mirror of
https://github.com/garrytan/gstack.git
synced 2026-06-23 10:10:03 +02:00
0fb7fa6c1e
Cherry-picked from #1508 by jasshultz, restructured per codex review #4 and #7 to widen scope and centralize the spawn surface. The bug: gbrain auto-loads .env.local from cwd via dotenv. When /sync-gbrain runs inside a Next.js / Prisma / Rails project whose .env.local defines its own DATABASE_URL (pointing at the app's local DB), gbrain reads that value instead of its own ~/.gbrain/config.json — auth fails, code + memory stages crash. This commit: - Adds lib/gbrain-exec.ts: buildGbrainEnv, spawnGbrain, execGbrainJson, execGbrainText, spawnGbrainAsync (the last one for memory-ingest's streaming gbrain import call). buildGbrainEnv seeds DATABASE_URL from ${GBRAIN_HOME:-$HOME/.gbrain}/config.json, returns a fresh env object (never the caller's by identity — codex review #11), and honors the GSTACK_RESPECT_ENV_DATABASE_URL=1 escape hatch. - Routes every gbrain spawn in bin/gstack-gbrain-sync.ts and bin/gstack-memory-ingest.ts through the helpers. Both files now own zero direct spawnSync("gbrain"|spawn("gbrain"|execFileSync("gbrain" call sites. - Threads buildGbrainEnv into the spawnSync("bun", [memory-ingest], ...) grandchild in runMemoryIngest (codex review #7). Without this, the parent fix is half-baked — the bun child inherits a clean env but needs DATABASE_URL pre-seeded too. spawnGbrainAsync inside memory-ingest provides defense in depth for standalone invocations. - Adds GBRAIN_HOME support — aligns with detectEngineTier (already honors GBRAIN_HOME) so all gstack-side gbrain calls agree on which config file matters. Resolves baseEnv.HOME first, then homedir(), so test injection works without process-wide HOME mutation. - Adds test/build-gbrain-env.test.ts: 10 unit tests covering all five env-seeding branches (seed from config / override caller / GSTACK_RESPECT escape hatch / missing config / unparseable config / no database_url field / GBRAIN_HOME path / object-identity guard / unrelated-vars preservation / idempotent-when-matches). - Adds test/gbrain-exec-invariant.test.ts: static-source check that greps both bin/gstack-gbrain-sync.ts and bin/gstack-memory-ingest.ts for direct spawnSync("gbrain"|spawn("gbrain"|execFileSync("gbrain"| execSync(...gbrain matches and fails the build if any are found. Refactor-proof against future contributors adding a new gbrain spawn without env threading. The invariant is intentionally narrow — only the two files where the DATABASE_URL bug actually hurts users are guarded. Migrating the spawn sites in lib/gbrain-local-status.ts, lib/gstack-memory-helpers.ts, and bin/gstack-brain-context-load.ts is a follow-up. Co-Authored-By: Jason Shultz <jasshultz@gmail.com> Co-Authored-By: Claude <noreply@anthropic.com>
121 lines
5.4 KiB
TypeScript
121 lines
5.4 KiB
TypeScript
/**
|
|
* Unit tests for `buildGbrainEnv` in lib/gbrain-exec.ts.
|
|
*
|
|
* The helper is the single source of truth for "what DATABASE_URL does
|
|
* gbrain see when spawned from gstack." The bug it prevents: gbrain's
|
|
* dotenv autoload pulls a host project's `.env.local` `DATABASE_URL`
|
|
* instead of gbrain's own `~/.gbrain/config.json`. Every helper test
|
|
* asserts on the **effective value** of the returned env, never object
|
|
* identity — Codex review #11 flagged that returning the same mutable
|
|
* object can leak later mutation.
|
|
*/
|
|
|
|
import { describe, it, expect, beforeEach, afterEach } from "bun:test";
|
|
import { mkdtempSync, writeFileSync, mkdirSync, rmSync } from "fs";
|
|
import { tmpdir } from "os";
|
|
import { join } from "path";
|
|
|
|
import { buildGbrainEnv } from "../lib/gbrain-exec";
|
|
|
|
describe("buildGbrainEnv", () => {
|
|
let home: string;
|
|
let gbrainHome: string;
|
|
|
|
beforeEach(() => {
|
|
home = mkdtempSync(join(tmpdir(), "gstack-build-env-"));
|
|
gbrainHome = join(home, ".gbrain");
|
|
mkdirSync(gbrainHome, { recursive: true });
|
|
});
|
|
|
|
afterEach(() => {
|
|
rmSync(home, { recursive: true, force: true });
|
|
});
|
|
|
|
it("seeds DATABASE_URL from ~/.gbrain/config.json when caller env has no DATABASE_URL", () => {
|
|
writeFileSync(join(gbrainHome, "config.json"), JSON.stringify({ database_url: "postgresql://gbrain/db" }));
|
|
const baseEnv = { HOME: home };
|
|
const result = buildGbrainEnv({ baseEnv });
|
|
expect(result.DATABASE_URL).toBe("postgresql://gbrain/db");
|
|
});
|
|
|
|
it("overrides caller's DATABASE_URL when config differs", () => {
|
|
writeFileSync(join(gbrainHome, "config.json"), JSON.stringify({ database_url: "postgresql://gbrain/db" }));
|
|
const baseEnv = { HOME: home, DATABASE_URL: "postgresql://app-local/wrong" };
|
|
const result = buildGbrainEnv({ baseEnv });
|
|
expect(result.DATABASE_URL).toBe("postgresql://gbrain/db");
|
|
});
|
|
|
|
it("leaves DATABASE_URL untouched when GSTACK_RESPECT_ENV_DATABASE_URL=1", () => {
|
|
writeFileSync(join(gbrainHome, "config.json"), JSON.stringify({ database_url: "postgresql://gbrain/db" }));
|
|
const baseEnv = {
|
|
HOME: home,
|
|
DATABASE_URL: "postgresql://intentional/app-db",
|
|
GSTACK_RESPECT_ENV_DATABASE_URL: "1",
|
|
};
|
|
const result = buildGbrainEnv({ baseEnv });
|
|
expect(result.DATABASE_URL).toBe("postgresql://intentional/app-db");
|
|
});
|
|
|
|
it("returns caller env unchanged when config file is missing", () => {
|
|
// No config.json written.
