mirror of
https://github.com/stack-auth/stack.git
synced 2026-06-30 21:01:54 +08:00
0f743f93ff
P0: Strip OAuth token from git origin after clone so LLM agent
never sees credentials (repo-agent.tsx)
P1: Replace raw error.message with safe hardcoded text in API
response and dashboard UI (apply/route.tsx, config-update.tsx)
P1: E2E spike script now requires explicit env vars instead of
falling back to pushing to main (spike-orchestrator-e2e.mts)
P2: Use urlSchema for commit_url (schema-fields.ts)
P2: Return commitSha directly instead of parsing from URL
(repo-agent.tsx, apply/route.tsx)
P2: Support LINK_BRANCH_ID env var (link-project-to-github.ts)
P2: Widen structural fallback regex (config-updater.ts)
P2: Log warning when cancel has no sandboxId (cancel/route.tsx)
P2: Reject arbitrary string config values (config-eval.ts)
Co-Authored-By: mantra <mantra@stack-auth.com>
58 lines
2.5 KiB
TypeScript
58 lines
2.5 KiB
TypeScript
/**
|
|
* One-off: mark an EXISTING project's branch config as linked to a GitHub repo
|
|
* (sets the `pushed-from-github` source) WITHOUT re-seeding the project. Useful
|
|
* when the link-existing wizard's workflow can't reach a LOCAL backend (the
|
|
* GitHub Actions runner can't POST to localhost, so the `config push` CI step
|
|
* fails and the project never advances to "linked"). Run this to set the state.
|
|
*
|
|
* cd apps/backend && LINK_PROJECT_ID=<uuid> pnpm run with-env:dev tsx scripts/link-project-to-github.ts
|
|
*
|
|
* Env (defaults shown):
|
|
* LINK_PROJECT_ID=<uuid> (REQUIRED)
|
|
* LINK_OWNER=mantrakp04
|
|
* LINK_REPO=config-test
|
|
* LINK_BRANCH=main
|
|
* LINK_CONFIG_PATH=hexclave.config.ts
|
|
* LINK_WORKFLOW_PATH=.github/workflows/hexclave-config-sync.yml
|
|
* LINK_BRANCH_ID=<branch-id> (defaults to DEFAULT_BRANCH_ID)
|
|
* LINK_COMMIT=<head sha> (informational; the agent pulls latest)
|
|
*/
|
|
import { setBranchConfigOverrideSource } from "@/lib/config";
|
|
import { DEFAULT_BRANCH_ID } from "@/lib/tenancies";
|
|
import { getEnvVariable } from "@hexclave/shared/dist/utils/env";
|
|
|
|
async function main() {
|
|
const projectId = getEnvVariable("LINK_PROJECT_ID", "");
|
|
if (!projectId) throw new Error("LINK_PROJECT_ID is required (the project to mark as linked).");
|
|
const owner = getEnvVariable("LINK_OWNER", "mantrakp04");
|
|
const repo = getEnvVariable("LINK_REPO", "config-test");
|
|
const branch = getEnvVariable("LINK_BRANCH", "main");
|
|
const configFilePath = getEnvVariable("LINK_CONFIG_PATH", "hexclave.config.ts");
|
|
const workflowPath = getEnvVariable("LINK_WORKFLOW_PATH", ".github/workflows/hexclave-config-sync.yml");
|
|
const commitHash = getEnvVariable("LINK_COMMIT", "") || "0".repeat(40);
|
|
|
|
const branchId = getEnvVariable("LINK_BRANCH_ID", "") || DEFAULT_BRANCH_ID;
|
|
await setBranchConfigOverrideSource({
|
|
projectId,
|
|
branchId,
|
|
source: {
|
|
type: "pushed-from-github",
|
|
owner,
|
|
repo,
|
|
branch,
|
|
commit_hash: commitHash,
|
|
config_file_path: configFilePath,
|
|
workflow_path: workflowPath,
|
|
},
|
|
});
|
|
|
|
console.log(`✅ Linked ${projectId} -> ${owner}/${repo}@${branch}`);
|
|
console.log(` config: ${configFilePath} | workflow: ${workflowPath} | commit: ${commitHash.slice(0, 9)}`);
|
|
}
|
|
|
|
// eslint-disable-next-line no-restricted-syntax
|
|
main().then(() => process.exit(0)).catch((error: unknown) => {
|
|
console.error("\nlink-project-to-github failed:", error);
|
|
process.exit(1);
|
|
});
|