebhook(repo, webhookUrl);
+    const requiredEvents = ['pull_request', 'workflow_run'];
+    if (!existing) {
+        return {
+            action: 'create',
+            proposed: { url: webhookUrl, events: requiredEvents, active: true },
+        };
+    }
+    const changes = [];
+    if (!existing.active)
+        changes.push('Activate webhook (currently inactive)');
+    const missingEvents = requiredEvents.filter(e => !existing.events.includes(e));
+    if (missingEvents.length > 0) {
+        changes.push(`Add missing events: ${missingEvents.join(', ')}`);
+    }
+    if (changes.length === 0) {
+        return { action: 'none', existing, proposed: { url: webhookUrl, events: existing.events, active: true } };
+    }
+    return {
+        action: 'update',
+        existing,
+        proposed: {
+            url: webhookUrl,
+            events: [...new Set([...existing.events, ...requiredEvents])],
+            active: true,
+        },
+        changes,
+    };
+}
+// ---------------------------------------------------------------------------
+// Internal: gh runner with stdin support (for POST/PATCH bodies)
+// ---------------------------------------------------------------------------
+async function ghRunnerWithStdin(args, stdin) {
+    return new Promise((resolve, reject) => {
+        const proc = execFile('gh', args, { timeout: GH_TIMEOUT_MS }, (err, stdout) => {
+            if (err) {
+                reject(err);
+                return;
+            }
+            resolve(stdout);
+        });
+        proc.stdin?.write(stdin);
+        proc.stdin?.end();
+    });
+}
+//# sourceMappingURL=webhook-github-setup.js.map

package/server/dist/webhook-github-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-github-setup.js","sourceRoot":"","sources":["../webhook-github-setup.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAGhC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;AACzC,MAAM,aAAa,GAAG,MAAM,CAAA;AAI5B,IAAI,QAAQ,GAAa,KAAK,EAAE,IAAI,EAAE,EAAE;IACtC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAA;IAC9E,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,sDAAsD;AACtD,MAAM,UAAU,YAAY,CAAC,MAAgB;IAC3C,QAAQ,GAAG,MAAM,CAAA;AACnB,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,cAAc;IAC5B,QAAQ,GAAG,KAAK,EAAE,IAAI,EAAE,EAAE;QACxB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAA;QAC9E,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,CAAC,KAAK,EAAE,UAAU,IAAI,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAA;QACzE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAA;QAChD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,gCAAgC,IAAI,GAAG,EAAE,GAAG,CAAC,CAAA;QAC1D,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,UAAkB;IAElB,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAA;IAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,UAAU,CAAC,IAAI,IAAI,CAAA;AAC7D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAY,EACZ,MAAc,EACd,KAAK,GAAG,CAAC;IAET,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC;YACzB,KAAK;YACL,UAAU,IAAI,UAAU,MAAM,wBAAwB,KAAK,EAAE;SAC9D,CAAC,CAAA;QACF,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAA;QACtD,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAA;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,oCAAoC,IAAI,SAAS,MAAM,GAAG,EAAE,GAAG,CAAC,CAAA;QAC7E,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,8BAA8B;AAC9B,8EAA8E;AAE9E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAY,EACZ,GAAW,EACX,MAAc,EACd,MAAgB;IAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,IAAI;QACZ,MAAM;QACN,MAAM,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE;KACjE,CAAC,CAAA;IACF,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,CAAC,KAAK,EAAE,UAAU,IAAI,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,EACnE,IAAI,CACL,CAAA;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAA;AACzC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAY,EACZ,MAAc,EACd,OAKC;IAED,MAAM,IAAI,GAA4B,EAAE,CAAA;IACxC,IAAI,OAAO,CAAC,MAAM;QAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IAChD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IAC9D,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,IAAI,OAAO,CAAC,GAAG;QAAE,MAAM,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;IACzC,IAAI,OAAO,CAAC,MAAM;QAAE,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IAClD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,YAAY,GAAG,MAAM,CAAA;QAC5B,MAAM,CAAC,YAAY,GAAG,GAAG,CAAA;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,CAAC,KAAK,EAAE,UAAU,IAAI,UAAU,MAAM,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,EAC9E,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CACrB,CAAA;