[
{
"path": ".cargo/config.toml",
"content": "[target.x86_64-apple-darwin]\nrustflags = [\n \"-C\", \"link-arg=-framework\",\n \"-C\", \"link-arg=AppKit\",\n \"-C\", \"link-arg=-framework\",\n \"-C\", \"link-arg=ApplicationServices\",\n \"-C\", \"link-arg=-framework\",\n \"-C\", \"link-arg=Foundation\",\n]\n\n[target.aarch64-apple-darwin]\nrustflags = [\n \"-C\", \"link-arg=-framework\",\n \"-C\", \"link-arg=AppKit\",\n \"-C\", \"link-arg=-framework\",\n \"-C\", \"link-arg=ApplicationServices\",\n \"-C\", \"link-arg=-framework\",\n \"-C\", \"link-arg=Foundation\",\n]\n\n[target.x86_64-pc-windows-msvc]\nrustflags = [\"-C\", \"link-arg=/DEBUG:FASTLINK\"]\n\n[target.aarch64-pc-windows-msvc]\nrustflags = [\"-C\", \"link-arg=/DEBUG:FASTLINK\"]\n"
},
{
"path": ".dockerignore",
"content": "# Node modules\nnode_modules/\n**/node_modules\n.pnpm-store/\n.pnpm/\nnpm-debug.log*\nyarn-debug.log*\nyarn-error.log*\nlerna-debug.log*\n\n# Build artifacts\n**/target/\ndist/\nbuild/\n*.tgz\n*.tar.gz\nremote-frontend/dist/\n\n# IDE and editor files\n.vscode/\n.idea/\n*.swp\n*.swo\n*~\n\n# OS generated files\n.DS_Store\n.DS_Store?\n._*\n.Spotlight-V100\n.Trashes\nehthumbs.db\nThumbs.db\n\n# Git\n.git/\n.gitignore\n\n# Repo content not needed for Docker builds\n.github/\ndocs/\ndev_assets/\ndev_assets_seed/\n\n# Docker\nDockerfile*\n.dockerignore\n\n# Environment files\n.env\n.env.local\n.env.development.local\n.env.test.local\n.env.production.local\n\n# Logs\nlogs/\n*.log\n\n# Runtime data\npids/\n*.pid\n*.seed\n*.pid.lock\n\n# Coverage directory used by tools like istanbul\ncoverage/\n\n# Temporary folders\ntmp/\ntemp/\n"
},
{
"path": ".github/actions/cargo-checks-common-setup/action.yml",
"content": "name: 'Cargo checks common setup'\ndescription: 'Common setup for cargo checks in CI'\n\ninputs:\n toolchain:\n description: 'Rust toolchain version'\n required: true\n components:\n description: 'Comma-separated rustup components'\n required: false\n default: ''\n cache-key:\n description: 'Shared key for rust-cache'\n required: true\n setup-node:\n description: 'Whether to install Node.js and pnpm'\n required: false\n default: 'false'\n setup-sqlx-cli:\n description: 'Whether to install sqlx-cli'\n required: false\n default: 'false'\n\nruns:\n using: 'composite'\n steps:\n - name: Setup Node\n if: ${{ inputs.setup-node == 'true' }}\n uses: ./.github/actions/setup-node\n\n - name: Setup sccache\n uses: BloopAI/sccache-action@main\n\n - name: Install Rust toolchain\n if: ${{ inputs.components == '' }}\n uses: dtolnay/rust-toolchain@stable\n with:\n toolchain: ${{ inputs.toolchain }}\n\n - name: Install Rust toolchain with components\n if: ${{ inputs.components != '' }}\n uses: dtolnay/rust-toolchain@stable\n with:\n toolchain: ${{ inputs.toolchain }}\n components: ${{ inputs.components }}\n\n - name: Cache Rust dependencies\n uses: Swatinem/rust-cache@v2\n env:\n RUST_CACHE_DEBUG: true\n with:\n workspaces: \".\"\n cache-provider: \"github\"\n cache-on-failure: true\n shared-key: ${{ inputs.cache-key }}\n cache-all-crates: true\n\n - name: Install sqlx-cli\n if: ${{ inputs.setup-sqlx-cli == 'true' }}\n uses: taiki-e/cache-cargo-install-action@34ce5120836e5f9f1508d8713d7fdea0e8facd6f # v3.0.1\n with:\n tool: sqlx-cli\n no-default-features: true\n features: sqlite,postgres\n"
},
{
"path": ".github/actions/setup-jsign/action.yml",
"content": "name: 'Setup Jsign'\ndescription: 'Downloads and caches Jsign for cross-platform Windows code signing'\n\ninputs:\n version:\n description: 'Jsign version'\n required: false\n default: '7.4'\n sha256:\n description: 'Expected SHA256 of the jar'\n required: false\n default: '2abf2ade9ea322acc2d60c24794eadc465ff9380938fca4c932d09e0b25f1c28'\n\noutputs:\n jar-path:\n description: 'Path to the Jsign jar'\n value: ${{ steps.path.outputs.jar }}\n\nruns:\n using: 'composite'\n steps:\n - name: Set jar path\n id: path\n shell: bash\n run: echo \"jar=${{ runner.temp }}/jsign-${{ inputs.version }}.jar\" >> $GITHUB_OUTPUT\n\n - name: Cache Jsign\n id: cache\n uses: actions/cache@v5\n with:\n path: ${{ steps.path.outputs.jar }}\n key: jsign-${{ inputs.version }}-${{ inputs.sha256 }}\n\n - name: Download Jsign\n if: steps.cache.outputs.cache-hit != 'true'\n shell: bash\n run: |\n curl -sL \"https://github.com/ebourg/jsign/releases/download/${{ inputs.version }}/jsign-${{ inputs.version }}.jar\" \\\n -o \"${{ steps.path.outputs.jar }}\"\n\n - name: Verify checksum\n shell: bash\n run: echo \"${{ inputs.sha256 }} ${{ steps.path.outputs.jar }}\" | sha256sum -c -\n"
},
{
"path": ".github/actions/setup-node/action.yml",
"content": "name: 'Setup Node.js and pnpm'\ndescription: 'Sets up Node.js and pnpm with caching'\n\nruns:\n using: 'composite'\n steps:\n - name: Setup Node.js\n uses: actions/setup-node@v4\n with:\n node-version: ${{ env.NODE_VERSION }}\n registry-url: 'https://registry.npmjs.org'\n\n - name: Setup pnpm\n uses: pnpm/action-setup@v4\n with:\n version: ${{ env.PNPM_VERSION }}\n\n - name: Get pnpm store directory\n shell: bash\n run: |\n echo \"STORE_PATH=$(pnpm store path --silent)\" >> $GITHUB_ENV\n\n - name: Setup pnpm cache\n uses: actions/cache@v4\n with:\n path: ${{ env.STORE_PATH }}\n key: ${{ runner.os }}-${{ runner.arch }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}\n restore-keys: |\n ${{ runner.os }}-${{ runner.arch }}-pnpm-store-\n"
},
{
"path": ".github/workflows/pre-release.yml",
"content": "name: Create GitHub Pre-Release\n\non:\n workflow_dispatch:\n inputs:\n version_type:\n description: \"Version bump type\"\n required: true\n default: \"patch\"\n type: choice\n options:\n - patch\n - minor\n - major\n - prerelease\n\nconcurrency:\n group: release-${{ github.ref_name }} # allow concurrent prerelease from different branches\n cancel-in-progress: true\n\npermissions:\n contents: write\n packages: write\n pull-requests: write\n\nenv:\n NODE_VERSION: 22\n PNPM_VERSION: 10.13.1\n RUST_TOOLCHAIN: nightly-2025-12-04\n CARGO_XWIN_VERSION: 0.20.2\n\njobs:\n bump-version:\n runs-on: blacksmith-4vcpu-ubuntu-2404\n outputs:\n new_tag: ${{ steps.version.outputs.new_tag }}\n new_version: ${{ steps.version.outputs.new_version }}\n branch_suffix: ${{ steps.branch.outputs.suffix }}\n steps:\n - name: Cache cargo-edit\n uses: actions/cache@v5\n id: cache-cargo-edit\n with:\n path: ~/.cargo/bin/cargo-set-version\n key: cargo-edit-${{ runner.os }}-${{ env.RUST_TOOLCHAIN }}\n\n - name: Install cargo-edit\n if: steps.cache-cargo-edit.outputs.cache-hit != 'true'\n run: cargo install cargo-edit\n\n - uses: actions/checkout@v6\n with:\n token: ${{ secrets.GITHUB_TOKEN }}\n ssh-key: ${{ secrets.DEPLOY_KEY }}\n\n - name: setup node\n uses: ./.github/actions/setup-node\n\n - name: Setup SSH Agent for private dependencies\n id: ssh-setup\n if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}\n uses: webfactory/ssh-agent@v0.9.0\n with:\n ssh-private-key: ${{ secrets.VK_PRIVATE_DEPLOY_KEY }}\n\n - name: Generate branch suffix\n id: branch\n run: |\n branch_name=\"${{ github.ref_name }}\"\n # Get last 6 characters of branch name, remove all special chars (including dashes)\n suffix=$(echo \"$branch_name\" | tail -c 7 | sed 's/[^a-zA-Z0-9]//g' | tr '[:upper:]' '[:lower:]')\n echo \"Branch: $branch_name\"\n echo \"Suffix: $suffix\"\n echo \"suffix=$suffix\" >> $GITHUB_OUTPUT\n\n - name: Determine and update versions\n id: version\n run: |\n # Get the latest version from npm registry\n latest_npm_version=$(npm view vibe-kanban version 2>/dev/null || echo \"0.0.0\")\n echo \"Latest npm version: $latest_npm_version\"\n\n # Get current repo version\n current_repo_version=$(node -p \"require('./package.json').version\")\n echo \"Current repo version: $current_repo_version\"\n\n # Use the higher of the two versions as the base (prevents downgrade errors with cargo set-version)\n base_version=$(node -e \"\n const npm = '$latest_npm_version'.split('.').map(Number);\n const repo = '$current_repo_version'.split('.').map(Number);\n for (let i = 0; i < 3; i++) {\n if ((npm[i] || 0) > (repo[i] || 0)) { console.log('$latest_npm_version'); process.exit(); }\n if ((npm[i] || 0) < (repo[i] || 0)) { console.log('$current_repo_version'); process.exit(); }\n }\n console.log('$current_repo_version');\n \")\n echo \"Base version for bump: $base_version\"\n\n timestamp=$(date +%Y%m%d%H%M%S)\n\n # Update root package.json based on base version\n if [[ \"${{ github.event.inputs.version_type }}\" == \"prerelease\" ]]; then\n # For prerelease, use current package.json version and add branch suffix\n npm version prerelease --preid=\"${{ steps.branch.outputs.suffix }}\" --no-git-tag-version\n\n new_version=$(node -p \"require('./package.json').version\")\n new_tag=\"v${new_version}.${timestamp}\"\n else\n # For regular releases, use base version and bump it\n npm version $base_version --no-git-tag-version --allow-same-version\n npm version ${{ github.event.inputs.version_type }} --no-git-tag-version\n\n new_version=$(node -p \"require('./package.json').version\")\n new_tag=\"v${new_version}-${timestamp}\"\n fi\n\n # Update npx-cli package.json to match\n (\n cd npx-cli\n npm version $new_version --no-git-tag-version --allow-same-version\n )\n\n # Update web app package.json to match\n (\n cd packages/local-web\n npm version $new_version --no-git-tag-version --allow-same-version\n )\n\n cargo set-version --workspace \"$new_version\"\n\n node -e \"\n const fs = require('fs');\n const path = 'crates/tauri-app/tauri.conf.json';\n const conf = JSON.parse(fs.readFileSync(path, 'utf8'));\n conf.version = '$new_version';\n fs.writeFileSync(path, JSON.stringify(conf, null, 2) + '\\n');\n \"\n\n echo \"New version: $new_version\"\n echo \"new_version=$new_version\" >> $GITHUB_OUTPUT\n echo \"new_tag=$new_tag\" >> $GITHUB_OUTPUT\n\n - name: Update remote crate lockfile\n if: ${{ steps.ssh-setup.outcome == 'success' }}\n run: cargo metadata --format-version 1 --manifest-path crates/remote/Cargo.toml > /dev/null\n\n - name: Update relay-tunnel crate lockfile\n run: cargo metadata --format-version 1 --manifest-path crates/relay-tunnel/Cargo.toml > /dev/null\n\n - name: Stop SSH agent\n if: ${{ steps.ssh-setup.outcome == 'success' }}\n run: ssh-agent -k\n\n - name: Commit changes and create tag\n run: |\n git config --local user.email \"action@github.com\"\n git config --local user.name \"GitHub Action\"\n git add package.json pnpm-lock.yaml npx-cli/package.json npx-cli/package-lock.json packages/local-web/package.json crates/tauri-app/tauri.conf.json Cargo.lock\n git add $(find . -name Cargo.toml)\n [ -f crates/remote/Cargo.lock ] && git add crates/remote/Cargo.lock || true\n [ -f crates/relay-tunnel/Cargo.lock ] && git add crates/relay-tunnel/Cargo.lock || true\n git commit -m \"chore: bump version to ${{ steps.version.outputs.new_version }}\"\n git tag -a ${{ steps.version.outputs.new_tag }} -m \"Release ${{ steps.version.outputs.new_tag }}\"\n git push\n git push --tags\n\n build-frontend:\n needs: bump-version\n runs-on: blacksmith-16vcpu-ubuntu-2404\n env:\n VITE_PUBLIC_REACT_VIRTUOSO_LICENSE_KEY: ${{ secrets.PUBLIC_REACT_VIRTUOSO_LICENSE_KEY }}\n VITE_VK_SHARED_API_BASE: ${{ secrets.VK_SHARED_API_BASE }}\n steps:\n - uses: actions/checkout@v6\n with:\n ref: ${{ needs.bump-version.outputs.new_tag }}\n\n - name: Setup Node\n uses: ./.github/actions/setup-node\n\n - name: Install dependencies\n run: pnpm install\n\n - name: Lint frontend\n run: cd packages/local-web && npm run lint\n\n - name: Type check frontend\n run: cd packages/local-web && npx tsc --noEmit\n\n - name: Build frontend\n run: cd packages/local-web && npm run build\n env:\n SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}\n VITE_POSTHOG_API_KEY: ${{ secrets.POSTHOG_API_KEY }}\n VITE_POSTHOG_API_ENDPOINT: ${{ secrets.POSTHOG_API_ENDPOINT }}\n VITE_SENTRY_DSN: ${{ secrets.SENTRY_DSN }}\n\n - name: Create Sentry release\n uses: getsentry/action-release@v3\n env:\n SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}\n SENTRY_ORG: ${{ secrets.SENTRY_ORG }}\n SENTRY_PROJECT: ${{ secrets.SENTRY_PROJECT }}\n with:\n release: ${{ needs.bump-version.outputs.new_version }}\n environment: production\n sourcemaps: \"./packages/local-web/dist\"\n ignore_missing: true\n\n - name: Upload frontend artifact\n uses: actions/upload-artifact@v6\n with:\n name: frontend-dist\n path: packages/local-web/dist/\n retention-days: 1\n\n build-backend:\n needs: [bump-version, build-frontend]\n runs-on: ${{ matrix.os }}\n strategy:\n # Platform matrix - keep target/name in sync with package-npx-cli job\n matrix:\n include:\n - target: x86_64-unknown-linux-musl\n os: blacksmith-16vcpu-ubuntu-2404\n name: linux-x64\n - target: aarch64-unknown-linux-musl\n os: blacksmith-16vcpu-ubuntu-2404-arm\n name: linux-arm64\n - target: x86_64-pc-windows-msvc\n os: blacksmith-16vcpu-ubuntu-2404\n name: windows-x64\n - target: x86_64-apple-darwin\n os: macos-15-xlarge\n name: macos-x64\n - target: aarch64-apple-darwin\n os: macos-15-xlarge\n name: macos-arm64\n - target: aarch64-pc-windows-msvc\n os: blacksmith-16vcpu-ubuntu-2404\n name: windows-arm64\n env:\n CARGO_INCREMENTAL: \"0\"\n SCCACHE_GHA_ENABLED: \"true\"\n RUSTC_WRAPPER: \"sccache\"\n SCCACHE_CACHE_SIZE: \"10G\"\n CARGO_HOME: ${{ github.workspace }}/.cargo\n RUSTUP_HOME: ${{ github.workspace }}/.rustup\n XWIN_CACHE_DIR: ${{ github.workspace }}/.xwin-cache\n steps:\n - uses: actions/checkout@v6\n with:\n ref: ${{ needs.bump-version.outputs.new_tag }}\n\n - name: Setup sccache\n uses: BloopAI/sccache-action@main\n\n - name: Cache Rust toolchain\n uses: actions/cache@v5\n with:\n path: .rustup/toolchains\n key: rust-toolchain-${{ runner.os }}-${{ matrix.target }}-${{ env.RUST_TOOLCHAIN }}\n\n - name: Install Rust toolchain\n uses: dtolnay/rust-toolchain@stable\n with:\n toolchain: ${{ env.RUST_TOOLCHAIN }}\n targets: ${{ matrix.target }}\n components: rustfmt, clippy\n\n - name: Install dependencies (Linux)\n if: runner.os == 'Linux'\n run: |\n sudo apt-get update\n DEBIAN_FRONTEND=noninteractive sudo apt-get install -y clang libclang-dev lld llvm nasm cmake ninja-build\n\n if [[ \"${{ matrix.target }}\" == *\"windows\"* ]]; then\n DEBIAN_FRONTEND=noninteractive sudo apt-get install -y clang-19 clang-tools-19 llvm-19 lld-19\n echo \"/usr/lib/llvm-19/bin\" >> $GITHUB_PATH\n fi\n\n - name: Cache Cargo registry\n uses: actions/cache@v5\n with:\n path: |\n .cargo/registry/cache\n .cargo/registry/index\n .cargo/git/db\n .cargo/bin\n .cargo/.crates.toml\n .cargo/.crates2.json\n key: cargo-${{ runner.os }}-${{ env.RUST_TOOLCHAIN }}-${{ matrix.target }}-${{ hashFiles('**/Cargo.lock') }}\n restore-keys: |\n cargo-${{ runner.os }}-${{ env.RUST_TOOLCHAIN }}-${{ matrix.target }}-\n\n - name: Install Zig\n if: runner.os == 'Linux' && !contains(matrix.target, 'windows')\n uses: BloopAI/setup-zig@main\n with:\n version: 0.15.2\n\n - name: Install cargo zigbuild\n if: runner.os == 'Linux' && !contains(matrix.target, 'windows')\n run: cargo install --locked cargo-zigbuild --version 0.20.1\n\n - name: Install cargo xwin\n if: runner.os == 'Linux' && contains(matrix.target, 'windows')\n run: cargo install --locked cargo-xwin --version ${{ env.CARGO_XWIN_VERSION }}\n\n - name: Cache xwin downloads\n if: runner.os == 'Linux' && contains(matrix.target, 'windows')\n uses: actions/cache@v5\n with:\n path: ${{ github.workspace }}/.xwin-cache\n key: xwin-${{ runner.os }}-${{ matrix.target }}-cargo-xwin-${{ env.CARGO_XWIN_VERSION }}\n\n - name: Cache target\n uses: actions/cache@v5\n with:\n path: target\n key: target-${{ runner.os }}-${{ env.RUST_TOOLCHAIN }}-${{ matrix.target }}-${{ github.ref_name }}-${{ github.sha }}\n restore-keys: |\n target-${{ runner.os }}-${{ env.RUST_TOOLCHAIN }}-${{ matrix.target }}-${{ github.ref_name }}-\n target-${{ runner.os }}-${{ env.RUST_TOOLCHAIN }}-${{ matrix.target }}-\n\n - name: Setup cargo-sweep\n shell: bash\n run: |\n cargo install --locked cargo-sweep --version 0.8.0\n\n - name: Download frontend artifact\n uses: actions/download-artifact@v7\n with:\n name: frontend-dist\n path: packages/local-web/dist/\n\n - name: Build backend (Linux)\n if: runner.os == 'Linux' && !contains(matrix.target, 'windows')\n run: |\n cargo zigbuild --release --target ${{ matrix.target }} -p server -p mcp -p review --bin server --bin vibe-kanban-mcp --bin review\n env:\n POSTHOG_API_KEY: ${{ secrets.POSTHOG_API_KEY }}\n POSTHOG_API_ENDPOINT: ${{ secrets.POSTHOG_API_ENDPOINT }}\n VK_SHARED_API_BASE: ${{ secrets.VK_SHARED_API_BASE }}\n VK_SHARED_RELAY_API_BASE: ${{ secrets.VK_SHARED_RELAY_API_BASE }}\n SENTRY_DSN: ${{ secrets.SENTRY_DSN }}\n\n - name: Build backend (macOS)\n if: runner.os == 'macOS'\n run: |\n if [[ \"${{ matrix.target }}\" == \"x86_64-apple-darwin\" ]]; then\n export MACOSX_DEPLOYMENT_TARGET=10.12\n elif [[ \"${{ matrix.target }}\" == \"aarch64-apple-darwin\" ]]; then\n export MACOSX_DEPLOYMENT_TARGET=11.0\n fi\n cargo build --release --target ${{ matrix.target }} -p server -p mcp -p review --bin server --bin vibe-kanban-mcp --bin review\n env:\n POSTHOG_API_KEY: ${{ secrets.POSTHOG_API_KEY }}\n POSTHOG_API_ENDPOINT: ${{ secrets.POSTHOG_API_ENDPOINT }}\n VK_SHARED_API_BASE: ${{ secrets.VK_SHARED_API_BASE }}\n VK_SHARED_RELAY_API_BASE: ${{ secrets.VK_SHARED_RELAY_API_BASE }}\n SENTRY_DSN: ${{ secrets.SENTRY_DSN }}\n\n - name: Build backend (Windows)\n if: runner.os == 'Linux' && contains(matrix.target, 'windows')\n run: |\n if [[ \"${{ matrix.target }}\" == \"aarch64-pc-windows-msvc\" ]]; then\n # ring requires clang on arm64 windows. See https://github.com/briansmith/ring/issues/2117\n chmod +x scripts/ring-cc-wrapper.sh scripts/clang\n export PATH=\"${{ github.workspace }}/scripts:$PATH\"\n export RING_CC=/usr/lib/llvm-19/bin/clang\n export DEFAULT_CC=clang-cl\n export CC_aarch64_pc_windows_msvc=\"${{ github.workspace }}/scripts/ring-cc-wrapper.sh\"\n fi\n cargo xwin build --cross-compiler clang-cl --release --target ${{ matrix.target }} -p server -p mcp -p review --bin server --bin vibe-kanban-mcp --bin review\n env:\n POSTHOG_API_KEY: ${{ secrets.POSTHOG_API_KEY }}\n POSTHOG_API_ENDPOINT: ${{ secrets.POSTHOG_API_ENDPOINT }}\n VK_SHARED_API_BASE: ${{ secrets.VK_SHARED_API_BASE }}\n VK_SHARED_RELAY_API_BASE: ${{ secrets.VK_SHARED_RELAY_API_BASE }}\n SENTRY_DSN: ${{ secrets.SENTRY_DSN }}\n # Avoid aws-lc-sys CMake failures when Rust's `release` profile includes debug info.\n # Without this, cmake-rs selects RelWithDebInfo and CMake fails when ASM is enabled.