gitship-agent 0.0.2 → 0.0.3

package/dist/server.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/server.js

@@ -0,0 +1,86 @@
+import express from "express";
+import crypto from "crypto";
+import { getProjects, enqueueDeployment, isWebhookDeliveryProcessed, recordWebhookDelivery, } from "gitship-core";
+const app = express();
+const PORT = process.env.PORT || 3000;
+// Middleware to capture raw body for HMAC signature verification
+app.use(express.json({
+    verify: (req, _res, buf) => {
+        req.rawBody = buf;
+    },
+}));
+function verifyGitHubSignature(rawBody, signatureHeader, secret) {
+    if (!signatureHeader)
+        return false;
+    try {
+        const hmac = crypto.createHmac("sha256", secret);
+        hmac.update(rawBody);
+        const digest = "sha256=" + hmac.digest("hex");
+        return crypto.timingSafeEqual(Buffer.from(digest), Buffer.from(signatureHeader));
+    }
+    catch {
+        return false;
+    }
+}
+app.post("/webhook/github", async (req, res) => {
+    const event = req.headers["x-github-event"];
+    const signature = req.headers["x-hub-signature-256"];
+    const deliveryId = req.headers["x-github-delivery"];
+    if (!event || event !== "push") {
+        res.status(200).send("Ignored: Not a push event");
+        return;
+    }
+    // Replay Protection
+    if (deliveryId) {
+        if (isWebhookDeliveryProcessed(deliveryId)) {
+            console.log(`[Webhook] Ignored duplicate delivery: ${deliveryId}`);
+            res.status(200).send("Ignored: Duplicate delivery");
+            return;
+        }
+        recordWebhookDelivery(deliveryId);
+    }
+    const payload = req.body;
+    if (!payload || !payload.repository || !payload.ref) {
+        res.status(400).send("Bad Request: Missing payload details");
+        return;
+    }
+    const owner = payload.repository.owner.login;
+    const repo = payload.repository.name;
+    const branch = payload.ref.replace("refs/heads/", "");
+    // Find matching projects in the database
+    const projects = getProjects().filter((p) => p.owner.toLowerCase() === owner.toLowerCase() &&
+        p.repo.toLowerCase() === repo.toLowerCase() &&
+        p.branch.toLowerCase() === branch.toLowerCase());
+    if (projects.length === 0) {
+        console.log(`[Webhook] No matching active project found for ${owner}/${repo} branch ${branch}`);
+        res.status(200).send(`Ignored: No active project matching ${owner}/${repo}:${branch}`);
+        return;
+    }
+    const rawBody = req.rawBody || Buffer.from(JSON.stringify(req.body));
+    // Process all matching projects (usually just 1, but we loop for safety)
+    let authorizedCount = 0;
+    for (const project of projects) {
+        if (!verifyGitHubSignature(rawBody, signature, project.webhook_secret)) {
+            console.warn(`[Webhook] Signature verification failed for project: ${project.name}`);
+            continue;
+        }
+        authorizedCount++;
+        const commitSha = payload.after !== "0000000000000000000000000000000000000000" ? payload.after : null;
+        const commitMessage = payload.head_commit?.message || "Webhook trigger";
+        const author = payload.head_commit?.author?.username || payload.pusher?.name || "github";
+        console.log(`[Webhook] Enqueuing deployment for project ${project.name} (commit: ${commitSha})`);
+        await enqueueDeployment(project.id, branch, commitSha, commitMessage, author);
+    }
+    if (authorizedCount === 0) {
+        res.status(401).send("Unauthorized: Signature verification failed");
+        return;
+    }
+    res.status(202).send("Accepted: Deployment enqueued");
+});
+app.get("/health", (_req, res) => {
+    res.status(200).json({ status: "OK", time: new Date() });
+});
+app.listen(PORT, () => {
+    console.log(`DeployKit Server Agent listening on port ${PORT}`);
+});
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,OAA8B,MAAM,SAAS,CAAC;AACrD,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,0BAA0B,EAC1B,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAEtB,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;AACtB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC;AAEtC,iEAAiE;AACjE,GAAG,CAAC,GAAG,CACL,OAAO,CAAC,IAAI,CAAC;IACX,MAAM,EAAE,CAAC,GAAQ,EAAE,IAAS,EAAE,GAAW,EAAE,EAAE;QAC3C,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC;IACpB,CAAC;CACF,CAAC,CACH,CAAC;AAEF,SAAS,qBAAqB,CAC5B,OAAe,EACf,eAAuB,EACvB,MAAc;IAEd,IAAI,CAAC,eAAe;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9C,OAAO,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;IAC/E,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAW,CAAC;IAC/D,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAW,CAAC;IAE9D,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IAED,oBAAoB;IACpB,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,yCAAyC,UAAU,EAAE,CAAC,CAAC;YACnE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,qBAAqB,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC;IACzB,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;IACrC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAEtD,yCAAyC;IACzC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE;QAC7C,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE;QAC3C,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,CAClD,CAAC;IAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,kDAAkD,KAAK,IAAI,IAAI,WAAW,MAAM,EAAE,CAAC,CAAC;QAChG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,uCAAuC,KAAK,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC;QACvF,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAI,GAAW,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAE9E,yEAAyE;IACzE,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YACvE,OAAO,CAAC,IAAI,CAAC,wDAAwD,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACrF,SAAS;QACX,CAAC;QAED,eAAe,EAAE,CAAC;QAElB,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,KAAK,0CAA0C,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACtG,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,EAAE,OAAO,IAAI,iBAAiB,CAAC;QACxE,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,IAAI,QAAQ,CAAC;QAEzF,OAAO,CAAC,GAAG,CAAC,8CAA8C,OAAO,CAAC,IAAI,aAAa,SAAS,GAAG,CAAC,CAAC;QAEjG,MAAM,iBAAiB,CACrB,OAAO,CAAC,EAAE,EACV,MAAM,EACN,SAAS,EACT,aAAa,EACb,MAAM,CACP,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;AACxD,CAAC,CAAC,CAAC;AAEH,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEH,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;IACpB,OAAO,CAAC,GAAG,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;AAClE,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,8 +1,11 @@
 {
   "name": "gitship-agent",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "type": "module",
   "main": "./dist/server.js",
+  "files": [
+    "dist"
+  ],
   "scripts": {
     "build": "tsc",
     "start": "node ./dist/server.js",

