postgresai 0.15.0-dev.10 → 0.15.0-dev.11

package/bin/postgres-ai.ts

@@ -14,7 +14,7 @@ import { startMcpServer } from "../lib/mcp-server";
 import { fetchIssues, fetchIssueComments, createIssueComment, fetchIssue, createIssue, updateIssue, updateIssueComment, fetchActionItem, fetchActionItems, createActionItem, updateActionItem, type ConfigChange } from "../lib/issues";
 import { fetchReports, fetchAllReports, fetchReportFiles, fetchReportFileData, renderMarkdownForTerminal, parseFlexibleDate } from "../lib/reports";
 import { resolveBaseUrls } from "../lib/util";
-import { uploadFile, downloadFile, buildMarkdownLink } from "../lib/storage";
+import { uploadFile, downloadFile, buildMarkdownLink, uploadAttachments, appendAttachmentsToContent } from "../lib/storage";
 import { applyInitPlan, applyUninitPlan, buildInitPlan, buildUninitPlan, checkCurrentUserPermissions, connectWithSslFallback, DEFAULT_MONITORING_USER, formatPermissionCheckMessages, KNOWN_PROVIDERS, redactPasswordsInSql, resolveAdminConnection, resolveMonitoringPassword, validateProvider, verifyInitSetup } from "../lib/init";
 import { SupabaseClient, resolveSupabaseConfig, extractProjectRefFromUrl, applyInitPlanViaSupabase, verifyInitSetupViaSupabase, fetchPoolerDatabaseUrl, type PgCompatibleError } from "../lib/supabase";
 import * as pkce from "../lib/pkce";
@@ -26,6 +26,17 @@ import { REPORT_GENERATORS, CHECK_INFO, generateAllReports } from "../lib/checku
 import { getCheckupEntry } from "../lib/checkup-dictionary";
 import { createCheckupReport, uploadCheckupReportJson, convertCheckupReportJsonToMarkdown, RpcError, formatRpcErrorForDisplay, withRetry } from "../lib/checkup-api";
 import { generateCheckSummary } from "../lib/checkup-summary";
+import {
+  type Instance,
+  InstancesParseError,
+  loadInstances,
+  buildInstance,
+  addInstanceToFile,
+  removeInstanceFromFile,
+  buildClientConfig,
+  sslOptionFromConnString,
+  warnIfLaxSslmode,
+} from "../lib/instances";
 
 // Node.js version check - require Node 18+
 // Node 14 reached EOL in April 2023, Node 16 in September 2023.
@@ -419,19 +430,6 @@ interface ConfigResult {
   apiKey: string;
 }
 
-/**
- * Instance configuration
- */
-interface Instance {
-  name: string;
-  conn_str?: string;
-  preset_metrics?: string;
-  custom_metrics?: any;
-  is_enabled?: boolean;
-  group?: string;
-  custom_tags?: Record<string, any>;
-}
-
 /**
  * Path resolution result
  */
@@ -2302,6 +2300,18 @@ const mon = program.command("mon").description("monitoring services management")
 mon
   .command("local-install")
   .description("install local monitoring stack (generate config, start services)")
+  .addHelpText(
+    "after",
+    [
+      "",
+      "Networking:",
+      "  Compose enables IPv6 on the project's default network so containers can",
+      "  reach IPv6-only databases (e.g. Supabase free-tier db.<ref>.supabase.co).",
+      "  Override on hosts whose Docker daemon cannot create an IPv6 network:",
+      "      PGAI_ENABLE_IPV6=false   (accepted: true|false|yes|no, lowercase)",
+      "",
+    ].join("\n"),
+  )
   .option("--demo", "demo mode with sample database", false)
   .option("--api-key <key>", "Postgres AI API key for automated report uploads")
   .option("--db-url <url>", "PostgreSQL connection URL to monitor")
@@ -2487,8 +2497,7 @@ mon
         const db = m[5];
         const instanceName = `${host}-${db}`.replace(/[^a-zA-Z0-9-]/g, "-");
 