\n CARGO_PROFILE_RELEASE_DEBUG: 0\n\n - name: Setup Sentry CLI\n uses: matbour/setup-sentry-cli@v2\n with:\n token: ${{ secrets.SENTRY_AUTH_TOKEN }}\n organization: ${{ secrets.SENTRY_ORG }}\n project: ${{ secrets.SENTRY_PROJECT }}\n version: 2.21.2\n\n - name: Upload source maps to Sentry\n run: sentry-cli debug-files upload --include-sources target/${{ matrix.target }}/release\n\n - name: Prepare binaries (non-macOS)\n if: runner.os != 'macOS'\n shell: bash\n run: |\n mkdir -p dist\n if [[ \"${{ matrix.name }}\" == *\"windows\"* ]]; then\n cp target/${{ matrix.target }}/release/server.exe dist/vibe-kanban-${{ matrix.name }}.exe\n cp target/${{ matrix.target }}/release/vibe-kanban-mcp.exe dist/vibe-kanban-mcp-${{ matrix.name }}.exe\n cp target/${{ matrix.target }}/release/review.exe dist/vibe-kanban-review-${{ matrix.name }}.exe\n else\n cp target/${{ matrix.target }}/release/server dist/vibe-kanban-${{ matrix.name }}\n cp target/${{ matrix.target }}/release/vibe-kanban-mcp dist/vibe-kanban-mcp-${{ matrix.name }}\n cp target/${{ matrix.target }}/release/review dist/vibe-kanban-review-${{ matrix.name }}\n fi\n\n # Code signing for macOS only\n - name: Prepare Apple certificate (macOS)\n if: runner.os == 'macOS'\n run: |\n echo \"${{ secrets.APPLE_CERTIFICATE_P12_BASE64 }}\" | base64 --decode > certificate.p12\n\n - name: Write API Key to file\n if: runner.os == 'macOS'\n env:\n API_KEY: ${{ secrets.APP_STORE_API_KEY }}\n run: echo $API_KEY > app_store_key.json\n\n - name: Sign main binary (macOS)\n if: runner.os == 'macOS'\n uses: BloopAI/apple-code-sign-action@v1\n with:\n input_path: target/${{ matrix.target }}/release/server\n output_path: vibe-kanban\n p12_file: certificate.p12\n p12_password: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}\n sign: true\n sign_args: \"--code-signature-flags=runtime\"\n\n - name: Package main binary (macOS)\n if: runner.os == 'macOS'\n run: zip vibe-kanban.zip vibe-kanban\n\n - name: Sign MCP binary (macOS)\n if: runner.os == 'macOS'\n uses: BloopAI/apple-code-sign-action@v1\n with:\n input_path: target/${{ matrix.target }}/release/vibe-kanban-mcp\n output_path: vibe-kanban-mcp\n p12_file: certificate.p12\n p12_password: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}\n sign: true\n sign_args: \"--code-signature-flags=runtime\"\n\n - name: Package MCP binary (macOS)\n if: runner.os == 'macOS'\n run: zip vibe-kanban-mcp.zip vibe-kanban-mcp\n\n - name: Sign Review binary (macOS)\n if: runner.os == 'macOS'\n uses: BloopAI/apple-code-sign-action@v1\n with:\n input_path: target/${{ matrix.target }}/release/review\n output_path: vibe-kanban-review\n p12_file: certificate.p12\n p12_password: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}\n sign: true\n sign_args: \"--code-signature-flags=runtime\"\n\n - name: Package Review binary (macOS)\n if: runner.os == 'macOS'\n run: zip vibe-kanban-review.zip vibe-kanban-review\n\n - name: Notarize signed binaries (macOS)\n if: runner.os == 'macOS'\n uses: BloopAI/apple-code-sign-action@main\n continue-on-error: true\n with:\n input_path: |\n vibe-kanban.zip\n vibe-kanban-mcp.zip\n vibe-kanban-review.zip\n sign: false\n notarize: true\n app_store_connect_api_key_json_file: app_store_key.json\n\n - name: Prepare signed binaries (macOS)\n if: runner.os == 'macOS'\n run: |\n mkdir -p dist\n cp vibe-kanban.zip dist/vibe-kanban-${{ matrix.name }}.zip\n cp vibe-kanban-mcp.zip dist/vibe-kanban-mcp-${{ matrix.name }}.zip\n cp vibe-kanban-review.zip dist/vibe-kanban-review-${{ matrix.name }}.zip\n\n - name: Clean up certificates (macOS)\n if: runner.os == 'macOS'\n run: |\n rm -f certificate.p12\n rm -rf private_keys/\n\n - name: Upload binary artifact\n uses: actions/upload-artifact@v6\n with:\n name: backend-binary-${{ matrix.name }}\n path: dist/\n retention-days: 1\n\n - name: Sweep Cargo target cache\n shell: bash\n run: |\n cargo sweep --maxsize 10GB\n cargo sweep --time 30\n\n\n package-npx-cli:\n needs: [bump-version, build-frontend, build-backend]\n runs-on: blacksmith-4vcpu-ubuntu-2404\n strategy:\n # NOTE: This matrix must be kept in sync with build-backend job above\n # GitHub Actions doesn't support YAML anchors, so duplication is unavoidable\n matrix:\n include:\n - target: x86_64-unknown-linux-musl\n name: linux-x64\n binary: vibe-kanban\n mcp_binary: vibe-kanban-mcp\n review_binary: vibe-kanban-review\n - target: x86_64-pc-windows-msvc\n name: windows-x64\n binary: vibe-kanban.exe\n mcp_binary: vibe-kanban-mcp.exe\n review_binary: vibe-kanban-review.exe\n - target: x86_64-apple-darwin\n name: macos-x64\n binary: vibe-kanban\n mcp_binary: vibe-kanban-mcp\n review_binary: vibe-kanban-review\n - target: aarch64-apple-darwin\n name: macos-arm64\n binary: vibe-kanban\n mcp_binary: vibe-kanban-mcp\n review_binary: vibe-kanban-review\n - target: aarch64-pc-windows-msvc\n name: windows-arm64\n binary: vibe-kanban.exe\n mcp_binary: vibe-kanban-mcp.exe\n review_binary: vibe-kanban-review.exe\n - target: aarch64-unknown-linux-musl\n name: linux-arm64\n binary: vibe-kanban\n mcp_binary: vibe-kanban-mcp\n review_binary: vibe-kanban-review\n steps:\n - uses: actions/checkout@v6\n with:\n ref: ${{ needs.bump-version.outputs.new_tag }}\n\n - name: Download frontend artifact\n uses: actions/download-artifact@v7\n with:\n name: frontend-dist\n path: packages/local-web/dist/\n\n - name: Download backend binary artifact\n uses: actions/download-artifact@v7\n with:\n name: backend-binary-${{ matrix.name }}\n path: dist/\n\n - name: List downloaded artifacts\n run: |\n echo \"Downloaded backend binaries:\"\n find dist/\n\n - name: Create platform package\n if: matrix.name != 'macos-arm64' && matrix.name != 'macos-x64'\n run: |\n mkdir -p npx-cli/dist/${{ matrix.name }}\n mkdir vibe-kanban-${{ matrix.name }}\n mkdir vibe-kanban-mcp-${{ matrix.name }}\n mkdir vibe-kanban-review-${{ matrix.name }}\n\n cp dist/vibe-kanban-${{ matrix.name }}* vibe-kanban-${{ matrix.name }}/${{ matrix.binary }}\n cp dist/vibe-kanban-mcp-${{ matrix.name }}* vibe-kanban-mcp-${{ matrix.name }}/${{ matrix.mcp_binary }}\n cp dist/vibe-kanban-review-${{ matrix.name }}* vibe-kanban-review-${{ matrix.name }}/${{ matrix.review_binary }}\n\n zip -j npx-cli/dist/${{ matrix.name }}/vibe-kanban.zip vibe-kanban-${{ matrix.name }}/${{ matrix.binary }}\n zip -j npx-cli/dist/${{ matrix.name }}/vibe-kanban-mcp.zip vibe-kanban-mcp-${{ matrix.name }}/${{ matrix.mcp_binary }}\n zip -j npx-cli/dist/${{ matrix.name }}/vibe-kanban-review.zip vibe-kanban-review-${{ matrix.name }}/${{ matrix.review_binary }}\n\n - name: Create platform package (macOS)\n if: matrix.name == 'macos-arm64' || matrix.name == 'macos-x64'\n run: |\n mkdir -p npx-cli/dist/${{ matrix.name }}\n mkdir vibe-kanban-${{ matrix.name }}\n cp dist/vibe-kanban-${{ matrix.name }}* npx-cli/dist/${{ matrix.name }}/vibe-kanban.zip\n cp dist/vibe-kanban-mcp-${{ matrix.name }}* npx-cli/dist/${{ matrix.name }}/vibe-kanban-mcp.zip\n cp dist/vibe-kanban-review-${{ matrix.name }}* npx-cli/dist/${{ matrix.name }}/vibe-kanban-review.zip\n\n - name: Upload platform package artifact\n uses: actions/upload-artifact@v6\n with:\n name: npx-platform-${{ matrix.name }}\n path: npx-cli/dist/\n retention-days: 1\n\n upload-to-r2:\n needs: [bump-version, package-npx-cli]\n runs-on: blacksmith-4vcpu-ubuntu-2404\n steps:\n - uses: actions/checkout@v6\n with:\n ref: ${{ needs.bump-version.outputs.new_tag }}\n\n - name: Download all platform packages\n uses: actions/download-artifact@v7\n with:\n pattern: npx-platform-*\n path: binaries/\n merge-multiple: true\n\n - name: List downloaded binaries\n run: |\n echo \"Downloaded binaries:\"\n find binaries/\n\n - name: Configure AWS CLI for R2\n run: |\n aws configure set aws_access_key_id ${{ secrets.R2_BINARIES_ACCESS_KEY_ID }}\n aws configure set aws_secret_access_key ${{ secrets.R2_BINARIES_SECRET_ACCESS_KEY }}\n aws configure set default.region auto\n\n - name: Generate manifest and upload to R2\n run: |\n TAG=\"${{ needs.bump-version.outputs.new_tag }}\"\n ENDPOINT=\"${{ secrets.R2_BINARIES_ENDPOINT }}\"\n BUCKET=\"${{ secrets.R2_BINARIES_BUCKET }}\"\n\n # Generate version manifest with checksums\n node -e \"\n const fs = require('fs');\n const crypto = require('crypto');\n const manifest = { version: '$TAG', platforms: {} };\n const platforms = ['linux-x64', 'linux-arm64', 'windows-x64', 'windows-arm64', 'macos-x64', 'macos-arm64'];\n const binaries = ['vibe-kanban', 'vibe-kanban-mcp', 'vibe-kanban-review'];\n\n for (const platform of platforms) {\n manifest.platforms[platform] = {};\n for (const binary of binaries) {\n const zipPath = \\`binaries/\\${platform}/\\${binary}.zip\\`;\n if (fs.existsSync(zipPath)) {\n const data = fs.readFileSync(zipPath);\n manifest.platforms[platform][binary] = {\n sha256: crypto.createHash('sha256').update(data).digest('hex'),\n size: data.length\n };\n }\n }\n }\n fs.writeFileSync('version-manifest.json', JSON.stringify(manifest, null, 2));\n console.log('Generated manifest:');\n console.log(JSON.stringify(manifest, null, 2));\n \"\n\n # Upload binaries (use full tag for path, allows multiple pre-releases to coexist)\n for platform in linux-x64 linux-arm64 windows-x64 windows-arm64 macos-x64 macos-arm64; do\n for binary in vibe-kanban vibe-kanban-mcp vibe-kanban-review; do\n if [ -f \"binaries/$platform/$binary.zip\" ]; then\n echo \"Uploading binaries/$platform/$binary.zip...\"\n aws s3 cp \"binaries/$platform/$binary.zip\" \\\n \"s3://$BUCKET/binaries/$TAG/$platform/$binary.zip\" \\\n --endpoint-url \"$ENDPOINT\"\n fi\n done\n done\n\n # Upload version manifest\n echo \"Uploading version manifest...\"\n aws s3 cp version-manifest.json \\\n \"s3://$BUCKET/binaries/$TAG/manifest.json\" \\\n --endpoint-url \"$ENDPOINT\" --content-type \"application/json\"\n\n # Update global manifest\n VERSION=\"${{ needs.bump-version.outputs.new_version }}\"\n echo \"Updating global manifest...\"\n echo \"{\\\"latest\\\": \\\"$VERSION\\\"}\" | aws s3 cp - \\\n \"s3://$BUCKET/binaries/manifest.json\" \\\n --endpoint-url \"$ENDPOINT\" --content-type \"application/json\"\n\n - name: Verify upload\n run: |\n TAG=\"${{ needs.bump-version.outputs.new_tag }}\"\n ENDPOINT=\"${{ secrets.R2_BINARIES_ENDPOINT }}\"\n BUCKET=\"${{ secrets.R2_BINARIES_BUCKET }}\"\n\n echo \"Listing uploaded files...\"\n aws s3 ls \"s3://$BUCKET/binaries/$TAG/\" \\\n --endpoint-url \"$ENDPOINT\" \\\n --recursive\n\n build-tauri:\n needs: [bump-version, build-frontend]\n runs-on: ${{ matrix.os }}\n defaults:\n run:\n shell: bash\n strategy:\n matrix:\n include:\n - target: aarch64-apple-darwin\n os: macos-15-xlarge\n platform: darwin-aarch64\n - target: x86_64-apple-darwin\n os: macos-15-xlarge\n platform: darwin-x86_64\n - target: x86_64-unknown-linux-gnu\n os: blacksmith-16vcpu-ubuntu-2404\n platform: linux-x86_64\n - target: aarch64-unknown-linux-gnu\n os: blacksmith-16vcpu-ubuntu-2404-arm\n platform: linux-aarch64\n - target: x86_64-pc-windows-msvc\n os: blacksmith-16vcpu-ubuntu-2404\n platform: windows-x86_64\n - target: aarch64-pc-windows-msvc\n os: blacksmith-16vcpu-ubuntu-2404\n platform: windows-aarch64\n env:\n CARGO_INCREMENTAL: \"0\"\n SCCACHE_GHA_ENABLED: \"true\"\n RUSTC_WRAPPER: \"sccache\"\n SCCACHE_CACHE_SIZE: \"10G\"\n CARGO_HOME: ${{ github.workspace }}/.cargo\n RUSTUP_HOME: ${{ github.workspace }}/.rustup\n XWIN_CACHE_DIR: ${{ github.workspace }}/.xwin-cache\n steps:\n - uses: actions/checkout@v6\n with:\n ref: ${{ needs.bump-version.outputs.new_tag }}\n\n - name: Setup sccache\n uses: BloopAI/sccache-action@main\n\n - name: Cache Rust toolchain\n uses: actions/cache@v5\n with:\n path: .rustup/toolchains\n key: rust-toolchain-${{ runner.os }}-${{ matrix.target }}-${{ env.RUST_TOOLCHAIN }}\n\n - name: Install Rust toolchain\n uses: dtolnay/rust-toolchain@stable\n with:\n toolchain: ${{ env.RUST_TOOLCHAIN }}\n targets: ${{ matrix.target }}\n\n - name: Cache Cargo registry\n uses: actions/cache@v5\n with:\n path: |\n .cargo/registry/cache\n .cargo/registry/index\n .cargo/git/db\n .cargo/bin\n .cargo/.crates.toml\n .cargo/.crates2.json\n key: cargo-tauri-${{ runner.os }}-${{ env.RUST_TOOLCHAIN }}-${{ matrix.target }}-${{ hashFiles('**/Cargo.lock') }}\n restore-keys: |\n cargo-tauri-${{ runner.os }}-${{ env.RUST_TOOLCHAIN }}-${{ matrix.target }}-\n\n - name: Cache target\n uses: actions/cache@v5\n with:\n path: target\n key: tauri-target-${{ runner.os }}-${{ env.RUST_TOOLCHAIN }}-${{ matrix.target }}-${{ github.ref_name }}-${{ github.sha }}\n restore-keys: |\n tauri-target-${{ runner.os }}-${{ env.RUST_TOOLCHAIN }}-${{ matrix.target }}-${{ github.ref_name }}-\n tauri-target-${{ runner.os }}-${{ env.RUST_TOOLCHAIN }}-${{ matrix.target }}-\n\n - name: Setup cargo-sweep\n run: cargo install --locked cargo-sweep --version 0.8.0\n\n - name: Setup Node\n uses: ./.github/actions/setup-node\n\n - name: Install Linux dependencies\n if: runner.os == 'Linux' && contains(matrix.target, 'linux')\n run: |\n sudo apt-get update\n sudo apt-get install -y libwebkit2gtk-4.1-dev build-essential \\\n libssl-dev libayatana-appindicator3-dev librsvg2-dev \\\n libxdo-dev file pkg-config xdg-utils\n\n - name: Install Windows cross-compilation dependencies\n if: runner.os == 'Linux' && contains(matrix.target, 'windows')\n run: |\n sudo apt-get update\n DEBIAN_FRONTEND=noninteractive sudo apt-get install -y \\\n clang libclang-dev lld llvm nasm cmake ninja-build nsis \\\n clang-19 clang-tools-19 llvm-19 lld-19 \\\n meson valac bison gobject-introspection libgirepository1.0-dev \\\n libglib2.0-dev libgsf-1-dev libgcab-dev libmsi-dev\n echo \"/usr/lib/llvm-19/bin\" >> $GITHUB_PATH\n\n - name: Build and install wixl\n if: runner.os == 'Linux' && contains(matrix.target, 'windows')\n env:\n RUSTC_WRAPPER: \"\"\n run: |\n cd /tmp\n curl -sL https://download.gnome.org/sources/msitools/0.103/msitools-0.103.tar.xz | tar xJ\n cd msitools-0.103\n meson setup builddir --prefix=/usr\n meson compile -C builddir wixl\n sudo install -m755 builddir/tools/wixl/wixl /usr/local/bin/wixl\n sudo install -m644 builddir/libmsi/libmsi-1.0.so.0.0.0 /usr/local/lib/\n sudo ln -sf libmsi-1.0.so.0.0.0 /usr/local/lib/libmsi-1.0.so.0\n sudo ln -sf libmsi-1.0.so.0 /usr/local/lib/libmsi-1.0.so\n sudo ldconfig\n sudo mkdir -p /usr/share/wixl-0.103/ext\n sudo cp -r data/ext/ui /usr/share/wixl-0.103/ext/\n cd / && rm -rf /tmp/msitools-0.103\n wixl --version\n\n - name: Install cargo-xwin\n if: runner.os == 'Linux' && contains(matrix.target, 'windows')\n run: cargo install --locked cargo-xwin --version ${{ env.CARGO_XWIN_VERSION }}\n\n - name: Cache xwin downloads\n if: runner.os == 'Linux' && contains(matrix.target, 'windows')\n uses: actions/cache@v5\n with:\n path: ${{ github.workspace }}/.xwin-cache\n key: xwin-${{ runner.os }}-${{ matrix.target }}-cargo-xwin-${{ env.CARGO_XWIN_VERSION }}\n\n - name: Install dependencies\n run: pnpm install\n\n - name: Install Tauri CLI\n uses: taiki-e/cache-cargo-install-action@34ce5120836e5f9f1508d8713d7fdea0e8facd6f # v3.0.1\n with:\n tool: tauri-cli@2\n\n - name: Download frontend artifact\n uses: actions/download-artifact@v7\n with:\n name: frontend-dist\n path: packages/local-web/dist/\n\n - name: Patch tauri.conf.json for CI\n run: |\n node -e \"\n const fs = require('fs');\n const conf = JSON.parse(fs.readFileSync('crates/tauri-app/tauri.conf.json', 'utf8'));\n // Inject the real updater endpoint (replaces __TAURI_UPDATE_ENDPOINT__ placeholder)\n const endpoint = '${{ secrets.R2_BINARIES_PUBLIC_URL }}/binaries/tauri-update/latest.json';\n conf.plugins.updater.endpoints = conf.plugins.updater.endpoints.map(e =>\n e === '__TAURI_UPDATE_ENDPOINT__' ? endpoint : e\n );\n fs.writeFileSync('crates/tauri-app/tauri.conf.json', JSON.stringify(conf, null, 2) + '\\n');\n \"\n\n - name: Set up Apple notarization key\n if: runner.os == 'macOS'\n env:\n API_KEY_ID: ${{ secrets.APPLE_API_KEY_ID }}\n API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}\n API_PRIVATE_KEY: ${{ secrets.APPLE_API_PRIVATE_KEY }}\n run: |\n # Write the .p8 key file where Tauri/notarytool can find it\n mkdir -p ~/.private_keys\n KEY_PATH=\"$HOME/.private_keys/AuthKey_${API_KEY_ID}.p8\"\n printf '%s' \"$API_PRIVATE_KEY\" > \"$KEY_PATH\"\n\n echo \"APPLE_API_KEY=$API_KEY_ID\" >> $GITHUB_ENV\n echo \"APPLE_API_ISSUER=$API_ISSUER\" >> $GITHUB_ENV\n echo \"APPLE_API_KEY_PATH=$KEY_PATH\" >> $GITHUB_ENV\n\n - name: Build Tauri app\n run: |\n if [[ \"${{ matrix.target }}\" == \"aarch64-pc-windows-msvc\" ]]; then\n # ring requires clang on arm64 windows cross-compile\n chmod +x scripts/ring-cc-wrapper.sh scripts/clang\n export PATH=\"${{ github.workspace }}/scripts:$PATH\"\n export RING_CC=/usr/lib/llvm-19/bin/clang\n export DEFAULT_CC=clang-cl\n export CC_aarch64_pc_windows_msvc=\"${{ github.workspace }}/scripts/ring-cc-wrapper.sh\"\n export CARGO_PROFILE_RELEASE_DEBUG=0\n fi\n\n if [[ \"${{ matrix.target }}\" == *\"windows\"* ]]; then\n cargo tauri build --runner cargo-xwin --target ${{ matrix.target }} --ci\n else\n cargo tauri build --target ${{ matrix.target }} --ci\n fi\n env:\n TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}\n TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}\n APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE_P12_BASE64 }}\n APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}\n APPLE_SIGNING_IDENTITY: ${{ secrets.APPLE_SIGNING_IDENTITY }}\n APPLE_API_KEY: ${{ env.APPLE_API_KEY }}\n APPLE_API_ISSUER: ${{ env.APPLE_API_ISSUER }}\n APPLE_API_KEY_PATH: ${{ env.APPLE_API_KEY_PATH }}\n POSTHOG_API_KEY: ${{ secrets.POSTHOG_API_KEY }}\n POSTHOG_API_ENDPOINT: ${{ secrets.POSTHOG_API_ENDPOINT }}\n VK_SHARED_API_BASE: ${{ secrets.VK_SHARED_API_BASE }}\n VK_SHARED_RELAY_API_BASE: ${{ secrets.VK_SHARED_RELAY_API_BASE }}\n SENTRY_DSN: ${{ secrets.SENTRY_DSN }}\n\n - name: Build MSI with wixl\n if: contains(matrix.target, 'windows')\n run: |\n node scripts/build-tauri-msi.js \\\n --target ${{ matrix.target }} \\\n --version ${{ needs.bump-version.outputs.new_version }}\n\n - name: Setup Jsign\n if: contains(matrix.target, 'windows')\n id: jsign\n uses: ./.github/actions/setup-jsign\n\n - name: Install JRE for Jsign\n if: contains(matrix.target, 'windows')\n run: |\n sudo apt-get update\n sudo apt-get install -y default-jre-headless\n\n - name: Azure CLI login\n if: contains(matrix.target, 'windows') && env.AZURE_ENDPOINT != ''\n uses: azure/login@v2\n with:\n creds: '{\"clientId\":\"${{ secrets.AZURE_CLIENT_ID }}\",\"clientSecret\":\"${{ secrets.AZURE_CLIENT_SECRET }}\",\"tenantId\":\"${{ secrets.AZURE_TENANT_ID }}\"}'\n allow-no-subscriptions: true\n env:\n AZURE_ENDPOINT: ${{ secrets.AZURE_ENDPOINT }}\n\n - name: Sign Windows artifacts with Azure Trusted Signing\n if: contains(matrix.target, 'windows') && env.AZURE_ENDPOINT != ''\n env:\n AZURE_ENDPOINT: ${{ secrets.AZURE_ENDPOINT }}\n AZURE_CODE_SIGNING_NAME: ${{ secrets.AZURE_CODE_SIGNING_NAME }}\n AZURE_CERT_PROFILE_NAME: ${{ secrets.AZURE_CERT_PROFILE_NAME }}\n run: |\n TOKEN=$(az account get-access-token --resource https://codesigning.azure.net --query accessToken -o tsv)\n\n # Extract hostname from endpoint URL\n KEYSTORE=$(echo \"$AZURE_ENDPOINT\" | sed 's|https\\?://||;s|/.