mirror of
https://github.com/stablyai/orca.git
synced 2026-09-28 08:02:43 +00:00
Two entry points create the same workspace and disagreed about how to read its host. `orca-runtime-create-managed-worktree.ts:63` resolved through `getRepoSshConnectionId` and then normalized the row; the `worktrees:create` IPC handler branched on raw `repo.connectionId` (`register-worktree-create-handlers.ts:66-69`). So a repo naming its owner only as `executionHostId: 'ssh:<target>'` created remotely through the runtime and ran `git worktree add` on the client against a remote path through IPC (#11163). Same repo, two entry points, different answers. Both now take one route, resolved through the existing layer (`getRepoExecutionHostId` -> #18296's `resolveGitRouteForHost`). No new resolver. The row normalization on the `ssh` variant is kept, and it is a **workaround, not the pattern**. `createRemoteWorktree` and its callees re-read `repo.connectionId!` at five depths in `ipc/worktree-remote.ts` (1627, 1847, 1848, 1865, 2029), so the resolved connection has to reach them through the field they already read. It travels only as far as that object does — anything downstream that re-reads the row from the store still sees the unnormalized one, and it cannot express the `runtime:` refusal on its own. Proper fix, deliberately not done here: give that pipeline an explicit connection parameter and delete `repo.connectionId!` from it so every reader becomes a compile error, the technique #18307/#18325 used. That is a change inside a 2800-line module plus its callers, and it wants its own PR. Three answers that used to collapse into one, now distinct at both entry points: - `executionHostId: 'ssh:*'` with no `connectionId` -> that SSH host (IPC used to create locally); - `executionHostId: 'local'` with a surviving `connectionId` -> local, since a local row cannot nest an SSH namespace. This is what `getRepoSshConnectionId` and therefore the runtime sibling already answered; IPC used to go remote; - `runtime:<env>` -> refused. Its worktree is created by that environment's own server and the SSH target on its repo row is that server's nested one, addressable only as (environmentId, targetId). The renderer already routes runtime-environment creates over `worktree.create` RPC rather than this IPC channel, so reaching either entry point with one is a routing mistake. Matches `workspace-cleanup-git-route` and `runtime-git-command-target`. Folder-workspace creation is untouched on both sides: it is a registration, not a filesystem create, so the route is resolved after that branch on the IPC side, and on the runtime side only the agent trust write consumes it — where a `runtime:` host now yields `null` instead of the nested target, so the write stops going to a same-named target in this client's table. No wire or persistence change: the normalized row is a local value passed to the create pipeline, never stored, and `CreateWorktreeResult` is untouched.
298 lines
13 KiB
TypeScript
298 lines
13 KiB
TypeScript
// @ts-nocheck -- mechanically split from OrcaRuntimeService; behavior is covered by AST equivalence and characterization tests.
|
|
import { OrcaRuntimeWithGetWorktreeTerminalProvisioningHost } from './orca-runtime-get-worktree-terminal-provisioning-host'
|
|
import type { RuntimeManagedWorktreeCreateArgs } from './runtime-managed-worktree-create-types'
|
|
import type { CreateWorktreeResult } from '../../shared/worktree/create-types'
|
|
import { isTuiAgentEnabled } from '../../shared/tui-agent-selection'
|
|
import { isFolderRepo } from '../../shared/repo-kind'
|
|
import { resolveWorktreeCreateRoute } from '../worktree-create-execution-host-route'
|
|
import { ExecutionHostNotDispatchableError } from '../providers/execution-host-provider-dispatch'
|
|
import { createRuntimeFolderWorktree } from './runtime-folder-worktree-create'
|
|
import { createRuntimeLocalManagedWorktree } from './runtime-local-worktree-create'
|
|
import { prepareRuntimeLocalWorktreeSetup } from './runtime-local-worktree-setup'
|
|
import { invalidateAuthorizedRootsCache } from '../ipc/filesystem-auth'
|
|
import { startRuntimeLocalWorktreeTerminals } from './runtime-local-worktree-terminal-startup'
|
|
|
|
export class OrcaRuntimeWithCreateManagedWorktree extends OrcaRuntimeWithGetWorktreeTerminalProvisioningHost {
|
|
async createManagedWorktree(
|
|
args: RuntimeManagedWorktreeCreateArgs
|
|
): Promise<CreateWorktreeResult> {
|
|
if (!this.store) {
|
|
throw new Error('runtime_unavailable')
|
|
}
|
|
|
|
const repo = await this.resolveRepoSelector(args.repoSelector)
|
|
const createSettings = this.store.getSettings()
|
|
const requestedAgent = args.startupAgent ?? args.createdWithAgent
|
|
const requestedAgentEnabled =
|
|
requestedAgent !== undefined
|
|
? isTuiAgentEnabled(requestedAgent, createSettings.disabledTuiAgents)
|
|
: false
|
|
if ((args.startup || args.startupAgent) && requestedAgent && !requestedAgentEnabled) {
|
|
throw new Error('Selected agent is disabled. Choose an enabled agent before creating.')
