indusagi-coding-agent 0.2.11 → 0.2.13

package/supabase/migrations/20260827031803_indusagi_review_agent.sql

@@ -0,0 +1,109 @@
+create extension if not exists pgcrypto;
+
+create table if not exists public.indusagi_review_deliveries (
+  delivery_id text primary key,
+  event_name text not null,
+  received_at timestamptz not null default now()
+);
+
+create table if not exists public.indusagi_review_jobs (
+  id uuid primary key default gen_random_uuid(),
+  delivery_id text references public.indusagi_review_deliveries(delivery_id) on delete set null,
+  installation_id bigint not null,
+  repository text not null,
+  owner text not null,
+  repo text not null,
+  pr_number integer not null check (pr_number > 0),
+  head_sha text not null,
+  title text not null,
+  status text not null default 'pending' check (status in ('pending', 'running', 'completed', 'failed')),
+  attempts integer not null default 0 check (attempts >= 0),
+  max_attempts integer not null default 3 check (max_attempts between 1 and 10),
+  available_at timestamptz not null default now(),
+  worker_id text,
+  claimed_at timestamptz,
+  completed_at timestamptz,
+  review jsonb,
+  github_review_id bigint,
+  github_comment_id bigint,
+  check_run_id bigint,
+  error text,
+  created_at timestamptz not null default now(),
+  updated_at timestamptz not null default now(),
+  unique (repository, pr_number, head_sha)
+);
+
+create index if not exists indusagi_review_jobs_claim_idx
+  on public.indusagi_review_jobs (status, available_at, created_at)
+  where status = 'pending';
+create index if not exists indusagi_review_jobs_pr_idx
+  on public.indusagi_review_jobs (repository, pr_number, created_at desc);
+
+alter table public.indusagi_review_deliveries enable row level security;
+alter table public.indusagi_review_jobs enable row level security;
+
+create or replace function public.claim_indusagi_review_job(p_worker_id text)
+returns setof public.indusagi_review_jobs
+language plpgsql
+security definer
+set search_path = public
+as $$
+declare
+  claimed public.indusagi_review_jobs;
+begin
+  if nullif(trim(p_worker_id), '') is null then
+    raise exception 'worker id is required';
+  end if;
+
+  select * into claimed
+  from public.indusagi_review_jobs
+  where status = 'pending' and available_at <= now()
+  order by created_at
+  for update skip locked
+  limit 1;
+
+  if claimed.id is null then
+    return;
+  end if;
+
+  update public.indusagi_review_jobs
+  set status = 'running',
+      attempts = attempts + 1,
+      worker_id = p_worker_id,
+      claimed_at = now(),
+      updated_at = now()
+  where id = claimed.id
+  returning * into claimed;
+
+  return next claimed;
+end;
+$$;
+
+create or replace function public.recover_stale_indusagi_review_jobs(p_stale_minutes integer default 15)
+returns integer
+language plpgsql
+security definer
+set search_path = public
+as $$
+declare
+  recovered integer;
+begin
+  update public.indusagi_review_jobs
+  set status = case when attempts < max_attempts then 'pending' else 'failed' end,
+      available_at = now(),
+      worker_id = null,
+      claimed_at = null,
+      error = coalesce(error, 'worker lease expired'),
+      completed_at = case when attempts >= max_attempts then now() else completed_at end,
+      updated_at = now()
+  where status = 'running'
+    and claimed_at < now() - make_interval(mins => greatest(1, p_stale_minutes));
+  get diagnostics recovered = row_count;
+  return recovered;
+end;
+$$;
+
+revoke all on function public.claim_indusagi_review_job(text) from public, anon, authenticated;
+revoke all on function public.recover_stale_indusagi_review_jobs(integer) from public, anon, authenticated;
+grant execute on function public.claim_indusagi_review_job(text) to service_role;
+grant execute on function public.recover_stale_indusagi_review_jobs(integer) to service_role;