*||')\n\n # Sign all exe and msi files in the bundle directory\n find target/${{ matrix.target }}/release/bundle -type f \\( -name \"*.exe\" -o -name \"*.msi\" \\) | while read file; do\n echo \"Signing: $file\"\n java -jar \"${{ steps.jsign.outputs.jar-path }}\" \\\n --storetype TRUSTEDSIGNING \\\n --keystore \"$KEYSTORE\" \\\n --storepass \"$TOKEN\" \\\n --alias \"${AZURE_CODE_SIGNING_NAME}/${AZURE_CERT_PROFILE_NAME}\" \\\n --tsaurl http://timestamp.acs.microsoft.com \\\n --tsmode RFC3161 \\\n \"$file\"\n done\n\n - name: Collect updater artifacts and installers\n run: |\n mkdir -p tauri-artifacts/${{ matrix.platform }}\n # Collect updater artifacts (.sig files and their corresponding bundles)\n find target/${{ matrix.target }}/release/bundle -name \"*.sig\" | while read sig; do\n artifact=\"${sig%.sig}\"\n if [ -f \"$artifact\" ]; then\n cp \"$artifact\" \"tauri-artifacts/${{ matrix.platform }}/\"\n cp \"$sig\" \"tauri-artifacts/${{ matrix.platform }}/\"\n echo \"Collected updater artifact: $(basename $artifact)\"\n fi\n done\n # Collect installer files for GitHub Release (DMG, AppImage, deb, msi, NSIS exe)\n find target/${{ matrix.target }}/release/bundle \\\n \\( -name \"*.dmg\" -o -name \"*.AppImage\" -o -name \"*.deb\" -o -name \"*.msi\" -o -name \"*-setup.exe\" \\) | while read f; do\n cp \"$f\" \"tauri-artifacts/${{ matrix.platform }}/\"\n echo \"Collected installer: $(basename $f)\"\n done\n echo \"All artifacts for ${{ matrix.platform }}:\"\n ls -la tauri-artifacts/${{ matrix.platform }}/\n\n - name: Clean up signing keys\n if: always() && runner.os == 'macOS'\n run: rm -rf ~/.private_keys\n\n - name: Upload Tauri artifacts\n uses: actions/upload-artifact@v6\n with:\n name: tauri-artifacts-${{ matrix.platform }}\n path: tauri-artifacts/\n retention-days: 1\n\n - name: Sweep Cargo target cache\n if: always()\n run: |\n cargo sweep --maxsize 10GB\n cargo sweep --time 30\n\n upload-tauri-update:\n needs: [bump-version, build-tauri]\n runs-on: blacksmith-4vcpu-ubuntu-2404\n steps:\n - uses: actions/checkout@v6\n with:\n ref: ${{ needs.bump-version.outputs.new_tag }}\n\n - name: Setup Node\n uses: ./.github/actions/setup-node\n\n - name: Download all Tauri artifacts\n uses: actions/download-artifact@v7\n with:\n pattern: tauri-artifacts-*\n path: tauri-artifacts/\n merge-multiple: true\n\n - name: List Tauri artifacts\n run: find tauri-artifacts/\n\n - name: Generate updater manifest\n run: |\n node scripts/generate-tauri-update-json.js \\\n --version \"${{ needs.bump-version.outputs.new_version }}\" \\\n --notes \"Release ${{ needs.bump-version.outputs.new_tag }}\" \\\n --artifacts-dir ./tauri-artifacts \\\n --download-base \"${{ secrets.R2_BINARIES_PUBLIC_URL }}/binaries/${{ needs.bump-version.outputs.new_tag }}/tauri\" \\\n --output latest.json\n echo \"Generated latest.json:\"\n cat latest.json\n\n - name: Generate desktop manifest for NPX CLI\n run: |\n node scripts/generate-desktop-manifest.js \\\n --version \"${{ needs.bump-version.outputs.new_version }}\" \\\n --artifacts-dir ./tauri-artifacts \\\n --output desktop-manifest.json\n echo \"Generated desktop-manifest.json:\"\n cat desktop-manifest.json\n\n - name: Configure AWS CLI for R2\n run: |\n aws configure set aws_access_key_id ${{ secrets.R2_BINARIES_ACCESS_KEY_ID }}\n aws configure set aws_secret_access_key ${{ secrets.R2_BINARIES_SECRET_ACCESS_KEY }}\n aws configure set default.region auto\n\n - name: Upload Tauri artifacts and update manifest to R2\n run: |\n TAG=\"${{ needs.bump-version.outputs.new_tag }}\"\n ENDPOINT=\"${{ secrets.R2_BINARIES_ENDPOINT }}\"\n BUCKET=\"${{ secrets.R2_BINARIES_BUCKET }}\"\n\n # Upload individual platform artifacts\n for platform in darwin-aarch64 darwin-x86_64 linux-x86_64 linux-aarch64 windows-x86_64 windows-aarch64; do\n if [ -d \"tauri-artifacts/$platform\" ]; then\n for file in tauri-artifacts/$platform/*; do\n [ -f \"$file\" ] || continue\n # Skip .sig files from artifact upload (signatures are in latest.json)\n [[ \"$file\" == *.sig ]] && continue\n filename=$(basename \"$file\")\n echo \"Uploading $filename for $platform...\"\n aws s3 cp \"$file\" \\\n \"s3://$BUCKET/binaries/$TAG/tauri/$platform/$filename\" \\\n --endpoint-url \"$ENDPOINT\"\n done\n fi\n done\n\n # Upload latest.json alongside the tag artifacts (NOT to the fixed\n # update endpoint). The fixed endpoint is only updated when a\n # pre-release is promoted to a full release (see publish.yml).\n echo \"Uploading updater manifest for tag...\"\n aws s3 cp latest.json \\\n \"s3://$BUCKET/binaries/$TAG/tauri/latest.json\" \\\n --endpoint-url \"$ENDPOINT\" --content-type \"application/json\"\n\n echo \"Update manifest uploaded to: binaries/$TAG/tauri/latest.json\"\n\n # Upload desktop manifest for NPX CLI auto-install\n echo \"Uploading desktop manifest...\"\n aws s3 cp desktop-manifest.json \\\n \"s3://$BUCKET/binaries/$TAG/tauri/desktop-manifest.json\" \\\n --endpoint-url \"$ENDPOINT\" --content-type \"application/json\"\n\n echo \"Desktop manifest uploaded to: binaries/$TAG/tauri/desktop-manifest.json\"\n\n create-prerelease:\n needs: [bump-version, build-frontend, upload-to-r2, upload-tauri-update]\n runs-on: blacksmith-4vcpu-ubuntu-2404\n steps:\n - uses: actions/checkout@v6\n with:\n ref: ${{ needs.bump-version.outputs.new_tag }}\n\n - name: Download frontend artifact\n uses: actions/download-artifact@v7\n with:\n name: frontend-dist\n path: packages/local-web/dist/\n\n - name: Download Tauri artifacts for release\n uses: actions/download-artifact@v7\n with:\n pattern: tauri-artifacts-*\n path: tauri-release/\n merge-multiple: true\n\n - name: Collect Tauri installers for release\n run: |\n mkdir -p tauri-installers\n find tauri-release \\( -name \"*.dmg\" -o -name \"*.AppImage\" -o -name \"*.deb\" -o -name \"*.msi\" -o -name \"*-setup.exe\" \\) \\\n -exec cp {} tauri-installers/ \\;\n echo \"Tauri installers for release:\"\n ls -la tauri-installers/ 2>/dev/null || echo \"No installers found\"\n\n - name: List downloaded artifacts\n run: |\n echo \"Web dist:\"\n find packages/local-web/dist\n\n - name: Zip frontend\n run: |\n mkdir vibe-kanban-${{ needs.bump-version.outputs.new_tag }}\n mv packages/local-web/dist vibe-kanban-${{ needs.bump-version.outputs.new_tag }}\n zip -r vibe-kanban-${{ needs.bump-version.outputs.new_tag }}.zip vibe-kanban-${{ needs.bump-version.outputs.new_tag }}\n\n - name: Setup Node for npm pack\n uses: ./.github/actions/setup-node\n\n - name: Install npx-cli dependencies\n run: |\n cd npx-cli\n npm ci\n\n - name: Build npx-cli TypeScript, inject secrets, and Pack\n run: |\n cd npx-cli\n npm run build\n # Replace placeholders in the bundled output\n sed -i \"s|__R2_PUBLIC_URL__|${{ secrets.R2_BINARIES_PUBLIC_URL }}|g\" bin/cli.js\n sed -i \"s|__BINARY_TAG__|${{ needs.bump-version.outputs.new_tag }}|g\" bin/cli.js\n npm pack\n\n - name: Create GitHub Pre-Release\n uses: softprops/action-gh-release@v2\n with:\n tag_name: ${{ needs.bump-version.outputs.new_tag }}\n name: Pre-release ${{ needs.bump-version.outputs.new_tag }}\n prerelease: true\n generate_release_notes: true\n files: |\n vibe-kanban-${{ needs.bump-version.outputs.new_tag }}.zip\n npx-cli/vibe-kanban-*.tgz\n tauri-installers/*\n"
},
{
"path": ".github/workflows/publish.yml",
"content": "name: Publish to npm\n\non:\n release:\n types: [released]\n workflow_dispatch:\n inputs:\n tag_name:\n description: \"Release tag (e.g., v1.2.3)\"\n required: true\n release_id:\n description: \"GitHub release ID\"\n required: true\n\nconcurrency:\n group: publish\n cancel-in-progress: true\n\npermissions:\n contents: write\n packages: write\n id-token: write # Required for OIDC trusted publishing\n\nenv:\n NODE_VERSION: 22\n PNPM_VERSION: 10.13.1\n\njobs:\n publish:\n runs-on: ubuntu-latest\n # Only run for main app releases (not remote-v* tags) that were converted from pre-release\n if: github.event.release.prerelease == false && !startsWith(github.event.release.tag_name, 'remote-')\n steps:\n - uses: actions/checkout@v6\n with:\n ref: ${{ github.event.release.tag_name || inputs.tag_name }}\n\n - name: Setup Node\n uses: ./.github/actions/setup-node\n\n - name: Upgrade npm for OIDC support\n run: npm install -g npm@latest\n\n - name: Download release assets\n uses: actions/github-script@v8\n env:\n RELEASE_ID: ${{ inputs.release_id }}\n with:\n script: |\n const fs = require('fs');\n const path = require('path');\n\n const releaseId = context.payload.release?.id || process.env.RELEASE_ID;\n console.log(\"releaseId:\", releaseId);\n\n if (!releaseId) {\n core.setFailed('No release ID found.');\n return;\n }\n\n const release = await github.rest.repos.getRelease({\n owner: context.repo.owner,\n repo: context.repo.repo,\n release_id: releaseId\n });\n \n // Find the .tgz file\n const tgzAsset = release.data.assets.find(asset => asset.name.endsWith('.tgz'));\n \n if (!tgzAsset) {\n core.setFailed('No .tgz file found in release assets');\n return;\n }\n \n // Download the asset\n const response = await github.rest.repos.getReleaseAsset({\n owner: context.repo.owner,\n repo: context.repo.repo,\n asset_id: tgzAsset.id,\n headers: {\n Accept: 'application/octet-stream'\n }\n });\n \n // Save to npx-cli directory\n const filePath = path.join('npx-cli', tgzAsset.name);\n fs.writeFileSync(filePath, Buffer.from(response.data));\n \n console.log(`Downloaded ${tgzAsset.name} to ${filePath}`);\n \n // Set output for next step\n core.setOutput('package-file', filePath);\n core.setOutput('package-name', tgzAsset.name);\n\n - name: Verify package integrity\n id: verify\n run: |\n cd npx-cli\n \n # List files to confirm download\n ls -la *.tgz\n \n # Verify the package can be read\n npm pack --dry-run || echo \"Note: This is expected to show differences since we're using the pre-built package\"\n \n # Extract package name from the downloaded file\n PACKAGE_FILE=$(ls *.tgz | head -n1)\n echo \"package-file=$PACKAGE_FILE\" >> $GITHUB_OUTPUT\n\n - name: Publish to npm\n run: |\n cd npx-cli\n\n # Publish the exact same package that was tested\n PACKAGE_FILE=\"${{ steps.verify.outputs.package-file }}\"\n\n echo \"Publishing $PACKAGE_FILE to npm...\"\n npm publish \"$PACKAGE_FILE\" --provenance --access public\n\n echo \"ā
Successfully published to npm!\"\n\n - name: Update release description\n uses: actions/github-script@v8\n env:\n RELEASE_ID: ${{ inputs.release_id }}\n with:\n script: |\n const releaseId = context.payload.release?.id || process.env.RELEASE_ID;;\n\n // Fetch the release to get the current body\n const release = await github.rest.repos.getRelease({\n owner: context.repo.owner,\n repo: context.repo.repo,\n release_id: releaseId\n });\n\n const currentBody = release.data.body || '';\n await github.rest.repos.updateRelease({\n owner: context.repo.owner,\n repo: context.repo.repo,\n release_id: releaseId,\n body: currentBody + '\\n\\nā
**Published to npm registry**'\n });\n\n # Promote the tag-specific Tauri update manifest to the fixed endpoint\n # so existing desktop app users receive the update notification.\n promote-tauri-update:\n runs-on: ubuntu-latest\n if: github.event.release.prerelease == false && !startsWith(github.event.release.tag_name, 'remote-')\n steps:\n - name: Configure AWS CLI for R2\n run: |\n aws configure set aws_access_key_id ${{ secrets.R2_BINARIES_ACCESS_KEY_ID }}\n aws configure set aws_secret_access_key ${{ secrets.R2_BINARIES_SECRET_ACCESS_KEY }}\n aws configure set default.region auto\n\n - name: Copy update manifest to live endpoint\n run: |\n TAG=\"${{ github.event.release.tag_name || inputs.tag_name }}\"\n ENDPOINT=\"${{ secrets.R2_BINARIES_ENDPOINT }}\"\n BUCKET=\"${{ secrets.R2_BINARIES_BUCKET }}\"\n\n echo \"Promoting update manifest for $TAG to live endpoint...\"\n aws s3 cp \\\n \"s3://$BUCKET/binaries/$TAG/tauri/latest.json\" \\\n \"s3://$BUCKET/binaries/tauri-update/latest.json\" \\\n --endpoint-url \"$ENDPOINT\" --content-type \"application/json\"\n\n echo \"Update manifest promoted: binaries/tauri-update/latest.json\""
},
{
"path": ".github/workflows/relay-deploy-dev.yml",
"content": "name: Relay Deploy Dev\n\non:\n push:\n branches:\n - main\n paths:\n - crates/relay-tunnel/**\n workflow_dispatch:\n\njobs:\n run-relay-deploy:\n name: Deploy Relay Dev\n runs-on: ubuntu-latest\n permissions:\n contents: read\n steps:\n - name: Dispatch dev relay deployment workflow\n uses: peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697 # v4.0.1\n with:\n token: ${{ secrets.REMOTE_DEPLOYMENT_TOKEN }}\n repository: BloopAI/vibe-kanban-remote-deployment\n event-type: vibe-kanban-relay-deploy-dev\n client-payload: |\n {\n \"ref\": \"${{ github.ref_name }}\",\n \"sha\": \"${{ github.sha }}\"\n }\n"
},
{
"path": ".github/workflows/relay-deploy-prod.yml",
"content": "name: Deploy Relay Prod\n\non:\n workflow_dispatch:\n inputs:\n version_type:\n description: \"Version bump type\"\n required: true\n default: \"patch\"\n type: choice\n options:\n - patch\n - minor\n - major\n\nconcurrency:\n group: relay-deploy-${{ github.ref_name }}\n cancel-in-progress: true\n\npermissions:\n contents: write\n\nenv:\n RUST_TOOLCHAIN: nightly-2025-12-04\n\njobs:\n release-and-deploy:\n runs-on: ubuntu-latest\n steps:\n - name: Cache cargo-edit\n uses: actions/cache@v5\n id: cache-cargo-edit\n with:\n path: ~/.cargo/bin/cargo-set-version\n key: cargo-edit-${{ runner.os }}-${{ env.RUST_TOOLCHAIN }}\n\n - name: Install cargo-edit\n if: steps.cache-cargo-edit.outputs.cache-hit != 'true'\n run: cargo install cargo-edit\n\n - uses: actions/checkout@v6\n with:\n token: ${{ secrets.GITHUB_TOKEN }}\n ssh-key: ${{ secrets.DEPLOY_KEY }}\n\n - name: Determine and update version\n id: version\n run: |\n # Get current version from crates/relay-tunnel/Cargo.toml\n current_version=$(grep '^version = ' crates/relay-tunnel/Cargo.toml | head -1 | sed 's/version = \"\\(.*\\)\"/\\1/')\n echo \"Current relay-tunnel version: $current_version\"\n\n # Parse version components\n IFS='.' read -r major minor patch <<< \"$current_version\"\n\n # Bump based on type\n case \"${{ github.event.inputs.version_type }}\" in\n major)\n major=$((major + 1))\n minor=0\n patch=0\n ;;\n minor)\n minor=$((minor + 1))\n patch=0\n ;;\n patch)\n patch=$((patch + 1))\n ;;\n esac\n\n new_version=\"${major}.${minor}.${patch}\"\n new_tag=\"relay-v${new_version}\"\n\n # Update version in crates/relay-tunnel/Cargo.toml\n cd crates/relay-tunnel\n cargo set-version \"$new_version\"\n cargo update relay-tunnel\n cd ../..\n\n echo \"New version: $new_version\"\n echo \"New tag: $new_tag\"\n echo \"new_version=$new_version\" >> $GITHUB_OUTPUT\n echo \"new_tag=$new_tag\" >> $GITHUB_OUTPUT\n echo \"new_ref=$new_tag\" >> $GITHUB_OUTPUT\n\n - name: Commit changes and create tag\n run: |\n git config --local user.email \"action@github.com\"\n git config --local user.name \"GitHub Action\"\n git add crates/relay-tunnel/Cargo.toml crates/relay-tunnel/Cargo.lock\n git commit -m \"chore: bump relay-tunnel version to ${{ steps.version.outputs.new_version }}\"\n git tag -a ${{ steps.version.outputs.new_tag }} -m \"Relay release ${{ steps.version.outputs.new_tag }}\"\n git push\n git push --tags\n\n - name: Dispatch relay deployment workflow\n uses: peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697 # v4.0.1\n with:\n token: ${{ secrets.REMOTE_DEPLOYMENT_TOKEN }}\n repository: BloopAI/vibe-kanban-remote-deployment\n event-type: vibe-kanban-relay-deploy-prod\n client-payload: |\n {\n \"ref\": \"${{ steps.version.outputs.new_ref }}\",\n \"sha\": \"${{ github.sha }}\",\n \"version\": \"${{ steps.version.outputs.new_version }}\"\n }\n"
},
{
"path": ".github/workflows/relay-release.yml",
"content": "name: Create Relay Release\n\non:\n repository_dispatch:\n types: [relay-deploy-success]\n\njobs:\n create-release:\n runs-on: ubuntu-latest\n permissions:\n contents: write\n steps:\n - name: Create GitHub Release\n uses: softprops/action-gh-release@v2\n with:\n tag_name: ${{ github.event.client_payload.tag }}\n name: ${{ github.event.client_payload.tag }}\n generate_release_notes: true\n body: |\n ## Relay Tunnel Service Release\n\n Deployed to ${{ github.event.client_payload.environment }}\n"
},
{
"path": ".github/workflows/remote-deploy-dev.yml",
"content": "name: Remote Deploy Dev\n\non:\n push:\n branches:\n - main \n paths:\n - crates/remote/**\n - packages/remote-web/**\n workflow_dispatch:\n\njobs:\n run-remote-deploy:\n name: Deploy Remote Dev\n runs-on: ubuntu-latest\n permissions:\n contents: read\n steps:\n - name: Dispatch dev remote deployment workflow\n uses: peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697 # v4.0.1\n with:\n token: ${{ secrets.REMOTE_DEPLOYMENT_TOKEN }}\n repository: BloopAI/vibe-kanban-remote-deployment\n event-type: vibe-kanban-remote-deploy-dev\n client-payload: |\n {\n \"ref\": \"${{ github.ref_name }}\",\n \"sha\": \"${{ github.sha }}\"\n }\n"
},
{
"path": ".github/workflows/remote-deploy-prod.yml",
"content": "name: Deploy Remote Prod\n\non:\n workflow_dispatch:\n inputs:\n version_type:\n description: \"Version bump type\"\n required: true\n default: \"patch\"\n type: choice\n options:\n - patch\n - minor\n - major\n\nconcurrency:\n group: remote-deploy-${{ github.ref_name }}\n cancel-in-progress: true\n\npermissions:\n contents: write\n\nenv:\n RUST_TOOLCHAIN: nightly-2025-12-04\n\njobs:\n release-and-deploy:\n runs-on: ubuntu-latest\n steps:\n - name: Cache cargo-edit\n uses: actions/cache@v5\n id: cache-cargo-edit\n with:\n path: ~/.cargo/bin/cargo-set-version\n key: cargo-edit-${{ runner.os }}-${{ env.RUST_TOOLCHAIN }}\n\n - name: Install cargo-edit\n if: steps.cache-cargo-edit.outputs.cache-hit != 'true'\n run: cargo install cargo-edit\n\n - uses: actions/checkout@v6\n with:\n token: ${{ secrets.GITHUB_TOKEN }}\n ssh-key: ${{ secrets.DEPLOY_KEY }}\n\n - name: Setup SSH Agent for private dependencies\n uses: webfactory/ssh-agent@v0.9.0\n with:\n ssh-private-key: ${{ secrets.VK_PRIVATE_DEPLOY_KEY }}\n\n - name: Determine and update version\n id: version\n run: |\n # Get current version from crates/remote/Cargo.toml\n current_version=$(grep '^version = ' crates/remote/Cargo.toml | head -1 | sed 's/version = \"\\(.*\\)\"/\\1/')\n echo \"Current remote version: $current_version\"\n\n # Parse version components\n IFS='.' read -r major minor patch <<< \"$current_version\"\n\n # Bump based on type\n case \"${{ github.event.inputs.version_type }}\" in\n major)\n major=$((major + 1))\n minor=0\n patch=0\n ;;\n minor)\n minor=$((minor + 1))\n patch=0\n ;;\n patch)\n patch=$((patch + 1))\n ;;\n esac\n\n new_version=\"${major}.${minor}.${patch}\"\n new_tag=\"remote-v${new_version}\"\n\n # Update version in crates/remote/Cargo.toml\n cd crates/remote\n cargo set-version \"$new_version\"\n cargo update remote\n cd ../..\n\n echo \"New version: $new_version\"\n echo \"New tag: $new_tag\"\n echo \"new_version=$new_version\" >> $GITHUB_OUTPUT\n echo \"new_tag=$new_tag\" >> $GITHUB_OUTPUT\n echo \"new_ref=$new_tag\" >> $GITHUB_OUTPUT\n\n - name: Stop SSH agent\n run: ssh-agent -k\n\n - name: Commit changes and create tag\n run: |\n git config --local user.email \"action@github.com\"\n git config --local user.name \"GitHub Action\"\n git add crates/remote/Cargo.toml crates/remote/Cargo.lock\n git commit -m \"chore: bump remote version to ${{ steps.version.outputs.new_version }}\"\n git tag -a ${{ steps.version.outputs.new_tag }} -m \"Remote release ${{ steps.version.outputs.new_tag }}\"\n git push\n git push --tags\n\n - name: Dispatch remote deployment workflow\n uses: peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697 # v4.0.1\n with:\n token: ${{ secrets.REMOTE_DEPLOYMENT_TOKEN }}\n repository: BloopAI/vibe-kanban-remote-deployment\n event-type: vibe-kanban-remote-deploy-prod\n client-payload: |\n {\n \"ref\": \"${{ steps.version.outputs.new_ref }}\",\n \"sha\": \"${{ github.sha }}\",\n \"version\": \"${{ steps.version.outputs.new_version }}\"\n }\n"
},
{
"path": ".github/workflows/remote-release.yml",
"content": "name: Create Remote Release\n\non:\n repository_dispatch:\n types: [remote-deploy-success]\n\njobs:\n create-release:\n runs-on: ubuntu-latest\n permissions:\n contents: write\n steps:\n - name: Create GitHub Release\n uses: softprops/action-gh-release@v2\n with:\n tag_name: ${{ github.event.client_payload.tag }}\n name: ${{ github.event.client_payload.tag }}\n generate_release_notes: true\n body: |\n ## Remote Service Release\n\n ā
Deployed to ${{ github.event.client_payload.environment }}\n"
},
{
"path": ".github/workflows/test.yml",