|
|
}
|
|
if (
|
|
args.startup &&
|
|
args.startupDraftPaste &&
|
|
!isTuiAgentEnabled(args.startupDraftPaste.agent, createSettings.disabledTuiAgents)
|
|
) {
|
|
throw new Error('Selected agent is disabled. Choose an enabled agent before creating.')
|
|
}
|
|
const agentStartup =
|
|
!args.startup && args.startupAgent
|
|
? this.buildStartupForAgent(
|
|
repo,
|
|
args.startupAgent,
|
|
args.startupPrompt,
|
|
args.startupLaunchPreferences
|
|
)
|
|
: null
|
|
const draftStartup =
|
|
!args.startup && !agentStartup && args.startupDraft
|
|
? await this.buildStartupForDraft(repo, args.startupDraft, requestedAgent)
|
|
: null
|
|
const effectiveStartup = args.startup ?? agentStartup?.startup ?? draftStartup?.startup
|
|
const effectiveStartupFollowup = agentStartup?.followup
|
|
const effectiveCreatedWithAgent = args.startup
|
|
? args.createdWithAgent
|
|
: (agentStartup?.agent ??
|
|
draftStartup?.agent ??
|
|
(requestedAgentEnabled ? requestedAgent : undefined))
|
|
const effectiveDraftPaste = args.startupDraftPaste ?? draftStartup?.draftPaste
|
|
// Resolve the execution host once, shared with the `worktrees:create` IPC entry point so the
|
|
// two cannot answer differently for the same repo. Reading the raw `connectionId` field routes
|
|
// an `executionHostId: 'ssh:*'`-only repo down the local path, which runs `git worktree add` on
|
|
// the client against a remote path.
|
|
const createRoute = resolveWorktreeCreateRoute(repo)
|
|
// `null` on a `runtime:` host is deliberate: its nested target is addressable only inside that
|
|
// environment, so the trust write must not go to a same-named target in this client's table.
|
|
const sshConnectionId = createRoute.kind === 'ssh' ? createRoute.connectionId : null
|
|
if (isFolderRepo(repo)) {
|
|
// A folder workspace is a registration, not a filesystem create, so it is host-agnostic —
|
|
// except for the agent trust write, which must land on the host that will run the agent.
|
|
return createRuntimeFolderWorktree({
|
|
request: args,
|
|
repo,
|
|
startup: effectiveStartup,
|
|
startupFollowup: effectiveStartupFollowup,
|
|
createdWithAgent: effectiveCreatedWithAgent,
|
|
draftPaste: effectiveDraftPaste,
|
|
deps: {
|
|
store: this.store,
|
|
ptySpawnAvailable: Boolean(this.ptyController?.spawn),
|
|
createTerminal: (selector, options) => this.createTerminal(selector, options),
|
|
markTrusted: (agent, path) =>
|
|
this.markWorkspaceTrustedForAgent(agent, sshConnectionId, path),
|
|
pasteDraft: (handle, draft) => this.pasteStartupDraftWhenReady(handle, draft),
|
|
sendFollowup: (handle, followup) => this.sendStartupFollowupWhenReady(handle, followup),
|
|
invalidateResolvedWorktrees: () => this.invalidateResolvedWorktreeCache(),
|
|
notifyWorktreesChanged: (repoId) => this.notifyWorktreesChanged(repoId),
|
|
emitCreated: (event) => this.emitWorktreeLifecycle(event),
|
|
activate: (repoId, worktreeId, setup, startup) =>
|
|
this.notifyActivateWorktree(
|
|
repoId,
|
|
worktreeId,
|
|
setup,
|
|
startup,
|
|
undefined,
|
|
args.navigation
|
|
)
|
|
}
|
|
})
|
|
}
|
|
const lineageInput =
|
|
args.lineage || args.comment ? { ...args.lineage, comment: args.comment } : undefined
|
|
const lineageResolution = await this.resolveLineageForWorktreeCreate(lineageInput)
|
|
if (createRoute.kind === 'runtime') {
|
|
throw new ExecutionHostNotDispatchableError(createRoute.hostId)
|
|
}
|
|
if (createRoute.kind === 'ssh') {
|
|
// `createRoute.repo` carries the resolved connection in `connectionId`, because the
|
|
// remote-create pipeline still reads `repo.connectionId!` at every depth. See the workaround
|
|
// note in worktree-create-execution-host-route.ts.
