Initial state: - ia_dev was historically referenced as ./ia_dev in docs and integrations, while the vendored module lives under services/ia_dev. - AnythingLLM sync and hook installation had error masking / weak exit signaling. - Proxy layers did not validate proxy path segments, allowing path normalization tricks. Motivation: - Make the IDE-oriented workflow usable (sync -> act -> deploy/preview) with explicit errors. - Reduce security footguns in proxying and script automation. Resolution: - Standardize IA_DEV_ROOT usage and documentation to services/ia_dev. - Add SSH remote data mirroring + optional AnythingLLM ingestion. - Extend AnythingLLM pull sync to support upload-all/prefix and fail on upload errors. - Harden smart-ide-sso-gateway and smart-ide-global-api proxying with safe-path checks and non-leaking error responses. - Improve ia-dev-gateway runner validation and reduce sensitive path leakage. - Add site scaffold tool (Vite/React) with OIDC + chat via sso-gateway -> orchestrator. Root cause: - Historical layout changes (submodule -> vendored tree) and missing central contracts for path resolution. - Missing validation for proxy path traversal patterns. - Overuse of silent fallbacks (|| true, exit 0 on partial failures) in automation scripts. Impacted features: - Project sync: git pull + AnythingLLM sync + remote data mirror ingestion. - Site frontends: SSO gateway proxy and orchestrator intents (rag.query, chat.local). - Agent execution: ia-dev-gateway script runner and SSE output. Code modified: - scripts/remote-data-ssh-sync.sh - scripts/anythingllm-pull-sync/sync.mjs - scripts/install-anythingllm-post-merge-hook.sh - cron/git-pull-project-clones.sh - services/smart-ide-sso-gateway/src/server.ts - services/smart-ide-global-api/src/server.ts - services/smart-ide-orchestrator/src/server.ts - services/ia-dev-gateway/src/server.ts - services/ia_dev/tools/site-generate.sh Documentation modified: - docs/** (architecture, API docs, ia_dev module + integration, scripts) Configurations modified: - config/services.local.env.example - services/*/.env.example Files in deploy modified: - services/ia_dev/deploy/* Files in logs impacted: - logs/ia_dev.log (runtime only) - .logs/* (runtime only) Databases and other sources modified: - None Off-project modifications: - None Files in .smartIde modified: - .smartIde/agents/*.md - services/ia_dev/.smartIde/** Files in .secrets modified: - None New patch version in VERSION: - 0.0.5 CHANGELOG.md updated: - yes
47 lines
1.5 KiB
Bash
Executable File
47 lines
1.5 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
#
|
|
# Update a single wiki page from a local file.
|
|
# Usage: ./wiki-put-page.sh <page_name> <file_path>
|
|
# Example: ./wiki-put-page.sh Home docs/README.md
|
|
# Requires GITEA_TOKEN or .secrets/git-issues/token.
|
|
#
|
|
set -euo pipefail
|
|
|
|
GIT_ISSUES_DIR="${GIT_ISSUES_DIR:-$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)}"
|
|
# shellcheck source=lib.sh
|
|
source "${GIT_ISSUES_DIR}/lib.sh"
|
|
|
|
REPO_PATH="/repos/${GITEA_REPO_OWNER}/${GITEA_REPO_NAME}"
|
|
GITEA_WIKI_REF="${GITEA_WIKI_REF:-master}"
|
|
WIKI_PAGE="${REPO_PATH}/wiki/page"
|
|
WIKI_NEW="${REPO_PATH}/wiki/new"
|
|
|
|
if [[ $# -lt 2 ]]; then
|
|
log_err "Usage: $0 <page_name> <file_path>"
|
|
exit 1
|
|
fi
|
|
|
|
PAGE_NAME="$1"
|
|
FILE_PATH="$2"
|
|
[[ -f "$FILE_PATH" ]] || { log_err "File not found: $FILE_PATH"; exit 1; }
|
|
|
|
load_gitea_token || exit 1
|
|
require_jq || exit 1
|
|
|
|
content="$(cat "$FILE_PATH")"
|
|
content_b64="$(echo -n "$content" | base64 -w 0)"
|
|
msg="Update from $FILE_PATH"
|
|
|
|
resp="$(gitea_api_get "${REPO_PATH}/wiki/page/${PAGE_NAME}?ref=${GITEA_WIKI_REF}")"
|
|
if echo "$resp" | jq -e .title &>/dev/null; then
|
|
log_info "PATCH ${PAGE_NAME}"
|
|
body="$(jq -n --arg title "$PAGE_NAME" --arg content "$content_b64" --arg msg "$msg" '{ title: $title, content_base64: $content, message: $msg }')"
|
|
gitea_api_patch "${WIKI_PAGE}/${PAGE_NAME}?ref=${GITEA_WIKI_REF}" "$body"
|
|
else
|
|
log_info "POST ${PAGE_NAME}"
|
|
body="$(jq -n --arg title "$PAGE_NAME" --arg content "$content_b64" --arg msg "$msg" '{ title: $title, content_base64: $content, message: $msg }')"
|
|
gitea_api_post "${WIKI_NEW}" "$body"
|
|
fi
|
|
|
|
log_info "Done: ${PAGE_NAME}"
|