gitwarren 0.1.7

package/README.md

@@ -0,0 +1,53 @@
+# gitwarren
+
+Local-only code review for your git repositories. Your code, your diffs and
+your comments stay on your machine — there is no server, no account and nothing
+to sign in to.
+
+This package is the command line. There is also a desktop app; see
+[gitwarren-app](https://github.com/klarluft/gitwarren-app).
+
+```
+npx gitwarren serve
+```
+
+That serves the review UI on `127.0.0.1:41427` and prints a URL carrying a
+token minted for that launch. Open it, add a repository, pick two refs, and
+review the diff.
+
+## Commands
+
+| | |
+| --- | --- |
+| `gitwarren serve` | serve the web view on loopback and print its URL |
+| `gitwarren serve --stdio` | answer GitWarren's protocol on stdin/stdout |
+| `gitwarren open [link]` | open this machine's GitWarren in a browser, carrying the token |
+| `gitwarren service install` | write the agent launcher, and start at login |
+| `gitwarren service uninstall` | remove the login item |
+| `gitwarren service status` | what is registered, and what is running |
+
+`gitwarren open` takes a `gitwarren://` deep link or the `http://127.0.0.1`
+URL an agent hands out, and lands on that review rather than the home screen.
+
+## Letting an agent in
+
+`gitwarren service install` writes `~/.gitwarren/bin/gitwarren-mcp`, which is a
+GitWarren MCP server your coding agent can start. Point the agent at that one
+path — it is the same on every machine, and GitWarren keeps it pointing at
+whichever install ran last.
+
+## Where your data is
+
+One SQLite database in the usual place for your platform —
+`~/Library/Application Support/GitWarren` on macOS, `~/.config/GitWarren` on
+Linux, `%APPDATA%\GitWarren` on Windows. `gitwarren service status` prints the
+path.
+
+The web view binds `127.0.0.1` only, checks `Host` and `Origin` on every
+request and on the WebSocket upgrade, and requires a token minted per launch
+which it exchanges for a `SameSite=Strict` cookie. A page on another origin
+cannot reach it.
+
+## Licence
+
+GPL-3.0-or-later. Copyright © 2026 Klarluft B.V.

package/bin/gitwarren.mjs

@@ -0,0 +1,35 @@
+#!/usr/bin/env node
+/**
+ * `npx gitwarren` - the third way to get this, and the only one that does not
+ * ship a Node.
+ *
+ * The tarball from spike S3 carries its own interpreter because the machines it
+ * targets have none. Somebody typing `npx` has already proved they have one, so
+ * this package carries the bundles and lets `better-sqlite3` be an ordinary
+ * dependency - which is how a native addon is supposed to reach a user's
+ * platform, and is the reason this package is a tenth of the tarball's size and
+ * works on Windows without a fourth build target.
+ *
+ * ## What this file does, and why it is a file rather than a `bin` entry
+ *
+ * Two environment variables, and then the bundle. `GITWARREN_MIGRATIONS_DIR`
+ * and `GITWARREN_WEB_ROOT` are how a build says where its non-JavaScript parts
+ * went, and outside Electron there is no `resourcesPath` and no project root to
+ * walk up to - so somebody has to name them. In the tarball it is a `sh`
+ * preamble; here it is these six lines.
+ *
+ * They are set rather than defaulted, and `??=` rather than `=`, so that
+ * someone debugging a build can still point either one somewhere else without
+ * editing an installed package.
+ *
+ * `createRequire` because the bundle is CommonJS - see `vite.daemon.config.ts`
+ * on why - and this file is ESM so that `import.meta.dirname` is available to
+ * locate it. The two module systems meet here and nowhere else.
+ */
+import { createRequire } from 'node:module'
+import { join } from 'node:path'
+
+process.env.GITWARREN_MIGRATIONS_DIR ??= join(import.meta.dirname, '..', 'drizzle')
+process.env.GITWARREN_WEB_ROOT ??= join(import.meta.dirname, '..', 'web')
+
+createRequire(import.meta.url)('../lib/gitwarren.cjs')