"content": "name: Test\n\non:\n pull_request:\n branches:\n - main\n paths-ignore:\n - .github/workflows/**\n - '!.github/workflows/test.yml'\n push:\n branches:\n - main\n workflow_dispatch:\n\nconcurrency:\n group: ${{ github.workflow }}-${{ github.ref }}\n cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}\n\nenv:\n CARGO_TERM_COLOR: always\n NODE_VERSION: 22\n PNPM_VERSION: 10.13.1\n RUST_TOOLCHAIN: nightly-2025-12-04\n RUNNER_LABEL: &runner_label blacksmith-16vcpu-ubuntu-2404\n\njobs:\n changes:\n runs-on: *runner_label\n if: github.event_name == 'pull_request'\n permissions:\n contents: read\n pull-requests: read\n outputs:\n frontend: ${{ steps.filter.outputs.frontend }}\n backend: ${{ steps.filter.outputs.backend }}\n backend-remote: ${{ steps.filter.outputs['backend-remote'] }}\n tauri: ${{ steps.filter.outputs.tauri }}\n steps:\n - uses: actions/checkout@v6\n - uses: dorny/paths-filter@0bc4621a3135347011ad047f9ecf449bf72ce2bd # v3.0.0\n id: filter\n with:\n filters: |\n frontend:\n - 'packages/local-web/**'\n - 'packages/web-core/**'\n - 'packages/remote-web/**'\n - 'packages/ui/**'\n - 'shared/**'\n - 'scripts/check-i18n.sh'\n - 'scripts/check-unused-i18n-keys.mjs'\n - 'scripts/check-legacy-frontend-paths.sh'\n - 'scripts/legacy-frontend-paths-allowlist.txt'\n - 'pnpm-lock.yaml'\n - 'pnpm-workspace.yaml'\n - 'package.json'\n - '.npmrc'\n - '.github/workflows/test.yml'\n - '.github/actions/**'\n backend:\n - 'crates/api-types/**'\n - 'crates/db/**'\n - 'crates/deployment/**'\n - 'crates/executors/**'\n - 'crates/git/**'\n - 'crates/local-deployment/**'\n - 'crates/mcp/**'\n - 'crates/review/**'\n - 'crates/server/**'\n - 'crates/services/**'\n - 'crates/utils/**'\n - 'Cargo.toml'\n - 'Cargo.lock'\n - 'shared/**'\n - 'scripts/prepare-db.js'\n - 'pnpm-lock.yaml'\n - 'package.json'\n - 'rustfmt.toml'\n - 'rust-toolchain.toml'\n - '.cargo/**'\n - '.github/workflows/test.yml'\n - '.github/actions/**'\n backend-remote:\n - 'crates/remote/**'\n - 'crates/relay-tunnel/**'\n - 'crates/api-types/**'\n - 'crates/utils/**'\n - 'Cargo.toml'\n - 'Cargo.lock'\n - 'shared/**'\n - 'rustfmt.toml'\n - 'rust-toolchain.toml'\n - '.cargo/**'\n - 'pnpm-lock.yaml'\n - 'package.json'\n - '.github/workflows/test.yml'\n - '.github/actions/**'\n tauri:\n - 'crates/tauri-app/**'\n - 'crates/api-types/**'\n - 'crates/db/**'\n - 'crates/deployment/**'\n - 'crates/executors/**'\n - 'crates/git/**'\n - 'crates/local-deployment/**'\n - 'crates/mcp/**'\n - 'crates/review/**'\n - 'crates/server/**'\n - 'crates/services/**'\n - 'crates/utils/**'\n - 'Cargo.toml'\n - 'Cargo.lock'\n - 'rustfmt.toml'\n - 'rust-toolchain.toml'\n - '.cargo/**'\n - 'package.json'\n - 'pnpm-lock.yaml'\n - 'pnpm-workspace.yaml'\n - '.npmrc'\n - '.github/workflows/test.yml'\n - '.github/actions/**'\n\n frontend-checks:\n needs: changes\n if: always() && (needs.changes.outputs.frontend == 'true' || needs.changes.result == 'skipped')\n runs-on: *runner_label\n steps:\n - uses: actions/checkout@v6\n\n - name: Setup Node\n uses: ./.github/actions/setup-node\n\n - name: Install dependencies\n run: pnpm install\n\n - name: Run frontend checks\n env:\n NODE_OPTIONS: --max-old-space-size=8192\n run: |\n npx concurrently \\\n --kill-others-on-fail \\\n --names \"local:lint,local:fmt,local:build,remote:fmt,remote:build,ui:check,ui:lint,ui:fmt,core:check,core:fmt,i18n,i18n:unused,legacy\" \\\n --timings \\\n \"cd packages/local-web && npm run lint\" \\\n \"cd packages/local-web && npm run format:check\" \\\n \"cd packages/local-web && npm run build\" \\\n \"cd packages/remote-web && npm run format:check\" \\\n \"cd packages/remote-web && npm run build\" \\\n \"cd packages/ui && npm run check\" \\\n \"cd packages/ui && npm run lint\" \\\n \"cd packages/ui && npm run format:check\" \\\n \"cd packages/web-core && npm run check\" \\\n \"cd packages/web-core && npm run format:check\" \\\n \"GITHUB_BASE_REF=${{ github.base_ref || 'main' }} ./scripts/check-i18n.sh\" \\\n \"node scripts/check-unused-i18n-keys.mjs\" \\\n \"./scripts/check-legacy-frontend-paths.sh\"\n\n backend-schema-checks:\n needs: changes\n if: always() && (needs.changes.outputs.backend == 'true' || needs.changes.result == 'skipped')\n runs-on: *runner_label\n env:\n SCCACHE_GHA_ENABLED: \"true\"\n RUSTC_WRAPPER: \"sccache\"\n steps:\n - uses: actions/checkout@v6\n\n - name: Setup Rust\n uses: ./.github/actions/cargo-checks-common-setup\n with:\n toolchain: ${{ env.RUST_TOOLCHAIN }}\n cache-key: backend-schema-checks-${{ runner.os }}-${{ runner.arch }}-${{ env.RUNNER_LABEL }}\n setup-node: 'true'\n setup-sqlx-cli: 'true'\n\n - name: Check generated types\n run: npm run generate-types:check\n\n - name: Sqlx checks\n run: npm run prepare-db:check\n\n backend-remote-checks:\n needs: changes\n if: >-\n always()\n && (needs.changes.outputs['backend-remote'] == 'true' || needs.changes.result == 'skipped')\n && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)\n runs-on: *runner_label\n env:\n SCCACHE_GHA_ENABLED: \"true\"\n RUSTC_WRAPPER: \"sccache\"\n steps:\n - uses: actions/checkout@v6\n\n - name: Setup Rust\n uses: ./.github/actions/cargo-checks-common-setup\n with:\n toolchain: ${{ env.RUST_TOOLCHAIN }}\n components: rustfmt, clippy\n cache-key: backend-remote-checks-${{ runner.os }}-${{ runner.arch }}-${{ env.RUNNER_LABEL }}\n setup-node: 'true'\n setup-sqlx-cli: 'true'\n\n - name: Setup SSH Agent for private dependencies\n uses: webfactory/ssh-agent@v0.9.0\n with:\n ssh-private-key: ${{ secrets.VK_PRIVATE_DEPLOY_KEY }}\n\n - name: Check remote Cargo.lock is consistent\n run: |\n cargo metadata --locked --format-version 1 --manifest-path crates/remote/Cargo.toml > /dev/null\n cargo metadata --locked --format-version 1 --manifest-path crates/relay-tunnel/Cargo.toml > /dev/null\n\n - name: Check formatting\n run: |\n cargo fmt --all --manifest-path crates/remote/Cargo.toml -- --check\n cargo fmt --all --manifest-path crates/relay-tunnel/Cargo.toml -- --check\n\n - name: Run Clippy\n run: |\n cargo clippy --all-targets --manifest-path crates/remote/Cargo.toml -- -D warnings\n cargo clippy --all-targets --manifest-path crates/relay-tunnel/Cargo.toml -- -D warnings\n\n - name: Check generated types\n run: npm run remote:generate-types:check\n\n - name: Sqlx checks\n run: npm run remote:prepare-db:check\n\n backend-clippy:\n needs: changes\n if: always() && (needs.changes.outputs.backend == 'true' || needs.changes.result == 'skipped')\n runs-on: *runner_label\n env:\n SCCACHE_GHA_ENABLED: \"true\"\n RUSTC_WRAPPER: \"sccache\"\n steps:\n - uses: actions/checkout@v6\n\n - name: Setup Rust\n uses: ./.github/actions/cargo-checks-common-setup\n with:\n toolchain: ${{ env.RUST_TOOLCHAIN }}\n components: rustfmt, clippy\n cache-key: backend-clippy-${{ runner.os }}-${{ runner.arch }}-${{ env.RUNNER_LABEL }}\n\n - name: Run Clippy and fmt checks\n run: |\n set -x\n cargo fmt --all -- --check & pid_fmt=$!\n cargo clippy --workspace --all-targets --exclude vibe-kanban-tauri -- -D warnings\n wait $pid_fmt\n\n backend-test:\n needs: changes\n if: always() && (needs.changes.outputs.backend == 'true' || needs.changes.result == 'skipped')\n runs-on: *runner_label\n env:\n SCCACHE_GHA_ENABLED: \"true\"\n RUSTC_WRAPPER: \"sccache\"\n steps:\n - uses: actions/checkout@v6\n\n - name: Setup Rust\n uses: ./.github/actions/cargo-checks-common-setup\n with:\n toolchain: ${{ env.RUST_TOOLCHAIN }}\n cache-key: backend-test-${{ runner.os }}-${{ runner.arch }}-${{ env.RUNNER_LABEL }}\n\n - name: Install cargo-nextest\n uses: taiki-e/install-action@nextest\n\n - name: Run Cargo tests\n run: cargo nextest run --workspace --exclude vibe-kanban-tauri\n\n tauri-checks:\n needs: changes\n if: always() && (needs.changes.outputs.tauri == 'true' || needs.changes.result == 'skipped')\n runs-on: *runner_label\n env:\n SCCACHE_GHA_ENABLED: \"true\"\n RUSTC_WRAPPER: \"sccache\"\n steps:\n - uses: actions/checkout@v6\n\n - name: Setup Rust\n uses: ./.github/actions/cargo-checks-common-setup\n with:\n toolchain: ${{ env.RUST_TOOLCHAIN }}\n components: rustfmt, clippy\n cache-key: tauri-checks-${{ runner.os }}-${{ runner.arch }}-${{ env.RUNNER_LABEL }}\n\n - name: Install Linux dependencies\n run: |\n sudo apt-get update\n sudo apt-get install -y libwebkit2gtk-4.1-dev build-essential \\\n libssl-dev libayatana-appindicator3-dev librsvg2-dev \\\n libxdo-dev file pkg-config xdg-utils\n\n - name: Run Tauri fmt, clippy, and compile checks\n run: |\n cargo fmt --all --manifest-path crates/tauri-app/Cargo.toml -- --check\n cargo clippy --all-targets --manifest-path crates/tauri-app/Cargo.toml -- -D warnings\n cargo check -p vibe-kanban-tauri\n"
},
{
"path": ".gitignore",
"content": "# Rust\ntarget/\n**/*.rs.bk\n\n# Node.js\nnode_modules/\nnpm-debug.log*\nyarn-debug.log*\nyarn-error.log*\n.pnpm-debug.log*\n\n# Build outputs\n/dist\n/build\nbindings/\n\n# Environment variables\n.env\n.env.remote\n.env.local\n.env.development.local\n.env.test.local\n.env.production.local\n.env.production\n\n# IDE\n.vscode/\n.idea/\n*.swp\n*.swo\n*~\n\n# OS\n.DS_Store\n.DS_Store?\n._*\n.Spotlight-V100\n.Trashes\nehthumbs.db\nThumbs.db\n\n# Runtime data\npids\n*.pid\n*.seed\n*.pid.lock\n\n# Coverage directory used by tools like istanbul\ncoverage/\n*.lcov\n\n# nyc test coverage\n.nyc_output\n\n# ESLint cache\n.eslintcache\n\n# Optional npm cache directory\n.npm\n\n# Optional eslint cache\n.eslintcache\n\n# Storybook build outputs\n.out\n.storybook-out\n\n.env\npackages/**/dist\n\nbuild-npm-package-codesign.sh\n\nnpx-cli/bin/\nnpx-cli/dist\nnpx-cli/vibe-kanban-*\nvibe-kanban-*.tgz\n\n# Development ports file\n.dev-ports.json\n\ndev_assets\n/packages/web/.env.sentry-build-plugin\n.ssh\n\nvibe-kanban-cloud/\n\n.jj\n.sisyphus/\n\n# Vite temp files\n*.timestamp-*.mjs\n\n# Mobile testing (per-developer, do not commit)\n*.ts.net.crt\n*.ts.net.key\nCaddyfile\nCaddyfile.dev\n"
},
{
"path": ".npmrc",
"content": "engine-strict=true\n"
},
{
"path": "AGENTS.md",
"content": "# Repository Guidelines\n\n## Project Structure & Module Organization\n- `crates/`: Rust workspace crates ā `server` (API + bins), `db` (SQLx models/migrations), `executors`, `services`, `utils`, `git` (Git operations), `api-types` (shared API types for local + remote), `review` (PR review tool), `deployment`, `local-deployment`, `remote`.\n- `packages/local-web/`: Local React + TypeScript app entrypoint (Vite, Tailwind). Shell source in `packages/local-web/src`.\n- `packages/remote-web/`: Remote deployment frontend entrypoint.\n- `packages/web-core/`: Shared React + TypeScript frontend library used by local + remote web (`packages/web-core/src`).\n- `shared/`: Generated TypeScript types (`shared/types.ts`, `shared/remote-types.ts`) and agent tool schemas (`shared/schemas/`). Do not edit generated files directly.\n- `assets/`, `dev_assets_seed/`, `dev_assets/`: Packaged and local dev assets.\n- `npx-cli/`: Files published to the npm CLI package.\n- `scripts/`: Dev helpers (ports, DB preparation).\n- `docs/`: Documentation files.\n\n### Crate-specific guides\n- [`crates/remote/AGENTS.md`](crates/remote/AGENTS.md) ā Remote server architecture, ElectricSQL integration, mutation patterns, environment variables.\n- [`docs/AGENTS.md`](docs/AGENTS.md) ā Mintlify documentation writing guidelines and component reference.\n- [`packages/local-web/AGENTS.md`](packages/local-web/AGENTS.md) ā Web app design system styling guidelines.\n\n## Managing Shared Types Between Rust and TypeScript\n\nts-rs allows you to derive TypeScript types from Rust structs/enums. By annotating your Rust types with #[derive(TS)] and related macros, ts-rs will generate .ts declaration files for those types.\nWhen making changes to the types, you can regenerate them using `pnpm run generate-types`\nDo not manually edit shared/types.ts, instead edit crates/server/src/bin/generate_types.rs\n\nFor remote/cloud types, regenerate using `pnpm run remote:generate-types`\nDo not manually edit shared/remote-types.ts, instead edit crates/remote/src/bin/remote-generate-types.rs (see crates/remote/AGENTS.md for details).\n\n## Build, Test, and Development Commands\n- Install: `pnpm i`\n- Run dev (web app + backend with ports auto-assigned): `pnpm run dev`\n- Backend (watch): `pnpm run backend:dev:watch`\n- Web app (dev): `pnpm run local-web:dev`\n- Type checks: `pnpm run check` (frontend + all backend Rust workspaces) and `pnpm run backend:check` (all backend Rust workspaces, including `crates/remote`)\n- Rust tests: `cargo test --workspace`\n- Generate TS types from Rust: `pnpm run generate-types` (or `generate-types:check` in CI)\n- Prepare SQLx (offline): `pnpm run prepare-db`\n- Prepare SQLx (remote package, postgres): `pnpm run remote:prepare-db`\n- Local NPX build: `pnpm run build:npx` then `pnpm pack` in `npx-cli/`\n- Format code: `pnpm run format` (runs `cargo fmt` for all backend Rust workspaces + web-core/web Prettier)\n- Lint: `pnpm run lint` (runs web/ui ESLint + `cargo clippy` for all backend Rust workspaces)\n\n## Before Completing a Task\n- Run `pnpm run format` to format all Rust workspaces and web code.\n\n## Coding Style & Naming Conventions\n- Rust: `rustfmt` enforced (`rustfmt.toml`); group imports by crate; snake_case modules, PascalCase types.\n- TypeScript/React: ESLint + Prettier (2 spaces, single quotes, 80 cols). PascalCase components, camelCase vars/functions, kebab-case file names where practical.\n- Keep functions small, add `Debug`/`Serialize`/`Deserialize` where useful.\n\n## Testing Guidelines\n- Rust: prefer unit tests alongside code (`#[cfg(test)]`), run `cargo test --workspace`. Add tests for new logic and edge cases.\n- Web app: ensure `pnpm run check` and `pnpm run lint` pass. If adding runtime logic, include lightweight tests (e.g., Vitest) in the same directory.\n\n## Security & Config Tips\n- Use `.env` for local overrides; never commit secrets. Key envs: `FRONTEND_PORT`, `BACKEND_PORT`, `HOST` \n- Dev ports and assets are managed by `scripts/setup-dev-environment.js`.\n\n"
},
{
"path": "CODE-OF-CONDUCT.md",
"content": "# Contributor Covenant Code of Conduct\n\n## Our Pledge\n\nWe as members, contributors, and leaders pledge to make participation in our\ncommunity a harassment-free experience for everyone, regardless of age, body\nsize, visible or invisible disability, ethnicity, sex characteristics, gender\nidentity and expression, level of experience, education, socio-economic status,\nnationality, personal appearance, race, caste, color, religion, or sexual\nidentity and orientation.\n\nWe pledge to act and interact in ways that contribute to an open, welcoming,\ndiverse, inclusive, and healthy community.\n\n## Our Standards\n\nExamples of behavior that contributes to a positive environment for our\ncommunity include:\n\n- Demonstrating empathy and kindness toward other people\n- Being respectful of differing opinions, viewpoints, and experiences\n- Giving and gracefully accepting constructive feedback\n- Accepting responsibility and apologizing to those affected by our mistakes,\n and learning from the experience\n- Focusing on what is best not just for us as individuals, but for the overall\n community\n\nExamples of unacceptable behavior include:\n\n- The use of sexualized language or imagery, and sexual attention or advances of\n any kind\n- Trolling, insulting or derogatory comments, and personal or political attacks\n- Public or private harassment\n- Publishing others' private information, such as a physical or email address,\n without their explicit permission\n- Other conduct which could reasonably be considered inappropriate in a\n professional setting\n\n## Enforcement Responsibilities\n\nCommunity leaders are responsible for clarifying and enforcing our standards of\nacceptable behavior and will take appropriate and fair corrective action in\nresponse to any behavior that they deem inappropriate, threatening, offensive,\nor harmful.\n\nCommunity leaders have the right and responsibility to remove, edit, or reject\ncomments, commits, code, wiki edits, issues, and other contributions that are\nnot aligned to this Code of Conduct, and will communicate reasons for moderation\ndecisions when appropriate.\n\n## Scope\n\nThis Code of Conduct applies within all community spaces, and also applies when\nan individual is officially representing the community in public spaces.\nExamples of representing our community include using an official e-mail address,\nposting via an official social media account, or acting as an appointed\nrepresentative at an online or offline event.\n\n## Enforcement\n\nInstances of abusive, harassing, or otherwise unacceptable behavior may be\nreported to the community leaders responsible for enforcement at\nmaintainers@bloop.ai through e-mail, with an appropriate subject line.\nAll complaints will be reviewed and investigated promptly and fairly.\n\nAll community leaders are obligated to respect the privacy and security of the\nreporter of any incident.\n\nProject maintainers who do not follow or enforce the Code of Conduct in good\nfaith may face temporary or permanent repercussions as determined by other\nmembers of the project's leadership.\n\n### Attribution\n\nThis Code of Conduct is adapted from the [Next.js project][nextjs-coc]\n\nThe original text is from the [Contributor Covenant][homepage],\nversion 2.1, available at\n[https://www.contributor-covenant.org/version/2/1/code_of_conduct.html][v2.1].\n\nFor answers to common questions about this code of conduct, see the FAQ at\n[https://www.contributor-covenant.org/faq][FAQ]. Translations are available at\n[https://www.contributor-covenant.org/translations][translations].\n\n[nextjs-coc]: https://raw.githubusercontent.com/vercel/next.js/canary/CODE_OF_CONDUCT.md\n[homepage]: https://www.contributor-covenant.org\n[v2.1]: https://www.contributor-covenant.org/version/2/1/code_of_conduct.html\n[FAQ]: https://www.contributor-covenant.org/faq\n[translations]: https://www.contributor-covenant.org/translations\n"
},
{
"path": "CONTRIBUTORS.md",
