kodingo-cli 1.3.4 → 1.3.5

package/dist/__tests__/inference.test.js

@@ -0,0 +1,78 @@
+"use strict";
+/**
+ * Real tests for adapters/ai/inference.ts's auth fix — build brief "Item 8
+ * — the temporal lobe", 2026-10-01.
+ *
+ * FINDING this closes: inferDecisionSummary (the git-commit-triggered
+ * capture surface, via cloud-event-port.ts/db-event-port.ts) was calling
+ * POST /infer with no auth header at all — every real call would 401 and
+ * silently fall back to the non-LLM template text, meaning this surface
+ * never actually reached the shared, semantically-reasoning-enriched
+ * prompt built into routes/infer.ts (kodingo-api). These tests prove the
+ * real fix: a real token now reaches the request as X-Kodingo-Token, and
+ * the existing, honest fallback behavior is completely unchanged when no
+ * token is available.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_test_1 = require("node:test");
+const strict_1 = __importDefault(require("node:assert/strict"));
+const inference_1 = require("../adapters/ai/inference");
+(0, node_test_1.describe)("inferDecisionSummary — real auth fix", () => {
+    const originalFetch = globalThis.fetch;
+    (0, node_test_1.afterEach)(() => {
+        globalThis.fetch = originalFetch;
+    });
+    (0, node_test_1.it)("sends the real X-Kodingo-Token header when a real token is available", async () => {
+        let capturedHeaders;
+        let capturedUrl;
+        globalThis.fetch = (async (url, init) => {
+            capturedUrl = String(url);
+            capturedHeaders = init.headers;
+            return new Response(JSON.stringify({ title: "t", content: "A real, LLM-authored decision summary.", type: "decision", tags: [] }), { status: 200 });
+        });
+        const result = await (0, inference_1.inferDecisionSummary)({
+            diff: "commit abc1234\n+ real change",
+            changedFiles: ["src/real.ts"],
+            symbol: "realFunction",
+            commitMessage: "real commit",
+            repoName: "real-repo",
+            token: "real-project-token",
+            apiUrl: "https://example.invalid",
+        });
+        strict_1.default.equal(result, "A real, LLM-authored decision summary.");
+        strict_1.default.equal(capturedUrl, "https://example.invalid/infer");
+        strict_1.default.equal(capturedHeaders?.["X-Kodingo-Token"], "real-project-token");
+    });
+    (0, node_test_1.it)("falls back to the honest template — never calls the network at all — when no real token is available (the pre-existing, unchanged behavior)", async () => {
+        let fetchCalled = false;
+        globalThis.fetch = (async () => {
+            fetchCalled = true;
+            throw new Error("should never be called without a real token");
+        });
+        const result = await (0, inference_1.inferDecisionSummary)({
+            diff: "commit abc1234ff\n+ real change",
+            changedFiles: ["src/a.ts", "src/b.ts"],
+            symbol: "realFunction",
+            commitMessage: "a real commit message",
+            repoName: "real-repo",
+        });
+        strict_1.default.equal(fetchCalled, false);
+        strict_1.default.match(result, /Changes to realFunction across 2 file\(s\) in commit abc1234f/);
+        strict_1.default.match(result, /a real commit message/);
+    });
+    (0, node_test_1.it)("falls back honestly when the real request itself fails (e.g. a genuine 401)", async () => {
+        globalThis.fetch = (async () => new Response("", { status: 401 }));
+        const result = await (0, inference_1.inferDecisionSummary)({
+            diff: "commit def5678\n+ change",
+            changedFiles: ["src/x.ts"],
+            symbol: "x",
+            commitMessage: "msg",
+            repoName: "real-repo",
+            token: "a-token-the-server-happens-to-reject",
+        });
+        strict_1.default.match(result, /Changes to x across 1 file\(s\)/);
+    });
+});