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAA;AACzC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,MAAc;IAC5D,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC;YACb,KAAK,EAAE,UAAU,IAAI,UAAU,MAAM,QAAQ;YAC7C,UAAU,EAAE,MAAM;SACnB,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,2BAA2B,IAAI,SAAS,MAAM,GAAG,EAAE,GAAG,CAAC,CAAA;QACpE,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAY,EACZ,UAAkB;IAElB,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IAC3D,MAAM,cAAc,GAAG,CAAC,cAAc,EAAE,cAAc,CAAC,CAAA;IAEvD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE;SACpE,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAA;IAC3E,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;IAC9E,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,uBAAuB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACjE,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAA;IAC3G,CAAC;IAED,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,QAAQ;QACR,QAAQ,EAAE;YACR,GAAG,EAAE,UAAU;YACf,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC;YAC7D,MAAM,EAAE,IAAI;SACb;QACD,OAAO;KACR,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,iEAAiE;AACjE,8EAA8E;AAE9E,KAAK,UAAU,iBAAiB,CAAC,IAAc,EAAE,KAAa;IAC5D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;YAC5E,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,CAAC,GAAY,CAAC,CAAA;gBACpB,OAAM;YACR,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,CAAA;QACjB,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;QACxB,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAA;IACnB,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/server/dist/webhook-setup-routes.d.ts

@@ -0,0 +1,14 @@
+/**
+ * REST routes for webhook integration health checks and setup.
+ *
+ * Mounted at the Express app root (routes carry their own /api/ prefixes).
+ * Provides health-check, auto-setup, and test-delivery endpoints for the
+ * GitHub PR review integration.
+ */
+import { Router } from 'express';
+import type { Request } from 'express';
+import type { FullWebhookConfig } from './webhook-config.js';
+type VerifyFn = (token: string | undefined) => boolean;
+type ExtractFn = (req: Request) => string | undefined;
+export declare function createWebhookSetupRouter(verifyToken: VerifyFn, extractToken: ExtractFn, getConfig: () => FullWebhookConfig): Router;
+export {};

package/server/dist/webhook-setup-routes.js

@@ -0,0 +1,233 @@
+/**
+ * REST routes for webhook integration health checks and setup.
+ *
+ * Mounted at the Express app root (routes carry their own /api/ prefixes).
+ * Provides health-check, auto-setup, and test-delivery endpoints for the
+ * GitHub PR review integration.
+ */
+import { Router } from 'express';
+import { checkGhHealth } from './webhook-github.js';
+import { findCodekinWebhook, getWebhookDeliveries, createRepoWebhook, updateRepoWebhook, pingWebhook, previewWebhookSetup as previewSetup, } from './webhook-github-setup.js';
+import { generateWebhookSecret, saveWebhookConfig } from './webhook-config.js';
+export function createWebhookSetupRouter(verifyToken, extractToken, getConfig) {
+    const router = Router();
+    const REPO_PATTERN = /^[a-zA-Z0-9_.-]+\/[a-zA-Z0-9_.-]+$/;
+    // --- Health check endpoint ---
+    router.get('/api/integrations/github/pr-review/health', async (req, res) => {
+        const token = extractToken(req);
+        if (!verifyToken(token))
+            return res.status(401).json({ error: 'Unauthorized' });
+        const repo = req.query.repo;
+        const webhookUrl = req.query.webhookUrl;
+        if (!repo || !webhookUrl) {
+            return res.status(400).json({ error: 'Missing required query params: repo, webhookUrl' });
+        }
+        if (!REPO_PATTERN.test(repo)) {
+            return res.status(400).json({ error: 'Invalid repo format. Expected owner/repo.' });
+        }
+        const config = getConfig();
+        const result = {
+            overall: 'healthy',
+            checks: {
+                ghCli: { ok: false, message: '' },
+                config: { ok: false, message: '' },
+                webhook: { ok: false, message: '' },
+                deliveries: { ok: false, message: '' },
+            },
+        };
+        // Check 1: Config
+        const secretSet = config.secret.length > 0;
+        if (!config.enabled) {
+            result.checks.config = {
+                ok: false,
+                message: 'Webhooks are disabled. Set GITHUB_WEBHOOK_ENABLED=true to enable.',
+                details: { enabled: false, secretSet },
+            };
+            result.overall = 'unconfigured';
+            // Still run other checks for diagnostic value