"content": "# Contributing & Change Control\n\n## Change Control Policy\n\nAll changes to production code are governed by formal change control procedures. These procedures ensure that modifications are reviewed, approved, and deployed in a controlled manner.\n\n## Code Review Requirements\n\nA maintainer must review pull requests before they are merged into any production branch. No code changes shall be merged without explicit approval from a qualified reviewer.\n\n## Pull Request Process\n\n1. Create a feature or fix branch from the base branch.\n2. Make changes and open a pull request.\n3. Obtain the required review and approval from a maintainer.\n4. All required CI checks must pass before merging.\n5. Merge only after approval has been granted and CI checks have passed.\n\n## Separation of Duties\n\nDevelopment, testing, and deployment of changes shall not be performed by a single individual without approval and oversight. All significant changes require independent review to ensure correctness, security, and alignment with project standards.\n\n## Coding Practices\n\nContributors are expected to follow the project's coding standards throughout the development cycle. These standards cover code quality, style consistency, and security.\n\n### Style & Formatting\n\n- **Rust**: Code must be formatted with `rustfmt` (config in `rustfmt.toml`). Use `snake_case` for modules and functions, `PascalCase` for types. Group imports by crate.\n- **TypeScript/React**: Code must pass ESLint and Prettier (2 spaces, single quotes, 80-column width). Use `PascalCase` for components, `camelCase` for variables and functions, and `kebab-case` for file names.\n- Run `pnpm run format` before submitting a pull request.\n- Run `pnpm run lint` to verify there are no linting errors.\n\n### Code Quality\n\n- Keep functions small and focused on a single responsibility.\n- Write clear, self-documenting code. Add comments only where the logic is not self-evident.\n- Do not introduce unnecessary abstractions or over-engineer solutions.\n- Do not manually edit generated files (e.g., `shared/types.ts`). Modify the source and regenerate.\n\n### Testing\n\n- **Rust**: Add unit tests alongside code using `#[cfg(test)]`. Run `cargo test --workspace` to verify.\n- **TypeScript**: Ensure `pnpm run check` and `pnpm run lint` pass. Include lightweight tests (e.g., Vitest) for new runtime logic.\n- All CI checks must pass before a pull request can be merged.\n\n### Security\n\n- Never commit secrets, credentials, or API keys. Use `.env` for local configuration.\n- Be mindful of common vulnerabilities (injection, XSS, insecure deserialization) when writing code that handles user input or external data.\n- Report security issues privately to the maintainers rather than opening a public issue.\n\n### Commit Messages\n\n- Use clear, descriptive commit messages that explain the _why_ behind a change.\n- Prefix with a conventional type where appropriate (e.g., `feat:`, `fix:`, `chore:`, `docs:`, `refactor:`, `test:`).\n- Keep the subject line under 72 characters. Use the body for additional context if needed.\n\n## Scope\n\nThese procedures apply to all production branches in this repository.\n"
},
{
"path": "Cargo.toml",
"content": "[workspace]\nresolver = \"3\"\nmembers = [\n \"crates/api-types\",\n \"crates/server\",\n \"crates/trusted-key-auth\",\n \"crates/mcp\",\n \"crates/db\",\n \"crates/executors\",\n \"crates/services\",\n \"crates/worktree-manager\",\n \"crates/workspace-manager\",\n \"crates/relay-control\",\n \"crates/server-info\",\n \"crates/utils\",\n \"crates/git\",\n \"crates/git-host\",\n \"crates/local-deployment\",\n \"crates/deployment\",\n \"crates/review\",\n \"crates/tauri-app\",\n]\nexclude = [\"crates/remote\", \"crates/relay-tunnel\"]\n\n[workspace.dependencies]\ntokio = { version = \"1.0\", features = [\"full\"] }\naxum = { version = \"0.8.4\", features = [\"macros\", \"multipart\", \"ws\"] }\ntower-http = { version = \"0.5\", features = [\"cors\", \"request-id\", \"trace\", \"fs\", \"validate-request\", \"compression-gzip\", \"compression-br\"] }\nserde = { version = \"1.0\", features = [\"derive\"] }\nserde_json = { version = \"1.0\", features = [\"preserve_order\"] }\nanyhow = \"1.0\"\ngit2 = { version = \"0.20.3\", default-features = false }\nreqwest = { version = \"0.13\", default-features = false, features = [\"json\", \"query\", \"stream\", \"rustls\"] }\nrustls = { version = \"0.23\", default-features = false, features = [\"aws_lc_rs\", \"std\", \"tls12\"] }\nthiserror = \"2.0.12\"\ntracing = \"0.1.43\"\ntracing-subscriber = { version = \"0.3\", features = [\"env-filter\", \"fmt\", \"json\"] }\nts-rs = { git = \"https://github.com/xazukx/ts-rs.git\", branch = \"use-ts-enum\", features = [\"uuid-impl\", \"chrono-impl\", \"no-serde-warnings\", \"serde-json-impl\"] }\nschemars = { version = \"1.0.4\", features = [\"derive\", \"chrono04\", \"uuid1\", \"preserve_order\"] }\nserde_with = \"3\"\nasync-trait = \"0.1\"\naws-lc-sys = \"=0.37.0\"\naws-lc-rs = \"=1.16.0\"\n\n[profile.release]\ndebug = 1\nsplit-debuginfo = \"packed\"\nstrip = true\n\n"
},
{
"path": "Dockerfile",
"content": "# syntax=docker/dockerfile:1.6\n\nFROM node:24-alpine AS fe-builder\n\nARG POSTHOG_API_KEY=\"\"\nARG POSTHOG_API_ENDPOINT=\"\"\n\nWORKDIR /app\n\nENV PNPM_HOME=/pnpm\nENV PATH=${PNPM_HOME}:${PATH}\nENV VITE_PUBLIC_POSTHOG_KEY=${POSTHOG_API_KEY}\nENV VITE_PUBLIC_POSTHOG_HOST=${POSTHOG_API_ENDPOINT}\nENV NODE_OPTIONS=--max-old-space-size=4096\n\nRUN corepack enable\nRUN pnpm config set store-dir /pnpm/store\n\nCOPY pnpm-lock.yaml pnpm-workspace.yaml package.json ./\nCOPY packages/local-web/package.json packages/local-web/package.json\nCOPY packages/ui/package.json packages/ui/package.json\nCOPY packages/web-core/package.json packages/web-core/package.json\n\nRUN --mount=type=cache,id=pnpm,target=/pnpm/store \\\n pnpm install --frozen-lockfile\n\nCOPY packages/local-web/ packages/local-web/\nCOPY packages/public/ packages/public/\nCOPY packages/ui/ packages/ui/\nCOPY packages/web-core/ packages/web-core/\nCOPY shared/ shared/\n\nRUN pnpm -C packages/local-web build\n\nFROM rust:1.93-slim-bookworm AS builder\n\nARG POSTHOG_API_KEY=\"\"\nARG POSTHOG_API_ENDPOINT=\"\"\nARG SENTRY_DSN=\"\"\nARG VK_SHARED_API_BASE=\"\"\n\nENV CARGO_REGISTRIES_CRATES_IO_PROTOCOL=sparse\nENV CARGO_NET_GIT_FETCH_WITH_CLI=true\nENV CARGO_TARGET_DIR=/app/target\nENV POSTHOG_API_KEY=${POSTHOG_API_KEY}\nENV POSTHOG_API_ENDPOINT=${POSTHOG_API_ENDPOINT}\nENV SENTRY_DSN=${SENTRY_DSN}\nENV VK_SHARED_API_BASE=${VK_SHARED_API_BASE}\n\nWORKDIR /app\n\nRUN apt-get update \\\n && apt-get install -y --no-install-recommends \\\n build-essential \\\n ca-certificates \\\n git \\\n libclang-dev \\\n libssl-dev \\\n pkg-config \\\n && rm -rf /var/lib/apt/lists/*\n\nCOPY rust-toolchain.toml ./\nRUN cargo --version >/dev/null\n\nCOPY Cargo.toml Cargo.lock ./\nCOPY crates/api-types/Cargo.toml crates/api-types/Cargo.toml\nCOPY crates/db/Cargo.toml crates/db/Cargo.toml\nCOPY crates/deployment/Cargo.toml crates/deployment/Cargo.toml\nCOPY crates/executors/Cargo.toml crates/executors/Cargo.toml\nCOPY crates/git/Cargo.toml crates/git/Cargo.toml\nCOPY crates/git-host/Cargo.toml crates/git-host/Cargo.toml\nCOPY crates/local-deployment/Cargo.toml crates/local-deployment/Cargo.toml\nCOPY crates/mcp/Cargo.toml crates/mcp/Cargo.toml\nCOPY crates/relay-control/Cargo.toml crates/relay-control/Cargo.toml\nCOPY crates/relay-tunnel/Cargo.toml crates/relay-tunnel/Cargo.toml\nCOPY crates/review/Cargo.toml crates/review/Cargo.toml\nCOPY crates/server/Cargo.toml crates/server/Cargo.toml\nCOPY crates/server-info/Cargo.toml crates/server-info/Cargo.toml\nCOPY crates/services/Cargo.toml crates/services/Cargo.toml\nCOPY crates/tauri-app/Cargo.toml crates/tauri-app/Cargo.toml\nCOPY crates/trusted-key-auth/Cargo.toml crates/trusted-key-auth/Cargo.toml\nCOPY crates/utils/Cargo.toml crates/utils/Cargo.toml\nCOPY crates/workspace-manager/Cargo.toml crates/workspace-manager/Cargo.toml\nCOPY crates/worktree-manager/Cargo.toml crates/worktree-manager/Cargo.toml\n\nCOPY crates/api-types/ crates/api-types/\nCOPY crates/db/ crates/db/\nCOPY crates/deployment/ crates/deployment/\nCOPY crates/executors/ crates/executors/\nCOPY crates/git/ crates/git/\nCOPY crates/git-host/ crates/git-host/\nCOPY crates/local-deployment/ crates/local-deployment/\nCOPY crates/mcp/ crates/mcp/\nCOPY crates/relay-control/ crates/relay-control/\nCOPY crates/relay-tunnel/ crates/relay-tunnel/\nCOPY crates/review/ crates/review/\nCOPY crates/server/ crates/server/\nCOPY crates/server-info/ crates/server-info/\nCOPY crates/services/ crates/services/\nCOPY crates/trusted-key-auth/ crates/trusted-key-auth/\nCOPY crates/utils/ crates/utils/\nCOPY crates/workspace-manager/ crates/workspace-manager/\nCOPY crates/worktree-manager/ crates/worktree-manager/\nCOPY assets/ assets/\nCOPY --from=fe-builder /app/packages/local-web/dist packages/local-web/dist\n\nRUN --mount=type=cache,id=cargo-registry,target=/usr/local/cargo/registry \\\n --mount=type=cache,id=cargo-git,target=/usr/local/cargo/git \\\n --mount=type=cache,id=workspace-target,target=/app/target \\\n cargo build --locked --release --bin server \\\n && cp /app/target/release/server /usr/local/bin/server\n\nFROM debian:bookworm-slim AS runtime\n\nRUN apt-get update \\\n && apt-get install -y --no-install-recommends \\\n ca-certificates \\\n git \\\n openssh-client \\\n tini \\\n wget \\\n && rm -rf /var/lib/apt/lists/* \\\n && useradd --system --create-home --uid 10001 appuser\n\nWORKDIR /repos\n\nCOPY --from=builder /usr/local/bin/server /usr/local/bin/server\n\nRUN mkdir -p /repos \\\n && chown -R appuser:appuser /repos\n\nUSER appuser\n\nENV HOST=0.0.0.0\nENV PORT=3000\n\nEXPOSE 3000\n\nHEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \\\n CMD [\"/bin/sh\", \"-c\", \"wget --spider -q http://127.0.0.1:${PORT:-3000}/health\"]\n\nENTRYPOINT [\"/usr/bin/tini\", \"--\", \"/usr/local/bin/server\"]\n"
},
{
"path": "LICENSE",
"content": " Apache License\n Version 2.0, January 2004\n http://www.apache.org/licenses/\n\n TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n 1. Definitions.\n\n \"License\" shall mean the terms and conditions for use, reproduction,\n and distribution as defined by Sections 1 through 9 of this document.\n\n \"Licensor\" shall mean the copyright owner or entity authorized by\n the copyright owner that is granting the License.\n\n \"Legal Entity\" shall mean the union of the acting entity and all\n other entities that control, are controlled by, or are under common\n control with that entity. For the purposes of this definition,\n \"control\" means (i) the power, direct or indirect, to cause the\n direction or management of such entity, whether by contract or\n otherwise, or (ii) ownership of fifty percent (50%) or more of the\n outstanding shares, or (iii) beneficial ownership of such entity.\n\n \"You\" (or \"Your\") shall mean an individual or Legal Entity\n exercising permissions granted by this License.\n\n \"Source\" form shall mean the preferred form for making modifications,\n including but not limited to software source code, documentation\n source, and configuration files.\n\n \"Object\" form shall mean any form resulting from mechanical\n transformation or translation of a Source form, including but\n not limited to compiled object code, generated documentation,\n and conversions to other media types.\n\n \"Work\" shall mean the work of authorship, whether in Source or\n Object form, made available under the License, as indicated by a\n copyright notice that is included in or attached to the work\n (an example is provided in the Appendix below).\n\n \"Derivative Works\" shall mean any work, whether in Source or Object\n form, that is based on (or derived from) the Work and for which the\n editorial revisions, annotations, elaborations, or other modifications\n represent, as a whole, an original work of authorship. For the purposes\n of this License, Derivative Works shall not include works that remain\n separable from, or merely link (or bind by name) to the interfaces of,\n the Work and Derivative Works thereof.\n\n \"Contribution\" shall mean any work of authorship, including\n the original version of the Work and any modifications or additions\n to that Work or Derivative Works thereof, that is intentionally\n submitted to Licensor for inclusion in the Work by the copyright owner\n or by an individual or Legal Entity authorized to submit on behalf of\n the copyright owner. For the purposes of this definition, \"submitted\"\n means any form of electronic, verbal, or written communication sent\n to the Licensor or its representatives, including but not limited to\n communication on electronic mailing lists, source code control systems,\n and issue tracking systems that are managed by, or on behalf of, the\n Licensor for the purpose of discussing and improving the Work, but\n excluding communication that is conspicuously marked or otherwise\n designated in writing by the copyright owner as \"Not a Contribution.\"\n\n \"Contributor\" shall mean Licensor and any individual or Legal Entity\n on behalf of whom a Contribution has been received by Licensor and\n subsequently incorporated within the Work.\n\n 2. Grant of Copyright License. Subject to the terms and conditions of\n this License, each Contributor hereby grants to You a perpetual,\n worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n copyright license to reproduce, prepare Derivative Works of,\n publicly display, publicly perform, sublicense, and distribute the\n Work and such Derivative Works in Source or Object form.\n\n 3. Grant of Patent License. Subject to the terms and conditions of\n this License, each Contributor hereby grants to You a perpetual,\n worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n (except as stated in this section) patent license to make, have made,\n use, offer to sell, sell, import, and otherwise transfer the Work,\n where such license applies only to those patent claims licensable\n by such Contributor that are necessarily infringed by their\n Contribution(s) alone or by combination of their Contribution(s)\n with the Work to which such Contribution(s) was submitted. If You\n institute patent litigation against any entity (including a\n cross-claim or counterclaim in a lawsuit) alleging that the Work\n or a Contribution incorporated within the Work constitutes direct\n or contributory patent infringement, then any patent licenses\n granted to You under this License for that Work shall terminate\n as of the date such litigation is filed.\n\n 4. Redistribution. You may reproduce and distribute copies of the\n Work or Derivative Works thereof in any medium, with or without\n modifications, and in Source or Object form, provided that You\n meet the following conditions:\n\n (a) You must give any other recipients of the Work or\n Derivative Works a copy of this License; and\n\n (b) You must cause any modified files to carry prominent notices\n stating that You changed the files; and\n\n (c) You must retain, in the Source form of any Derivative Works\n that You distribute, all copyright, patent, trademark, and\n attribution notices from the Source form of the Work,\n excluding those notices that do not pertain to any part of\n the Derivative Works; and\n\n (d) If the Work includes a \"NOTICE\" text file as part of its\n distribution, then any Derivative Works that You distribute must\n include a readable copy of the attribution notices contained\n within such NOTICE file, excluding those notices that do not\n pertain to any part of the Derivative Works, in at least one\n of the following places: within a NOTICE text file distributed\n as part of the Derivative Works; within the Source form or\n documentation, if provided along with the Derivative Works; or,\n within a display generated by the Derivative Works, if and\n wherever such third-party notices normally appear. The contents\n of the NOTICE file are for informational purposes only and\n do not modify the License. You may add Your own attribution\n notices within Derivative Works that You distribute, alongside\n or as an addendum to the NOTICE text from the Work, provided\n that such additional attribution notices cannot be construed\n as modifying the License.\n\n You may add Your own copyright statement to Your modifications and\n may provide additional or different license terms and conditions\n for use, reproduction, or distribution of Your modifications, or\n for any such Derivative Works as a whole, provided Your use,\n reproduction, and distribution of the Work otherwise complies with\n the conditions stated in this License.\n\n 5. Submission of Contributions. Unless You explicitly state otherwise,\n any Contribution intentionally submitted for inclusion in the Work\n by You to the Licensor shall be under the terms and conditions of\n this License, without any additional terms or conditions.\n Notwithstanding the above, nothing herein shall supersede or modify\n the terms of any separate license agreement you may have executed\n with Licensor regarding such Contributions.\n\n 6. Trademarks. This License does not grant permission to use the trade\n names, trademarks, service marks, or product names of the Licensor,\n except as required for reasonable and customary use in describing the\n origin of the Work and reproducing the content of the NOTICE file.\n\n 7. Disclaimer of Warranty. Unless required by applicable law or\n agreed to in writing, Licensor provides the Work (and each\n Contributor provides its Contributions) on an \"AS IS\" BASIS,\n WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n implied, including, without limitation, any warranties or conditions\n of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n PARTICULAR PURPOSE. You are solely responsible for determining the\n appropriateness of using or redistributing the Work and assume any\n risks associated with Your exercise of permissions under this License.\n\n 8. Limitation of Liability. In no event and under no legal theory,\n whether in tort (including negligence), contract, or otherwise,\n unless required by applicable law (such as deliberate and grossly\n negligent acts) or agreed to in writing, shall any Contributor be\n liable to You for damages, including any direct, indirect, special,\n incidental, or consequential damages of any character arising as a\n result of this License or out of the use or inability to use the\n Work (including but not limited to damages for loss of goodwill,\n work stoppage, computer failure or malfunction, or any and all\n other commercial damages or losses), even if such Contributor\n has been advised of the possibility of such damages.\n\n 9. Accepting Warranty or Additional Liability. While redistributing\n the Work or Derivative Works thereof, You may choose to offer,\n and charge a fee for, acceptance of support, warranty, indemnity,\n or other liability obligations and/or rights consistent with this\n License. However, in accepting such obligations, You may act only\n on Your own behalf and on Your sole responsibility, not on behalf\n of any other Contributor, and only if You agree to indemnify,\n defend, and hold each Contributor harmless for any liability\n incurred by, or claims asserted against, such Contributor by reason\n of your accepting any such warranty or additional liability.\n\n END OF TERMS AND CONDITIONS\n\n APPENDIX: How to apply the Apache License to your work.\n\n To apply the Apache License to your work, attach the following\n boilerplate notice, with the fields enclosed by brackets \"[]\"\n replaced with your own identifying information. (Don't include\n the brackets!) The text should be enclosed in the appropriate\n comment syntax for the file format. We also recommend that a\n file or class name and description of purpose be included on the\n same \"printed page\" as the copyright notice for easier\n identification within third-party archives.\n\n Copyright [yyyy] [name of copyright owner]\n\n Licensed under the Apache License, Version 2.0 (the \"License\");\n you may not use this file except in compliance with the License.\n You may obtain a copy of the License at\n\n http://www.apache.org/licenses/LICENSE-2.0\n\n Unless required by applicable law or agreed to in writing, software\n distributed under the License is distributed on an \"AS IS\" BASIS,\n WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n See the License for the specific language governing permissions and\n limitations under the License.\n"
},
{
"path": "README.md",
"content": "\n \n \n \n \n ![\"Vibe](\"packages/public/vibe-kanban-logo.svg\")
\n \n \n
\n\nGet 10X more out of Claude Code, Gemini CLI, Codex, Amp and other coding agents...