package/dist/adapters/ai/inference.js

@@ -6,9 +6,12 @@ const KODINGO_API_URL = process.env.KODINGO_API_URL ?? "https://kodingo-api.onre
 async function inferDecisionSummary(input) {
     try {
         const code = input.diff.slice(0, 2000);
-        const res = await fetch(`${KODINGO_API_URL}/infer`, {
+        if (!input.token)
+            return buildFallback(input);
+        const apiUrl = input.apiUrl ?? KODINGO_API_URL;
+        const res = await fetch(`${apiUrl}/infer`, {
             method: "POST",
-            headers: { "Content-Type": "application/json" },
+            headers: { "Content-Type": "application/json", "X-Kodingo-Token": input.token },
             body: JSON.stringify({ symbol: input.symbol, code }),
         });
         if (!res.ok) {

package/dist/commands/scan-git.js

@@ -15,23 +15,8 @@ const db_event_port_1 = require("../ports/db-event-port");
 const cloud_event_port_1 = require("../ports/cloud-event-port");
 const persistence_config_2 = require("../utils/persistence-config");
 const repo_identity_1 = require("../utils/repo-identity");
-const API_BASE_DEFAULT = "https://kodingo-api.onrender.com";
-function getCredentials(repoRoot) {
-    const config = (0, persistence_config_1.readConfig)();
-    const normRoot = repoRoot.replace(/\/+$/, "");
-    let wsEntry = config.workspaces?.[normRoot] ?? config.workspaces?.[normRoot + "/"];
-    // Walk parent directories
-    let current = normRoot;
-    while (!wsEntry && current !== path_1.default.dirname(current)) {
-        current = path_1.default.dirname(current);
-        wsEntry = config.workspaces?.[current] ?? config.workspaces?.[current + "/"];
-    }
-    const token = wsEntry?.token ?? "";
-    const apiUrl = wsEntry?.apiUrl ?? config.apiUrl ?? API_BASE_DEFAULT;
-    return { token, apiUrl };
-}
 async function detectContextDecay(repoRoot, changedFiles, repoName) {
-    const { token, apiUrl } = getCredentials(repoRoot);
+    const { token, apiUrl } = (0, persistence_config_1.getCredentials)(repoRoot);
     if (!token)
         return;
     for (const filePath of changedFiles) {
@@ -106,7 +91,7 @@ async function scanGitCommand(options) {
     console.log(`Git scan complete (latest commit) for repo: ${repoRoot} commit: ${commitHash.slice(0, 8)}`);
     // Send code_change signals for functions touched in this commit that already have memory
     try {
-        const { token, apiUrl } = getCredentials(repoRoot);
+        const { token, apiUrl } = (0, persistence_config_1.getCredentials)(repoRoot);
         const diffOutput = await git.diff([`${commitHash}^`, commitHash, '--name-only']).catch(() => '');
         const commitChangedFiles = diffOutput.split('\n').filter(Boolean).map((f) => path_1.default.join(repoRoot, f)).filter((f) => /\.(ts|tsx|js|jsx|py|go|rs|php|java|kt|rb)$/.test(f));
         if (token && commitChangedFiles.length > 0) {

package/dist/ports/cloud-event-port.js

@@ -7,6 +7,7 @@ exports.CloudEventPort = void 0;
 const kodingo_core_1 = require("kodingo-core");
 const persistence_config_1 = require("../utils/persistence-config");
 const inference_1 = require("../adapters/ai/inference");
+const persistence_config_2 = require("../utils/persistence-config");
 const path_1 = __importDefault(require("path"));
 /**
  * EventPort implementation that persists via getPersistence().
@@ -152,6 +153,7 @@ class CloudEventPort {
         const filePaths = extractFilePaths(filesChanged);
         const repoName = path_1.default.basename(this.repoPath);
         const shortHash = String(commitHash).slice(0, 8);
+        const { token, apiUrl } = (0, persistence_config_2.getCredentials)(this.repoPath);
         const content = await (0, inference_1.inferDecisionSummary)({
             diff: typeof summary?.rawDiff === "string"
                 ? summary.rawDiff
@@ -160,6 +162,8 @@ class CloudEventPort {
             symbol: symbol ?? "unknown",
             commitMessage: decision.rationale ?? "",
             repoName,
+            token,
+            apiUrl,
         });
         const title = symbol
             ? `Decision: changes to ${symbol}`