|
|
const result = await this.createManagedRemoteWorktree(createRoute.repo, {
|
|
...args,
|
|
activate: args.activate,
|
|
...(effectiveStartup ? { startup: effectiveStartup } : {}),
|
|
...(effectiveStartupFollowup ? { startupFollowup: effectiveStartupFollowup } : {}),
|
|
...(effectiveCreatedWithAgent ? { createdWithAgent: effectiveCreatedWithAgent } : {}),
|
|
...(effectiveDraftPaste ? { startupDraftPaste: effectiveDraftPaste } : {})
|
|
})
|
|
const recordedLineage = this.recordCreatedWorktreeLineage(result.worktree, lineageResolution)
|
|
this.emitWorktreeLifecycle({
|
|
kind: 'created',
|
|
worktreeId: result.worktree.id,
|
|
path: result.worktree.path,
|
|
branch: result.worktree.branch
|
|
})
|
|
return {
|
|
...result,
|
|
worktree: {
|
|
...result.worktree,
|
|
parentWorktreeId: recordedLineage.lineage?.parentWorktreeId ?? null,
|
|
childWorktreeIds: result.worktree.childWorktreeIds ?? [],
|
|
lineage: recordedLineage.lineage,
|
|
workspaceLineage: recordedLineage.workspaceLineage
|
|
},
|
|
...(lineageInput
|
|
? {
|
|
lineage: recordedLineage.lineage,
|
|
workspaceLineage: recordedLineage.workspaceLineage,
|
|
warnings: recordedLineage.warnings
|
|
}
|
|
: {})
|
|
}
|
|
}
|
|
const { worktree, worktreePath, includeCopyWarning, created, addResult, metadataResult } =
|
|
await createRuntimeLocalManagedWorktree({
|
|
request: args,
|
|
repo,
|
|
store: this.requireStore(),
|
|
createdWithAgent: effectiveCreatedWithAgent,
|
|
hostedReviewExecutionContext: this.getHostedReviewExecutionOptions(repo),
|
|
resolveRemoteTrackingBase: (path, base, ...options) =>
|
|
this.resolveRemoteTrackingBase(path, base, ...options),
|
|
hasRemoteTrackingRef: (path, base, ...options) =>
|
|
this.hasRemoteTrackingRef(path, base, ...options),
|
|
refreshRemoteTrackingBase: (path, base, ...options) =>
|
|
this.getOrStartRemoteTrackingBaseRefresh(path, base, ...options),
|
|
fetchRemote: (path, remote, ...options) =>
|
|
this.fetchRemoteWithCache(path, remote, ...options),
|
|
onWorktreeMetadataPersisted: (persistedWorktree) =>
|
|
this.recordCreatedWorktreeLineage(persistedWorktree, lineageResolution)
|
|
})
|
|
const settings = createSettings
|
|
const { lineage, workspaceLineage, warnings: lineageWarnings } = metadataResult
|
|
|
|
let {
|
|
setup,
|
|
defaultTabs,
|
|
warning,
|
|
effectiveDecision,
|
|
hookFound,
|
|
shouldRunSetup,
|
|
didStartInProcessSetupHook
|
|
} = await prepareRuntimeLocalWorktreeSetup({
|
|
request: args,
|
|
repo,
|
|
worktreePath,
|
|
settings,
|
|
runtimeTarget: this.getLocalGitExecutionOptionArgs(repo)[0],
|
|
shouldUseSetupRunner:
|
|
this.authoritativeWindowId !== null ||
|
|
Boolean(effectiveStartup) ||
|
|
Boolean(this.ptyController?.spawn),
|
|
warning: includeCopyWarning
|
|
})
|
|
|
|
this.invalidateResolvedWorktreeCache()
|
|
this.invalidateWorktreeScanCacheForRepo(repo.id)
|
|
// Why: the filesystem-auth layer maintains a separate cache of registered
|
|
// worktree roots used by git IPC handlers (branchCompare, diff, status, etc.)
|
|
// to authorize paths. Without invalidating it here, CLI-created worktrees
|
|
// are not recognized and all git operations fail with "Access denied:
|
|
// unknown repository or worktree path".
