orbital-command 0.1.4 → 0.3.0

package/dist/server/server/__tests__/scope-routes.test.js

@@ -0,0 +1,137 @@
+import { describe, it, expect, beforeAll, afterAll, vi } from 'vitest';
+import express from 'express';
+import request from 'supertest';
+import { createScopeRoutes } from '../routes/scope-routes.js';
+import { WorkflowEngine } from '../../shared/workflow-engine.js';
+import { DEFAULT_CONFIG } from '../../shared/__fixtures__/workflow-configs.js';
+import { createTestDb } from './helpers/db.js';
+import { createMockEmitter } from './helpers/mock-emitter.js';
+function makeScope(overrides) {
+    return {
+        title: `Scope ${overrides.id}`,
+        slug: undefined,
+        status: 'backlog',
+        priority: null,
+        effort_estimate: null,
+        category: null,
+        tags: [],
+        blocked_by: [],
+        blocks: [],
+        file_path: `/scopes/backlog/${String(overrides.id).padStart(3, '0')}-test.md`,
+        created_at: null,
+        updated_at: null,
+        raw_content: '',
+        sessions: {},
+        is_ghost: false,
+        favourite: false,
+        ...overrides,
+    };
+}
+describe('scope-routes', () => {
+    let app;
+    let cleanup;
+    const testScopes = [
+        makeScope({ id: 1, title: 'First Scope' }),
+        makeScope({ id: 2, title: 'Second Scope' }),
+    ];
+    const mockScopeService = {
+        getAll: vi.fn().mockReturnValue(testScopes),
+        getById: vi.fn((id) => testScopes.find(s => s.id === id)),
+        updateStatus: vi.fn().mockReturnValue({ ok: true }),
+        updateFields: vi.fn().mockReturnValue({ ok: true }),
+        createIdeaFile: vi.fn().mockReturnValue({ slug: 'new-idea', title: 'New Idea' }),
+        updateIdeaFile: vi.fn().mockReturnValue(true),
+        deleteIdeaFile: vi.fn().mockReturnValue(true),
+        promoteIdea: vi.fn().mockReturnValue({ id: 10, filePath: '/scopes/planning/010-new.md', title: 'New', description: '' }),
+        approveGhostIdea: vi.fn().mockReturnValue(true),
+    };
+    const mockReadinessService = {
+        getReadiness: vi.fn((id) => id === 1 ? { scope_id: 1, transitions: [], blockers: [] } : null),
+    };
+    beforeAll(() => {
+        const { db, cleanup: c } = createTestDb();
+        cleanup = c;
+        const emitter = createMockEmitter();
+        const engine = new WorkflowEngine(DEFAULT_CONFIG);
+        const router = createScopeRoutes({
+            db,
+            io: emitter,
+            scopeService: mockScopeService,
+            readinessService: mockReadinessService,
+            projectRoot: '/tmp/test-project',
+            projectName: 'Test',
+            engine,
+        });
+        app = express();
+        app.use(express.json());
+        app.use('/api/orbital', router);
+    });
+    afterAll(() => cleanup?.());