package/dist/ports/db-event-port.js

@@ -7,6 +7,7 @@ exports.DbEventPort = void 0;
 const kodingo_core_1 = require("kodingo-core");
 const memory_persistence_1 = require("../adapters/db-adapter/memory-persistence");
 const inference_1 = require("../adapters/ai/inference");
+const persistence_config_1 = require("../utils/persistence-config");
 const path_1 = __importDefault(require("path"));
 /**
  * Minimal EventPort implementation for the CLI.
@@ -113,6 +114,7 @@ class DbEventPort {
         const filePaths = extractFilePaths(filesChanged);
         const repoName = path_1.default.basename(this.repoPath);
         const shortHash = String(commitHash).slice(0, 8);
+        const { token, apiUrl } = (0, persistence_config_1.getCredentials)(this.repoPath);
         const content = await (0, inference_1.inferDecisionSummary)({
             diff: typeof summary?.rawDiff === "string"
                 ? summary.rawDiff
@@ -121,6 +123,8 @@ class DbEventPort {
             symbol: symbol ?? "unknown",
             commitMessage: decision.rationale ?? "",
             repoName,
+            token,
+            apiUrl,
         });
         const title = symbol
             ? `Decision: changes to ${symbol}`

package/dist/utils/persistence-config.js

@@ -9,6 +9,7 @@ exports.writeConfig = writeConfig;
 exports.writeWorkspaceConfig = writeWorkspaceConfig;
 exports.readWorkspaceConfig = readWorkspaceConfig;
 exports.isCloudMode = isCloudMode;
+exports.getCredentials = getCredentials;
 exports.getPersistence = getPersistence;
 /**
  * Persistence config switcher.
@@ -66,6 +67,32 @@ function readWorkspaceConfig(repoPath) {
 function isCloudMode() {
     return readConfig().mode === "cloud";
 }
+const API_BASE_DEFAULT = "https://kodingo-api.onrender.com";
+/**
+ * Real, workspace-scoped project credentials, walking up to parent
+ * directories when the exact repoRoot isn't a registered workspace key.
+ * Moved here from scan-git.ts (build brief "Item 8 — the temporal lobe",
+ * 2026-10-01) — it originally lived there as a private helper, but
+ * cloud-event-port.ts/db-event-port.ts now need this SAME real lookup too
+ * (see those files' own doc comments — inferDecisionSummary was calling
+ * POST /infer with no auth header at all). Importing it back from
+ * scan-git.ts would create a real circular dependency (scan-git.ts already
+ * imports both event-port classes); this lower-level module has no such
+ * cycle. Zero behavior change from the original — a pure relocation.
+ */
+function getCredentials(repoRoot) {
+    const config = readConfig();
+    const normRoot = repoRoot.replace(/\/+$/, "");
+    let wsEntry = config.workspaces?.[normRoot] ?? config.workspaces?.[normRoot + "/"];
+    let current = normRoot;
+    while (!wsEntry && current !== node_path_1.default.dirname(current)) {
+        current = node_path_1.default.dirname(current);
+        wsEntry = config.workspaces?.[current] ?? config.workspaces?.[current + "/"];
+    }
+    const token = wsEntry?.token ?? "";
+    const apiUrl = wsEntry?.apiUrl ?? config.apiUrl ?? API_BASE_DEFAULT;
+    return { token, apiUrl };
+}
 /**
  * Returns the correct persistence adapter based on config.
  * Import this in commands instead of importing the adapters directly.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kodingo-cli",
-  "version": "1.3.4",
+  "version": "1.3.5",
   "description": "Kodingo CLI",
   "license": "MIT",
   "private": false,