package/src/server.ts

@@ -1,123 +0,0 @@
-import express, { Request, Response } from "express";
-import crypto from "crypto";
-import {
-  getProjects,
-  enqueueDeployment,
-  isWebhookDeliveryProcessed,
-  recordWebhookDelivery,
-} from "gitship-core";
-
-const app = express();
-const PORT = process.env.PORT || 3000;
-
-// Middleware to capture raw body for HMAC signature verification
-app.use(
-  express.json({
-    verify: (req: any, _res: any, buf: Buffer) => {
-      req.rawBody = buf;
-    },
-  })
-);
-
-function verifyGitHubSignature(
-  rawBody: Buffer,
-  signatureHeader: string,
-  secret: string
-): boolean {
-  if (!signatureHeader) return false;
-  try {
-    const hmac = crypto.createHmac("sha256", secret);
-    hmac.update(rawBody);
-    const digest = "sha256=" + hmac.digest("hex");
-    return crypto.timingSafeEqual(Buffer.from(digest), Buffer.from(signatureHeader));
-  } catch {
-    return false;
-  }
-}
-
-app.post("/webhook/github", async (req: Request, res: Response): Promise<void> => {
-  const event = req.headers["x-github-event"];
-  const signature = req.headers["x-hub-signature-256"] as string;
-  const deliveryId = req.headers["x-github-delivery"] as string;
-
-  if (!event || event !== "push") {
-    res.status(200).send("Ignored: Not a push event");
-    return;
-  }
-
-  // Replay Protection
-  if (deliveryId) {
-    if (isWebhookDeliveryProcessed(deliveryId)) {
-      console.log(`[Webhook] Ignored duplicate delivery: ${deliveryId}`);
-      res.status(200).send("Ignored: Duplicate delivery");
-      return;
-    }
-    recordWebhookDelivery(deliveryId);
-  }
-
-  const payload = req.body;
-  if (!payload || !payload.repository || !payload.ref) {
-    res.status(400).send("Bad Request: Missing payload details");
-    return;
-  }
-
-  const owner = payload.repository.owner.login;
-  const repo = payload.repository.name;
-  const branch = payload.ref.replace("refs/heads/", "");
-
-  // Find matching projects in the database
-  const projects = getProjects().filter(
-    (p) =>
-      p.owner.toLowerCase() === owner.toLowerCase() &&
-      p.repo.toLowerCase() === repo.toLowerCase() &&
-      p.branch.toLowerCase() === branch.toLowerCase()
-  );
-
-  if (projects.length === 0) {
-    console.log(`[Webhook] No matching active project found for ${owner}/${repo} branch ${branch}`);
-    res.status(200).send(`Ignored: No active project matching ${owner}/${repo}:${branch}`);
-    return;
-  }
-
-  const rawBody = (req as any).rawBody || Buffer.from(JSON.stringify(req.body));
-
-  // Process all matching projects (usually just 1, but we loop for safety)
-  let authorizedCount = 0;
-  for (const project of projects) {
-    if (!verifyGitHubSignature(rawBody, signature, project.webhook_secret)) {
-      console.warn(`[Webhook] Signature verification failed for project: ${project.name}`);
-      continue;
-    }
-
-    authorizedCount++;
-
-    const commitSha = payload.after !== "0000000000000000000000000000000000000000" ? payload.after : null;
-    const commitMessage = payload.head_commit?.message || "Webhook trigger";
-    const author = payload.head_commit?.author?.username || payload.pusher?.name || "github";
-
-    console.log(`[Webhook] Enqueuing deployment for project ${project.name} (commit: ${commitSha})`);
-    
-    await enqueueDeployment(
-      project.id,
-      branch,
-      commitSha,
-      commitMessage,
-      author
-    );
-  }
-
-  if (authorizedCount === 0) {
-    res.status(401).send("Unauthorized: Signature verification failed");
-    return;
-  }
-
-  res.status(202).send("Accepted: Deployment enqueued");
-});
-
-app.get("/health", (_req, res) => {
-  res.status(200).json({ status: "OK", time: new Date() });
-});
-
-app.listen(PORT, () => {
-  console.log(`DeployKit Server Agent listening on port ${PORT}`);
-});

package/tsconfig.json

@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}