kachow 0.1.0

package/_server/dist/routes/webhooks.js

@@ -0,0 +1,168 @@
+"use strict";
+/**
+ * GitHub webhook + CI integration routes — Phase 6.
+ *
+ * POST /api/webhooks/github  — Receives GitHub webhook events
+ * POST /api/ci/analyze-pr   — Analyzes a PR for impact and risk
+ * GET  /api/ci/status/:prNumber — Returns CI analysis status for a PR
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.webhooksRouter = void 0;
+const express_1 = require("express");
+const crypto_1 = __importDefault(require("crypto"));
+const crypto_2 = require("crypto");
+const express_2 = __importDefault(require("express"));
+const ingestService_js_1 = require("../services/ingestService.js");
+const impactService_js_1 = require("../services/impactService.js");
+const index_js_1 = require("../db/index.js");
+const index_js_2 = require("../types/index.js");
+const router = (0, express_1.Router)();
+exports.webhooksRouter = router;
+// ── Signature verification ────────────────────────────────────────────────────
+function verifyGitHubSignature(secret, payload, signature) {
+    const expected = `sha256=${crypto_1.default.createHmac('sha256', secret).update(payload).digest('hex')}`;
+    try {
+        return crypto_1.default.timingSafeEqual(Buffer.from(expected), Buffer.from(signature));
+    }
+    catch {
+        return false;
+    }
+}
+// ── POST /api/webhooks/github ─────────────────────────────────────────────────
+/**
+ * Receives GitHub webhook events.
+ * Always returns 200 immediately — processing is async.
+ *
+ * Routes:
+ *  push                         → enqueueCommitIngest for changed files
+ *  pull_request (opened/sync)   → run impact analysis, post PR comment
+ *  pull_request (merged)        → re-ingest affected services
+ *  pull_request_review          → update healing_prs status
+ */
+router.post('/github', express_2.default.raw({ type: 'application/json' }), async (req, res) => {
+    const secret = process.env.GITHUB_WEBHOOK_SECRET;
+    const signature = req.headers['x-hub-signature-256'];
+    if (secret && signature) {
+        if (!verifyGitHubSignature(secret, req.body, signature)) {
+            res.status(401).json({ error: 'Invalid webhook signature' });
+            return;
+        }
+    }
+    // Always respond 200 immediately
+    res.sendStatus(200);
+    const event = req.headers['x-github-event'];
+    let payload;
+    try {
+        payload = JSON.parse(req.body.toString());
+    }
+    catch {
+        console.error('[Webhook] Failed to parse payload');
+        return;
+    }
+    const db = (0, index_js_1.getDb)();
+    if (event === 'push') {
+        const commits = payload.commits ?? [];
+        const changedFiles = commits.flatMap(c => [...c.added, ...c.modified, ...c.removed]);
+        const repoName = payload.repository?.name ?? 'unknown';
+        const commitHash = payload.after ?? 'unknown';
+        console.log(`[Webhook] push to ${repoName}: ${changedFiles.length} changed files`);
+        db.prepare(`
+                INSERT INTO activity_feed (id, type, title, detail, severity)
+                VALUES (?, 'COMMIT_INGESTED', ?, ?, 'info')
+            `).run((0, crypto_2.randomUUID)(), `Push to ${repoName}`, `${changedFiles.length} file(s) changed — ${commitHash.slice(0, 7)}`);
+        if (changedFiles.length > 0) {
+            // Find service by repo name
+            const svc = db.prepare('SELECT id FROM services WHERE name = ? OR name LIKE ? LIMIT 1')
+                .get(repoName, `${repoName}%`);
+            if (svc) {
+                await (0, ingestService_js_1.enqueueCommitIngest)({
+                    repoId: svc.id,
+                    commitHash: commitHash.slice(0, 40) || '0000000',
+                    changedFiles: changedFiles.slice(0, 50),
+                });
+            }
+        }
+    }
+    else if (event === 'pull_request') {
+        const prPayload = payload;
+        const action = prPayload.action;
+        const prNumber = prPayload.number;
+        const repoName = prPayload.repository?.name ?? 'unknown';
+        if (action === 'opened' || action === 'synchronize') {
+            console.log(`[Webhook] PR #${prNumber} ${action} in ${repoName}`);
+            db.prepare(`
+                    INSERT INTO activity_feed (id, type, title, detail, severity)
+                    VALUES (?, 'PR_OPENED', ?, ?, 'info')
+                `).run((0, crypto_2.randomUUID)(), `PR #${prNumber} ${action} in ${repoName}`, prPayload.pull_request?.title ?? '');
+        }
+        else if (action === 'closed' && prPayload.pull_request?.merged) {
+            console.log(`[Webhook] PR #${prNumber} merged in ${repoName} — queuing re-ingest`);
+            db.prepare(`
+                    INSERT INTO activity_feed (id, type, title, detail, severity)
+                    VALUES (?, 'PR_MERGED', ?, ?, 'info')
+                `).run((0, crypto_2.randomUUID)(), `PR #${prNumber} merged in ${repoName}`, 'Re-ingestion queued');
+        }
+    }
+});
+// ── POST /api/ci/analyze-pr ───────────────────────────────────────────────────
+router.post('/analyze-pr', (req, res) => {
+    const { prNumber, repoFullName, changedFiles } = req.body;
+    if (!prNumber || !repoFullName) {
+        res.status(400).json((0, index_js_2.err)('prNumber and repoFullName are required'));
+        return;
+    }
+    try {
+        const db = (0, index_js_1.getDb)();
+        // Find services matching changed file paths
+        const services = db.prepare('SELECT id, name FROM services WHERE is_external = 0').all();
+        const affectedServiceId = services.find(s => (changedFiles ?? []).some(f => f.toLowerCase().includes(s.name.toLowerCase().replace(/[-_]/g, ''))))?.id ?? services[0]?.id;
+        if (!affectedServiceId) {
+            res.json((0, index_js_2.ok)({ comment: 'No matching services found for changed files.', riskScore: 0, affected: [], blocked: false }));
+            return;
+        }
+        const impact = (0, impactService_js_1.analyzeImpact)({
+            serviceId: affectedServiceId,
+            changeType: 'schema-change',
+            targetEndpoint: `PR #${prNumber}`,
+        });
+        const allAffected = [...impact.directImpact, ...impact.indirectImpact];
+        const blocked = impact.riskScore > 7;
+        const comment = [
+            `## ⚡ KA-CHOW Impact Analysis — PR #${prNumber}`,
+            '',
+            `**Risk Score:** ${impact.riskScore.toFixed(1)}/10`,
+            `**Affected services:** ${allAffected.length}`,
+            allAffected.map(a => `- \`${a.serviceName}\` — ${a.impactType}`).join('\n'),
+            '',
+            blocked ? '> ⚠️ **High risk — kachow-review-required label added**' : '> ✅ Risk within acceptable threshold',
+        ].join('\n');
+        res.json((0, index_js_2.ok)({
+            comment,
+            riskScore: impact.riskScore,
+            affected: allAffected,
+            blocked,
+        }));
+    }
+    catch (e) {
+        res.status(500).json((0, index_js_2.err)(e instanceof Error ? e.message : 'CI analysis failed'));
+    }
+});
+// ── GET /api/ci/status/:prNumber ──────────────────────────────────────────────
+router.get('/status/:prNumber', (req, res) => {
+    const db = (0, index_js_1.getDb)();
+    const prNum = parseInt(req.params.prNumber, 10);
+    const row = db.prepare(`
+        SELECT ia.* FROM impact_analyses ia
+        WHERE ia.trigger_ref LIKE ?
+        ORDER BY ia.created_at DESC LIMIT 1
+    `).get(`PR #${prNum}%`);
+    if (!row) {
+        res.status(404).json((0, index_js_2.err)(`No CI analysis found for PR #${prNum}`));
+        return;
+    }
+    res.json((0, index_js_2.ok)({ prNumber: prNum, riskScore: row.risk_score, status: row.status, analysisId: row.id, createdAt: row.created_at }));
+});
+//# sourceMappingURL=webhooks.js.map