\n\n ![\"npm\"](\"https://img.shields.io/npm/v/vibe-kanban?style=flat-square\")
\n ![\"Build](\"https://img.shields.io/github/actions/workflow/status/BloopAI/vibe-kanban/.github%2Fworkflows%2Fpublish.yml\")
\n ![\"Ask](\"https://deepwiki.com/badge.svg\")
\n
\n\n\n\n\n\n## Overview\n\nIn a world where software engineers spend most of their time planning and reviewing coding agents, the most impactful way to ship more is to get faster at planning and review.\n\nVibe Kanban is built for this. Use kanban issues to plan work, either privately or with your team. When you're ready to begin, create workspaces where coding agents can execute.\n\n- **Plan with kanban issues** ā create, prioritise, and assign issues on a kanban board\n- **Run coding agents in workspaces** ā each workspace gives an agent a branch, a terminal, and a dev server\n- **Review diffs and leave inline comments** ā send feedback directly to the agent without leaving the UI\n- **Preview your app** ā built-in browser with devtools, inspect mode, and device emulation\n- **Switch between 10+ coding agents** ā Claude Code, Codex, Gemini CLI, GitHub Copilot, Amp, Cursor, OpenCode, Droid, CCR, and Qwen Code\n- **Create pull requests and merge** ā open PRs with AI-generated descriptions, review on GitHub, and merge\n\n\n\nOne command. Describe the work, review the diff, ship it.\n\n```bash\nnpx vibe-kanban\n```\n\n\n## Installation\n\nMake sure you have authenticated with your favourite coding agent. A full list of supported coding agents can be found in the [docs](https://vibekanban.com/docs/supported-coding-agents). Then in your terminal run:\n\n```bash\nnpx vibe-kanban\n```\n\n## Documentation\n\nHead to the [website](https://vibekanban.com/docs) for the latest documentation and user guides.\n\n## Self-Hosting\n\nWant to host your own Vibe Kanban Cloud instance? See our [self-hosting guide](https://vibekanban.com/docs/self-hosting/deploy-docker).\n\n## Support\n\nWe use [GitHub Discussions](https://github.com/BloopAI/vibe-kanban/discussions) for feature requests. Please open a discussion to create a feature request. For bugs please open an issue on this repo.\n\n## Contributing\n\nWe would prefer that ideas and changes are first raised with the core team via [GitHub Discussions](https://github.com/BloopAI/vibe-kanban/discussions) or [Discord](https://discord.gg/AC4nwVtJM3), where we can discuss implementation details and alignment with the existing roadmap. Please do not open PRs without first discussing your proposal with the team.\n\n## Development\n\n### Prerequisites\n\n- [Rust](https://rustup.rs/) (latest stable)\n- [Node.js](https://nodejs.org/) (>=20)\n- [pnpm](https://pnpm.io/) (>=8)\n\nAdditional development tools:\n```bash\ncargo install cargo-watch\ncargo install sqlx-cli\n```\n\nInstall dependencies:\n```bash\npnpm i\n```\n\n### Running the dev server\n\n```bash\npnpm run dev\n```\n\nThis will start the backend and web app. A blank DB will be copied from the `dev_assets_seed` folder.\n\n### Building the web app\n\nTo build just the web app:\n\n```bash\ncd packages/local-web\npnpm run build\n```\n\n### Build from source (macOS)\n\n1. Run `./local-build.sh`\n2. Test with `cd npx-cli && node bin/cli.js`\n\n### Environment Variables\n\nThe following environment variables can be configured at build time or runtime:\n\n| Variable | Type | Default | Description |\n|----------|------|---------|-------------|\n| `POSTHOG_API_KEY` | Build-time | Empty | PostHog analytics API key (disables analytics if empty) |\n| `POSTHOG_API_ENDPOINT` | Build-time | Empty | PostHog analytics endpoint (disables analytics if empty) |\n| `PORT` | Runtime | Auto-assign | **Production**: Server port. **Dev**: Frontend port (backend uses PORT+1) |\n| `BACKEND_PORT` | Runtime | `0` (auto-assign) | Backend server port (dev mode only, overrides PORT+1) |\n| `FRONTEND_PORT` | Runtime | `3000` | Frontend dev server port (dev mode only, overrides PORT) |\n| `HOST` | Runtime | `127.0.0.1` | Backend server host |\n| `MCP_HOST` | Runtime | Value of `HOST` | MCP server connection host (use `127.0.0.1` when `HOST=0.0.0.0` on Windows) |\n| `MCP_PORT` | Runtime | Value of `BACKEND_PORT` | MCP server connection port |\n| `DISABLE_WORKTREE_CLEANUP` | Runtime | Not set | Disable all git worktree cleanup including orphan and expired workspace cleanup (for debugging) |\n| `VK_ALLOWED_ORIGINS` | Runtime | Not set | Comma-separated list of origins that are allowed to make backend API requests (e.g., `https://my-vibekanban-frontend.com`) |\n| `VK_SHARED_API_BASE` | Runtime | Not set | Base URL for the remote/cloud API used by the local desktop app |\n| `VK_SHARED_RELAY_API_BASE` | Runtime | Not set | Base URL for the relay API used by tunnel-mode connections |\n| `VK_TUNNEL` | Runtime | Not set | Enable relay tunnel mode when set (requires relay API base URL) |\n\n**Build-time variables** must be set when running `pnpm run build`. **Runtime variables** are read when the application starts.\n\n#### Self-Hosting with a Reverse Proxy or Custom Domain\n\nWhen running Vibe Kanban behind a reverse proxy (e.g., nginx, Caddy, Traefik) or on a custom domain, you must set the `VK_ALLOWED_ORIGINS` environment variable. Without this, the browser's Origin header won't match the backend's expected host, and API requests will be rejected with a 403 Forbidden error.\n\nSet it to the full origin URL(s) where your frontend is accessible:\n\n```bash\n# Single origin\nVK_ALLOWED_ORIGINS=https://vk.example.com\n\n# Multiple origins (comma-separated)\nVK_ALLOWED_ORIGINS=https://vk.example.com,https://vk-staging.example.com\n```\n\n### Remote Deployment\n\nWhen running Vibe Kanban on a remote server (e.g., via systemctl, Docker, or cloud hosting), you can configure your editor to open projects via SSH:\n\n1. **Access via tunnel**: Use Cloudflare Tunnel, ngrok, or similar to expose the web UI\n2. **Configure remote SSH** in Settings ā Editor Integration:\n - Set **Remote SSH Host** to your server hostname or IP\n - Set **Remote SSH User** to your SSH username (optional)\n3. **Prerequisites**:\n - SSH access from your local machine to the remote server\n - SSH keys configured (passwordless authentication)\n - VSCode Remote-SSH extension\n\nWhen configured, the \"Open in VSCode\" buttons will generate URLs like `vscode://vscode-remote/ssh-remote+user@host/path` that open your local editor and connect to the remote server.\n\nSee the [documentation](https://vibekanban.com/docs/settings/general) for detailed setup instructions.\n"
},
{
"path": "assets/scripts/toast-notification.ps1",
"content": "param(\n [Parameter(Mandatory=$true)]\n [string]$Title,\n \n [Parameter(Mandatory=$true)]\n [string]$Message,\n \n [Parameter(Mandatory=$false)]\n [string]$AppName = \"Vibe Kanban\"\n)\n\n[Windows.UI.Notifications.ToastNotificationManager, Windows.UI.Notifications, ContentType = WindowsRuntime] | Out-Null\n$Template = [Windows.UI.Notifications.ToastNotificationManager]::GetTemplateContent([Windows.UI.Notifications.ToastTemplateType]::ToastText02)\n$RawXml = [xml] $Template.GetXml()\n($RawXml.toast.visual.binding.text|where {$_.id -eq \"1\"}).AppendChild($RawXml.CreateTextNode($Title)) | Out-Null\n($RawXml.toast.visual.binding.text|where {$_.id -eq \"2\"}).AppendChild($RawXml.CreateTextNode($Message)) | Out-Null\n$SerializedXml = New-Object Windows.Data.Xml.Dom.XmlDocument\n$SerializedXml.LoadXml($RawXml.OuterXml)\n$Toast = [Windows.UI.Notifications.ToastNotification]::new($SerializedXml)\n$Toast.Tag = $AppName\n$Toast.Group = $AppName\n$Notifier = [Windows.UI.Notifications.ToastNotificationManager]::CreateToastNotifier($AppName)\n$Notifier.Show($Toast)"
},
{
"path": "crates/api-types/Cargo.toml",
"content": "[package]\nname = \"api-types\"\nversion = \"0.1.33\"\nedition = \"2024\"\n\n[dependencies]\nchrono = { version = \"0.4\", features = [\"serde\"] }\nschemars = { workspace = true }\nserde = { workspace = true }\nserde_json = { workspace = true }\nsqlx = { version = \"0.8.6\", default-features = false, features = [\"postgres\", \"uuid\", \"chrono\", \"derive\"] }\nts-rs = { workspace = true }\nuuid = { version = \"1.0\", features = [\"v4\", \"serde\"] }\n"
},
{
"path": "crates/api-types/src/attachment.rs",
"content": "use chrono::{DateTime, Utc};\nuse serde::{Deserialize, Serialize};\nuse ts_rs::TS;\nuse uuid::Uuid;\n\n/// An attachment links a blob to an issue or comment.\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct Attachment {\n pub id: Uuid,\n pub blob_id: Uuid,\n pub issue_id: Option,\n pub comment_id: Option,\n pub created_at: DateTime,\n pub expires_at: Option>,\n}\n\n/// An attachment with its associated blob data (for API responses).\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct AttachmentWithBlob {\n pub id: Uuid,\n pub blob_id: Uuid,\n pub issue_id: Option,\n pub comment_id: Option,\n pub created_at: DateTime,\n pub expires_at: Option>,\n // Blob fields\n pub blob_path: String,\n pub thumbnail_blob_path: Option,\n pub original_name: String,\n pub mime_type: Option,\n pub size_bytes: i64,\n pub hash: String,\n pub width: Option,\n pub height: Option,\n}\n\n/// An attachment with blob data and a presigned file URL.\n#[derive(Debug, Serialize, Deserialize)]\npub struct AttachmentWithUrl {\n #[serde(flatten)]\n pub attachment: AttachmentWithBlob,\n pub file_url: Option,\n}\n\n/// Response from listing attachments.\n#[derive(Debug, Serialize, Deserialize)]\npub struct ListAttachmentsResponse {\n pub attachments: Vec,\n}\n\n/// Response containing a presigned URL for an attachment file or thumbnail.\n#[derive(Debug, Serialize, Deserialize, TS)]\npub struct AttachmentUrlResponse {\n pub url: String,\n}\n"
},
{
"path": "crates/api-types/src/auth.rs",
"content": "use chrono::{DateTime, Duration, Utc};\nuse serde::Serialize;\nuse uuid::Uuid;\n\n#[derive(Debug, Clone, sqlx::FromRow, Serialize)]\npub struct AuthSession {\n pub id: Uuid,\n pub user_id: Uuid,\n pub created_at: DateTime,\n pub last_used_at: Option>,\n pub revoked_at: Option>,\n pub refresh_token_id: Option,\n pub refresh_token_issued_at: Option>,\n}\n\nimpl AuthSession {\n pub fn last_activity_at(&self) -> DateTime {\n self.last_used_at.unwrap_or(self.created_at)\n }\n\n pub fn inactivity_duration(&self, now: DateTime) -> Duration {\n now.signed_duration_since(self.last_activity_at())\n }\n}\n"
},
{
"path": "crates/api-types/src/blob.rs",
"content": "use chrono::{DateTime, Utc};\nuse serde::{Deserialize, Serialize};\nuse ts_rs::TS;\nuse uuid::Uuid;\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct Blob {\n pub id: Uuid,\n pub project_id: Uuid,\n pub blob_path: String,\n pub thumbnail_blob_path: Option,\n pub original_name: String,\n pub mime_type: Option,\n pub size_bytes: i64,\n pub hash: String,\n pub width: Option,\n pub height: Option,\n pub created_at: DateTime,\n pub updated_at: DateTime,\n}\n"
},
{
"path": "crates/api-types/src/issue.rs",
"content": "use chrono::{DateTime, Utc};\nuse serde::{Deserialize, Serialize};\nuse serde_json::Value;\nuse sqlx::Type;\nuse ts_rs::TS;\nuse uuid::Uuid;\n\nuse crate::some_if_present;\n\n#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, Type, TS)]\n#[sqlx(type_name = \"issue_priority\", rename_all = \"snake_case\")]\n#[serde(rename_all = \"snake_case\")]\npub enum IssuePriority {\n Urgent,\n High,\n Medium,\n Low,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS, sqlx::FromRow)]\npub struct Issue {\n pub id: Uuid,\n pub project_id: Uuid,\n pub issue_number: i32,\n pub simple_id: String,\n pub status_id: Uuid,\n pub title: String,\n pub description: Option,\n pub priority: Option,\n pub start_date: Option>,\n pub target_date: Option>,\n pub completed_at: Option>,\n pub sort_order: f64,\n pub parent_issue_id: Option,\n pub parent_issue_sort_order: Option,\n pub extension_metadata: Value,\n pub creator_user_id: Option,\n pub created_at: DateTime,\n pub updated_at: DateTime,\n}\n\n#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, TS)]\n#[serde(rename_all = \"snake_case\")]\npub enum IssueSortField {\n SortOrder,\n Priority,\n CreatedAt,\n UpdatedAt,\n Title,\n}\n\n#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, TS)]\n#[serde(rename_all = \"snake_case\")]\npub enum SortDirection {\n Asc,\n Desc,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct CreateIssueRequest {\n /// Optional client-generated ID. If not provided, server generates one.\n /// Using client-generated IDs enables stable optimistic updates.\n #[ts(optional)]\n pub id: Option,\n pub project_id: Uuid,\n pub status_id: Uuid,\n pub title: String,\n pub description: Option,\n pub priority: Option,\n pub start_date: Option>,\n pub target_date: Option>,\n pub completed_at: Option>,\n pub sort_order: f64,\n pub parent_issue_id: Option,\n pub parent_issue_sort_order: Option,\n pub extension_metadata: Value,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct UpdateIssueRequest {\n #[serde(\n default,\n deserialize_with = \"some_if_present\",\n skip_serializing_if = \"Option::is_none\"\n )]\n pub status_id: Option,\n #[serde(\n default,\n deserialize_with = \"some_if_present\",\n skip_serializing_if = \"Option::is_none\"\n )]\n pub title: Option,\n #[serde(\n default,\n deserialize_with = \"some_if_present\",\n skip_serializing_if = \"Option::is_none\"\n )]\n pub description: Option>,\n #[serde(\n default,\n deserialize_with = \"some_if_present\",\n skip_serializing_if = \"Option::is_none\"\n )]\n pub priority: Option>,\n #[serde(\n default,\n deserialize_with = \"some_if_present\",\n skip_serializing_if = \"Option::is_none\"\n )]\n pub start_date: Option>>,\n #[serde(\n default,\n deserialize_with = \"some_if_present\",\n skip_serializing_if = \"Option::is_none\"\n )]\n pub target_date: Option>>,\n #[serde(\n default,\n deserialize_with = \"some_if_present\",\n skip_serializing_if = \"Option::is_none\"\n )]\n pub completed_at: Option>>,\n #[serde(\n default,\n deserialize_with = \"some_if_present\",\n skip_serializing_if = \"Option::is_none\"\n )]\n pub sort_order: Option,\n #[serde(\n default,\n deserialize_with = \"some_if_present\",\n skip_serializing_if = \"Option::is_none\"\n )]\n pub parent_issue_id: Option>,\n #[serde(\n default,\n deserialize_with = \"some_if_present\",\n skip_serializing_if = \"Option::is_none\"\n )]\n pub parent_issue_sort_order: Option>,\n #[serde(\n default,\n deserialize_with = \"some_if_present\",\n skip_serializing_if = \"Option::is_none\"\n )]\n pub extension_metadata: Option,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct ListIssuesQuery {\n pub project_id: Uuid,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct SearchIssuesRequest {\n pub project_id: Uuid,\n #[ts(optional)]\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub status_id: Option,\n #[ts(optional)]\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub status_ids: Option>,\n #[ts(optional)]\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub priority: Option,\n #[ts(optional)]\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub parent_issue_id: Option,\n #[ts(optional)]\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub search: Option,\n #[ts(optional)]\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub simple_id: Option,\n #[ts(optional)]\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub assignee_user_id: Option,\n #[ts(optional)]\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub tag_id: Option,\n #[ts(optional)]\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub tag_ids: Option>,\n #[ts(optional)]\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub sort_field: Option,\n #[ts(optional)]\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub sort_direction: Option,\n #[ts(optional)]\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub limit: Option,\n #[ts(optional)]\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub offset: Option,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct ListIssuesResponse {\n pub issues: Vec,\n pub total_count: usize,\n pub limit: usize,\n pub offset: usize,\n}\n"
},
{
"path": "crates/api-types/src/issue_assignee.rs",
"content": "use chrono::{DateTime, Utc};\nuse serde::{Deserialize, Serialize};\nuse ts_rs::TS;\nuse uuid::Uuid;\n\nuse crate::some_if_present;\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct IssueAssignee {\n pub id: Uuid,\n pub issue_id: Uuid,\n pub user_id: Uuid,\n pub assigned_at: DateTime,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct CreateIssueAssigneeRequest {\n /// Optional client-generated ID. If not provided, server generates one.\n /// Using client-generated IDs enables stable optimistic updates.\n #[ts(optional)]\n pub id: Option,\n pub issue_id: Uuid,\n pub user_id: Uuid,\n}\n\n#[derive(Debug, Clone, Deserialize, TS)]\npub struct UpdateIssueAssigneeRequest {\n #[serde(default, deserialize_with = \"some_if_present\")]\n pub user_id: Option,\n}\n\n#[derive(Debug, Clone, Deserialize)]\npub struct ListIssueAssigneesQuery {\n pub issue_id: Uuid,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct ListIssueAssigneesResponse {\n pub issue_assignees: Vec,\n}\n"
},
{
"path": "crates/api-types/src/issue_comment.rs",
"content": "use chrono::{DateTime, Utc};\nuse serde::{Deserialize, Serialize};\nuse ts_rs::TS;\nuse uuid::Uuid;\n\nuse crate::some_if_present;\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct IssueComment {\n pub id: Uuid,\n pub issue_id: Uuid,\n pub author_id: Option,\n pub parent_id: Option,\n pub message: String,\n pub created_at: DateTime,\n pub updated_at: DateTime,\n}\n\n#[derive(Debug, Clone, Deserialize, TS)]\npub struct CreateIssueCommentRequest {\n /// Optional client-generated ID. If not provided, server generates one.\n /// Using client-generated IDs enables stable optimistic updates.\n #[ts(optional)]\n pub id: Option,\n pub issue_id: Uuid,\n pub message: String,\n pub parent_id: Option,\n}\n\n#[derive(Debug, Clone, Deserialize, TS)]\npub struct UpdateIssueCommentRequest {\n #[serde(default, deserialize_with = \"some_if_present\")]\n pub message: Option,\n #[serde(default, deserialize_with = \"some_if_present\")]\n pub parent_id: Option>,\n}\n\n#[derive(Debug, Clone, Deserialize)]\npub struct ListIssueCommentsQuery {\n pub issue_id: Uuid,\n}\n\n#[derive(Debug, Clone, Serialize, TS)]\npub struct ListIssueCommentsResponse {\n pub issue_comments: Vec,\n}\n"
},
{
"path": "crates/api-types/src/issue_comment_reaction.rs",
"content": "use chrono::{DateTime, Utc};\nuse serde::{Deserialize, Serialize};\nuse ts_rs::TS;\nuse uuid::Uuid;\n\nuse crate::some_if_present;\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct IssueCommentReaction {\n pub id: Uuid,\n pub comment_id: Uuid,\n pub user_id: Uuid,\n pub emoji: String,\n pub created_at: DateTime,\n}\n\n#[derive(Debug, Clone, Deserialize, TS)]\npub struct CreateIssueCommentReactionRequest {\n /// Optional client-generated ID. If not provided, server generates one.\n /// Using client-generated IDs enables stable optimistic updates.\n #[ts(optional)]\n pub id: Option,\n pub comment_id: Uuid,\n pub emoji: String,\n}\n\n#[derive(Debug, Clone, Deserialize, TS)]\npub struct UpdateIssueCommentReactionRequest {\n #[serde(default, deserialize_with = \"some_if_present\")]\n pub emoji: Option,\n}\n\n#[derive(Debug, Clone, Deserialize)]\npub struct ListIssueCommentReactionsQuery {\n pub comment_id: Uuid,\n}\n\n#[derive(Debug, Clone, Serialize, TS)]\npub struct ListIssueCommentReactionsResponse {\n pub issue_comment_reactions: Vec,\n}\n"
},
{
"path": "crates/api-types/src/issue_follower.rs",