package/drizzle/0000_init.sql

@@ -0,0 +1,10 @@
+CREATE TABLE `repositories` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`path` text NOT NULL,
+	`name` text NOT NULL,
+	`created_at` text DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')) NOT NULL,
+	`updated_at` text DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')) NOT NULL
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `repositories_path_unique` ON `repositories` (`path`);--> statement-breakpoint
+CREATE INDEX `repositories_name_idx` ON `repositories` (`name`);

package/drizzle/0001_reviews.sql

@@ -0,0 +1,15 @@
+CREATE TABLE `reviews` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`repository_id` integer NOT NULL,
+	`title` text NOT NULL,
+	`description` text DEFAULT '' NOT NULL,
+	`base_ref` text NOT NULL,
+	`head_ref` text NOT NULL,
+	`status` text DEFAULT 'open' NOT NULL,
+	`created_at` text DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')) NOT NULL,
+	`updated_at` text DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')) NOT NULL,
+	`closed_at` text,
+	FOREIGN KEY (`repository_id`) REFERENCES `repositories`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE INDEX `reviews_repository_idx` ON `reviews` (`repository_id`,`status`);

package/drizzle/0002_comments.sql

@@ -0,0 +1,31 @@
+CREATE TABLE `comment_threads` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`review_id` integer NOT NULL,
+	`file_path` text,
+	`side` text,
+	`line` integer,
+	`anchor_text` text,
+	`anchor_sha` text,
+	`resolved_at` text,
+	`resolved_by` text,
+	`created_at` text DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')) NOT NULL,
+	`updated_at` text DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')) NOT NULL,
+	FOREIGN KEY (`review_id`) REFERENCES `reviews`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE INDEX `comment_threads_review_idx` ON `comment_threads` (`review_id`,`updated_at`);--> statement-breakpoint
+CREATE INDEX `comment_threads_file_idx` ON `comment_threads` (`review_id`,`file_path`);--> statement-breakpoint
+CREATE TABLE `comments` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`thread_id` integer NOT NULL,
+	`author_kind` text NOT NULL,
+	`author_name` text NOT NULL,
+	`author_label` text,
+	`author_session` text,
+	`body` text NOT NULL,
+	`created_at` text DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')) NOT NULL,
+	`updated_at` text DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')) NOT NULL,
+	FOREIGN KEY (`thread_id`) REFERENCES `comment_threads`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE INDEX `comments_thread_idx` ON `comments` (`thread_id`,`created_at`);

package/drizzle/0003_comment_snapshots.sql

@@ -0,0 +1 @@
+ALTER TABLE `comment_threads` ADD `anchor_snapshot` text;

package/drizzle/0004_attachments.sql

@@ -0,0 +1,10 @@
+CREATE TABLE `attachments` (
+	`sha` text PRIMARY KEY NOT NULL,
+	`ext` text NOT NULL,
+	`mime_type` text NOT NULL,
+	`byte_size` integer NOT NULL,
+	`width` integer,
+	`height` integer,
+	`original_name` text,
+	`created_at` text DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')) NOT NULL
+);

package/drizzle/0005_comment_ranges.sql

@@ -0,0 +1 @@
+ALTER TABLE `comment_threads` ADD `start_line` integer;

package/drizzle/0006_reviewed_files.sql

@@ -0,0 +1,10 @@
+CREATE TABLE `reviewed_files` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`review_id` integer NOT NULL,
+	`file_path` text NOT NULL,
+	`content_digest` text NOT NULL,
+	`reviewed_at` text DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')) NOT NULL,
+	FOREIGN KEY (`review_id`) REFERENCES `reviews`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `reviewed_files_path_idx` ON `reviewed_files` (`review_id`,`file_path`);