+        }
+        else if (!secretSet) {
+            result.checks.config = {
+                ok: false,
+                message: 'No webhook secret configured. Set GITHUB_WEBHOOK_SECRET to secure the endpoint.',
+                details: { enabled: true, secretSet: false },
+            };
+            result.overall = 'unconfigured';
+        }
+        else {
+            result.checks.config = {
+                ok: true,
+                message: 'Webhooks enabled with secret configured.',
+                details: { enabled: true, secretSet: true },
+            };
+        }
+        // Check 2: gh CLI
+        const ghHealth = await checkGhHealth();
+        if (!ghHealth.available) {
+            result.checks.ghCli = { ok: false, message: ghHealth.reason || 'gh CLI unavailable' };
+            result.checks.webhook = { ok: false, message: 'Skipped — gh CLI unavailable' };
+            result.checks.deliveries = { ok: false, message: 'Skipped — gh CLI unavailable' };
+            if (result.overall !== 'unconfigured')
+                result.overall = 'broken';
+            return res.json(result);
+        }
+        result.checks.ghCli = { ok: true, message: 'gh CLI authenticated and connected.' };
+        // Check 3: Webhook exists on GitHub
+        const hook = await findCodekinWebhook(repo, webhookUrl);
+        if (!hook) {
+            result.checks.webhook = { ok: false, message: `No webhook found on ${repo} pointing to this server.` };
+            result.checks.deliveries = { ok: false, message: 'Skipped — no webhook found' };
+            if (result.overall !== 'unconfigured')
+                result.overall = 'broken';
+            return res.json(result);
+        }
+        const requiredEvents = ['pull_request', 'workflow_run'];
+        const missingEvents = requiredEvents.filter(e => !hook.events.includes(e));
+        if (!hook.active) {
+            result.checks.webhook = {
+                ok: false,
+                message: 'Webhook exists but is inactive.',
+                details: { id: hook.id, active: false, events: hook.events, url: hook.config.url },
+            };
+            if (result.overall === 'healthy')
+                result.overall = 'degraded';
+        }
+        else if (missingEvents.length > 0) {
+            result.checks.webhook = {
+                ok: false,
+                message: `Webhook is missing events: ${missingEvents.join(', ')}.`,
+                details: { id: hook.id, active: true, events: hook.events, url: hook.config.url },
+            };
+            if (result.overall === 'healthy')
+                result.overall = 'degraded';
+        }
+        else {
+            result.checks.webhook = {
+                ok: true,
+                message: 'Webhook active with correct events.',
+                details: { id: hook.id, active: true, events: hook.events, url: hook.config.url },
+            };
+        }
+        // Check 4: Recent deliveries
+        const rawDeliveries = await getWebhookDeliveries(repo, hook.id, 5);
+        const deliveries = rawDeliveries.map(d => ({
+            id: d.id,
+            status: d.status,
+            statusCode: d.status_code,
+            deliveredAt: d.delivered_at,
+            event: d.event,
+        }));
+        if (deliveries.length === 0) {
+            result.checks.deliveries = {
+                ok: true,
+                message: 'No deliveries yet — webhook was recently created or no matching events have occurred.',
+                details: { recent: [] },
+            };
+        }
+        else {
+            const failures = deliveries.filter(d => d.statusCode >= 400 || d.status === 'error');
+            if (failures.length > 0) {
+                result.checks.deliveries = {
+                    ok: false,
+                    message: `${failures.length} of ${deliveries.length} recent deliveries failed.`,
+                    details: { recent: deliveries },
+                };
+                if (result.overall === 'healthy')
+                    result.overall = 'degraded';
+            }
+            else {
+                result.checks.deliveries = {
+                    ok: true,
+                    message: `All ${deliveries.length} recent deliveries succeeded.`,
+                    details: { recent: deliveries },
+                };
+            }
+        }
+        res.json(result);
+    });
+    // --- Preview setup endpoint ---
+    router.post('/api/integrations/github/pr-review/setup', async (req, res) => {
+        const token = extractToken(req);
+        if (!verifyToken(token))
+            return res.status(401).json({ error: 'Unauthorized' });
