2a1f7c2edf
* feat: sync workflows from a configured github repo Per-workspace setting pointing at a GitHub repo directory of portable workflow export files. A background poller fetches it on an interval and creates, updates, or deletes the matching workflows; a force-sync endpoint bypasses the content-hash check. Synced workflows carry source/source_path provenance and coexist with manual ones; changes that cannot be applied safely (steps or workflows that still hold tasks, ambiguous step names, unparseable files) surface as warnings in the new settings section. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * feat(web): fill workflow sync form from a pasted github link A new Repository link field parses plain repo URLs, SSH remotes, and tree/blob links (which also carry branch and directory) into the structured owner/repo/branch/path fields. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * feat(web): simplify workflow sync form to link, branch, and interval The repository link is now the only repo input: owner, repo, and directory resolve from the pasted URL (echoed as a summary under the field), and a stored config renders back into a canonical tree link via buildGitHubRepoUrl. Branch and poll interval stay individually editable. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * feat(web): collapse workflow sync into a button, dialog, and status card The Workflows settings page now shows only a GitHub Sync button by default; the link/branch/interval form lives in a dialog that closes on successful save or removal. Once configured, a compact status card (mirroring the GitHub connection-status card) shows the synced repo, branch, directory, last result, warnings, and a Sync now action. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * feat(web): move github sync button into the workflows page header The GitHub Sync trigger now stacks under the Workspace settings button on the top right, and the extra separator around the sync area is gone — unconfigured workspaces show no sync chrome at all, configured ones show just the status card above the workflow list. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * feat(web): move github sync button next to the workflow actions GitHub Sync now sits in the Workflows section toolbar alongside Export All, Import, and Add Workflow; the status card renders inside the section above the workflow list. The toolbar moved to its own component to keep the page under the file-size limit. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * feat(web): separate sync status card from the workflow list Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix(web): align sync status card with the workflow list gutter Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix: repair local edits to synced workflows on periodic sync Periodic syncs previously skipped applying when the repo content hash was unchanged, so local UI edits to a synced workflow were only reverted by a manual Sync now. Every sync now reconciles against the repo; the applier compares each step against its definition and only writes (and broadcasts) actual differences, so a no-drift sync stays silent. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * feat: make github-synced workflows read-only Workflows with source=github reject UI mutations: workflow rename, description, agent-profile, and delete return 409 from the task-domain handlers; step create/update/delete/reorder and template application are guarded in the workflow controller. The sync applier writes through the service/repo layer and stays exempt. The frontend disables the card's inputs, save/delete, and the step pipeline editor for synced workflows, with a tooltip pointing at the synced repository. Drift repair on sync remains as the backstop. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * feat: optional workflow sync polling and repo-derived branch picker A per-workspace auto-sync toggle (poll_enabled, default on) controls the background polling loop; when off the workspace only syncs via Sync now. The dialog's branch field becomes a select fed by the repository's actual branches (same loader the task-create dialog uses), falling back to free text until branches load. Existing dev databases gain the new column via an idempotent ALTER. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * feat: release synced workflows when the sync config is removed Deleting a workspace's workflow sync configuration converts its GitHub-sourced workflows back to manual ownership (source=manual), so they become editable instead of being stranded read-only. Release runs before the config row is deleted so a failure keeps the config for retry. The settings page reloads after removal (and after syncs that changed workflows) so cards unlock without a manual refresh. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * feat(web): drop branch selector and compact the auto-sync row The pasted link already carries the branch (main by default), so the dialog no longer needs a branch field — the resolved summary echoes it. The auto-sync toggle is now one compact row with the interval inline and a single short helper line. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix: address PR review feedback Backend: fail-open read-only guard on workflow lookup errors (fixes MCP step handler CI failures); poller Stop holds its mutex through drain; per-workspace lock serializes syncs against config delete/replace; rollback workflow creation when provenance stamping fails; idiomatic duplicate-column migration via db.IsDuplicateColumnError; branch-name validation and a 30-day interval cap; generic 500s with logged detail; WS read-only rejections use CONFLICT with the real reason; e2e reset aborts when sync-config cleanup fails; test hygiene (t.Cleanup, SetMaxOpenConns). Frontend: malformed percent escapes parse as invalid instead of throwing; save disabled during initial load and for invalid intervals; Remove disabled while saving; stale async config responses discarded; delete-dialog confirms re-check read-only; focusable Synced badge; explicit button types; failed polls labeled 'last attempt'; unique warning list keys; test cleanup via afterEach. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix: guard workflow sync test fake against concurrent poller access The poller invokes the fake applier from its own goroutine while the synctest test asserts on call counts; -race caught the unguarded reads. Also documents that the per-workspace lock is deliberately held across the GitHub fetch. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> --------- Co-authored-by: Kandev Agent <agent@kandev.dev> Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
308 lines
12 KiB
Go
308 lines
12 KiB
Go
package backendapp
|
|
|
|
import (
|
|
"context"
|
|
"net/http"
|
|
"os"
|
|
"strings"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
"go.uber.org/zap"
|
|
|
|
"github.com/kandev/kandev/internal/automation"
|
|
"github.com/kandev/kandev/internal/common/logger"
|
|
"github.com/kandev/kandev/internal/github"
|
|
sqliterepo "github.com/kandev/kandev/internal/task/repository/sqlite"
|
|
taskservice "github.com/kandev/kandev/internal/task/service"
|
|
)
|
|
|
|
// errKey is the JSON field used for error responses from the E2E endpoints.
|
|
const errKey = "error"
|
|
const statusKey = "status"
|
|
|
|
// registerE2EResetRoutes registers the E2E test-only endpoints.
|
|
// The endpoints are available when KANDEV_MOCK_AGENT is "true" or "only" (dev/E2E modes).
|
|
func registerE2EResetRoutes(
|
|
router *gin.Engine,
|
|
repo *sqliterepo.Repository,
|
|
taskSvc *taskservice.Service,
|
|
automationSvc *automation.Service,
|
|
githubSvc *github.Service,
|
|
log *logger.Logger,
|
|
) {
|
|
mockMode := os.Getenv("KANDEV_MOCK_AGENT")
|
|
if mockMode != "true" && mockMode != "only" {
|
|
return
|
|
}
|
|
|
|
api := router.Group("/api/v1/e2e")
|
|
api.DELETE("/reset/:workspaceId", handleE2EReset(repo, taskSvc, automationSvc, githubSvc, log))
|
|
// Hidden-workflow factory: lets E2E tests cover the system-only
|
|
// workflow path (e.g. improve-kandev) without depending on the real
|
|
// bootstrap endpoint, which clones from GitHub and shells out to gh.
|
|
api.POST("/hidden-workflow", handleE2ECreateHiddenWorkflow(taskSvc, log))
|
|
// Automation seeding helpers for E2E tests that need runs without going
|
|
// through the WS API (works on any Node version).
|
|
if automationSvc != nil {
|
|
api.POST("/automations", handleE2ECreateAutomation(automationSvc, log))
|
|
api.POST("/automation-runs", handleE2ECreateAutomationRun(automationSvc, log))
|
|
}
|
|
|
|
log.Info("registered E2E endpoints (test-only)")
|
|
}
|
|
|
|
func handleE2EReset(
|
|
repo *sqliterepo.Repository,
|
|
taskSvc *taskservice.Service,
|
|
automationSvc *automation.Service,
|
|
githubSvc *github.Service,
|
|
log *logger.Logger,
|
|
) gin.HandlerFunc {
|
|
return func(c *gin.Context) {
|
|
workspaceID := c.Param("workspaceId")
|
|
|
|
// Optional: comma-separated workflow IDs to keep (e.g., the seeded workflow).
|
|
var keepWorkflowIDs []string
|
|
if raw := c.Query("keep_workflows"); raw != "" {
|
|
keepWorkflowIDs = strings.Split(raw, ",")
|
|
}
|
|
|
|
ctx := c.Request.Context()
|
|
|
|
// Wipe routing state so the office-routing-* specs don't leak
|
|
// degraded health rows / route attempts / parked runs between
|
|
// each other. Office tables live in the same SQLite db so the
|
|
// task repo's connection can hit them. Tables are no-ops when
|
|
// the office routing feature isn't enabled.