-        const body = `- name: ${instanceName}\n  conn_str: ${connStr}\n  preset_metrics: full\n  custom_metrics:\n  is_enabled: true\n  group: default\n  custom_tags:\n    env: production\n    cluster: default\n    node_name: ${instanceName}\n    sink_type: ~sink_type~\n`;
-        fs.appendFileSync(instancesPath, body, "utf8");
+        addInstanceToFile(instancesPath, buildInstance(instanceName, connStr));
         console.log(`✓ Monitoring target '${instanceName}' added\n`);
 
         // Test connection
@@ -2496,7 +2505,8 @@ mon
         {
           let testClient: InstanceType<typeof Client> | null = null;
           try {
-            testClient = new Client({ connectionString: connStr, connectionTimeoutMillis: 10000 });
+            warnIfLaxSslmode(connStr);
+            testClient = new Client(buildClientConfig(connStr, { connectionTimeoutMillis: 10000 }));
             await testClient.connect();
             const result = await testClient.query("select version();");
             console.log("✓ Connection successful");
@@ -2535,8 +2545,7 @@ mon
               const db = m[5];
               const instanceName = `${host}-${db}`.replace(/[^a-zA-Z0-9-]/g, "-");
 
-              const body = `- name: ${instanceName}\n  conn_str: ${connStr}\n  preset_metrics: full\n  custom_metrics:\n  is_enabled: true\n  group: default\n  custom_tags:\n    env: production\n    cluster: default\n    node_name: ${instanceName}\n    sink_type: ~sink_type~\n`;
-              fs.appendFileSync(instancesPath, body, "utf8");
+              addInstanceToFile(instancesPath, buildInstance(instanceName, connStr));
               console.log(`✓ Monitoring target '${instanceName}' added\n`);
 
               // Test connection
@@ -2544,7 +2553,8 @@ mon
               {
                 let testClient: InstanceType<typeof Client> | null = null;
                 try {
-                  testClient = new Client({ connectionString: connStr, connectionTimeoutMillis: 10000 });
+                  warnIfLaxSslmode(connStr);
+            testClient = new Client(buildClientConfig(connStr, { connectionTimeoutMillis: 10000 }));
                   await testClient.connect();
                   const result = await testClient.query("select version();");
                   console.log("✓ Connection successful");
@@ -3173,42 +3183,32 @@ targets
       return;
     }
 
+    let instances: Instance[];
     try {
-      const content = fs.readFileSync(instancesPath, "utf8");
-      const instances = yaml.load(content) as Instance[] | null;
-
-      if (!instances || !Array.isArray(instances) || instances.length === 0) {
-        console.log("No monitoring targets configured");
-        console.log("");
-        console.log("To add a monitoring target:");
-        console.log("  postgres-ai mon targets add <connection-string> <name>");
-        console.log("");
-        console.log("Example:");
-        console.log("  postgres-ai mon targets add 'postgresql://user:pass@host:5432/db' my-db");
-        return;
-      }
-
-      // Filter out disabled instances (e.g., demo placeholders)
-      const filtered = instances.filter((inst) => inst.name && inst.is_enabled !== false);
-
-      if (filtered.length === 0) {
-        console.log("No monitoring targets configured");
-        console.log("");
-        console.log("To add a monitoring target:");
-        console.log("  postgres-ai mon targets add <connection-string> <name>");
-        console.log("");
-        console.log("Example:");
-        console.log("  postgres-ai mon targets add 'postgresql://user:pass@host:5432/db' my-db");
-        return;
-      }
-
-      for (const inst of filtered) {
-        console.log(`Target: ${inst.name}`);
-      }
+      instances = loadInstances(instancesPath);
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
       console.error(`Error parsing instances.yml: ${message}`);
       process.exitCode = 1;
+      return;
+    }
+
+    // Filter out disabled instances (e.g., demo placeholders)
+    const filtered = instances.filter((inst) => inst.name && inst.is_enabled !== false);
+
+    if (filtered.length === 0) {
+      console.log("No monitoring targets configured");
+      console.log("");
+      console.log("To add a monitoring target:");
+      console.log("  postgres-ai mon targets add <connection-string> <name>");
+      console.log("");
+      console.log("Example:");
+      console.log("  postgres-ai mon targets add 'postgresql://user:pass@host:5432/db' my-db");
+      return;
+    }
+
+    for (const inst of filtered) {
+      console.log(`Target: ${inst.name}`);
     }
   });
 targets
@@ -3231,40 +3231,17 @@ targets
     const db = m[5];
     const instanceName = name && name.trim() ? name.trim() : `${host}-${db}`.replace(/[^a-zA-Z0-9-]/g, "-");
 