+    describe('GET /scopes', () => {
+        it('returns all scopes', async () => {
+            const res = await request(app).get('/api/orbital/scopes');
+            expect(res.status).toBe(200);
+            expect(res.body).toHaveLength(2);
+        });
+    });
+    describe('GET /scopes/:id', () => {
+        it('returns scope by ID', async () => {
+            const res = await request(app).get('/api/orbital/scopes/1');
+            expect(res.status).toBe(200);
+            expect(res.body.id).toBe(1);
+        });
+        it('returns 404 for unknown scope', async () => {
+            const res = await request(app).get('/api/orbital/scopes/999');
+            expect(res.status).toBe(404);
+        });
+    });
+    describe('PATCH /scopes/:id', () => {
+        it('updates scope fields', async () => {
+            const res = await request(app)
+                .patch('/api/orbital/scopes/1')
+                .send({ title: 'Updated Title' });
+            expect(res.status).toBe(200);
+            expect(mockScopeService.updateFields).toHaveBeenCalled();
+        });
+    });
+    describe('PATCH /scopes/bulk/status', () => {
+        it('bulk updates scope statuses', async () => {
+            const res = await request(app)
+                .patch('/api/orbital/scopes/bulk/status')
+                .send({ scopes: [{ id: 1, status: 'implementing' }] });
+            expect(res.status).toBe(200);
+        });
+    });
+    describe('POST /ideas', () => {
+        it('creates idea with title', async () => {
+            const res = await request(app)
+                .post('/api/orbital/ideas')
+                .send({ title: 'New Idea', description: 'A description' });
+            expect(res.status).toBe(201);
+            expect(res.body.slug).toBe('new-idea');
+        });
+        it('rejects empty title', async () => {
+            const res = await request(app)
+                .post('/api/orbital/ideas')
+                .send({ title: '  ', description: '' });
+            expect(res.status).toBe(400);
+        });
+    });
+    describe('DELETE /ideas/:slug', () => {
+        it('deletes idea', async () => {
+            const res = await request(app).delete('/api/orbital/ideas/test-idea');
+            expect(res.status).toBe(200);
+        });
+    });
+    describe('GET /scopes/:id/readiness', () => {
+        it('returns readiness for known scope', async () => {
+            const res = await request(app).get('/api/orbital/scopes/1/readiness');
+            expect(res.status).toBe(200);
+            expect(res.body.scope_id).toBe(1);
+        });
+        it('returns 404 for unknown scope', async () => {
+            const res = await request(app).get('/api/orbital/scopes/999/readiness');
+            expect(res.status).toBe(404);
+        });
+    });
+});