|
|
for _, q := range []string{
|
|
`DELETE FROM office_run_route_attempts WHERE run_id IN (SELECT id FROM runs WHERE agent_profile_id IN (SELECT id FROM agent_profiles WHERE workspace_id = ?))`,
|
|
`DELETE FROM runs WHERE agent_profile_id IN (SELECT id FROM agent_profiles WHERE workspace_id = ?)`,
|
|
`DELETE FROM office_provider_health WHERE workspace_id = ?`,
|
|
`DELETE FROM office_workspace_routing WHERE workspace_id = ?`,
|
|
} {
|
|
if _, err := repo.DB().ExecContext(ctx, q, workspaceID); err != nil {
|
|
// Best-effort: log + continue. Some routing tables may
|
|
// not exist when the feature is gated off.
|
|
log.Warn("e2e reset: routing cleanup failed", zap.String("sql", q), zap.Error(err))
|
|
}
|
|
}
|
|
if _, err := repo.DB().ExecContext(ctx, `DELETE FROM runtime_flag_overrides`); err != nil {
|
|
log.Warn("e2e reset: runtime flag override cleanup failed", zap.Error(err))
|
|
}
|
|
if _, err := repo.DB().ExecContext(ctx, `DELETE FROM github_workspace_settings WHERE workspace_id = ?`, workspaceID); err != nil {
|
|
log.Warn("e2e reset: GitHub workspace settings cleanup failed", zap.Error(err))
|
|
}
|
|
// The workflow-sync poller reads these rows globally; delete before
|
|
// task/workflow deletion so a mid-reset tick can't resync workflows.
|
|
// The table always exists, so a failure is a genuine DB error — abort
|
|
// rather than let the poller recreate workflows mid-reset.
|
|
if _, err := repo.DB().ExecContext(ctx, `DELETE FROM workflow_sync_configs WHERE workspace_id = ?`, workspaceID); err != nil {
|
|
log.Error("e2e reset: workflow sync config cleanup failed", zap.Error(err))
|
|
c.JSON(http.StatusInternalServerError, gin.H{errKey: "workflow sync config cleanup failed"})
|
|
return
|
|
}
|
|
|
|
// Reset every agent's routing override to the inherit-markers
|
|
// shape onboarding writes. Without this, an agent-override test
|
|
// leaves the CEO pinned to a single provider, which derails
|
|
// subsequent workspace-level routing specs that expect the
|
|
// resolver to walk the full provider_order.
|
|
if _, err := repo.DB().ExecContext(ctx, `
|
|
UPDATE agent_profiles
|
|
SET settings = '{"routing":{"provider_order_source":"inherit","tier_source":"inherit"}}'
|
|
WHERE workspace_id = ?
|
|
`, workspaceID); err != nil {
|
|
log.Warn("e2e reset: agent settings reset failed", zap.Error(err))
|
|
}
|
|
|
|
// Wipe GitHub review watches (and their dedup rows + owned tasks) so
|
|
// review-watch specs stay isolated. seedData/backend are worker-scoped,
|
|
// so a watch an earlier test created stays enabled; the global review
|
|
// poller polls every enabled watch and would create a duplicate task
|
|
// for any PR a later test adds that the stale watch also matches.
|
|
// Done before task deletion so the poller can't recreate tasks mid-reset.
|
|
var deletedWatches int
|
|
if githubSvc != nil {
|
|
n, err := githubSvc.DeleteReviewWatchesByWorkspace(ctx, workspaceID)
|
|
if err != nil {
|
|
// Abort like every other cleanup below: leaving stale watches
|
|
// behind reintroduces the cross-test poller pollution this
|
|
// endpoint exists to prevent.
|
|
log.Error("e2e reset: review watch cleanup failed", zap.Error(err))
|
|
c.JSON(http.StatusInternalServerError, gin.H{errKey: err.Error()})
|
|
return
|
|
}
|
|
deletedWatches = n
|
|
}
|
|
|
|
// Route through the task service (rather than a raw SQL DELETE) so
|
|
// each delete spawns the async cleanup goroutine that stops the
|
|
// agentctl instance and releases its port. Without this, instances
|
|
// accumulate across tests in the same Playwright worker and
|
|
// eventually exhaust the per-worker port range.