-    // Check if instance already exists
     try {
-      if (fs.existsSync(file) && !fs.lstatSync(file).isDirectory()) {
-        const content = fs.readFileSync(file, "utf8");
-        const instances = yaml.load(content) as Instance[] | null || [];
-        if (Array.isArray(instances)) {
-          const exists = instances.some((inst) => inst.name === instanceName);
-          if (exists) {
-            console.error(`Monitoring target '${instanceName}' already exists`);
-            process.exitCode = 1;
-            return;
-          }
-        }
-      }
+      addInstanceToFile(file, buildInstance(instanceName, connStr));
+      console.log(`Monitoring target '${instanceName}' added`);
     } catch (err) {
-      // If YAML parsing fails, fall back to simple check
-      const isFile = fs.existsSync(file) && !fs.lstatSync(file).isDirectory();
-      const content = isFile ? fs.readFileSync(file, "utf8") : "";
-      const escapedName = instanceName.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-      if (new RegExp(`^- name: ${escapedName}$`, "m").test(content)) {
-        console.error(`Monitoring target '${instanceName}' already exists`);
-        process.exitCode = 1;
-        return;
-      }
-    }
-
-    // Add new instance — if instances.yml is a directory (Docker artifact), replace it with a file
-    if (fs.existsSync(file) && fs.lstatSync(file).isDirectory()) {
-      fs.rmSync(file, { recursive: true, force: true });
+      // Surface InstancesParseError as-is so we don't silently overwrite a
+      // corrupted file (which could discard several targets, including the
+      // credentials in their conn_str values).
+      const message = err instanceof Error ? err.message : String(err);
+      console.error(message);
+      process.exitCode = 1;
     }
-    const body = `- name: ${instanceName}\n  conn_str: ${connStr}\n  preset_metrics: full\n  custom_metrics:\n  is_enabled: true\n  group: default\n  custom_tags:\n    env: production\n    cluster: default\n    node_name: ${instanceName}\n    sink_type: ~sink_type~\n`;
-    const content = fs.existsSync(file) ? fs.readFileSync(file, "utf8") : "";
-    fs.appendFileSync(file, (content && !/\n$/.test(content) ? "\n" : "") + body, "utf8");
-    console.log(`Monitoring target '${instanceName}' added`);
   });
 targets
   .command("remove <name>")
@@ -3278,24 +3255,12 @@ targets
     }
 
     try {
-      const content = fs.readFileSync(file, "utf8");
-      const instances = yaml.load(content) as Instance[] | null;
-
-      if (!instances || !Array.isArray(instances)) {
-        console.error("Invalid instances.yml format");
-        process.exitCode = 1;
-        return;
-      }
-
-      const filtered = instances.filter((inst) => inst.name !== name);
-
-      if (filtered.length === instances.length) {
+      const removed = removeInstanceFromFile(file, name);
+      if (!removed) {
         console.error(`Monitoring target '${name}' not found`);
         process.exitCode = 1;
         return;
       }
-
-      fs.writeFileSync(file, yaml.dump(filtered), "utf8");
       console.log(`Monitoring target '${name}' removed`);
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
@@ -3314,35 +3279,35 @@ targets
       return;
     }
 
+    let instances: Instance[];
     try {
-      const content = fs.readFileSync(instancesPath, "utf8");
-      const instances = yaml.load(content) as Instance[] | null;
-
-      if (!instances || !Array.isArray(instances)) {
-        console.error("Invalid instances.yml format");
-        process.exitCode = 1;
-        return;
-      }
-
-      const instance = instances.find((inst) => inst.name === name);
+      instances = loadInstances(instancesPath);
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      console.error(`Error parsing instances.yml: ${message}`);
+      process.exitCode = 1;
+      return;
+    }
+    const instance = instances.find((inst) => inst.name === name);
 
-      if (!instance) {
-        console.error(`Monitoring target '${name}' not found`);
-        process.exitCode = 1;
-        return;
-      }
+    if (!instance) {
+      console.error(`Monitoring target '${name}' not found`);
+      process.exitCode = 1;
+      return;
+    }
 