package/dist/server/server/__tests__/sprint-routes.test.js

@@ -0,0 +1,102 @@
+import { describe, it, expect, beforeAll, vi } from 'vitest';
+import express from 'express';
+import request from 'supertest';
+import { createSprintRoutes } from '../routes/sprint-routes.js';
+describe('sprint-routes', () => {
+    let app;
+    const mockSprintService = {
+        create: vi.fn().mockReturnValue({ id: 1, name: 'Sprint 1', status: 'assembling', scope_ids: [], scopes: [], layers: null, progress: { pending: 0, in_progress: 0, completed: 0, failed: 0, skipped: 0 } }),
+        getAll: vi.fn().mockReturnValue([]),
+        getById: vi.fn((id) => id === 1 ? { id: 1, name: 'Sprint 1', status: 'assembling', scope_ids: [], scopes: [] } : null),
+        rename: vi.fn().mockReturnValue(true),
+        delete: vi.fn().mockReturnValue(true),
+        addScopes: vi.fn().mockReturnValue({ added: [1, 2], unmet_dependencies: [] }),
+        removeScopes: vi.fn().mockReturnValue(true),
+    };
+    const mockSprintOrchestrator = {
+        startSprint: vi.fn().mockReturnValue({ ok: true, layers: [[1], [2]] }),
+        cancelSprint: vi.fn().mockReturnValue({ ok: true }),
+        getExecutionGraph: vi.fn().mockReturnValue({ nodes: [], edges: [] }),
+    };
+    const mockBatchOrchestrator = {
+        dispatch: vi.fn().mockReturnValue({ ok: true }),
+    };
+    beforeAll(() => {
+        const router = createSprintRoutes({
+            sprintService: mockSprintService,
+            sprintOrchestrator: mockSprintOrchestrator,
+            batchOrchestrator: mockBatchOrchestrator,
+        });
+        app = express();
+        app.use(express.json());
+        app.use('/api/orbital', router);
+    });
+    describe('POST /sprints', () => {
+        it('creates sprint with name (201)', async () => {
+            const res = await request(app)
+                .post('/api/orbital/sprints')
+                .send({ name: 'New Sprint' });
+            expect(res.status).toBe(201);
+            expect(mockSprintService.create).toHaveBeenCalledWith('New Sprint', expect.anything());
+        });
+        it('rejects empty name (400)', async () => {
+            const res = await request(app)
+                .post('/api/orbital/sprints')
+                .send({ name: '  ' });
+            expect(res.status).toBe(400);
+        });
+    });
+    describe('GET /sprints', () => {
+        it('returns sprint list', async () => {
+            const res = await request(app).get('/api/orbital/sprints');
+            expect(res.status).toBe(200);
+            expect(Array.isArray(res.body)).toBe(true);
+        });
+        it('passes status filter', async () => {
+            await request(app).get('/api/orbital/sprints?status=assembling');
+            expect(mockSprintService.getAll).toHaveBeenCalledWith('assembling', undefined);
+        });
+    });
+    describe('PATCH /sprints/:id', () => {
+        it('renames sprint', async () => {
+            const res = await request(app)
+                .patch('/api/orbital/sprints/1')
+                .send({ name: 'Renamed' });
+            expect(res.status).toBe(200);
+        });
+        it('rejects missing name (400)', async () => {
+            const res = await request(app)
+                .patch('/api/orbital/sprints/1')
+                .send({});
+            expect(res.status).toBe(400);
+        });
+    });
+    describe('DELETE /sprints/:id', () => {
+        it('deletes sprint', async () => {
+            const res = await request(app).delete('/api/orbital/sprints/1');
+            expect(res.status).toBe(200);
+        });
+    });
+    describe('POST /sprints/:id/scopes', () => {
+        it('adds scopes to sprint', async () => {
+            const res = await request(app)
+                .post('/api/orbital/sprints/1/scopes')
+                .send({ scope_ids: [1, 2] });
+            expect(res.status).toBe(200);
+        });
+        it('rejects empty scope_ids (400)', async () => {
+            const res = await request(app)
+                .post('/api/orbital/sprints/1/scopes')
+                .send({ scope_ids: [] });
+            expect(res.status).toBe(400);
+        });
+    });
+    describe('POST /sprints/:id/dispatch', () => {
+        it('dispatches sprint', async () => {
+            const res = await request(app)
+                .post('/api/orbital/sprints/1/dispatch')
+                .send({});
+            expect(res.status).toBe(200);
+        });
+    });
+});

