ework-aio 0.1.16 → 0.1.17

package/bin/install.sh

@@ -395,6 +395,11 @@ write_web_env() {
   mkdir -p "$(dirname "$WEB_ENV")"
   if [[ -f "$WEB_ENV" ]]; then
     log "Preserving existing $WEB_ENV"
+    # Older installs (pre-0.1.16) may have a .env that predates some keys
+    # ework-web's Zod schema now requires (WORK_COOKIE_SECRET in particular).
+    # Fill any missing required keys with fresh defaults so the preserved
+    # .env doesn't crash the next start. User-set keys are never overwritten.
+    ensure_web_env_keys
     return
   fi
   local tok secret webhook
@@ -420,6 +425,39 @@ EOF
   ok "Wrote $WEB_ENV"
 }
 
+# ensure_env_key: append KEY=value to $file iff KEY is not already present.
+# Used to forward-fill schema-required keys on preserved .env files without
+# clobbering any user-set values.
+ensure_env_key() {
+  local file="$1" key="$2" val="$3"
+  if ! grep -qE "^${key}=" "$file" 2>/dev/null; then
+    printf '%s=%s\n' "$key" "$val" >> "$file"
+    log "  + added missing key: $key"
+  fi
+}
+
+ensure_web_env_keys() {
+  # Only fills keys that are missing; never overwrites existing values.
+  # Tokens / secrets get fresh random values (safe because if they were
+  # missing, web couldn't have started, so nothing depends on them yet).
+  local tok secret webhook
+  tok=$(gen_token 20)
+  secret=$(gen_token 24)
+  webhook=$(gen_token 20)
+  ensure_env_key "$WEB_ENV" WORK_PORT             "$WORK_PORT"
+  ensure_env_key "$WEB_ENV" WORK_HOST             "127.0.0.1"
+  ensure_env_key "$WEB_ENV" WORK_TOKEN            "$tok"
+  ensure_env_key "$WEB_ENV" WORK_COOKIE_SECRET    "$secret"
+  ensure_env_key "$WEB_ENV" WORK_OPERATOR_LOGIN   "$USER"
+  ensure_env_key "$WEB_ENV" WORK_WRITES_ENABLED   "true"
+  ensure_env_key "$WEB_ENV" WORK_DB_PATH          "$WEB_DATA_DIR/ework.db"
+  ensure_env_key "$WEB_ENV" WORK_ATTACHMENT_ROOT  "$WEB_DATA_DIR/attachments"
+  ensure_env_key "$WEB_ENV" WORK_FILE_ROOTS       "/tmp,$DATA_DIR"
+  ensure_env_key "$WEB_ENV" WORK_DAEMON_BOT_LOGIN "$BOT_NAME"
+  ensure_env_key "$WEB_ENV" WORK_DAEMON_WEBHOOK_URL    "http://127.0.0.1:$DAEMON_PORT"
+  ensure_env_key "$WEB_ENV" WORK_DAEMON_WEBHOOK_SECRET "$webhook"
+}
+
 write_daemon_env() {
   mkdir -p "$(dirname "$DAEMON_ENV")"
   local bot_token="$1"
@@ -427,6 +465,22 @@ write_daemon_env() {
   # Reuse webhook secret from web env so daemon's signature matches web's verify
   webhook=$(awk -F= '/^WORK_DAEMON_WEBHOOK_SECRET=/{print $2}' "$WEB_ENV" 2>/dev/null || true)
   [[ -n "$webhook" ]] || webhook=$(gen_token 20)
+  if [[ -f "$DAEMON_ENV" ]]; then
+    log "Preserving existing $DAEMON_ENV"
+    # Same forward-fill pattern as web: required keys get filled if missing.
+    ensure_env_key "$DAEMON_ENV" DAEMON_ENV          "production"
+    ensure_env_key "$DAEMON_ENV" DAEMON_PORT         "$DAEMON_PORT"
+    ensure_env_key "$DAEMON_ENV" DAEMON_HOST         "127.0.0.1"
+    ensure_env_key "$DAEMON_ENV" DAEMON_DB_PATH      "$DAEMON_DATA_DIR/ework-daemon.db"
+    ensure_env_key "$DAEMON_ENV" GITEA_URL           "http://127.0.0.1:$WORK_PORT"
+    ensure_env_key "$DAEMON_ENV" GITEA_TOKEN         "$bot_token"
+    ensure_env_key "$DAEMON_ENV" GITEA_WEBHOOK_SECRET "$webhook"
+    ensure_env_key "$DAEMON_ENV" BOT_USERNAME        "$BOT_NAME"
+    ensure_env_key "$DAEMON_ENV" BOT_TOKEN           "$bot_token"
+    ensure_env_key "$DAEMON_ENV" OPENCODE_BINARY      "$(command -v opencode)"
+    ensure_env_key "$DAEMON_ENV" OPENCODE_BASE_WORKDIR "$DATA_DIR/opencode-workdir"
+    return
+  fi
   cat > "$DAEMON_ENV" <<EOF
 # Generated by ework-aio at $(date -u +%Y-%m-%dT%H:%M:%SZ)
 DAEMON_ENV=production

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ework-aio",
-  "version": "0.1.16",
+  "version": "0.1.17",
   "description": "All-in-one installer for ework (issue tracker) + ework-daemon (AI bridge) + opencode-ework (plugin). One command: npm i -g ework-aio && ework-aio install.",
   "type": "module",
   "license": "MIT",