-      if (!instance.conn_str) {
-        console.error(`Connection string not found for monitoring target '${name}'`);
-        process.exitCode = 1;
-        return;
-      }
+    if (!instance.conn_str) {
+      console.error(`Connection string not found for monitoring target '${name}'`);
+      process.exitCode = 1;
+      return;
+    }
 
-      console.log(`Testing connection to monitoring target '${name}'...`);
+    console.log(`Testing connection to monitoring target '${name}'...`);
 
-      // Use native pg client instead of requiring psql to be installed
-      const client = new Client({ connectionString: instance.conn_str, connectionTimeoutMillis: 10000 });
+    warnIfLaxSslmode(instance.conn_str);
+    const client = new Client(buildClientConfig(instance.conn_str, { connectionTimeoutMillis: 10000 }));
 
+    try {
       try {
         await client.connect();
         const result = await client.query('select version();');
@@ -3376,17 +3341,17 @@ auth
         process.exitCode = 1;
         return;
       }
-      
+
       // Read existing config to check for defaultProject before updating
       const existingConfig = config.readConfig();
       const existingProject = existingConfig.defaultProject;
-      
+
       config.writeConfig({ apiKey: trimmedKey });
       // When API key is set directly, only clear orgId (org selection may differ).
       // Preserve defaultProject to avoid orphaning historical reports.
       // If the new key lacks access to the project, upload will fail with a clear error.
       config.deleteConfigKeys(["orgId"]);
-      
+
       console.log(`API key saved to ${config.getConfigPath()}`);
       if (existingProject) {
         console.log(`Note: Your default project "${existingProject}" has been preserved.`);
@@ -3570,13 +3535,13 @@ auth
           const existingOrgId = existingConfig.orgId;
           const existingProject = existingConfig.defaultProject;
           const orgChanged = existingOrgId && existingOrgId !== orgId;
-          
+
           config.writeConfig({
             apiKey: apiToken,
             baseUrl: apiBaseUrl,
             orgId: orgId,
           });
-          
+
           // Only clear defaultProject if org actually changed
           if (orgChanged && existingProject) {
             config.deleteConfigKeys(["defaultProject"]);
@@ -3915,9 +3880,18 @@ issues
   .command("post-comment <issueId> <content>")
   .description("post a new comment to an issue")
   .option("--parent <uuid>", "parent comment id")
+  .option(
+    "--attach <path>",
+    "attach a file (uploads to storage and appends a markdown link; repeatable)",
+    (value: string, previous: string[]) => {
+      previous.push(value);
+      return previous;
+    },
+    [] as string[]
+  )
   .option("--debug", "enable debug output")
   .option("--json", "output raw JSON")
-  .action(async (issueId: string, content: string, opts: { parent?: string; debug?: boolean; json?: boolean }) => {
+  .action(async (issueId: string, content: string, opts: { parent?: string; attach?: string[]; debug?: boolean; json?: boolean }) => {
     // Interpret escape sequences in content (e.g., \n -> newline)
     if (opts.debug) {
       // eslint-disable-next-line no-console
@@ -3929,7 +3903,11 @@ issues
       console.error(`Debug: Interpreted content: ${JSON.stringify(content)}`);
     }
 
-    const spinner = createTtySpinner(process.stdout.isTTY ?? false, "Posting comment...");
+    const attachPaths = Array.isArray(opts.attach) ? opts.attach : [];
+    const spinner = createTtySpinner(
+      process.stdout.isTTY ?? false,
+      attachPaths.length > 0 ? "Uploading attachments..." : "Posting comment..."
+    );
     try {
       const rootOpts = program.opts<CliOptions>();
       const cfg = config.readConfig();
@@ -3941,13 +3919,25 @@ issues
         return;
       }
 