|
|
const resetPageSize = 10000
|
|
tasks, total, err := repo.ListTasksByWorkspace(ctx, workspaceID, "", "", "", 1, resetPageSize, "", true, true, false, false)
|
|
if err != nil {
|
|
log.Error("e2e reset: failed to list tasks", zap.Error(err))
|
|
c.JSON(http.StatusInternalServerError, gin.H{errKey: err.Error()})
|
|
return
|
|
}
|
|
if total > resetPageSize {
|
|
// Fail loudly rather than silently leaving tasks behind, which
|
|
// would leak agentctl instances and exhaust ports.
|
|
log.Error("e2e reset: task count exceeds page size",
|
|
zap.Int("total", total), zap.Int("page_size", resetPageSize))
|
|
c.JSON(http.StatusInternalServerError, gin.H{
|
|
"error": "task count exceeds reset page size",
|
|
})
|
|
return
|
|
}
|
|
var deletedTasks int64
|
|
for _, t := range tasks {
|
|
if err := taskSvc.DeleteTask(ctx, t.ID); err != nil {
|
|
// Abort: leaving an undeleted task with its workflow gone
|
|
// would create orphan rows visible to subsequent tests.
|
|
log.Error("e2e reset: failed to delete task",
|
|
zap.String("task_id", t.ID), zap.Error(err))
|
|
c.JSON(http.StatusInternalServerError, gin.H{errKey: err.Error()})
|
|
return
|
|
}
|
|
deletedTasks++
|
|
}
|
|
|
|
deletedWorkflows, err := repo.DeleteWorkflowsByWorkspace(ctx, workspaceID, keepWorkflowIDs)
|
|
if err != nil {
|
|
log.Error("e2e reset: failed to delete workflows", zap.Error(err))
|
|
c.JSON(http.StatusInternalServerError, gin.H{errKey: err.Error()})
|
|
return
|
|
}
|
|
|
|
deletedAutomations, autoErr := deleteAutomationsForReset(ctx, automationSvc, workspaceID)
|
|
if autoErr != nil {
|
|
log.Error("e2e reset: failed to delete automations", zap.Error(autoErr))
|
|
c.JSON(http.StatusInternalServerError, gin.H{errKey: autoErr.Error()})
|
|
return
|
|
}
|
|
|
|
c.JSON(http.StatusOK, gin.H{
|
|
"deleted_tasks": deletedTasks,
|
|
"deleted_workflows": deletedWorkflows,
|
|
"deleted_automations": deletedAutomations,
|
|
"deleted_review_watches": deletedWatches,
|
|
})
|
|
}
|
|
}
|
|
|
|
func deleteAutomationsForReset(
|
|
ctx context.Context,
|
|
automationSvc *automation.Service,
|
|
workspaceID string,
|
|
) (int, error) {
|
|
if automationSvc == nil {
|
|
return 0, nil
|
|
}
|
|
return automationSvc.Store().DeleteAutomationsByWorkspace(ctx, workspaceID)
|
|
}
|
|
|
|
type e2eHiddenWorkflowRequest struct {
|
|
WorkspaceID string `json:"workspace_id"`
|
|
Name string `json:"name"`
|
|
}
|
|
|
|
func handleE2ECreateHiddenWorkflow(taskSvc *taskservice.Service, log *logger.Logger) gin.HandlerFunc {
|
|
return func(c *gin.Context) {
|
|
var body e2eHiddenWorkflowRequest
|
|
if err := c.ShouldBindJSON(&body); err != nil || body.WorkspaceID == "" || body.Name == "" {
|
|
c.JSON(http.StatusBadRequest, gin.H{errKey: "workspace_id and name are required"})
|
|
return
|
|
}
|
|
workflow, err := taskSvc.CreateWorkflow(c.Request.Context(), &taskservice.CreateWorkflowRequest{
|
|
WorkspaceID: body.WorkspaceID,
|
|
Name: body.Name,
|
|
Hidden: true,
|
|
})
|
|
if err != nil {
|
|
log.Error("e2e: failed to create hidden workflow", zap.Error(err))
|
|
c.JSON(http.StatusInternalServerError, gin.H{errKey: err.Error()})
|
|
return
|
|
}
|
|
c.JSON(http.StatusCreated, gin.H{
|
|
"id": workflow.ID,
|
|
"workspace_id": workflow.WorkspaceID,
|
|
"name": workflow.Name,
|
|
"hidden": workflow.Hidden,
|
|
})
|
|
}
|
|
}
|
|
|
|
type e2eCreateAutomationRequest struct {
|
|
WorkspaceID string `json:"workspace_id"`
|
|
Name string `json:"name"`
|
|
WorkflowID string `json:"workflow_id"`
|
|
WorkflowStepID string `json:"workflow_step_id"`
|
|
}
|
|
|
|
// handleE2ECreateAutomation seeds an automation for E2E tests via HTTP so tests
|
|
// don't require Node 24 (WS API requires a global WebSocket that isn't in Node 20).