package/supabase/migrations/20260827035747_atomic_webhook_enqueue.sql

@@ -0,0 +1,75 @@
+create or replace function public.enqueue_indusagi_review_job(
+  p_delivery_id text,
+  p_event_name text,
+  p_installation_id bigint,
+  p_repository text,
+  p_owner text,
+  p_repo text,
+  p_pr_number integer,
+  p_head_sha text,
+  p_title text
+)
+returns table(job_id uuid, duplicate boolean)
+language plpgsql
+security definer
+set search_path = public
+as $$
+declare
+  queued_id uuid;
+  inserted_delivery integer;
+begin
+  if nullif(trim(p_delivery_id), '') is null
+    or nullif(trim(p_event_name), '') is null
+    or p_installation_id <= 0
+    or nullif(trim(p_repository), '') is null
+    or nullif(trim(p_owner), '') is null
+    or nullif(trim(p_repo), '') is null
+    or p_pr_number <= 0
+    or nullif(trim(p_head_sha), '') is null
+    or nullif(trim(p_title), '') is null then
+    raise exception 'invalid review webhook job';
+  end if;
+
+  insert into public.indusagi_review_deliveries(delivery_id, event_name)
+  values (p_delivery_id, p_event_name)
+  on conflict (delivery_id) do nothing;
+  get diagnostics inserted_delivery = row_count;
+
+  if inserted_delivery = 0 then
+    return query select null::uuid, true;
+    return;
+  end if;
+
+  insert into public.indusagi_review_jobs(
+    delivery_id,
+    installation_id,
+    repository,
+    owner,
+    repo,
+    pr_number,
+    head_sha,
+    title
+  ) values (
+    p_delivery_id,
+    p_installation_id,
+    p_repository,
+    p_owner,
+    p_repo,
+    p_pr_number,
+    p_head_sha,
+    p_title
+  )
+  on conflict (repository, pr_number, head_sha) do update
+  set installation_id = excluded.installation_id,
+      title = excluded.title,
+      updated_at = now()
+  returning id into queued_id;
+
+  return query select queued_id, false;
+end;
+$$;
+
+revoke all on function public.enqueue_indusagi_review_job(text, text, bigint, text, text, text, integer, text, text)
+  from public, anon, authenticated;
+grant execute on function public.enqueue_indusagi_review_job(text, text, bigint, text, text, text, integer, text, text)
+  to service_role;

package/supabase/migrations/20260827040104_check_run_reconciliation.sql

@@ -0,0 +1,8 @@
+alter table public.indusagi_review_jobs
+  add column if not exists check_completed_at timestamptz;
+
+create index if not exists indusagi_review_jobs_check_reconcile_idx
+  on public.indusagi_review_jobs (completed_at)
+  where status = 'completed'
+    and check_run_id is not null
+    and check_completed_at is null;