-      const { apiBaseUrl } = resolveBaseUrls(rootOpts, cfg);
+      const { apiBaseUrl, storageBaseUrl } = resolveBaseUrls(rootOpts, cfg);
+
+      let augmentedContent = content;
+      if (attachPaths.length > 0) {
+        const uploaded = await uploadAttachments({
+          apiKey,
+          storageBaseUrl,
+          attachmentPaths: attachPaths,
+          debug: !!opts.debug,
+        });
+        augmentedContent = appendAttachmentsToContent(content, uploaded);
+        spinner.update("Posting comment...");
+      }
 
       const result = await createIssueComment({
         apiKey,
         apiBaseUrl,
         issueId,
-        content,
+        content: augmentedContent,
         parentCommentId: opts.parent,
         debug: !!opts.debug,
       });
@@ -3976,9 +3966,18 @@ issues
     },
     [] as string[]
   )
+  .option(
+    "--attach <path>",
+    "attach a file (uploads to storage and appends a markdown link to the description; repeatable)",
+    (value: string, previous: string[]) => {
+      previous.push(value);
+      return previous;
+    },
+    [] as string[]
+  )
   .option("--debug", "enable debug output")
   .option("--json", "output raw JSON")
-  .action(async (rawTitle: string, opts: { orgId?: number; projectId?: number; description?: string; label?: string[]; debug?: boolean; json?: boolean }) => {
+  .action(async (rawTitle: string, opts: { orgId?: number; projectId?: number; description?: string; label?: string[]; attach?: string[]; debug?: boolean; json?: boolean }) => {
     const rootOpts = program.opts<CliOptions>();
     const cfg = config.readConfig();
     const { apiKey } = getConfig(rootOpts);
@@ -4005,16 +4004,33 @@ issues
     const description = opts.description !== undefined ? interpretEscapes(String(opts.description)) : undefined;
     const labels = Array.isArray(opts.label) && opts.label.length > 0 ? opts.label.map(String) : undefined;
     const projectId = typeof opts.projectId === "number" && !Number.isNaN(opts.projectId) ? opts.projectId : undefined;
+    const attachPaths = Array.isArray(opts.attach) ? opts.attach : [];
 
-    const spinner = createTtySpinner(process.stdout.isTTY ?? false, "Creating issue...");
+    const spinner = createTtySpinner(
+      process.stdout.isTTY ?? false,
+      attachPaths.length > 0 ? "Uploading attachments..." : "Creating issue..."
+    );
     try {
-      const { apiBaseUrl } = resolveBaseUrls(rootOpts, cfg);
+      const { apiBaseUrl, storageBaseUrl } = resolveBaseUrls(rootOpts, cfg);
+
+      let augmentedDescription = description;
+      if (attachPaths.length > 0) {
+        const uploaded = await uploadAttachments({
+          apiKey,
+          storageBaseUrl,
+          attachmentPaths: attachPaths,
+          debug: !!opts.debug,
+        });
+        augmentedDescription = appendAttachmentsToContent(description ?? "", uploaded);
+        spinner.update("Creating issue...");
+      }
+
       const result = await createIssue({
         apiKey,
         apiBaseUrl,
         title,
         orgId,
-        description,
+        description: augmentedDescription,
         projectId,
         labels,
         debug: !!opts.debug,
@@ -4045,9 +4061,18 @@ issues
     [] as string[]
   )
   .option("--clear-labels", "set labels to an empty list")
+  .option(
+    "--attach <path>",
+    "attach a file (uploads and appends a markdown link to --description; if --description is omitted the existing description is fetched and appended to; repeatable)",
+    (value: string, previous: string[]) => {
+      previous.push(value);
+      return previous;
+    },
+    [] as string[]
+  )
   .option("--debug", "enable debug output")
   .option("--json", "output raw JSON")
-  .action(async (issueId: string, opts: { title?: string; description?: string; status?: string; label?: string[]; clearLabels?: boolean; debug?: boolean; json?: boolean }) => {
+  .action(async (issueId: string, opts: { title?: string; description?: string; status?: string; label?: string[]; clearLabels?: boolean; attach?: string[]; debug?: boolean; json?: boolean }) => {
     const rootOpts = program.opts<CliOptions>();
     const cfg = config.readConfig();
     const { apiKey } = getConfig(rootOpts);
@@ -4057,10 +4082,10 @@ issues
       return;
     }
 