package/dist/server/server/__tests__/workflow-routes.test.js

@@ -0,0 +1,107 @@
+import { describe, it, expect, beforeAll, vi } from 'vitest';
+import express from 'express';
+import request from 'supertest';
+import { createWorkflowRoutes } from '../routes/workflow-routes.js';
+import { WorkflowEngine } from '../../shared/workflow-engine.js';
+import { DEFAULT_CONFIG, MINIMAL_CONFIG } from '../../shared/__fixtures__/workflow-configs.js';
+describe('workflow-routes', () => {
+    let app;
+    const engine = new WorkflowEngine(DEFAULT_CONFIG);
+    const mockWorkflowService = {
+        getActive: vi.fn().mockReturnValue(DEFAULT_CONFIG),
+        updateActive: vi.fn().mockReturnValue({ valid: true, errors: [], warnings: [] }),
+        listPresets: vi.fn().mockReturnValue([{ name: 'default', createdAt: '2026-01-01', listCount: 7, edgeCount: 14 }]),
+        savePreset: vi.fn(),
+        getPreset: vi.fn((name) => name === 'default' ? DEFAULT_CONFIG : (() => { throw new Error('Not found'); })()),
+        deletePreset: vi.fn((name) => { if (name === 'default')
+            throw new Error('Cannot delete default'); }),
+        previewMigration: vi.fn().mockReturnValue({ orphanedScopes: [], addedLists: [], removedLists: [], scopeMoves: [] }),
+        applyMigration: vi.fn().mockReturnValue({ orphanedScopes: [], addedLists: [], removedLists: [], scopeMoves: [] }),
+        getEngine: vi.fn().mockReturnValue(engine),
+    };
+    beforeAll(() => {
+        const router = createWorkflowRoutes({
+            workflowService: mockWorkflowService,
+            projectRoot: '/tmp/test-project',
+        });
+        app = express();
+        app.use(express.json());
+        app.use('/api/orbital', router);
+    });
+    describe('GET /workflow', () => {
+        it('returns active workflow config', async () => {
+            const res = await request(app).get('/api/orbital/workflow');
+            expect(res.status).toBe(200);
+            expect(res.body.success).toBe(true);
+            expect(res.body.data.name).toBe('Default Workflow');
+        });
+    });
+    describe('PUT /workflow', () => {
+        it('updates workflow config', async () => {
+            const res = await request(app)
+                .put('/api/orbital/workflow')
+                .send(MINIMAL_CONFIG);
+            expect(res.status).toBe(200);
+        });
+        it('returns 400 for invalid config', async () => {
+            mockWorkflowService.updateActive.mockReturnValueOnce({ valid: false, errors: ['Missing lists'], warnings: [] });
+            const res = await request(app)
+                .put('/api/orbital/workflow')
+                .send({ version: 1, name: 'Bad', lists: [], edges: [] });
+            expect(res.status).toBe(400);
+        });
+    });
+    describe('GET /workflow/presets', () => {
+        it('returns preset list', async () => {
+            const res = await request(app).get('/api/orbital/workflow/presets');
+            expect(res.status).toBe(200);
+            expect(res.body.success).toBe(true);
+            expect(Array.isArray(res.body.data)).toBe(true);
+        });
+    });
+    describe('POST /workflow/presets', () => {
+        it('saves preset with valid name', async () => {
+            const res = await request(app)
+                .post('/api/orbital/workflow/presets')
+                .send({ name: 'my-preset' });
+            expect(res.status).toBe(200);
+            expect(mockWorkflowService.savePreset).toHaveBeenCalledWith('my-preset');
+        });
+        it('rejects missing name (400)', async () => {
+            const res = await request(app)
+                .post('/api/orbital/workflow/presets')
+                .send({});
+            expect(res.status).toBe(400);
+        });
+    });
+    describe('DELETE /workflow/presets/:name', () => {
+        it('rejects deleting default preset', async () => {
+            const res = await request(app).delete('/api/orbital/workflow/presets/default');
+            expect(res.status).toBe(400);
+        });
+    });
+    describe('GET /workflow/hooks', () => {
+        it('returns hooks with edge mapping', async () => {
+            const res = await request(app).get('/api/orbital/workflow/hooks');
+            expect(res.status).toBe(200);
+            expect(res.body.success).toBe(true);
+        });
+    });
+    describe('GET /workflow/hooks/:id/source', () => {
+        it('rejects path traversal attempts', async () => {
+            // The engine has hooks with targets like '.claude/hooks/blocker-check.sh'
+            // Trying to traverse out should fail
+            const res = await request(app).get('/api/orbital/workflow/hooks/../../etc/passwd/source');
+            expect([400, 404]).toContain(res.status);
+        });
+    });
+    describe('POST /workflow/preview', () => {
+        it('returns migration preview', async () => {
+            const res = await request(app)
+                .post('/api/orbital/workflow/preview')
+                .send(MINIMAL_CONFIG);
+            expect(res.status).toBe(200);
+            expect(res.body.success).toBe(true);
+        });
+    });
+});