package/drizzle/0007_hosts_and_principals.sql

@@ -0,0 +1,14 @@
+CREATE TABLE `principals` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`kind` text NOT NULL,
+	`identifier` text NOT NULL,
+	`display_name` text NOT NULL,
+	`created_at` text DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')) NOT NULL
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `principals_identity_idx` ON `principals` (`kind`,`identifier`);--> statement-breakpoint
+DROP INDEX `repositories_path_unique`;--> statement-breakpoint
+ALTER TABLE `repositories` ADD `host_id` text;--> statement-breakpoint
+CREATE UNIQUE INDEX `repositories_host_path_idx` ON `repositories` (`host_id`,`path`);--> statement-breakpoint
+CREATE UNIQUE INDEX `repositories_local_path_idx` ON `repositories` (`path`) WHERE "repositories"."host_id" is null;--> statement-breakpoint
+ALTER TABLE `comments` ADD `author_id` integer REFERENCES principals(id);

package/drizzle/0008_hosts.sql

@@ -0,0 +1,13 @@
+CREATE TABLE `hosts` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`instance_id` text,
+	`label` text NOT NULL,
+	`kind` text DEFAULT 'ssh' NOT NULL,
+	`target` text NOT NULL,
+	`editor_target` text,
+	`last_seen_at` text,
+	`created_at` text DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')) NOT NULL
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `hosts_kind_target_idx` ON `hosts` (`kind`,`target`);--> statement-breakpoint
+CREATE UNIQUE INDEX `hosts_instance_idx` ON `hosts` (`instance_id`) WHERE "hosts"."instance_id" is not null;

package/drizzle/0009_host_daemon_version.sql

@@ -0,0 +1 @@
+ALTER TABLE `hosts` ADD `daemon_version` text;

package/drizzle/meta/0000_snapshot.json

@@ -0,0 +1,80 @@
+{
+  "version": "6",
+  "dialect": "sqlite",
+  "id": "637f1fe0-da2c-4b76-ad8d-cde6574e77f4",
+  "prevId": "00000000-0000-0000-0000-000000000000",
+  "tables": {
+    "repositories": {
+      "name": "repositories",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "path": {
+          "name": "path",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))"
+        }
+      },
+      "indexes": {
+        "repositories_path_unique": {
+          "name": "repositories_path_unique",
+          "columns": [
+            "path"
+          ],
+          "isUnique": true
+        },
+        "repositories_name_idx": {
+          "name": "repositories_name_idx",
+          "columns": [
+            "name"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    }
+  },
+  "views": {},
+  "enums": {},
+  "_meta": {
+    "schemas": {},
+    "tables": {},
+    "columns": {}
+  },
+  "internal": {
+    "indexes": {}
+  }
+}

package/drizzle/meta/0001_snapshot.json

@@ -0,0 +1,187 @@
+{
+  "version": "6",
+  "dialect": "sqlite",
+  "id": "1eb43a3d-02ac-4196-bf87-f794d9d5e726",
+  "prevId": "637f1fe0-da2c-4b76-ad8d-cde6574e77f4",
+  "tables": {
+    "repositories": {
+      "name": "repositories",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "path": {
+          "name": "path",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))"
+        }
+      },
+      "indexes": {
+        "repositories_path_unique": {
+          "name": "repositories_path_unique",
+          "columns": [
+            "path"
+          ],
+          "isUnique": true
+        },
+        "repositories_name_idx": {
+          "name": "repositories_name_idx",
+          "columns": [
+            "name"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "reviews": {
+      "name": "reviews",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "repository_id": {
+          "name": "repository_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "title": {
+          "name": "title",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "''"
+        },
+        "base_ref": {
+          "name": "base_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "head_ref": {
+          "name": "head_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'open'"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))"
+        },
+        "closed_at": {
+          "name": "closed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {
+        "reviews_repository_idx": {
+          "name": "reviews_repository_idx",
+          "columns": [
+            "repository_id",
+            "status"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "reviews_repository_id_repositories_id_fk": {
+          "name": "reviews_repository_id_repositories_id_fk",
+          "tableFrom": "reviews",
+          "tableTo": "repositories",
+          "columnsFrom": [
+            "repository_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    }
+  },
+  "views": {},
+  "enums": {},
+  "_meta": {
+    "schemas": {},
+    "tables": {},
+    "columns": {}
+  },
+  "internal": {
+    "indexes": {}
+  }
+}