-    const { apiBaseUrl } = resolveBaseUrls(rootOpts, cfg);
+    const { apiBaseUrl, storageBaseUrl } = resolveBaseUrls(rootOpts, cfg);
 
     const title = opts.title !== undefined ? interpretEscapes(String(opts.title)) : undefined;
-    const description = opts.description !== undefined ? interpretEscapes(String(opts.description)) : undefined;
+    let description = opts.description !== undefined ? interpretEscapes(String(opts.description)) : undefined;
 
     let status: number | undefined = undefined;
     if (opts.status !== undefined) {
@@ -4090,8 +4115,38 @@ issues
       labels = opts.label.map(String);
     }
 
-    const spinner = createTtySpinner(process.stdout.isTTY ?? false, "Updating issue...");
+    const attachPaths = Array.isArray(opts.attach) ? opts.attach : [];
+    const spinner = createTtySpinner(
+      process.stdout.isTTY ?? false,
+      attachPaths.length > 0 ? "Uploading attachments..." : "Updating issue..."
+    );
     try {
+      if (attachPaths.length > 0) {
+        // If the caller did not supply a new description, fetch the existing one
+        // and append to it. This makes "add a screenshot to issue X" a one-step
+        // operation rather than forcing the caller to copy-paste the existing
+        // description first. Small race window if someone else updates
+        // concurrently, which is acceptable for an interactive CLI / agent.
+        if (description === undefined) {
+          const existing = await fetchIssue({ apiKey, apiBaseUrl, issueId, debug: !!opts.debug });
+          if (!existing) {
+            spinner.stop();
+            console.error(`Issue not found: ${issueId}`);
+            process.exitCode = 1;
+            return;
+          }
+          description = (existing as { description?: string | null }).description ?? "";
+        }
+        const uploaded = await uploadAttachments({
+          apiKey,
+          storageBaseUrl,
+          attachmentPaths: attachPaths,
+          debug: !!opts.debug,
+        });
+        description = appendAttachmentsToContent(description ?? "", uploaded);
+        spinner.update("Updating issue...");
+      }
+
       const result = await updateIssue({
         apiKey,
         apiBaseUrl,
@@ -4115,9 +4170,18 @@ issues
 issues
   .command("update-comment <commentId> <content>")
   .description("update an existing issue comment")
+  .option(
+    "--attach <path>",
+    "attach a file (uploads and appends a markdown link to <content>; repeatable)",
+    (value: string, previous: string[]) => {
+      previous.push(value);
+      return previous;
+    },
+    [] as string[]
+  )
   .option("--debug", "enable debug output")
   .option("--json", "output raw JSON")
-  .action(async (commentId: string, content: string, opts: { debug?: boolean; json?: boolean }) => {
+  .action(async (commentId: string, content: string, opts: { attach?: string[]; debug?: boolean; json?: boolean }) => {
     if (opts.debug) {
       // eslint-disable-next-line no-console
       console.error(`Debug: Original content: ${JSON.stringify(content)}`);
@@ -4137,15 +4201,31 @@ issues
       return;
     }
 
-    const spinner = createTtySpinner(process.stdout.isTTY ?? false, "Updating comment...");
+    const attachPaths = Array.isArray(opts.attach) ? opts.attach : [];
+    const spinner = createTtySpinner(
+      process.stdout.isTTY ?? false,
+      attachPaths.length > 0 ? "Uploading attachments..." : "Updating comment..."
+    );
     try {
-      const { apiBaseUrl } = resolveBaseUrls(rootOpts, cfg);
+      const { apiBaseUrl, storageBaseUrl } = resolveBaseUrls(rootOpts, cfg);
+
+      let augmentedContent = content;
+      if (attachPaths.length > 0) {
+        const uploaded = await uploadAttachments({
+          apiKey,
+          storageBaseUrl,
+          attachmentPaths: attachPaths,
+          debug: !!opts.debug,
+        });
+        augmentedContent = appendAttachmentsToContent(content, uploaded);
+        spinner.update("Updating comment...");
+      }
 
       const result = await updateIssueComment({
         apiKey,
         apiBaseUrl,
         commentId,
-        content,
+        content: augmentedContent,
         debug: !!opts.debug,
       });
       spinner.stop();
@@ -4856,4 +4936,3 @@ mcp
 program.parseAsync(process.argv).finally(() => {
   closeReadline();
 });
-