package/dist/server/server/config-migrator.js

@@ -0,0 +1,138 @@
+/**
+ * Config migration runner for orbital.config.json.
+ *
+ * Applies incremental, idempotent migrations when upgrading between
+ * package versions. Also fills schema defaults for new fields that
+ * don't require explicit migration logic.
+ */
+import fs from 'fs';
+// ─── Migration Registry ─────────────────────────────────────
+/**
+ * All config migrations, ordered by target version.
+ *
+ * Rules:
+ * - Each migration MUST be idempotent (safe to run twice)
+ * - Each migration MUST check before applying (don't blindly overwrite)
+ * - ID format: "fromVersion->toVersion"
+ */
+const MIGRATIONS = [
+// Future migrations go here. Example:
+// {
+//   id: '0.2.0->0.3.0',
+//   description: 'Add notifications config section',
+//   migrate: (config) => {
+//     if (!('notifications' in config)) {
+//       config.notifications = { enabled: false };
+//     }
+//     return config;
+//   },
+// },
+];
+// ─── Schema Defaults ────────────────────────────────────────
+/** Default values from the schema, keyed by property path. */
+const SCHEMA_DEFAULTS = {
+    projectName: 'My Project',
+    scopesDir: 'scopes',
+    eventsDir: '.claude/orbital-events',
+    dbDir: '.claude/orbital',
+    configDir: '.claude/config',
+    serverPort: 4444,
+    clientPort: 4445,
+    logLevel: 'info',
+    categories: ['feature', 'bugfix', 'refactor', 'infrastructure', 'docs'],
+};
+const NESTED_DEFAULTS = {
+    terminal: {
+        adapter: 'auto',
+        profilePrefix: 'Orbital',
+    },
+    claude: {
+        executable: 'claude',
+        flags: ['--dangerously-skip-permissions'],
+    },
+    commands: {
+        typeCheck: null,
+        lint: null,
+        build: null,
+        test: null,
+        validateTemplates: null,
+        validateDocs: null,
+        checkRules: null,
+    },
+};
+/**
+ * Run all pending config migrations and fill schema defaults.
+ *
+ * @param configPath - Path to orbital.config.json
+ * @param appliedMigrations - IDs already recorded in the manifest
+ * @returns List of migration IDs that were applied
+ */
+export function migrateConfig(configPath, appliedMigrations) {
+    const result = { applied: [], defaultsFilled: [], errors: [] };
+    if (!fs.existsSync(configPath))
+        return result;
+    let config;
+    try {
+        config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
+    }
+    catch {
+        result.errors.push('Failed to parse orbital.config.json');
+        return result;
+    }
+    const appliedSet = new Set(appliedMigrations);
+    // Apply explicit migrations in order
+    for (const migration of MIGRATIONS) {
+        if (appliedSet.has(migration.id))
+            continue;
+        try {
+            config = migration.migrate(config);
+            result.applied.push(migration.id);
+        }
+        catch (err) {
+            result.errors.push(`Migration ${migration.id} failed: ${String(err)}`);
+        }
+    }
+    // Fill schema defaults for missing top-level properties
+    for (const [key, defaultValue] of Object.entries(SCHEMA_DEFAULTS)) {
+        if (!(key in config)) {
+            config[key] = defaultValue;
+            result.defaultsFilled.push(key);
+        }
+    }
+    // Fill nested defaults
+    for (const [section, defaults] of Object.entries(NESTED_DEFAULTS)) {
+        if (!(section in config)) {
+            config[section] = { ...defaults };
+            result.defaultsFilled.push(section);
+        }
+        else if (typeof config[section] === 'object' && config[section] !== null) {
+            const sectionObj = config[section];
+            for (const [key, defaultValue] of Object.entries(defaults)) {
+                if (!(key in sectionObj)) {
+                    sectionObj[key] = defaultValue;
+                    result.defaultsFilled.push(`${section}.${key}`);
+                }
+            }
+        }
+    }
+    // Write back if any changes were made
+    if (result.applied.length > 0 || result.defaultsFilled.length > 0) {
+        fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + '\n', 'utf-8');
+    }
+    return result;
+}
+/**
+ * Get all migration IDs that haven't been applied yet.
+ */
+export function getPendingMigrations(appliedMigrations) {
+    const appliedSet = new Set(appliedMigrations);
+    return MIGRATIONS
+        .filter(m => !appliedSet.has(m.id))
+        .map(m => m.id);
+}
+/**
+ * Get all registered migrations (for display/debug).
+ */
+export function getAllMigrations() {
+    return MIGRATIONS.map(m => ({ id: m.id, description: m.description }));
+}