package/supabase/migrations/20260827041049_owned_job_leases.sql

@@ -0,0 +1,80 @@
+alter table public.indusagi_review_jobs
+  add column if not exists lease_token uuid,
+  add column if not exists lease_expires_at timestamptz;
+
+create index if not exists indusagi_review_jobs_lease_expiry_idx
+  on public.indusagi_review_jobs (lease_expires_at)
+  where status = 'running';
+
+create or replace function public.claim_indusagi_review_job(p_worker_id text)
+returns setof public.indusagi_review_jobs
+language plpgsql
+security definer
+set search_path = public
+as $$
+declare
+  claimed public.indusagi_review_jobs;
+begin
+  if nullif(trim(p_worker_id), '') is null then
+    raise exception 'worker id is required';
+  end if;
+
+  select * into claimed
+  from public.indusagi_review_jobs
+  where status = 'pending' and available_at <= now()
+  order by created_at
+  for update skip locked
+  limit 1;
+
+  if claimed.id is null then
+    return;
+  end if;
+
+  update public.indusagi_review_jobs
+  set status = 'running',
+      attempts = attempts + 1,
+      worker_id = p_worker_id,
+      lease_token = gen_random_uuid(),
+      claimed_at = now(),
+      lease_expires_at = now() + interval '5 minutes',
+      updated_at = now()
+  where id = claimed.id
+  returning * into claimed;
+
+  return next claimed;
+end;
+$$;
+
+create or replace function public.recover_stale_indusagi_review_jobs(p_stale_minutes integer default 15)
+returns integer
+language plpgsql
+security definer
+set search_path = public
+as $$
+declare
+  recovered integer;
+begin
+  update public.indusagi_review_jobs
+  set status = case when attempts < max_attempts then 'pending' else 'failed' end,
+      available_at = now(),
+      worker_id = null,
+      lease_token = null,
+      claimed_at = null,
+      lease_expires_at = null,
+      error = coalesce(error, 'worker lease expired'),
+      completed_at = case when attempts >= max_attempts then now() else completed_at end,
+      updated_at = now()
+  where status = 'running'
+    and coalesce(
+      lease_expires_at,
+      claimed_at + make_interval(mins => greatest(1, p_stale_minutes))
+    ) < now();
+  get diagnostics recovered = row_count;
+  return recovered;
+end;
+$$;
+
+revoke all on function public.claim_indusagi_review_job(text) from public, anon, authenticated;
+revoke all on function public.recover_stale_indusagi_review_jobs(integer) from public, anon, authenticated;
+grant execute on function public.claim_indusagi_review_job(text) to service_role;
+grant execute on function public.recover_stale_indusagi_review_jobs(integer) to service_role;

package/supabase/migrations/20260827042500_static_token_webhooks.sql

@@ -0,0 +1,75 @@
+create or replace function public.enqueue_indusagi_review_job(
+  p_delivery_id text,
+  p_event_name text,
+  p_installation_id bigint,
+  p_repository text,
+  p_owner text,
+  p_repo text,
+  p_pr_number integer,
+  p_head_sha text,
+  p_title text
+)
+returns table(job_id uuid, duplicate boolean)
+language plpgsql
+security definer
+set search_path = public
+as $$
+declare
+  queued_id uuid;
+  inserted_delivery integer;
+begin
+  if nullif(trim(p_delivery_id), '') is null
+    or nullif(trim(p_event_name), '') is null
+    or p_installation_id < 0
+    or nullif(trim(p_repository), '') is null
+    or nullif(trim(p_owner), '') is null
+    or nullif(trim(p_repo), '') is null
+    or p_pr_number <= 0
+    or nullif(trim(p_head_sha), '') is null
+    or nullif(trim(p_title), '') is null then
+    raise exception 'invalid review webhook job';
+  end if;
+
+  insert into public.indusagi_review_deliveries(delivery_id, event_name)
+  values (p_delivery_id, p_event_name)
+  on conflict (delivery_id) do nothing;
+  get diagnostics inserted_delivery = row_count;
+
+  if inserted_delivery = 0 then
+    return query select null::uuid, true;
+    return;
+  end if;
+
+  insert into public.indusagi_review_jobs(
+    delivery_id,
+    installation_id,
+    repository,
+    owner,
+    repo,
+    pr_number,
+    head_sha,
+    title
+  ) values (
+    p_delivery_id,
+    p_installation_id,
+    p_repository,
+    p_owner,
+    p_repo,
+    p_pr_number,
+    p_head_sha,
+    p_title
+  )
+  on conflict (repository, pr_number, head_sha) do update
+  set installation_id = excluded.installation_id,
+      title = excluded.title,
+      updated_at = now()
+  returning id into queued_id;
+
+  return query select queued_id, false;
+end;
+$$;
+
+revoke all on function public.enqueue_indusagi_review_job(text, text, bigint, text, text, text, integer, text, text)
+  from public, anon, authenticated;
+grant execute on function public.enqueue_indusagi_review_job(text, text, bigint, text, text, text, integer, text, text)
+  to service_role;

