specrails-desktop 2.0.0

package/server/dist/profile-manager.js

@@ -0,0 +1,310 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProfileConflictError = exports.ProfileNotFoundError = exports.ProfileValidationError = void 0;
+exports.validateProfile = validateProfile;
+exports.listProfiles = listProfiles;
+exports.getProfile = getProfile;
+exports.createProfile = createProfile;
+exports.updateProfile = updateProfile;
+exports.deleteProfile = deleteProfile;
+exports.duplicateProfile = duplicateProfile;
+exports.renameProfile = renameProfile;
+exports.resolveProfile = resolveProfile;
+exports.snapshotForJob = snapshotForJob;
+exports.persistJobProfile = persistJobProfile;
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const _2020_1 = __importDefault(require("ajv/dist/2020"));
+const profile_v1_json_1 = __importDefault(require("./schemas/profile.v1.json"));
+const providers_1 = require("./providers");
+// ─── Schema loading ──────────────────────────────────────────────────────────
+let cachedValidator = null;
+function getValidator() {
+    if (cachedValidator)
+        return cachedValidator;
+    const ajv = new _2020_1.default({ allErrors: true, strict: false });
+    cachedValidator = ajv.compile(profile_v1_json_1.default);
+    return cachedValidator;
+}
+// ─── Errors ──────────────────────────────────────────────────────────────────
+class ProfileValidationError extends Error {
+    errors;
+    constructor(errors) {
+        super(`profile validation failed:\n${errors.map((e) => `  ${e}`).join('\n')}`);
+        this.name = 'ProfileValidationError';
+        this.errors = errors;
+    }
+}
+exports.ProfileValidationError = ProfileValidationError;
+class ProfileNotFoundError extends Error {
+    constructor(name) {
+        super(`profile not found: ${name}`);
+        this.name = 'ProfileNotFoundError';
+    }
+}
+exports.ProfileNotFoundError = ProfileNotFoundError;
+class ProfileConflictError extends Error {
+    constructor(name) {
+        super(`profile already exists: ${name}`);
+        this.name = 'ProfileConflictError';
+    }
+}
+exports.ProfileConflictError = ProfileConflictError;
+// ─── Path helpers ────────────────────────────────────────────────────────────
+function profilesDir(projectPath) {
+    return path_1.default.join(projectPath, '.specrails', 'profiles');
+}
+function profilePath(projectPath, name) {
+    return path_1.default.join(profilesDir(projectPath), `${name}.json`);
+}
+function jobSnapshotPath(slug, jobId) {
+    return path_1.default.join(os_1.default.homedir(), '.specrails', 'projects', slug, 'jobs', jobId, 'profile.json');
+}
+// ─── Name validation ─────────────────────────────────────────────────────────
+const NAME_REGEX = /^[a-z0-9][a-z0-9-]*$/;
+function assertValidName(name) {
+    if (!NAME_REGEX.test(name)) {
+        throw new ProfileValidationError([`invalid profile name '${name}' (must match ${NAME_REGEX})`]);
+    }
+    if (name === '.user-preferred') {
+        throw new ProfileValidationError(["'.user-preferred' is reserved"]);
+    }
+}
+// ─── Structural extra checks (beyond JSON schema) ────────────────────────────
+/**
+ * Provider-aware structural validation.
+ *
+ * @param profile   the candidate profile (already JSON-schema-clean)
+ * @param expectedProvider the project's resolved provider id when the
+ *                  profile itself omits the `provider` field. Defaults to
+ *                  `'claude'` so legacy callsites stay backwards compatible.
+ */
+function validateStructural(profile, expectedProvider = 'claude') {
+    const providerId = profile.provider ?? expectedProvider;
+    if (!(0, providers_1.hasAdapter)(providerId)) {
+        throw new ProfileValidationError([
+            `profile references unknown provider '${providerId}'`,
+        ]);
+    }
+    const adapter = (0, providers_1.getAdapter)(providerId);
+    const baseline = adapter.baselineAgents();
+    const validModels = new Set(adapter.modelCatalog().map((m) => m.value));
+    const agentIds = new Set(profile.agents.map((a) => a.id));
+    // Baseline is required on every profile — default and custom alike. The
+    // pipeline depends on the baseline agents existing in the chain. The set is
+    // adapter-driven so future providers can declare their own baseline.
+    const missing = baseline.filter((id) => !agentIds.has(id));
+    if (missing.length > 0) {
+        throw new ProfileValidationError([
+            `profile must include baseline agents for provider '${providerId}': missing ${missing.join(', ')}`,
+        ]);
+    }
+    // Orchestrator model must be in the adapter's catalog.