package/dist/server/server/config.js

@@ -30,6 +30,11 @@ const DEFAULT_CONFIG = {
         checkRules: null,
     },
     logLevel: 'info',
+    telemetry: {
+        enabled: true,
+        url: '',
+        headers: {},
+    },
     categories: ['feature', 'bugfix', 'refactor', 'infrastructure', 'docs'],
     agents: [
         { id: 'attacker', label: 'Attacker', emoji: '\u{1F5E1}\u{FE0F}', color: '#ff1744' },
@@ -101,8 +106,11 @@ export function loadConfig(projectRoot) {
             log.warn('Failed to parse orbital.config.json — using defaults', { error: err.message });
         }
     }
-    // Merge with defaults
-    const projectName = userConfig.projectName ?? DEFAULT_CONFIG.projectName;
+    // Merge with defaults — derive project name from directory if not configured
+    const defaultProjectName = path.basename(root)
+        .replace(/[-_]+/g, ' ')
+        .replace(/\b\w/g, (c) => c.toUpperCase());
+    const projectName = userConfig.projectName ?? defaultProjectName;
     const scopesDir = path.resolve(root, userConfig.scopesDir ?? DEFAULT_CONFIG.scopesDir);
     const eventsDir = path.resolve(root, userConfig.eventsDir ?? DEFAULT_CONFIG.eventsDir);
     const dbDir = path.resolve(root, userConfig.dbDir ?? DEFAULT_CONFIG.dbDir);
@@ -124,6 +132,12 @@ export function loadConfig(projectRoot) {
     const logLevel = userConfig.logLevel ?? DEFAULT_CONFIG.logLevel;
     const categories = userConfig.categories ?? DEFAULT_CONFIG.categories;
     const agents = userConfig.agents ?? DEFAULT_CONFIG.agents;
+    const telemetry = {
+        ...DEFAULT_CONFIG.telemetry,
+        ...(userConfig.telemetry ?? {}),
+    };
+    if (process.env.ORBITAL_TELEMETRY === 'false')
+        telemetry.enabled = false;
     return {
         projectName,
         projectRoot: root,
@@ -139,6 +153,7 @@ export function loadConfig(projectRoot) {
         logLevel,
         categories,
         agents,
+        telemetry,
     };
 }
 // ─── Singleton ──────────────────────────────────────────────

package/dist/server/server/database.js

@@ -5,26 +5,37 @@ import { SCHEMA_DDL } from './schema.js';
 import { getConfig } from './config.js';
 import { createLogger } from './utils/logger.js';
 const log = createLogger('database');
+// ─── Factory (multi-project) ────────────────────────────────
+/**
+ * Open a project-scoped SQLite database at the given directory.
+ * Creates the directory if needed, applies schema DDL and migrations.
+ *
+ * Each call returns a NEW connection — callers manage their own lifecycle.
+ * This is the multi-project replacement for the getDatabase() singleton.
+ */
+export function openProjectDatabase(dbDir) {
+    fs.mkdirSync(dbDir, { recursive: true });
+    const file = path.join(dbDir, 'orbital.db');
+    const database = new Database(file);
+    log.info('Database initialized', { path: file });
+    database.pragma('journal_mode = WAL');
+    database.pragma('synchronous = NORMAL');
+    database.pragma('foreign_keys = ON');
+    database.exec(SCHEMA_DDL);
+    runMigrations(database);
+    return database;
+}
+// ─── Singleton (backward compat, used by index.ts) ──────────
 function getDbPaths() {
     const config = getConfig();
     return { dir: config.dbDir, file: path.join(config.dbDir, 'orbital.db') };
 }
 let db = null;
+/** @deprecated Use openProjectDatabase() for multi-project support. */
 export function getDatabase() {
     if (db)
         return db;
-    const { dir, file } = getDbPaths();
-    fs.mkdirSync(dir, { recursive: true });
-    db = new Database(file);
-    log.info('Database initialized', { path: file });
-    // Performance pragmas for a local dev tool
-    db.pragma('journal_mode = WAL');
-    db.pragma('synchronous = NORMAL');
-    db.pragma('foreign_keys = ON');
-    // Run schema migrations (SQLite db.exec, not child_process)
-    db.exec(SCHEMA_DDL);
-    // Incremental migrations for existing databases
-    runMigrations(db);
+    db = openProjectDatabase(getDbPaths().dir);
     return db;
 }
 /** Check if a table exists in the database */
@@ -44,6 +55,10 @@ function runMigrations(database) {
     if (!sessionCols.some((c) => c.name === 'action')) {
         database.exec('ALTER TABLE sessions ADD COLUMN action TEXT');
     }
+    // Migration 9: Add telemetry_sent_at column to sessions
+    if (!sessionCols.some((c) => c.name === 'telemetry_sent_at')) {
+        database.exec('ALTER TABLE sessions ADD COLUMN telemetry_sent_at TEXT');
+    }
     // Migration 8: Add batch group columns to sprints
     const sprintCols = database.pragma('table_info(sprints)');
     if (!sprintCols.some((c) => c.name === 'target_column')) {