+        const { repo, webhookUrl, dryRun } = req.body;
+        if (!repo || !webhookUrl) {
+            return res.status(400).json({ error: 'Missing required fields: repo, webhookUrl' });
+        }
+        if (!REPO_PATTERN.test(repo)) {
+            return res.status(400).json({ error: 'Invalid repo format. Expected owner/repo.' });
+        }
+        // Preview first
+        const preview = await previewSetup(repo, webhookUrl);
+        if (dryRun || preview.action === 'none') {
+            return res.json({ preview, secretGenerated: false });
+        }
+        // Ensure server is configured: generate secret if needed, enable if needed
+        let config = getConfig();
+        let secretGenerated = false;
+        const configUpdates = {};
+        if (!config.secret) {
+            configUpdates.secret = generateWebhookSecret();
+            secretGenerated = true;
+        }
+        if (!config.enabled) {
+            configUpdates.enabled = true;
+        }
+        if (Object.keys(configUpdates).length > 0) {
+            saveWebhookConfig(configUpdates);
+            config = getConfig();
+        }
+        try {
+            let webhook;
+            if (preview.action === 'create') {
+                webhook = await createRepoWebhook(repo, webhookUrl, config.secret, preview.proposed.events);
+            }
+            else {
+                // update
+                webhook = await updateRepoWebhook(repo, preview.existing.id, {
+                    events: preview.proposed.events,
+                    active: true,
+                    secret: secretGenerated ? config.secret : undefined,
+                });
+            }
+            res.json({ preview, webhook, secretGenerated });
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : 'Unknown error';
+            console.warn(`[webhook-setup] Failed to ${preview.action} webhook on ${repo}:`, err);
+            res.status(500).json({ error: `Failed to ${preview.action} webhook: ${message}`, preview });
+        }
+    });
+    // --- Test delivery endpoint ---
+    router.post('/api/integrations/github/pr-review/test', async (req, res) => {
+        const token = extractToken(req);
+        if (!verifyToken(token))
+            return res.status(401).json({ error: 'Unauthorized' });
+        const { repo, webhookUrl } = req.body;
+        if (!repo || !webhookUrl) {
+            return res.status(400).json({ error: 'Missing required fields: repo, webhookUrl' });
+        }
+        if (!REPO_PATTERN.test(repo)) {
+            return res.status(400).json({ error: 'Invalid repo format. Expected owner/repo.' });
+        }
+        const hook = await findCodekinWebhook(repo, webhookUrl);
+        if (!hook) {
+            return res.status(404).json({ error: `No Codekin webhook found on ${repo}` });
+        }
+        const success = await pingWebhook(repo, hook.id);
+        if (!success) {
+            return res.json({ success: false, message: 'Ping failed — check GitHub API access and repo permissions.' });
+        }
+        // Brief pause then fetch latest delivery to confirm receipt
+        await new Promise(r => setTimeout(r, 2000));
+        const deliveries = await getWebhookDeliveries(repo, hook.id, 1);
+        const latest = deliveries[0];
+        res.json({
+            success: true,
+            message: 'Ping sent successfully.',
+            delivery: latest ? { id: latest.id, statusCode: latest.status_code, event: latest.event } : undefined,
+        });
+    });
+    return router;
+}
+//# sourceMappingURL=webhook-setup-routes.js.map

package/server/dist/webhook-setup-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-setup-routes.js","sourceRoot":"","sources":["../webhook-setup-routes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAEhC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,EACX,mBAAmB,IAAI,YAAY,GACpC,MAAM,2BAA2B,CAAA;AAElC,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAM9E,MAAM,UAAU,wBAAwB,CACtC,WAAqB,EACrB,YAAuB,EACvB,SAAkC;IAElC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAA;IAEvB,MAAM,YAAY,GAAG,oCAAoC,CAAA;IAEzD,gCAAgC;IAEhC,MAAM,CAAC,GAAG,CAAC,2CAA2C,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACzE,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;QAE/E,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAA0B,CAAA;QACjD,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,UAAgC,CAAA;QAE7D,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACzB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC,CAAA;QAC3F,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC,CAAA;QACrF,CAAC;QAED,