"content": "use serde::{Deserialize, Serialize};\nuse ts_rs::TS;\nuse uuid::Uuid;\n\nuse crate::some_if_present;\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct IssueFollower {\n pub id: Uuid,\n pub issue_id: Uuid,\n pub user_id: Uuid,\n}\n\n#[derive(Debug, Clone, Deserialize, TS)]\npub struct CreateIssueFollowerRequest {\n /// Optional client-generated ID. If not provided, server generates one.\n /// Using client-generated IDs enables stable optimistic updates.\n #[ts(optional)]\n pub id: Option,\n pub issue_id: Uuid,\n pub user_id: Uuid,\n}\n\n#[derive(Debug, Clone, Deserialize, TS)]\npub struct UpdateIssueFollowerRequest {\n #[serde(default, deserialize_with = \"some_if_present\")]\n pub user_id: Option,\n}\n\n#[derive(Debug, Clone, Deserialize)]\npub struct ListIssueFollowersQuery {\n pub issue_id: Uuid,\n}\n\n#[derive(Debug, Clone, Serialize, TS)]\npub struct ListIssueFollowersResponse {\n pub issue_followers: Vec,\n}\n"
},
{
"path": "crates/api-types/src/issue_relationship.rs",
"content": "use chrono::{DateTime, Utc};\nuse schemars::JsonSchema;\nuse serde::{Deserialize, Serialize};\nuse sqlx::Type;\nuse ts_rs::TS;\nuse uuid::Uuid;\n\nuse crate::some_if_present;\n\n#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, Type, TS, JsonSchema)]\n#[sqlx(type_name = \"issue_relationship_type\", rename_all = \"snake_case\")]\n#[serde(rename_all = \"snake_case\")]\npub enum IssueRelationshipType {\n Blocking,\n Related,\n HasDuplicate,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct IssueRelationship {\n pub id: Uuid,\n pub issue_id: Uuid,\n pub related_issue_id: Uuid,\n pub relationship_type: IssueRelationshipType,\n pub created_at: DateTime,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct CreateIssueRelationshipRequest {\n /// Optional client-generated ID. If not provided, server generates one.\n /// Using client-generated IDs enables stable optimistic updates.\n #[ts(optional)]\n pub id: Option,\n pub issue_id: Uuid,\n pub related_issue_id: Uuid,\n pub relationship_type: IssueRelationshipType,\n}\n\n#[derive(Debug, Clone, Deserialize, TS)]\npub struct UpdateIssueRelationshipRequest {\n #[serde(default, deserialize_with = \"some_if_present\")]\n pub related_issue_id: Option,\n #[serde(default, deserialize_with = \"some_if_present\")]\n pub relationship_type: Option,\n}\n\n#[derive(Debug, Clone, Deserialize)]\npub struct ListIssueRelationshipsQuery {\n pub issue_id: Uuid,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct ListIssueRelationshipsResponse {\n pub issue_relationships: Vec,\n}\n"
},
{
"path": "crates/api-types/src/issue_tag.rs",
"content": "use serde::{Deserialize, Serialize};\nuse ts_rs::TS;\nuse uuid::Uuid;\n\nuse crate::some_if_present;\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct IssueTag {\n pub id: Uuid,\n pub issue_id: Uuid,\n pub tag_id: Uuid,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct CreateIssueTagRequest {\n /// Optional client-generated ID. If not provided, server generates one.\n /// Using client-generated IDs enables stable optimistic updates.\n #[ts(optional)]\n pub id: Option,\n pub issue_id: Uuid,\n pub tag_id: Uuid,\n}\n\n#[derive(Debug, Clone, Deserialize, TS)]\npub struct UpdateIssueTagRequest {\n #[serde(default, deserialize_with = \"some_if_present\")]\n pub tag_id: Option,\n}\n\n#[derive(Debug, Clone, Deserialize)]\npub struct ListIssueTagsQuery {\n pub issue_id: Uuid,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct ListIssueTagsResponse {\n pub issue_tags: Vec,\n}\n"
},
{
"path": "crates/api-types/src/lib.rs",
"content": "//! API types shared between local and remote backends.\n//!\n//! This crate contains:\n//! - Row types (e.g., `Issue`, `Project`) - the API representation of database entities\n//! - Request types (e.g., `CreateIssueRequest`, `UpdateIssueRequest`) - API input types\n//! - Shared enums (e.g., `IssuePriority`, `PullRequestStatus`)\n\nuse serde::{Deserialize, Deserializer};\n\npub mod attachment;\npub mod auth;\npub mod blob;\npub mod issue;\npub mod issue_assignee;\npub mod issue_comment;\npub mod issue_comment_reaction;\npub mod issue_follower;\npub mod issue_relationship;\npub mod issue_tag;\npub mod migration;\npub mod notification;\npub mod oauth;\npub mod organization_member;\npub mod organizations;\npub mod project;\npub mod project_status;\npub mod pull_request;\npub mod pull_requests_local;\npub mod relay;\npub mod response;\npub mod tag;\npub mod user;\npub mod workspace;\npub mod workspaces;\n\npub use attachment::*;\npub use auth::*;\npub use blob::*;\npub use issue::*;\npub use issue_assignee::*;\npub use issue_comment::*;\npub use issue_comment_reaction::*;\npub use issue_follower::*;\npub use issue_relationship::*;\npub use issue_tag::*;\npub use migration::*;\npub use notification::*;\npub use oauth::*;\npub use organization_member::*;\npub use organizations::*;\npub use project::*;\npub use project_status::*;\npub use pull_request::*;\npub use pull_requests_local::*;\npub use relay::*;\npub use response::*;\npub use tag::*;\npub use user::*;\npub use workspace::*;\npub use workspaces::*;\n\npub fn some_if_present<'de, D, T>(deserializer: D) -> Result, D::Error>\nwhere\n D: Deserializer<'de>,\n T: Deserialize<'de>,\n{\n T::deserialize(deserializer).map(Some)\n}\n"
},
{
"path": "crates/api-types/src/migration.rs",
"content": "use chrono::{DateTime, Utc};\nuse serde::{Deserialize, Serialize};\nuse uuid::Uuid;\n\n#[derive(Debug, Clone, Serialize, Deserialize)]\npub struct MigrateProjectRequest {\n pub organization_id: Uuid,\n pub name: String,\n pub color: String,\n pub created_at: DateTime,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize)]\npub struct MigrateIssueRequest {\n pub project_id: Uuid,\n pub status_name: String,\n pub title: String,\n pub description: Option,\n pub created_at: DateTime,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize)]\npub struct MigratePullRequestRequest {\n pub url: String,\n pub number: i32,\n pub status: String,\n pub merged_at: Option>,\n pub merge_commit_sha: Option,\n pub target_branch_name: String,\n pub issue_id: Uuid,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize)]\npub struct MigrateWorkspaceRequest {\n pub project_id: Uuid,\n pub issue_id: Option,\n pub local_workspace_id: Uuid,\n pub archived: bool,\n pub created_at: DateTime,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize)]\npub struct BulkMigrateRequest {\n pub items: Vec,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize)]\npub struct BulkMigrateResponse {\n pub ids: Vec,\n}\n"
},
{
"path": "crates/api-types/src/notification.rs",
"content": "use chrono::{DateTime, Utc};\nuse serde::{Deserialize, Serialize};\nuse sqlx::Type;\nuse ts_rs::TS;\nuse uuid::Uuid;\n\nuse crate::{IssuePriority, some_if_present};\n\n#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, Type, TS)]\n#[serde(rename_all = \"snake_case\")]\n#[sqlx(type_name = \"notification_type\", rename_all = \"snake_case\")]\npub enum NotificationType {\n IssueCommentAdded,\n IssueStatusChanged,\n IssueAssigneeChanged,\n IssuePriorityChanged,\n IssueUnassigned,\n IssueCommentReaction,\n IssueDeleted,\n IssueTitleChanged,\n IssueDescriptionChanged,\n}\n\n#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, TS)]\n#[serde(rename_all = \"snake_case\")]\npub enum NotificationGroupKind {\n Single,\n IssueChanges,\n StatusChanges,\n Comments,\n Reactions,\n IssueDeleted,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct Notification {\n pub id: Uuid,\n pub organization_id: Uuid,\n pub user_id: Uuid,\n pub notification_type: NotificationType,\n pub payload: NotificationPayload,\n pub issue_id: Option,\n pub comment_id: Option,\n pub seen: bool,\n pub dismissed_at: Option>,\n pub created_at: DateTime,\n}\n\n#[derive(Debug, Clone, Default, Serialize, Deserialize, TS)]\npub struct NotificationPayload {\n #[serde(default, skip_serializing_if = \"Option::is_none\")]\n pub deeplink_path: Option,\n #[serde(default, skip_serializing_if = \"Option::is_none\")]\n pub issue_id: Option,\n #[serde(default, skip_serializing_if = \"Option::is_none\")]\n pub issue_simple_id: Option,\n #[serde(default, skip_serializing_if = \"Option::is_none\")]\n pub issue_title: Option,\n #[serde(default, skip_serializing_if = \"Option::is_none\")]\n pub actor_user_id: Option,\n #[serde(default, skip_serializing_if = \"Option::is_none\")]\n pub comment_preview: Option,\n #[serde(default, skip_serializing_if = \"Option::is_none\")]\n pub old_status_id: Option,\n #[serde(default, skip_serializing_if = \"Option::is_none\")]\n pub new_status_id: Option,\n #[serde(default, skip_serializing_if = \"Option::is_none\")]\n pub old_status_name: Option,\n #[serde(default, skip_serializing_if = \"Option::is_none\")]\n pub new_status_name: Option,\n #[serde(default, skip_serializing_if = \"Option::is_none\")]\n pub new_title: Option,\n #[serde(default, skip_serializing_if = \"Option::is_none\")]\n pub old_priority: Option,\n #[serde(default, skip_serializing_if = \"Option::is_none\")]\n pub new_priority: Option,\n #[serde(default, skip_serializing_if = \"Option::is_none\")]\n pub assignee_user_id: Option,\n #[serde(default, skip_serializing_if = \"Option::is_none\")]\n pub emoji: Option,\n}\n\n#[derive(Debug, Clone, Deserialize, TS)]\npub struct UpdateNotificationRequest {\n #[serde(default, deserialize_with = \"some_if_present\")]\n pub seen: Option,\n}\n"
},
{
"path": "crates/api-types/src/oauth.rs",
"content": "use serde::{Deserialize, Serialize};\nuse ts_rs::TS;\nuse uuid::Uuid;\n\n#[derive(Debug, Serialize, Deserialize, Clone, TS)]\npub struct HandoffInitRequest {\n pub provider: String,\n pub return_to: String,\n pub app_challenge: String,\n}\n\n#[derive(Debug, Serialize, Deserialize, Clone, TS)]\npub struct HandoffInitResponse {\n pub handoff_id: Uuid,\n pub authorize_url: String,\n}\n\n#[derive(Debug, Serialize, Deserialize, Clone, TS)]\npub struct HandoffRedeemRequest {\n pub handoff_id: Uuid,\n pub app_code: String,\n pub app_verifier: String,\n}\n\n#[derive(Debug, Serialize, Deserialize, Clone, TS)]\npub struct HandoffRedeemResponse {\n pub access_token: String,\n pub refresh_token: String,\n}\n\n#[derive(Debug, Serialize, Deserialize, Clone, TS)]\npub struct TokenRefreshRequest {\n pub refresh_token: String,\n}\n\n#[derive(Debug, Serialize, Deserialize, Clone, TS)]\npub struct TokenRefreshResponse {\n pub access_token: String,\n pub refresh_token: String,\n}\n\n#[derive(Debug, Serialize, Deserialize, Clone, TS)]\npub struct ProviderProfile {\n pub provider: String,\n pub username: Option,\n pub display_name: Option,\n pub email: Option,\n pub avatar_url: Option,\n}\n\n#[derive(Debug, Serialize, Deserialize, Clone, TS)]\npub struct ProfileResponse {\n pub user_id: Uuid,\n pub username: Option,\n pub email: String,\n pub providers: Vec,\n}\n\n#[derive(Debug, Serialize, Deserialize, Clone, TS)]\n#[serde(tag = \"status\", rename_all = \"lowercase\")]\npub enum LoginStatus {\n LoggedOut,\n LoggedIn { profile: ProfileResponse },\n}\n\n#[derive(Debug, Serialize, Deserialize, Clone, TS)]\npub struct StatusResponse {\n pub logged_in: bool,\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub profile: Option,\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub degraded: Option,\n}\n"
},
{
"path": "crates/api-types/src/organization_member.rs",
"content": "use chrono::{DateTime, Utc};\nuse serde::{Deserialize, Serialize};\nuse sqlx::Type;\nuse ts_rs::TS;\nuse uuid::Uuid;\n\n#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, Type, TS)]\n#[serde(rename_all = \"SCREAMING_SNAKE_CASE\")]\n#[sqlx(type_name = \"member_role\", rename_all = \"lowercase\")]\n#[ts(use_ts_enum)]\n#[ts(rename_all = \"SCREAMING_SNAKE_CASE\")]\npub enum MemberRole {\n Admin,\n Member,\n}\n\n/// Organization member as stored in the database / streamed via Electric.\n/// This is the full row type with organization_id for shapes.\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct OrganizationMember {\n pub organization_id: Uuid,\n pub user_id: Uuid,\n pub role: MemberRole,\n pub joined_at: DateTime,\n pub last_seen_at: Option>,\n}\n"
},
{
"path": "crates/api-types/src/organizations.rs",
"content": "use chrono::{DateTime, Utc};\nuse serde::{Deserialize, Serialize};\nuse sqlx::Type;\nuse ts_rs::TS;\nuse uuid::Uuid;\n\nuse crate::MemberRole;\n\n#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, Type, TS)]\n#[serde(rename_all = \"SCREAMING_SNAKE_CASE\")]\n#[sqlx(type_name = \"invitation_status\", rename_all = \"lowercase\")]\n#[ts(use_ts_enum)]\n#[ts(rename_all = \"SCREAMING_SNAKE_CASE\")]\npub enum InvitationStatus {\n Pending,\n Accepted,\n Declined,\n Expired,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, sqlx::FromRow, TS)]\npub struct Organization {\n pub id: Uuid,\n pub name: String,\n pub slug: String,\n pub is_personal: bool,\n pub issue_prefix: String,\n pub created_at: DateTime,\n pub updated_at: DateTime,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, sqlx::FromRow, TS)]\npub struct OrganizationWithRole {\n pub id: Uuid,\n pub name: String,\n pub slug: String,\n pub is_personal: bool,\n pub issue_prefix: String,\n pub created_at: DateTime,\n pub updated_at: DateTime,\n pub user_role: MemberRole,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct ListOrganizationsResponse {\n pub organizations: Vec,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct GetOrganizationResponse {\n pub organization: Organization,\n pub user_role: String,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct CreateOrganizationRequest {\n pub name: String,\n pub slug: String,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct CreateOrganizationResponse {\n pub organization: OrganizationWithRole,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct UpdateOrganizationRequest {\n pub name: String,\n}\n\n// Invitation types\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct Invitation {\n pub id: Uuid,\n pub organization_id: Uuid,\n pub invited_by_user_id: Option,\n pub email: String,\n pub role: MemberRole,\n pub status: InvitationStatus,\n pub token: String,\n pub created_at: DateTime,\n pub expires_at: DateTime,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct CreateInvitationRequest {\n pub email: String,\n pub role: MemberRole,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct CreateInvitationResponse {\n pub invitation: Invitation,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct ListInvitationsResponse {\n pub invitations: Vec,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct GetInvitationResponse {\n pub id: Uuid,\n pub organization_slug: String,\n pub role: MemberRole,\n pub expires_at: DateTime,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct AcceptInvitationResponse {\n pub organization_id: String,\n pub organization_slug: String,\n pub role: MemberRole,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct RevokeInvitationRequest {\n pub invitation_id: Uuid,\n}\n\n// Member types\n\n/// Organization member info for API responses (without organization_id).\n/// See also `OrganizationMember` in organization_member.rs for the full DB row type.\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct OrganizationMemberInfo {\n pub user_id: Uuid,\n pub role: MemberRole,\n pub joined_at: DateTime,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct OrganizationMemberWithProfile {\n pub user_id: Uuid,\n pub role: MemberRole,\n pub joined_at: DateTime,\n pub first_name: Option,\n pub last_name: Option,\n pub username: Option,\n pub email: Option,\n pub avatar_url: Option,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct ListMembersResponse {\n pub members: Vec,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct UpdateMemberRoleRequest {\n pub role: MemberRole,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct UpdateMemberRoleResponse {\n pub user_id: Uuid,\n pub role: MemberRole,\n}\n"
},
{
"path": "crates/api-types/src/project.rs",
"content": "use chrono::{DateTime, Utc};\nuse serde::{Deserialize, Serialize};\nuse ts_rs::TS;\nuse uuid::Uuid;\n\nuse crate::some_if_present;\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct Project {\n pub id: Uuid,\n pub organization_id: Uuid,\n pub name: String,\n pub color: String,\n pub sort_order: i32,\n pub created_at: DateTime,\n pub updated_at: DateTime,\n}\n\n#[derive(Debug, Clone, Deserialize, TS)]\npub struct CreateProjectRequest {\n /// Optional client-generated ID. If not provided, server generates one.\n /// Using client-generated IDs enables stable optimistic updates.\n #[ts(optional)]\n pub id: Option,\n pub organization_id: Uuid,\n pub name: String,\n pub color: String,\n}\n\n#[derive(Debug, Clone, Deserialize, TS)]\npub struct UpdateProjectRequest {\n #[serde(default, deserialize_with = \"some_if_present\")]\n pub name: Option,\n #[serde(default, deserialize_with = \"some_if_present\")]\n pub color: Option,\n #[serde(default, deserialize_with = \"some_if_present\")]\n pub sort_order: Option,\n}\n\n#[derive(Debug, Clone, Deserialize)]\npub struct ListProjectsQuery {\n pub organization_id: Uuid,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct ListProjectsResponse {\n pub projects: Vec,\n}\n\n#[derive(Debug, Clone, Deserialize)]\npub struct BulkUpdateProjectItem {\n pub id: Uuid,\n #[serde(flatten)]\n pub changes: UpdateProjectRequest,\n}\n\n#[derive(Debug, Clone, Deserialize)]\npub struct BulkUpdateProjectsRequest {\n pub updates: Vec,\n}\n\n#[derive(Debug, Clone, Serialize)]\npub struct BulkUpdateProjectsResponse {\n pub data: Vec,\n pub txid: i64,\n}\n"
},
{
"path": "crates/api-types/src/project_status.rs",
"content": "use chrono::{DateTime, Utc};\nuse serde::{Deserialize, Serialize};\nuse ts_rs::TS;\nuse uuid::Uuid;\n\nuse crate::some_if_present;\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct ProjectStatus {\n pub id: Uuid,\n pub project_id: Uuid,\n pub name: String,\n pub color: String,\n pub sort_order: i32,\n pub hidden: bool,\n pub created_at: DateTime,\n}\n\n#[derive(Debug, Clone, Deserialize, TS)]\npub struct CreateProjectStatusRequest {\n /// Optional client-generated ID. If not provided, server generates one.\n /// Using client-generated IDs enables stable optimistic updates.\n #[ts(optional)]\n pub id: Option,\n pub project_id: Uuid,\n pub name: String,\n pub color: String,\n pub sort_order: i32,\n pub hidden: bool,\n}\n\n#[derive(Debug, Clone, Deserialize, TS)]\npub struct UpdateProjectStatusRequest {\n #[serde(default, deserialize_with = \"some_if_present\")]\n pub name: Option,\n #[serde(default, deserialize_with = \"some_if_present\")]\n pub color: Option,\n #[serde(default, deserialize_with = \"some_if_present\")]\n pub sort_order: Option,\n #[serde(default, deserialize_with = \"some_if_present\")]\n pub hidden: Option,\n}\n\n#[derive(Debug, Clone, Deserialize)]\npub struct ListProjectStatusesQuery {\n pub project_id: Uuid,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct ListProjectStatusesResponse {\n pub project_statuses: Vec,\n}\n"
},
{
"path": "crates/api-types/src/pull_request.rs",
"content": "use chrono::{DateTime, Utc};\nuse schemars::JsonSchema;\nuse serde::{Deserialize, Serialize};\nuse sqlx::Type;\nuse ts_rs::TS;\nuse uuid::Uuid;\n\n#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, Type, TS, JsonSchema)]\n#[sqlx(type_name = \"pull_request_status\", rename_all = \"lowercase\")]\n#[serde(rename_all = \"lowercase\")]\npub enum PullRequestStatus {\n Open,\n Merged,\n Closed,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct PullRequest {\n pub id: Uuid,\n pub url: String,\n pub number: i32,\n pub status: PullRequestStatus,\n pub merged_at: Option>,\n pub merge_commit_sha: Option,\n pub target_branch_name: String,\n pub issue_id: Uuid,\n pub workspace_id: Option,\n pub created_at: DateTime,\n pub updated_at: DateTime,\n}\n\n#[derive(Debug, Clone, Deserialize)]\npub struct ListPullRequestsQuery {\n pub issue_id: Uuid,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct ListPullRequestsResponse {\n pub pull_requests: Vec,\n}\n"
