kandev 0.52.0 → 0.53.0

package/dist/backup.js

@@ -0,0 +1,98 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isProductionDb = isProductionDb;
+exports.backupProductionDb = backupProductionDb;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+// Prefix for dev-prod-db automatic snapshots. Distinct from the backend's
+// "kandev-*" auto-snapshots and "manual-*" user snapshots so the families
+// don't interfere with each other's retention policies.
+const BACKUP_PREFIX = "dev-prod-db-";
+const BACKUP_SUFFIX = ".db";
+const MAX_BACKUPS = 5;
+/**
+ * Returns true if the given dbPath points to a non-dev database that should
+ * be backed up before running dev mode. Dev-isolated databases live under
+ * <repo>/.kandev-dev/ and are considered disposable.
+ */
+function isProductionDb(dbPath) {
+    const normalized = node_path_1.default.normalize(dbPath);
+    const segments = normalized.split(node_path_1.default.sep).filter(Boolean);
+    return !segments.includes(".kandev-dev");
+}
+/**
+ * Backs up the database at dbPath to <data-dir>/backups/ before dev mode
+ * runs against it. Keeps only the newest MAX_BACKUPS snapshots.
+ *
+ * Returns the path of the created backup, or null if the DB didn't exist
+ * or no backup was needed.
+ *
+ * The optional `homeDir` parameter is exposed for tests so they can redirect
+ * the backup location without mocking os.homedir(). The optional `now`
+ * parameter lets tests pass an explicit timestamp so back-to-back calls in
+ * the same millisecond produce distinct filenames + mtimes without sleeping.
+ */
+function backupProductionDb(dbPath, homeDir, now) {
+    if (!node_fs_1.default.existsSync(dbPath)) {
+        return null;
+    }
+    const root = homeDir ?? node_os_1.default.homedir();
+    // Backups are always placed under ~/.kandev/data/backups/ (or the
+    // caller-supplied homeDir in tests), even when dbPath points elsewhere.
+    // This matches the dev-prod-db default flow; custom KANDEV_DATABASE_PATH
+    // values are advanced usage where the user is responsible for backup location.
+    const dataDir = node_path_1.default.join(root, ".kandev", "data");
+    const backupDir = node_path_1.default.join(dataDir, "backups");
+    node_fs_1.default.mkdirSync(backupDir, { recursive: true });
+    const stamp = now ?? new Date();
+    const ts = stamp.toISOString().replace(/[:.]/g, "");
+    const name = `${BACKUP_PREFIX}${ts}${BACKUP_SUFFIX}`;
+    const dest = node_path_1.default.join(backupDir, name);
+    node_fs_1.default.copyFileSync(dbPath, dest);
+    // Stamp both atime + mtime so pruning (which sorts by mtime) is deterministic.
+    node_fs_1.default.utimesSync(dest, stamp, stamp);
+    pruneBackups(backupDir, MAX_BACKUPS);
+    return dest;
+}
+/**
+ * Keeps only the `keep` newest dev-prod-db backup files in `dir`, deleting
+ * older ones. Non-matching files are left untouched.
+ */
+function pruneBackups(dir, keep) {
+    let entries;
+    try {
+        entries = node_fs_1.default.readdirSync(dir, { withFileTypes: true });
+    }
+    catch {
+        return;
+    }
+    const files = entries
+        .filter((e) => e.isFile() && e.name.startsWith(BACKUP_PREFIX) && e.name.endsWith(BACKUP_SUFFIX))
+        .map((e) => {
+        const fullPath = node_path_1.default.join(dir, e.name);
+        try {
+            const stat = node_fs_1.default.statSync(fullPath);
+            return { path: fullPath, mtime: stat.mtime };
+        }
+        catch {
+            return null;
+        }
+    })
+        .filter((f) => f !== null);
+    if (files.length <= keep) {
+        return;
+    }
+    files.sort((a, b) => b.mtime.getTime() - a.mtime.getTime());
+    for (const f of files.slice(keep)) {
+        try {
+            node_fs_1.default.unlinkSync(f.path);
+        }
+        catch {
+            // Non-critical: don't fail the launch if one old backup can't be removed.
+        }
+    }
+}

package/dist/dev.js

@@ -8,6 +8,7 @@ exports.resolveDevBackendEnv = resolveDevBackendEnv;
 const node_child_process_1 = require("node:child_process");
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
+const backup_1 = require("./backup");
 const constants_1 = require("./constants");
 const health_1 = require("./health");
 const kandev_env_1 = require("./kandev-env");
@@ -17,6 +18,22 @@ const web_1 = require("./web");
 async function runDev({ repoRoot, backendPort, webPort }) {
     const ports = await (0, shared_1.pickPorts)(backendPort, webPort);
     const { dbPath, extra } = resolveDevBackendEnv(repoRoot);
+    if ((0, backup_1.isProductionDb)(dbPath)) {
+        try {
+            const backupPath = (0, backup_1.backupProductionDb)(dbPath);
+            if (backupPath) {
+                const name = node_path_1.default.basename(backupPath);
+                console.log(`[kandev] backed up production db → ${name}`);
+            }
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            // Abort rather than continue: the backup exists precisely to protect the
+            // production db before dev mode touches it. Proceeding on failure would
+            // remove the safety guarantee that justified introducing this guard.
+            throw new Error(`failed to back up production db (${message}); aborting dev startup`);
+        }
+    }
     const backendEnv = (0, shared_1.buildBackendEnv)({ ports, extra });
     const webEnv = (0, shared_1.buildWebEnv)({ ports, debug: true });
     const logLevel = process.env.KANDEV_LOGGING_LEVEL?.trim() || process.env.KANDEV_LOG_LEVEL?.trim() || "info";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kandev",
-  "version": "0.52.0",
+  "version": "0.53.0",
   "private": false,
   "description": "Launcher for Kandev — manage tasks, orchestrate agents, review changes, and ship value",
   "license": "AGPL-3.0-only",
@@ -22,11 +22,11 @@
     "npm": ">=7"
   },
   "optionalDependencies": {
-    "@kdlbs/runtime-linux-x64": "0.52.0",
-    "@kdlbs/runtime-linux-arm64": "0.52.0",
-    "@kdlbs/runtime-darwin-x64": "0.52.0",
-    "@kdlbs/runtime-darwin-arm64": "0.52.0",
-    "@kdlbs/runtime-win32-x64": "0.52.0"
+    "@kdlbs/runtime-linux-x64": "0.53.0",
+    "@kdlbs/runtime-linux-arm64": "0.53.0",
+    "@kdlbs/runtime-darwin-x64": "0.53.0",
+    "@kdlbs/runtime-darwin-arm64": "0.53.0",
+    "@kdlbs/runtime-win32-x64": "0.53.0"
   },
   "dependencies": {
     "tar": "^7.5.11",