package/src/conductor/signal-hub/translate.test.ts

@@ -1,81 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { translateAgentEvent } from "./translate.js";
-
-type InputEvent = Parameters<typeof translateAgentEvent>[0];
-
-describe("translateAgentEvent tool signals", () => {
-  it("includes tool arguments in tool_start", () => {
-    const event: InputEvent = {
-      type: "tool_execution_start",
-      toolCallId: "call-1",
-      toolName: "read",
-      args: { path: "README.md" },
-    };
-
-    expect(translateAgentEvent(event)).toEqual([{
-      kind: "tool_start",
-      id: "call-1",
-      name: "read",
-      args: { path: "README.md" },
-    }]);
-  });
-
-  it("includes tool results and error status in tool_end", () => {
-    const event: InputEvent = {
-      type: "tool_execution_end",
-      toolCallId: "call-2",
-      toolName: "write",
-      result: { content: "permission denied" },
-      isError: true,
-    };
-
-    expect(translateAgentEvent(event)).toEqual([{
-      kind: "tool_end",
-      id: "call-2",
-      ok: false,
-      result: { content: "permission denied" },
-      isError: true,
-    }]);
-  });
-});
-
-describe("translateAgentEvent preserved signals", () => {
-  it("preserves prompt extraction", () => {
-    const event = {
-      type: "message_end",
-      message: {
-        role: "user",
-        content: [{ type: "text", text: "hello " }, { type: "text", text: "world" }],
-        timestamp: 1,
-      },
-    } as unknown as InputEvent;
-
-    expect(translateAgentEvent(event)).toEqual([{ kind: "prompt", text: "hello world" }]);
-  });
-
-  it("preserves text and thinking deltas", () => {
-    const message = { role: "assistant", content: [], timestamp: 1 };
-
-    expect(translateAgentEvent({
-      type: "message_update",
-      message,
-      assistantMessageEvent: { type: "text_delta", delta: "answer" },
-    } as unknown as InputEvent)).toEqual([{ kind: "text", delta: "answer" }]);
-    expect(translateAgentEvent({
-      type: "message_update",
-      message,
-      assistantMessageEvent: { type: "thinking_delta", delta: "reason" },
-    } as unknown as InputEvent)).toEqual([{ kind: "thinking", delta: "reason" }]);
-  });
-
-  it("preserves turn_end usage", () => {
-    const usage = { input: 1, output: 2, cacheRead: 3, cacheWrite: 4, totalTokens: 10, cost: { total: 0.5 } };
-    const event = {
-      type: "turn_end",
-      message: { role: "assistant", content: [], usage, timestamp: 1 },
-      toolResults: [],
-    } as unknown as InputEvent;
-
-    expect(translateAgentEvent(event)).toEqual([{ kind: "turn_end", usage }]);
-  });
-});

package/src/entry.test.ts

@@ -1,17 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { resolveBoot } from "./entry.js";
-
-describe("resolveBoot", () => {
-  afterEach(() => vi.restoreAllMocks());
-
-  it("prints fatal boot errors and returns a failing exit code", async () => {
-    const stderr = vi.spyOn(process.stderr, "write").mockReturnValue(true);
-
-    await expect(resolveBoot(Promise.reject(new Error("startup failed")))).resolves.toBe(1);
-    expect(stderr).toHaveBeenCalledWith("indusagi: startup failed\n");
-  });
-
-  it("preserves successful exit codes", async () => {
-    await expect(resolveBoot(Promise.resolve(0))).resolves.toBe(0);
-  });
-});