+    if (!validModels.has(profile.orchestrator.model)) {
+        throw new ProfileValidationError([
+            `orchestrator.model '${profile.orchestrator.model}' is not valid for provider '${providerId}'. Valid models: ${[...validModels].join(', ')}`,
+        ]);
+    }
+    // Per-agent model (when set) must also be in the catalog.
+    for (const agent of profile.agents) {
+        if (agent.model !== undefined && !validModels.has(agent.model)) {
+            throw new ProfileValidationError([
+                `agent '${agent.id}' uses model '${agent.model}' which is not valid for provider '${providerId}'. Valid models: ${[...validModels].join(', ')}`,
+            ]);
+        }
+    }
+    // Routing: at most one default rule, last if present, targets must exist.
+    const defaults = profile.routing.filter((r) => 'default' in r && r.default === true);
+    if (defaults.length > 1) {
+        throw new ProfileValidationError([
+            `routing may contain at most one entry with 'default: true' (found ${defaults.length})`,
+        ]);
+    }
+    if (defaults.length === 1 && profile.routing.length > 0) {
+        const last = profile.routing[profile.routing.length - 1];
+        if (!('default' in last) || last.default !== true) {
+            throw new ProfileValidationError([
+                "when a 'default: true' routing rule exists it must be the last element of 'routing'",
+            ]);
+        }
+    }
+    // Pipeline's last-resort fallback is owned by the core developer agent.
+    // Retargeting it would let custom agents silently swallow every untagged
+    // task; app UI hides the control, server check is the enforcement.
+    if (defaults.length === 1 && defaults[0].agent !== 'sr-developer') {
+        throw new ProfileValidationError([
+            "default routing rule must target 'sr-developer' (got '" + defaults[0].agent + "')",
+        ]);
+    }
+    for (const rule of profile.routing) {
+        if (!agentIds.has(rule.agent)) {
+            throw new ProfileValidationError([
+                `routing references agent '${rule.agent}' which is not in this profile's chain`,
+            ]);
+        }
+    }
+}
+function validateProfile(raw, expectedProvider = 'claude') {
+    const validate = getValidator();
+    if (!validate(raw)) {
+        const msgs = (validate.errors || []).map((e) => `${e.instancePath || '/'} ${e.message} (${JSON.stringify(e.params)})`);
+        throw new ProfileValidationError(msgs);
+    }
+    const profile = raw;
+    validateStructural(profile, expectedProvider);
+    return profile;
+}
+// ─── Public API ──────────────────────────────────────────────────────────────
+function listProfiles(projectPath) {
+    const dir = profilesDir(projectPath);
+    if (!fs_1.default.existsSync(dir))
+        return [];
+    const entries = [];
+    for (const file of fs_1.default.readdirSync(dir)) {
+        if (!file.endsWith('.json'))
+            continue;
+        if (file === '.user-preferred.json')
+            continue;
+        if (file.startsWith('.'))
+            continue;
+        const name = file.slice(0, -'.json'.length);
+        const full = path_1.default.join(dir, file);
+        try {
+            const raw = JSON.parse(fs_1.default.readFileSync(full, 'utf8'));
+            const stat = fs_1.default.statSync(full);
+            entries.push({
+                name,
+                description: typeof raw?.description === 'string' ? raw.description : undefined,
+                isDefault: name === 'default' || name === 'project-default',
+                updatedAt: Math.floor(stat.mtimeMs),
+            });
+        }
+        catch {
+            // Skip unparseable files silently; the caller can surface via getProfile.