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;QAE1B,MAAM,MAAM,GAAsB;YAChC,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE;gBACN,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBACjC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBAClC,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBACnC,UAAU,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;aACvC;SACF,CAAA;QAED,kBAAkB;QAClB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;QAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG;gBACrB,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,mEAAmE;gBAC5E,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE;aACvC,CAAA;YACD,MAAM,CAAC,OAAO,GAAG,cAAc,CAAA;YAC/B,8CAA8C;QAChD,CAAC;aAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG;gBACrB,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,iFAAiF;gBAC1F,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE;aAC7C,CAAA;YACD,MAAM,CAAC,OAAO,GAAG,cAAc,CAAA;QACjC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG;gBACrB,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,0CAA0C;gBACnD,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;aAC5C,CAAA;QACH,CAAC;QAED,kBAAkB;QAClB,MAAM,QAAQ,GAAG,MAAM,aAAa,EAAE,CAAA;QACtC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YACxB,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,IAAI,oBAAoB,EAAE,CAAA;YACrF,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAA;YAC9E,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAA;YACjF,IAAI,MAAM,CAAC,OAAO,KAAK,cAAc;gBAAE,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAA;YAChE,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACzB,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAA;QAElF,oCAAoC;QACpC,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;QACvD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,uBAAuB,IAAI,2BAA2B,EAAE,CAAA;YACtG,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAA;YAC/E,IAAI,MAAM,CAAC,OAAO,KAAK,cAAc;gBAAE,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAA;YAChE,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACzB,CAAC;QAED,MAAM,cAAc,GAAG,CAAC,cAAc,EAAE,cAAc,CAAC,CAAA;QACvD,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QAE1E,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG;gBACtB,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,iCAAiC;gBAC1C,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;aACnF,CAAA;YACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;gBAAE,MAAM,CAAC,OAAO,GAAG,UAAU,CAAA;QAC/D,CAAC;aAAM,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG;gBACtB,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,8BAA8B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAClE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;aAClF,CAAA;YACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;gBAAE,MAAM,CAAC,OAAO,GAAG,UAAU,CAAA;QAC/D,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG;gBACtB,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,qCAAqC;gBAC9C,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;aAClF,CAAA;QACH,CAAC;QAED,6BAA6B;QAC7B,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QAClE,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACzC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,UAAU,EAAE,CAAC,CAAC,WAAW;YACzB,WAAW,EAAE,CAAC,CAAC,YAAY;YAC3B,KAAK,EAAE,CAAC,CAAC,KAAK;SACf,CAAC,CAAC,CAAA;QACH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG;gBACzB,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,uFAAuF;gBAChG,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;aACxB,CAAA;QACH,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAA;YACpF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG;oBACzB,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,GAAG,QAAQ,CAAC,MAAM,OAAO,UAAU,CAAC,MAAM,4BAA4B;oBAC/E,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;iBAChC,CAAA;gBACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;oBAAE,MAAM,CAAC,OAAO,GAAG,UAAU,CAAA;YAC/D,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG;oBACzB,EAAE,EAAE,IAAI;oBACR,OAAO,EAAE,OAAO,UAAU,CAAC,MAAM,+BAA+B;oBAChE,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;iBAChC,CAAA;YACH,CAAC;QACH,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAClB,CAAC,CAAC,CAAA;IAEF,iCAAiC;IAEjC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACzE,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;QAE/E,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAIxC,CAAA;QAED,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACzB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC,CAAA;QACrF,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC,CAAA;QACrF,CAAC;QAED,gBAAgB;QAChB,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