|
|
const baseEnv = { HOME: home, DATABASE_URL: "postgresql://app/db" };
|
|
const result = buildGbrainEnv({ baseEnv });
|
|
expect(result.DATABASE_URL).toBe("postgresql://app/db");
|
|
});
|
|
|
|
it("returns caller env unchanged when config file is unparseable", () => {
|
|
writeFileSync(join(gbrainHome, "config.json"), "{not json");
|
|
const baseEnv = { HOME: home, DATABASE_URL: "postgresql://app/db" };
|
|
const result = buildGbrainEnv({ baseEnv });
|
|
expect(result.DATABASE_URL).toBe("postgresql://app/db");
|
|
});
|
|
|
|
it("returns caller env unchanged when config has no database_url field", () => {
|
|
writeFileSync(join(gbrainHome, "config.json"), JSON.stringify({ engine: "pglite" }));
|
|
const baseEnv = { HOME: home, DATABASE_URL: "postgresql://app/db" };
|
|
const result = buildGbrainEnv({ baseEnv });
|
|
expect(result.DATABASE_URL).toBe("postgresql://app/db");
|
|
});
|
|
|
|
it("honors GBRAIN_HOME when set (config aligned with detectEngineTier)", () => {
|
|
// Move the config to an alternate dir; set GBRAIN_HOME to point at it.
|
|
const altGbrainHome = join(home, "alt-gbrain");
|
|
mkdirSync(altGbrainHome, { recursive: true });
|
|
writeFileSync(join(altGbrainHome, "config.json"), JSON.stringify({ database_url: "postgresql://alt/db" }));
|
|
// No file at the default ~/.gbrain location.
|
|
const baseEnv = { HOME: home, GBRAIN_HOME: altGbrainHome };
|
|
const result = buildGbrainEnv({ baseEnv });
|
|
expect(result.DATABASE_URL).toBe("postgresql://alt/db");
|
|
});
|
|
|
|
it("returns a fresh env object — never the caller's env by identity", () => {
|
|
// Codex review #11: object-identity equality lets later mutation of the
|
|
// returned env leak back into the caller's view. The helper MUST clone.
|
|
writeFileSync(join(gbrainHome, "config.json"), JSON.stringify({ database_url: "postgresql://gbrain/db" }));
|
|
const baseEnv: NodeJS.ProcessEnv = { HOME: home, FOO: "bar" };
|
|
const result = buildGbrainEnv({ baseEnv });
|
|
expect(result).not.toBe(baseEnv);
|
|
// Mutating result must not affect baseEnv.
|
|
result.FOO = "changed";
|
|
expect(baseEnv.FOO).toBe("bar");
|
|
});
|
|
|
|
it("preserves unrelated env vars from the base env", () => {
|
|
writeFileSync(join(gbrainHome, "config.json"), JSON.stringify({ database_url: "postgresql://gbrain/db" }));
|
|
const baseEnv = { HOME: home, PATH: "/usr/bin", FOO: "bar" };
|
|
const result = buildGbrainEnv({ baseEnv });
|
|
expect(result.PATH).toBe("/usr/bin");
|
|
expect(result.FOO).toBe("bar");
|
|
expect(result.HOME).toBe(home);
|
|
});
|
|
|
|
it("does not modify DATABASE_URL when caller's value already matches config", () => {
|
|
// Subtle: helper should be a no-op when caller already has the right value.
|
|
// Lets us skip the stderr announce on idempotent re-invocation.
|
|
writeFileSync(join(gbrainHome, "config.json"), JSON.stringify({ database_url: "postgresql://gbrain/db" }));
|
|
const baseEnv = { HOME: home, DATABASE_URL: "postgresql://gbrain/db" };
|
|
const result = buildGbrainEnv({ baseEnv });
|
|
expect(result.DATABASE_URL).toBe("postgresql://gbrain/db");
|
|
});
|
|
});
|