+        }
+    }
+    return entries.sort((a, b) => a.name.localeCompare(b.name));
+}
+function getProfile(projectPath, name, expectedProvider = 'claude') {
+    assertValidName(name);
+    const full = profilePath(projectPath, name);
+    if (!fs_1.default.existsSync(full)) {
+        throw new ProfileNotFoundError(name);
+    }
+    const raw = JSON.parse(fs_1.default.readFileSync(full, 'utf8'));
+    return validateProfile(raw, expectedProvider);
+}
+function createProfile(projectPath, profile, expectedProvider = 'claude') {
+    assertValidName(profile.name);
+    validateProfile(profile, expectedProvider);
+    const full = profilePath(projectPath, profile.name);
+    if (fs_1.default.existsSync(full)) {
+        throw new ProfileConflictError(profile.name);
+    }
+    fs_1.default.mkdirSync(profilesDir(projectPath), { recursive: true });
+    fs_1.default.writeFileSync(full, JSON.stringify(profile, null, 2) + '\n', 'utf8');
+}
+function updateProfile(projectPath, profile, expectedProvider = 'claude') {
+    assertValidName(profile.name);
+    validateProfile(profile, expectedProvider);
+    const full = profilePath(projectPath, profile.name);
+    if (!fs_1.default.existsSync(full)) {
+        throw new ProfileNotFoundError(profile.name);
+    }
+    fs_1.default.writeFileSync(full, JSON.stringify(profile, null, 2) + '\n', 'utf8');
+}
+function deleteProfile(projectPath, name) {
+    assertValidName(name);
+    if (name === 'default' || name === 'project-default') {
+        throw new ProfileValidationError(['cannot delete the default profile']);
+    }
+    const full = profilePath(projectPath, name);
+    if (!fs_1.default.existsSync(full)) {
+        throw new ProfileNotFoundError(name);
+    }
+    fs_1.default.unlinkSync(full);
+}
+function duplicateProfile(projectPath, sourceName, newName, expectedProvider = 'claude') {
+    const source = getProfile(projectPath, sourceName, expectedProvider);
+    const copy = { ...source, name: newName };
+    createProfile(projectPath, copy, expectedProvider);
+    return copy;
+}
+function renameProfile(projectPath, fromName, toName, expectedProvider = 'claude') {
+    const source = getProfile(projectPath, fromName, expectedProvider);
+    assertValidName(toName);
+    if (fs_1.default.existsSync(profilePath(projectPath, toName))) {
+        throw new ProfileConflictError(toName);
+    }
+    const renamed = { ...source, name: toName };
+    validateProfile(renamed, expectedProvider);
+    // Atomic publish: write to a temp file in the same dir, fsync-rename into
+    // place, THEN remove the old file. A crash/unlink failure can no longer
+    // leave both files on disk (which listProfiles would surface as duplicates).
+    const dest = profilePath(projectPath, toName);
+    const tmp = `${dest}.tmp-${process.pid}`;
+    fs_1.default.writeFileSync(tmp, JSON.stringify(renamed, null, 2) + '\n', 'utf8');
+    fs_1.default.renameSync(tmp, dest);
+    try {
+        fs_1.default.unlinkSync(profilePath(projectPath, fromName));
+    }
+    catch {
+        // The new file is fully published; a stale source is at worst a transient
+        // duplicate, never data loss.
+    }
+    return renamed;
+}
+/**
+ * Resolve the profile to snapshot for a new rail invocation.
+ *
+ * Precedence:
+ *   1. Explicit selection passed by the caller (launch-dialog override).
+ *   2. The profile named `default` (or `project-default`).
+ *
+ * Returns `null` if the project has no profiles and no fallback — the caller
+ * should treat this as legacy mode (do not inject `SPECRAILS_PROFILE_PATH`).
+ */
+function resolveProfile(projectPath, explicit, expectedProvider = 'claude') {
+    const tryName = (n) => {
+        try {
+            return { name: n, profile: getProfile(projectPath, n, expectedProvider) };
+        }
+        catch (e) {
+            if (e instanceof ProfileNotFoundError)
+                return null;
+            throw e;
+        }
+    };
+    if (explicit) {
+        const resolved = tryName(explicit);
+        if (resolved)
+            return resolved;
+        throw new ProfileNotFoundError(explicit);
+    }
+    return tryName('default') ?? tryName('project-default');
+}
+// ─── Snapshot-per-job ────────────────────────────────────────────────────────
+/**
+ * Write the resolved profile's bytes to a job-scoped snapshot. The snapshot
+ * is chmod-400 so mid-run edits are impossible. Returns the absolute path;
+ * the caller must set `SPECRAILS_PROFILE_PATH` in the spawn env.
+ */
+function snapshotForJob(slug, jobId, resolved) {
+    const snapshotPath = jobSnapshotPath(slug, jobId);
+    fs_1.default.mkdirSync(path_1.default.dirname(snapshotPath), { recursive: true });
+    const body = JSON.stringify(resolved.profile, null, 2) + '\n';
+    fs_1.default.writeFileSync(snapshotPath, body, { encoding: 'utf8', mode: 0o400 });
+    return snapshotPath;
+}
+/**
+ * Persist job → profile in the per-project SQLite so Analytics can report
+ * and so the snapshot survives filesystem mishaps.
+ */
+function persistJobProfile(db, jobId, resolved) {
+    db.prepare(`INSERT OR REPLACE INTO job_profiles (job_id, profile_name, profile_json, created_at)
+     VALUES (?, ?, ?, ?)`).run(jobId, resolved.name, JSON.stringify(resolved.profile), Date.now());
+}