},
{
"path": "crates/api-types/src/pull_requests_local.rs",
"content": "use chrono::{DateTime, Utc};\nuse serde::{Deserialize, Serialize};\nuse uuid::Uuid;\n\nuse crate::PullRequestStatus;\n\n#[derive(Debug, Deserialize, Serialize)]\npub struct UpsertPullRequestRequest {\n pub url: String,\n pub number: i32,\n pub status: PullRequestStatus,\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub merged_at: Option>,\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub merge_commit_sha: Option,\n pub target_branch_name: String,\n pub local_workspace_id: Uuid,\n}\n"
},
{
"path": "crates/api-types/src/relay.rs",
"content": "use chrono::{DateTime, Utc};\nuse serde::{Deserialize, Serialize};\nuse ts_rs::TS;\nuse uuid::Uuid;\n\n#[derive(Debug, Clone, Serialize, Deserialize, sqlx::FromRow, TS)]\npub struct RelayHost {\n pub id: Uuid,\n pub owner_user_id: Uuid,\n pub name: String,\n pub status: String,\n pub last_seen_at: Option>,\n pub agent_version: Option,\n pub created_at: DateTime,\n pub updated_at: DateTime,\n pub access_role: String,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct ListRelayHostsResponse {\n pub hosts: Vec,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct RelaySessionAuthCodeResponse {\n pub session_id: Uuid,\n pub code: String,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, sqlx::FromRow, TS)]\npub struct RelaySession {\n pub id: Uuid,\n pub host_id: Uuid,\n pub request_user_id: Uuid,\n pub state: String,\n pub created_at: DateTime,\n pub expires_at: DateTime,\n pub claimed_at: Option>,\n pub ended_at: Option>,\n}\n"
},
{
"path": "crates/api-types/src/response.rs",
"content": "use serde::{Deserialize, Serialize};\nuse ts_rs::TS;\n\n/// Response wrapper for mutation endpoints (create/update).\n/// Includes the Postgres transaction ID for Electric sync.\n#[derive(Debug, Serialize, Deserialize)]\npub struct MutationResponse {\n pub data: T,\n pub txid: i64,\n}\n\n/// Response wrapper for delete endpoints.\n#[derive(Debug, Serialize, Deserialize, TS)]\npub struct DeleteResponse {\n pub txid: i64,\n}\n"
},
{
"path": "crates/api-types/src/tag.rs",
"content": "use serde::{Deserialize, Serialize};\nuse ts_rs::TS;\nuse uuid::Uuid;\n\nuse crate::some_if_present;\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct Tag {\n pub id: Uuid,\n pub project_id: Uuid,\n pub name: String,\n pub color: String,\n}\n\n#[derive(Debug, Clone, Deserialize, TS)]\npub struct CreateTagRequest {\n /// Optional client-generated ID. If not provided, server generates one.\n /// Using client-generated IDs enables stable optimistic updates.\n #[ts(optional)]\n pub id: Option,\n pub project_id: Uuid,\n pub name: String,\n pub color: String,\n}\n\n#[derive(Debug, Clone, Deserialize, TS)]\npub struct UpdateTagRequest {\n #[serde(default, deserialize_with = \"some_if_present\")]\n pub name: Option,\n #[serde(default, deserialize_with = \"some_if_present\")]\n pub color: Option,\n}\n\n#[derive(Debug, Clone, Deserialize)]\npub struct ListTagsQuery {\n pub project_id: Uuid,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct ListTagsResponse {\n pub tags: Vec,\n}\n"
},
{
"path": "crates/api-types/src/user.rs",
"content": "use chrono::{DateTime, Utc};\nuse serde::{Deserialize, Serialize};\nuse ts_rs::TS;\nuse uuid::Uuid;\n\n#[derive(Debug, Clone, Serialize, Deserialize, sqlx::FromRow, TS)]\npub struct User {\n pub id: Uuid,\n pub email: String,\n pub first_name: Option,\n pub last_name: Option,\n pub username: Option,\n pub created_at: DateTime,\n pub updated_at: DateTime,\n}\n\n#[derive(Debug, Clone, Serialize, Deserialize, TS)]\npub struct UserData {\n pub user_id: Uuid,\n pub first_name: Option,\n pub last_name: Option,\n pub username: Option,\n}\n"
},
{
"path": "crates/api-types/src/workspace.rs",
"content": "use chrono::{DateTime, Utc};\nuse serde::{Deserialize, Serialize};\nuse ts_rs::TS;\nuse uuid::Uuid;\n\n/// Workspace metadata pushed from local clients\n#[derive(Debug, Clone, Serialize, Deserialize, sqlx::FromRow, TS)]\npub struct Workspace {\n pub id: Uuid,\n pub project_id: Uuid,\n pub owner_user_id: Uuid,\n pub issue_id: Option,\n pub local_workspace_id: Option,\n pub name: Option,\n pub archived: bool,\n pub files_changed: Option,\n pub lines_added: Option,\n pub lines_removed: Option,\n pub created_at: DateTime,\n pub updated_at: DateTime,\n}\n"
},
{
"path": "crates/api-types/src/workspaces.rs",
"content": "use serde::{Deserialize, Serialize};\nuse uuid::Uuid;\n\n#[derive(Debug, Deserialize, Serialize)]\npub struct DeleteWorkspaceRequest {\n pub local_workspace_id: Uuid,\n}\n\n#[derive(Debug, Serialize)]\npub struct CreateWorkspaceRequest {\n pub project_id: Uuid,\n pub local_workspace_id: Uuid,\n pub issue_id: Uuid,\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub name: Option,\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub archived: Option,\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub files_changed: Option,\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub lines_added: Option,\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub lines_removed: Option,\n}\n\n#[derive(Debug, Deserialize, Serialize)]\npub struct UpdateWorkspaceRequest {\n pub local_workspace_id: Uuid,\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub name: Option>,\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub archived: Option,\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub files_changed: Option>,\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub lines_added: Option>,\n #[serde(skip_serializing_if = \"Option::is_none\")]\n pub lines_removed: Option>,\n}\n"
},
{
"path": "crates/db/.sqlx/query-039c2290b6cf7cdc905c8ddc44293f067fe7e8f246da737e4baad3f494ac8b8f.json",
"content": "{\n \"db_name\": \"SQLite\",\n \"query\": \"INSERT INTO execution_processes (\\n id, session_id, run_reason, executor_action,\\n status, exit_code, started_at, completed_at, created_at, updated_at\\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Right\": 10\n },\n \"nullable\": []\n },\n \"hash\": \"039c2290b6cf7cdc905c8ddc44293f067fe7e8f246da737e4baad3f494ac8b8f\"\n}\n"
},
{
"path": "crates/db/.sqlx/query-04c207be2c3c2c07ff42c695542504c358d67c1f40ca2b1e75a396a90c173a53.json",
"content": "{\n \"db_name\": \"SQLite\",\n \"query\": \"SELECT eprs.after_head_commit\\n FROM execution_process_repo_states eprs\\n JOIN execution_processes ep ON ep.id = eprs.execution_process_id\\n WHERE ep.session_id = $1\\n AND eprs.repo_id = $2\\n AND ep.created_at < (SELECT created_at FROM execution_processes WHERE id = $3)\\n ORDER BY ep.created_at DESC\\n LIMIT 1\",\n \"describe\": {\n \"columns\": [\n {\n \"name\": \"after_head_commit\",\n \"ordinal\": 0,\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Right\": 3\n },\n \"nullable\": [\n true\n ]\n },\n \"hash\": \"04c207be2c3c2c07ff42c695542504c358d67c1f40ca2b1e75a396a90c173a53\"\n}\n"
},
{
"path": "crates/db/.sqlx/query-04e5a05c7cad438d39c4c8590410889ab1eefa7376d474a10c119d3f4d9143c7.json",
"content": "{\n \"db_name\": \"SQLite\",\n \"query\": \"SELECT\\n id as \\\"id!: Uuid\\\",\\n execution_process_id as \\\"execution_process_id!: Uuid\\\",\\n agent_session_id,\\n agent_message_id,\\n prompt,\\n summary,\\n seen as \\\"seen!: bool\\\",\\n created_at as \\\"created_at!: DateTime\\\",\\n updated_at as \\\"updated_at!: DateTime\\\"\\n FROM coding_agent_turns\\n WHERE agent_session_id = ?\\n ORDER BY updated_at DESC\\n LIMIT 1\",\n \"describe\": {\n \"columns\": [\n {\n \"name\": \"id!: Uuid\",\n \"ordinal\": 0,\n \"type_info\": \"Blob\"\n },\n {\n \"name\": \"execution_process_id!: Uuid\",\n \"ordinal\": 1,\n \"type_info\": \"Blob\"\n },\n {\n \"name\": \"agent_session_id\",\n \"ordinal\": 2,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"agent_message_id\",\n \"ordinal\": 3,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"prompt\",\n \"ordinal\": 4,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"summary\",\n \"ordinal\": 5,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"seen!: bool\",\n \"ordinal\": 6,\n \"type_info\": \"Integer\"\n },\n {\n \"name\": \"created_at!: DateTime\",\n \"ordinal\": 7,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"updated_at!: DateTime\",\n \"ordinal\": 8,\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Right\": 1\n },\n \"nullable\": [\n true,\n false,\n true,\n true,\n true,\n true,\n false,\n false,\n false\n ]\n },\n \"hash\": \"04e5a05c7cad438d39c4c8590410889ab1eefa7376d474a10c119d3f4d9143c7\"\n}\n"
},
{
"path": "crates/db/.sqlx/query-04f17449e3e12785affab91e4eab308103491e34c022199b7b060e04fa8aed0f.json",
"content": "{\n \"db_name\": \"SQLite\",\n \"query\": \"SELECT id as \\\"id!: Uuid\\\",\\n file_path as \\\"file_path!\\\",\\n original_name as \\\"original_name!\\\",\\n mime_type,\\n size_bytes as \\\"size_bytes!\\\",\\n hash as \\\"hash!\\\",\\n created_at as \\\"created_at!: DateTime\\\",\\n updated_at as \\\"updated_at!: DateTime\\\"\\n FROM attachments\\n WHERE hash = $1\",\n \"describe\": {\n \"columns\": [\n {\n \"name\": \"id!: Uuid\",\n \"ordinal\": 0,\n \"type_info\": \"Blob\"\n },\n {\n \"name\": \"file_path!\",\n \"ordinal\": 1,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"original_name!\",\n \"ordinal\": 2,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"mime_type\",\n \"ordinal\": 3,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"size_bytes!\",\n \"ordinal\": 4,\n \"type_info\": \"Integer\"\n },\n {\n \"name\": \"hash!\",\n \"ordinal\": 5,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"created_at!: DateTime\",\n \"ordinal\": 6,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"updated_at!: DateTime\",\n \"ordinal\": 7,\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Right\": 1\n },\n \"nullable\": [\n true,\n false,\n false,\n true,\n true,\n false,\n false,\n false\n ]\n },\n \"hash\": \"04f17449e3e12785affab91e4eab308103491e34c022199b7b060e04fa8aed0f\"\n}\n"
},
{
"path": "crates/db/.sqlx/query-0a805c219c9028b2677bd94ccabd47916e60d26c1cede27e467f0ae91f6639ab.json",
"content": "{\n \"db_name\": \"SQLite\",\n \"query\": \"UPDATE migration_state\\n SET status = 'migrated',\\n remote_id = $3,\\n error_message = NULL,\\n updated_at = datetime('now', 'subsec')\\n WHERE entity_type = $1 AND local_id = $2\",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Right\": 3\n },\n \"nullable\": []\n },\n \"hash\": \"0a805c219c9028b2677bd94ccabd47916e60d26c1cede27e467f0ae91f6639ab\"\n}\n"
},
{
"path": "crates/db/.sqlx/query-0ab07fb562e61148f3f07f33f766ea12c73d467df4522240008370f681c8409a.json",
"content": "{\n \"db_name\": \"SQLite\",\n \"query\": \"UPDATE workspace_repos\\n SET target_branch = $1, updated_at = datetime('now')\\n WHERE target_branch = $2\\n AND workspace_id IN (\\n SELECT w.id FROM workspaces w\\n JOIN tasks t ON w.task_id = t.id\\n WHERE t.parent_workspace_id = $3\\n )\",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Right\": 3\n },\n \"nullable\": []\n },\n \"hash\": \"0ab07fb562e61148f3f07f33f766ea12c73d467df4522240008370f681c8409a\"\n}\n"
},
{
"path": "crates/db/.sqlx/query-0ac0d0f3826330836e3fd1bf57c42777eb489ac41a650f9361e6b563fc69bf35.json",
"content": "{\n \"db_name\": \"SQLite\",\n \"query\": \"UPDATE migration_state\\n SET status = 'pending',\\n error_message = NULL,\\n updated_at = datetime('now', 'subsec')\\n WHERE status = 'failed'\",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Right\": 0\n },\n \"nullable\": []\n },\n \"hash\": \"0ac0d0f3826330836e3fd1bf57c42777eb489ac41a650f9361e6b563fc69bf35\"\n}\n"
},
{
"path": "crates/db/.sqlx/query-0c7b20643f119afd3e233105b0fa2920e8e940bdad86cdc95d01e485a20d6ed4.json",
"content": "{\n \"db_name\": \"SQLite\",\n \"query\": \"SELECT\\n ep.id as \\\"id!: Uuid\\\",\\n ep.session_id as \\\"session_id!: Uuid\\\",\\n ep.run_reason as \\\"run_reason!: ExecutionProcessRunReason\\\",\\n ep.executor_action as \\\"executor_action!: sqlx::types::Json\\\",\\n ep.status as \\\"status!: ExecutionProcessStatus\\\",\\n ep.exit_code,\\n ep.dropped as \\\"dropped!: bool\\\",\\n ep.started_at as \\\"started_at!: DateTime\\\",\\n ep.completed_at as \\\"completed_at?: DateTime\\\",\\n ep.created_at as \\\"created_at!: DateTime\\\",\\n ep.updated_at as \\\"updated_at!: DateTime\\\"\\n FROM execution_processes ep\\n JOIN sessions s ON ep.session_id = s.id\\n WHERE s.workspace_id = ? AND ep.run_reason = ? AND ep.dropped = FALSE\\n ORDER BY ep.created_at DESC LIMIT 1\",\n \"describe\": {\n \"columns\": [\n {\n \"name\": \"id!: Uuid\",\n \"ordinal\": 0,\n \"type_info\": \"Blob\"\n },\n {\n \"name\": \"session_id!: Uuid\",\n \"ordinal\": 1,\n \"type_info\": \"Blob\"\n },\n {\n \"name\": \"run_reason!: ExecutionProcessRunReason\",\n \"ordinal\": 2,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"executor_action!: sqlx::types::Json\",\n \"ordinal\": 3,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"status!: ExecutionProcessStatus\",\n \"ordinal\": 4,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"exit_code\",\n \"ordinal\": 5,\n \"type_info\": \"Integer\"\n },\n {\n \"name\": \"dropped!: bool\",\n \"ordinal\": 6,\n \"type_info\": \"Integer\"\n },\n {\n \"name\": \"started_at!: DateTime\",\n \"ordinal\": 7,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"completed_at?: DateTime\",\n \"ordinal\": 8,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"created_at!: DateTime\",\n \"ordinal\": 9,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"updated_at!: DateTime\",\n \"ordinal\": 10,\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Right\": 2\n },\n \"nullable\": [\n true,\n false,\n false,\n false,\n false,\n true,\n false,\n false,\n true,\n false,\n false\n ]\n },\n \"hash\": \"0c7b20643f119afd3e233105b0fa2920e8e940bdad86cdc95d01e485a20d6ed4\"\n}\n"
},
{
"path": "crates/db/.sqlx/query-0f90844fc62261ed140e02515ae464b940743113814507313c9fdc176000d1bf.json",
"content": "{\n \"db_name\": \"SQLite\",\n \"query\": \"UPDATE migration_state\\n SET status = 'skipped',\\n error_message = $3,\\n updated_at = datetime('now', 'subsec')\\n WHERE entity_type = $1 AND local_id = $2\",\n \"describe\": {\n \"columns\": [],\n \"parameters\": {\n \"Right\": 3\n },\n \"nullable\": []\n },\n \"hash\": \"0f90844fc62261ed140e02515ae464b940743113814507313c9fdc176000d1bf\"\n}\n"
},
{
"path": "crates/db/.sqlx/query-1085d1f8107c7e16fc2058ef610918760d8d420f0fca97adecd76d698f6f3a51.json",
"content": "{\n \"db_name\": \"SQLite\",\n \"query\": \"SELECT\\n id as \\\"id!: Uuid\\\",\\n workspace_id as \\\"workspace_id!: Uuid\\\",\\n repo_id as \\\"repo_id!: Uuid\\\",\\n merge_type as \\\"merge_type!: MergeType\\\",\\n merge_commit,\\n pr_number,\\n pr_url,\\n pr_status as \\\"pr_status?: MergeStatus\\\",\\n pr_merged_at as \\\"pr_merged_at?: DateTime\\\",\\n pr_merge_commit_sha,\\n target_branch_name as \\\"target_branch_name!: String\\\",\\n created_at as \\\"created_at!: DateTime\\\"\\n FROM merges\\n WHERE workspace_id = $1 AND repo_id = $2\\n ORDER BY created_at DESC\",\n \"describe\": {\n \"columns\": [\n {\n \"name\": \"id!: Uuid\",\n \"ordinal\": 0,\n \"type_info\": \"Blob\"\n },\n {\n \"name\": \"workspace_id!: Uuid\",\n \"ordinal\": 1,\n \"type_info\": \"Blob\"\n },\n {\n \"name\": \"repo_id!: Uuid\",\n \"ordinal\": 2,\n \"type_info\": \"Blob\"\n },\n {\n \"name\": \"merge_type!: MergeType\",\n \"ordinal\": 3,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"merge_commit\",\n \"ordinal\": 4,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"pr_number\",\n \"ordinal\": 5,\n \"type_info\": \"Integer\"\n },\n {\n \"name\": \"pr_url\",\n \"ordinal\": 6,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"pr_status?: MergeStatus\",\n \"ordinal\": 7,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"pr_merged_at?: DateTime\",\n \"ordinal\": 8,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"pr_merge_commit_sha\",\n \"ordinal\": 9,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"target_branch_name!: String\",\n \"ordinal\": 10,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"created_at!: DateTime\",\n \"ordinal\": 11,\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Right\": 2\n },\n \"nullable\": [\n true,\n false,\n false,\n false,\n true,\n true,\n true,\n true,\n true,\n true,\n false,\n false\n ]\n },\n \"hash\": \"1085d1f8107c7e16fc2058ef610918760d8d420f0fca97adecd76d698f6f3a51\"\n}\n"
},
{
"path": "crates/db/.sqlx/query-11793c98a4bee67fce9972ed6b10a18226e0455a0e8d113d04c4d5148b72aec7.json",
"content": "{\n \"db_name\": \"SQLite\",\n \"query\": \"SELECT id as \\\"id!: Uuid\\\", tag_name, content as \\\"content!\\\", created_at as \\\"created_at!: DateTime\\\", updated_at as \\\"updated_at!: DateTime\\\"\\n FROM tags\\n WHERE id = $1\",\n \"describe\": {\n \"columns\": [\n {\n \"name\": \"id!: Uuid\",\n \"ordinal\": 0,\n \"type_info\": \"Blob\"\n },\n {\n \"name\": \"tag_name\",\n \"ordinal\": 1,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"content!\",\n \"ordinal\": 2,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"created_at!: DateTime\",\n \"ordinal\": 3,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"updated_at!: DateTime\",\n \"ordinal\": 4,\n \"type_info\": \"Text\"\n }\n ],\n \"parameters\": {\n \"Right\": 1\n },\n \"nullable\": [\n true,\n false,\n false,\n false,\n false\n ]\n },\n \"hash\": \"11793c98a4bee67fce9972ed6b10a18226e0455a0e8d113d04c4d5148b72aec7\"\n}\n"
},
{
"path": "crates/db/.sqlx/query-12a5c0a8b95d8cb87f1c869ff35692a2cee52bc418b06d00a31a4c139e12d18a.json",
"content": "{\n \"db_name\": \"SQLite\",\n \"query\": \"\\n SELECT \\n ep.id as \\\"execution_id!: Uuid\\\", \\n ep.session_id as \\\"session_id!: Uuid\\\"\\n FROM execution_processes ep\\n WHERE EXISTS (\\n SELECT 1 FROM execution_process_logs epl WHERE epl.execution_id = ep.id\\n )\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"name\": \"execution_id!: Uuid\",\n \"ordinal\": 0,\n \"type_info\": \"Blob\"\n },\n {\n \"name\": \"session_id!: Uuid\",\n \"ordinal\": 1,\n \"type_info\": \"Blob\"\n }\n ],\n \"parameters\": {\n \"Right\": 0\n },\n \"nullable\": [\n true,\n false\n ]\n },\n \"hash\": \"12a5c0a8b95d8cb87f1c869ff35692a2cee52bc418b06d00a31a4c139e12d18a\"\n}\n"
},
{
"path": "crates/db/.sqlx/query-13826fc6fdd367255cb921640e5972f30905ac7a81ad477cf8bbcfc24f06f39b.json",
"content": "{\n \"db_name\": \"SQLite\",\n \"query\": \"\\n SELECT\\n ep.id as \\\"id!: Uuid\\\",\\n ep.session_id as \\\"session_id!: Uuid\\\",\\n ep.run_reason as \\\"run_reason!: ExecutionProcessRunReason\\\",\\n ep.executor_action as \\\"executor_action!: sqlx::types::Json\\\",\\n ep.status as \\\"status!: ExecutionProcessStatus\\\",\\n ep.exit_code,\\n ep.dropped as \\\"dropped!: bool\\\",\\n ep.started_at as \\\"started_at!: DateTime\\\",\\n ep.completed_at as \\\"completed_at?: DateTime\\\",\\n ep.created_at as \\\"created_at!: DateTime\\\",\\n ep.updated_at as \\\"updated_at!: DateTime\\\"\\n FROM execution_processes ep\\n JOIN sessions s ON ep.session_id = s.id\\n WHERE s.workspace_id = ?\\n AND ep.status = 'running'\\n AND ep.run_reason = 'devserver'\\n ORDER BY ep.created_at DESC\\n \",\n \"describe\": {\n \"columns\": [\n {\n \"name\": \"id!: Uuid\",\n \"ordinal\": 0,\n \"type_info\": \"Blob\"\n },\n {\n \"name\": \"session_id!: Uuid\",\n \"ordinal\": 1,\n \"type_info\": \"Blob\"\n },\n {\n \"name\": \"run_reason!: ExecutionProcessRunReason\",\n \"ordinal\": 2,\n \"type_info\": \"Text\"\n },\n {\n \"name\": \"executor_action!: sqlx::types::Json