;QAEpD,IAAI,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACxC,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAA;QACtD,CAAC;QAED,2EAA2E;QAC3E,IAAI,MAAM,GAAG,SAAS,EAAE,CAAA;QACxB,IAAI,eAAe,GAAG,KAAK,CAAA;QAC3B,MAAM,aAAa,GAA4B,EAAE,CAAA;QAEjD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,aAAa,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAA;YAC9C,eAAe,GAAG,IAAI,CAAA;QACxB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,aAAa,CAAC,OAAO,GAAG,IAAI,CAAA;QAC9B,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,iBAAiB,CAAC,aAAa,CAAC,CAAA;YAChC,MAAM,GAAG,SAAS,EAAE,CAAA;QACtB,CAAC;QAED,IAAI,CAAC;YACH,IAAI,OAAO,CAAA;YACX,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAChC,OAAO,GAAG,MAAM,iBAAiB,CAC/B,IAAI,EACJ,UAAU,EACV,MAAM,CAAC,MAAM,EACb,OAAO,CAAC,QAAQ,CAAC,MAAM,CACxB,CAAA;YACH,CAAC;iBAAM,CAAC;gBACN,SAAS;gBACT,OAAO,GAAG,MAAM,iBAAiB,CAC/B,IAAI,EACJ,OAAO,CAAC,QAAS,CAAC,EAAE,EACpB;oBACE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;oBAC/B,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;iBACpD,CACF,CAAA;YACH,CAAC;YAED,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAA;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAA;YACpE,OAAO,CAAC,IAAI,CAAC,6BAA6B,OAAO,CAAC,MAAM,eAAe,IAAI,GAAG,EAAE,GAAG,CAAC,CAAA;YACpF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,OAAO,CAAC,MAAM,aAAa,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;QAC7F,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,iCAAiC;IAEjC,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACxE,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;QAE/E,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,IAA8C,CAAA;QAE/E,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACzB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC,CAAA;QACrF,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC,CAAA;QACrF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;QACvD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,IAAI,EAAE,EAAE,CAAC,CAAA;QAC/E,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,6DAA6D,EAAE,CAAC,CAAA;QAC7G,CAAC;QAED,4DAA4D;QAC5D,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;QAC3C,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QAC/D,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAA;QAE5B,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,yBAAyB;YAClC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS;SACtG,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC"}

package/server/dist/webhook-types.d.ts

@@ -141,6 +141,71 @@ export interface PullRequestPayload {
         login: string;
     };
 }
+export interface GitHubWebhook {
+    id: number;
+    active: boolean;
+    config: {
+        url: string;
+        content_type: string;
+        insecure_ssl?: string;
+    };
+    events: string[];
+    created_at: string;
+    updated_at: string;
+}
+export interface GitHubDelivery {
+    id: number;
+    delivered_at: string;
+    status: string;
+    status_code: number;
+    event: string;
+    action: string | null;
+}
+export interface HealthCheckDetail {
+    ok: boolean;
+    message: string;
+}
+export interface HealthCheckResult {
+    overall: 'healthy' | 'degraded' | 'broken' | 'unconfigured';
+    checks: {
+        ghCli: HealthCheckDetail;
+        config: HealthCheckDetail & {
+            details?: {
+                enabled: boolean;
+                secretSet: boolean;
+            };
+        };
+        webhook: HealthCheckDetail & {
+            details?: {
+                id: number;
+                active: boolean;
+                events: string[];
+                url: string;
+            };
+        };
+        deliveries: HealthCheckDetail & {
+            details?: {
+                recent: Array<{
+                    id: number;
+                    status: string;
+                    statusCode: number;
+                    deliveredAt: string;
+                    event: string;
+                }>;
+            };
+        };
+    };
+}
+export interface SetupPreview {
+    action: 'create' | 'update' | 'none';
+    existing?: GitHubWebhook;
+    proposed: {
+        url: string;
+        events: string[];
+        active: boolean;
+    };
+    changes?: string[];
+}
 export interface PullRequestContext {
     repo: string;
     repoName: string;

package/server/dist/workflow-routes.js

@@ -280,6 +280,7 @@ export function createWorkflowRouter(verifyToken, extractToken, sessions, commit
             kind,
             customPrompt,
             model,
+            provider,
         });
         // Re-sync schedules and commit hooks with updated config
         try {