|
|
invalidateAuthorizedRootsCache()
|
|
|
|
this.notifyWorktreesChanged(repo.id)
|
|
const {
|
|
warning: terminalWarning,
|
|
returnedSetup,
|
|
didSpawnSetup,
|
|
didSpawnStartup,
|
|
setupTerminalHandle,
|
|
startupTerminalHandle,
|
|
startupTerminalTabId,
|
|
startupTerminalPaneKey,
|
|
startupTerminalPtyId
|
|
} = await startRuntimeLocalWorktreeTerminals({
|
|
request: args,
|
|
repo,
|
|
worktree,
|
|
setup,
|
|
defaultTabs,
|
|
startup: effectiveStartup,
|
|
startupFollowup: effectiveStartupFollowup,
|
|
createdWithAgent: effectiveCreatedWithAgent,
|
|
draftPaste: effectiveDraftPaste,
|
|
warning,
|
|
ports: {
|
|
canSpawn: Boolean(this.ptyController?.spawn),
|
|
markTrusted: (agent, path) => this.markLocalWorkspaceTrustedForAgent(agent, path),
|
|
createTerminal: (selector, options) => this.createTerminal(selector, options),
|
|
pasteDraft: (handle, draft) => this.pasteStartupDraftWhenReady(handle, draft),
|
|
sendFollowup: (handle, followup) => this.sendStartupFollowupWhenReady(handle, followup),
|
|
provision: (options) => this.provisionManagedWorktreeTerminals(options),
|
|
activate: (repoId, worktreeId, activationSetup, startup, activationDefaultTabs) =>
|
|
this.notifyActivateWorktree(
|
|
repoId,
|
|
worktreeId,
|
|
activationSetup,
|
|
startup,
|
|
activationDefaultTabs,
|
|
args.navigation
|
|
)
|
|
}
|
|
})
|
|
warning = terminalWarning
|
|
this.emitWorktreeLifecycle({
|
|
kind: 'created',
|
|
worktreeId: worktree.id,
|
|
path: worktree.path,
|
|
branch: worktree.branch
|
|
})
|
|
return {
|
|
worktree: {
|
|
...worktree,
|
|
parentWorktreeId: lineage?.parentWorktreeId ?? null,
|
|
childWorktreeIds: [],
|
|
lineage,
|
|
workspaceLineage,
|
|
git: created
|
|
},
|
|
...(lineageInput ? { lineage, workspaceLineage, warnings: lineageWarnings } : {}),
|
|
...(returnedSetup ? { setup: returnedSetup } : {}),
|
|
...(args.awaitTerminalProvisioning
|
|
? {
|
|
setupReceipt: {
|
|
requested: effectiveDecision,
|
|
hookFound,
|
|
startupPolicy: setup?.waitForAgentStartup
|
|
? ('wait-for-setup' as const)
|
|
: ('start-immediately' as const),
|
|
state: !hookFound
|
|
? ('not_configured' as const)
|
|
: effectiveDecision === 'skip' || !shouldRunSetup
|
|
? ('skipped' as const)
|
|
: // Why: the in-process hook is already executing, so reporting
|
|
// spawn_failed would strand callers that retry on it.
|
|
didSpawnSetup || didStartInProcessSetupHook
|
|
? ('running' as const)
|
|
: ('spawn_failed' as const),
|
|
...(setupTerminalHandle ? { terminalHandle: setupTerminalHandle } : {})
|
|
}
|
|
}
|
|
: {}),
|
|
...(defaultTabs ? { defaultTabs } : {}),
|
|
...(warning ? { warning } : {}),
|
|
...(addResult.localBaseRefRefresh
|
|
? { localBaseRefRefresh: addResult.localBaseRefRefresh }
|
|
: {}),
|
|
...(addResult.localBaseRefUpdateSuggestion
|
|
? { localBaseRefUpdateSuggestion: addResult.localBaseRefUpdateSuggestion }
|
|
: {}),
|
|
...(didSpawnStartup && startupTerminalHandle
|
|
? {
|
|
startupTerminal: {
|
|
spawned: true,
|
|
handle: startupTerminalHandle,
|
|
...(startupTerminalTabId ? { tabId: startupTerminalTabId } : {}),
|
|
...(startupTerminalPaneKey ? { paneKey: startupTerminalPaneKey } : {}),
|
|
...(startupTerminalPtyId ? { ptyId: startupTerminalPtyId } : {}),
|
|
surface: 'background' as const
|
|
}
|
|
}
|
|
: {})
|
|
}
|
|
}
|
|
}
|