|
|
func handleE2ECreateAutomation(svc *automation.Service, log *logger.Logger) gin.HandlerFunc {
|
|
return func(c *gin.Context) {
|
|
var body e2eCreateAutomationRequest
|
|
if err := c.ShouldBindJSON(&body); err != nil || body.WorkspaceID == "" || body.Name == "" {
|
|
c.JSON(http.StatusBadRequest, gin.H{errKey: "workspace_id and name are required"})
|
|
return
|
|
}
|
|
a, err := svc.CreateAutomation(c.Request.Context(), &automation.CreateAutomationRequest{
|
|
WorkspaceID: body.WorkspaceID,
|
|
Name: body.Name,
|
|
WorkflowID: body.WorkflowID,
|
|
WorkflowStepID: body.WorkflowStepID,
|
|
MaxConcurrentRuns: 10,
|
|
})
|
|
if err != nil {
|
|
log.Error("e2e: failed to create automation", zap.Error(err))
|
|
c.JSON(http.StatusInternalServerError, gin.H{errKey: err.Error()})
|
|
return
|
|
}
|
|
c.JSON(http.StatusCreated, gin.H{"id": a.ID, "workspace_id": a.WorkspaceID, "name": a.Name})
|
|
}
|
|
}
|
|
|
|
type e2eCreateAutomationRunRequest struct {
|
|
AutomationID string `json:"automation_id"`
|
|
Status string `json:"status"`
|
|
// TaskID optionally links the seeded run to a real task so E2E tests can
|
|
// exercise task-lifecycle interactions (e.g. archiving the task and
|
|
// asserting the run's displayed status/concurrency accounting reacts).
|
|
TaskID string `json:"task_id"`
|
|
}
|
|
|
|
// handleE2ECreateAutomationRun seeds an automation run row for E2E tests.
|
|
func handleE2ECreateAutomationRun(svc *automation.Service, log *logger.Logger) gin.HandlerFunc {
|
|
return func(c *gin.Context) {
|
|
var body e2eCreateAutomationRunRequest
|
|
if err := c.ShouldBindJSON(&body); err != nil || body.AutomationID == "" {
|
|
c.JSON(http.StatusBadRequest, gin.H{errKey: "automation_id is required"})
|
|
return
|
|
}
|
|
status := automation.RunStatus(body.Status)
|
|
if status == "" {
|
|
status = automation.RunStatusSkipped
|
|
}
|
|
run := &automation.AutomationRun{
|
|
AutomationID: body.AutomationID,
|
|
TriggerType: automation.TriggerTypeScheduled,
|
|
Status: status,
|
|
TaskID: body.TaskID,
|
|
TriggerData: []byte(`{}`),
|
|
}
|
|
if err := svc.RecordRun(c.Request.Context(), run); err != nil {
|
|
log.Error("e2e: failed to create automation run", zap.Error(err))
|
|
c.JSON(http.StatusInternalServerError, gin.H{errKey: err.Error()})
|
|
return
|
|
}
|
|
c.JSON(http.StatusCreated, gin.H{
|
|
"id": run.ID, "automation_id": run.AutomationID, statusKey: run.Status, taskIDPayloadKey: run.TaskID,
|
|
})
|
|
}
|
|
}
|