package/src/integrations/sarvam/sarvam.test.ts

@@ -1,60 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { resolveSarvamConfig, redactApiKey } from "./config.js";
-
-describe("resolveSarvamConfig", () => {
-  const isolatedHome = "/tmp/indusagi-sarvam-test-home-empty";
-
-  it("returns undefined when nothing is configured", () => {
-    expect(
-      resolveSarvamConfig({ env: {}, cwd: "/tmp", home: isolatedHome, disabled: false }),
-    ).toBeUndefined();
-  });
-
-  it("prefers explicit key over env", () => {
-    const cfg = resolveSarvamConfig({
-      apiKey: "key-from-arg",
-      env: { SARVAM_API_KEY: "key-from-env" },
-      cwd: "/tmp",
-      home: isolatedHome,
-    });
-    expect(cfg?.apiKey).toBe("key-from-arg");
-  });
-
-  it("honors SARVAM_API_KEY", () => {
-    const cfg = resolveSarvamConfig({
-      env: { SARVAM_API_KEY: "sk-test-123" },
-      cwd: "/tmp",
-      home: isolatedHome,
-    });
-    expect(cfg?.apiKey).toBe("sk-test-123");
-    expect(cfg?.id).toBe("sarvam");
-  });
-
-  it("disabled wins", () => {
-    const cfg = resolveSarvamConfig({
-      apiKey: "sk-test",
-      disabled: true,
-      cwd: "/tmp",
-      home: isolatedHome,
-    });
-    expect(cfg).toBeUndefined();
-  });
-
-  it("honors basePath from options", () => {
-    const cfg = resolveSarvamConfig({
-      apiKey: "sk-test",
-      basePath: "/tmp/sarvam-out",
-      cwd: "/tmp",
-      home: isolatedHome,
-    });
-    expect(cfg?.basePath).toBe("/tmp/sarvam-out");
-  });
-});
-
-describe("redactApiKey", () => {
-  it("masks middle", () => {
-    const r = redactApiKey("abcdefghijklmnop");
-    expect(r).toContain("…");
-    expect(r).not.toBe("abcdefghijklmnop");
-  });
-});

package/src/integrations/zoho/zoho.test.ts

@@ -1,50 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { resolveZohoConfig, redactUrl } from "./config.js";
-
-describe("resolveZohoConfig", () => {
-  const isolatedHome = "/tmp/indusagi-zoho-test-home-empty";
-
-  it("returns undefined when nothing is configured", () => {
-    expect(
-      resolveZohoConfig({ env: {}, cwd: "/tmp", home: isolatedHome, disabled: false }),
-    ).toBeUndefined();
-  });
-
-  it("prefers explicit url over env", () => {
-    const cfg = resolveZohoConfig({
-      url: "https://mcp.example/a",
-      env: { ZOHO_MCP_URL: "https://mcp.example/b" },
-      cwd: "/tmp",
-      home: isolatedHome,
-    });
-    expect(cfg?.url).toBe("https://mcp.example/a");
-  });
-
-  it("honors ZOHO_MCP_URL", () => {
-    const cfg = resolveZohoConfig({
-      env: { ZOHO_MCP_URL: "https://mcp.zoho.example/x" },
-      cwd: "/tmp",
-      home: isolatedHome,
-    });
-    expect(cfg?.url).toBe("https://mcp.zoho.example/x");
-    expect(cfg?.id).toBe("zoho");
-  });
-
-  it("disabled wins", () => {
-    const cfg = resolveZohoConfig({
-      url: "https://mcp.example/a",
-      disabled: true,
-      cwd: "/tmp",
-      home: isolatedHome,
-    });
-    expect(cfg).toBeUndefined();
-  });
-});
-
-describe("redactUrl", () => {
-  it("keeps host", () => {
-    const r = redactUrl("https://mcp.zoho.in/secret/path/more");
-    expect(r).toContain("mcp.zoho.in");
-    expect(r).toContain("…");
-  });
-});

package/src/launch/oauth.test.ts

@@ -1,18 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { hasRegisteredOAuthClientId, launchAttempts } from "./oauth.js";
-
-afterEach(() => vi.unstubAllEnvs());
-
-describe("OpenAI Codex OAuth registration", () => {
-  it("uses the framework client when no environment override exists", () => {
-    vi.stubEnv("INDUSAGI_OPENAI_CODEX_CLIENT_ID", "");
-    expect(hasRegisteredOAuthClientId("openai-codex")).toBe(true);
-  });
-
-  it("opens ampersand-heavy OAuth URLs on Windows without cmd parsing", () => {
-    const url = "https://example.com/oauth?response_type=code&client_id=client&scope=openid";
-    expect(launchAttempts(url, "win32")).toEqual([
-      { command: "rundll32.exe", args: ["url.dll,FileProtocolHandler", url] },
-    ]);
-  });
-});