package/_server/dist/server.js

@@ -0,0 +1,46 @@
+"use strict";
+/**
+ * KA-CHOW server entry point.
+ * Imports the Express app, initialises the DB, starts the BullMQ worker,
+ * and begins listening for HTTP traffic.
+ * This file is intentionally separate from app.ts so tests can import
+ * the app without triggering a server start or worker spawn.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const app_js_1 = require("./app.js");
+const index_js_1 = require("./db/index.js");
+const ingestWorker_js_1 = require("./workers/ingestWorker.js");
+const ingestQueue_js_1 = require("./queues/ingestQueue.js");
+const redis_js_1 = require("./queues/redis.js");
+const seedService_js_1 = require("./services/seedService.js");
+const demoSeed_js_1 = require("./services/demoSeed.js");
+const PORT = Number(process.env.PORT) || 3000;
+// Initialise DB (creates file + runs migrations) before accepting traffic
+(0, index_js_1.getDb)();
+// Pre-fill with demo data if the DB is empty (first-run experience)
+const defaultTeamId = process.env.DEFAULT_TEAM_ID;
+(0, demoSeed_js_1.seedDemoData)(defaultTeamId);
+// Start background BullMQ worker
+(0, ingestWorker_js_1.startIngestWorker)();
+const server = app_js_1.app.listen(PORT, () => {
+    console.log(`⚡ KA-CHOW server running at http://localhost:${PORT}`);
+    console.log(`   Ingest:    POST http://localhost:${PORT}/api/ingest/repo`);
+    console.log(`   SSE:       GET  http://localhost:${PORT}/api/ingest/status/:jobId`);
+    console.log(`   Frontend:  http://localhost:5173`);
+    // Auto-seed knowledge graph from SEED_REPO_URL (non-blocking)
+    void (0, seedService_js_1.seedOnStartup)();
+});
+// Graceful shutdown — drain BullMQ worker before exiting
+async function shutdown(signal) {
+    console.log(`\n[KA-CHOW] Received ${signal}, shutting down gracefully...`);
+    server.close(async () => {
+        await (0, ingestWorker_js_1.stopIngestWorker)();
+        await (0, ingestQueue_js_1.closeIngestQueue)();
+        await (0, redis_js_1.closeRedis)();
+        console.log('[KA-CHOW] Shutdown complete.');
+        process.exit(0);
+    });
+}
+process.on('SIGTERM', () => void shutdown('SIGTERM'));
+process.on('SIGINT', () => void shutdown('SIGINT'));
+//# sourceMappingURL=server.js.map