+[](https://twitter.com/intent/follow?screen_name=superlogYC)
+
++ Website + · + Code + · + Skills + · + Helpers + · + Discord +
+ +## About + +[Superlog](https://superlog.sh) is an open-source agentic telemetry system. It +ingests traces, logs, and metrics, groups noisy signals into incidents, and watches your infra while you sleep. + +## Installation + +You can install Superlog in your project by using our [skills](https://superlog.sh) in your favourite coding agent: + +``` +Run npx skills add superloglabs/skills --all and use the skills to install Superlog in this project +``` + + + +## What is Superlog? + +Superlog is an open-core observability workspace for OpenTelemetry data. It +ingests traces, logs, and metrics, groups noisy signals into incidents, and gives +teams a local-first product surface for debugging production systems. + +This repository contains the fully open-source, free community edition: + +- Web app and API +- OTLP ingest proxy +- Worker processes for incident grouping and background jobs +- Postgres schema and ClickHouse-backed telemetry queries +- Agent runner interfaces for pluggable investigation runtimes +- A default `community` agent runner that records a local incident summary + +We also provide a hosted Superlog Cloud edition with a free tier, a pay-to-go plan and monthly credit packs. + +## Quick Start + +Prerequisites: + +- Node.js 20+ +- pnpm 9+ +- Docker + +Install dependencies: + +```bash +pnpm install +``` + +Start the local stack: + +```bash +docker compose up -d +pnpm --filter @superlog/db db:migrate +pnpm dev +``` + +The default local services are: + +- Web: `http://localhost:5173` +- API: `http://localhost:4100` +- OTLP intake: `http://localhost:4101` + +## Development + +Run typechecks: + +```bash +pnpm typecheck +``` + +## Repository Layout + +- `apps/web` - Vite/React frontend +- `apps/api` - HTTP API +- `apps/proxy` - OTLP intake proxy +- `apps/worker` - background workers and agent orchestration +- `packages/db` - Drizzle schema and migrations +- `packages/fingerprint` - telemetry fingerprinting helpers + +## License + +Superlog is licensed under the [Apache License 2.0](./LICENSE.md). diff --git a/superlog/SAMUEL_LOCAL_SETUP.md b/superlog/SAMUEL_LOCAL_SETUP.md new file mode 100644 index 0000000000000000000000000000000000000000..0ac7f81713410d779c2a83b5d33b3424f72f7b91 --- /dev/null +++ b/superlog/SAMUEL_LOCAL_SETUP.md @@ -0,0 +1,50 @@ +# Samuel Local Superlog Setup + +Status: isolated local sandbox. + +## What is running + +- Web UI: http://127.0.0.1:5173 +- API: http://127.0.0.1:4100 +- Proxy health: http://127.0.0.1:4000/health +- OTEL collector HTTP: http://127.0.0.1:4318 +- Postgres container: `superlog-sandbox-postgres` on host port `5434` +- ClickHouse container: `superlog-sandbox-clickhouse` on host ports `8123`, `9000` +- Collector container: `superlog-sandbox-collector` on host ports `4317`, `4318` + +## Isolation guarantees + +- Cloned into `/home/smlflg/Projekte/Experimente/superlog`. +- No existing project was modified or instrumented. +- No GitHub/Slack/Linear/Anthropic/OAuth credentials were added. +- Local `.env` files exist only in this sandbox and are mode `600`. +- Docker objects use the `superlog-sandbox-*` names. + +## Stop + +```bash +# Stop web/API/worker/proxy dev process from Hermes if still running: +# process session: proc_6d60aaec9f83 + +# Stop Docker backend: +docker stop superlog-sandbox-collector superlog-sandbox-clickhouse superlog-sandbox-postgres +``` + +## Start again + +```bash +cd /home/smlflg/Projekte/Experimente/superlog + +docker start superlog-sandbox-postgres superlog-sandbox-clickhouse superlog-sandbox-collector +corepack pnpm dev +``` + +## Remove sandbox data later + +Only if you explicitly want to delete local sandbox data: + +```bash +docker rm -f superlog-sandbox-collector superlog-sandbox-clickhouse superlog-sandbox-postgres +docker volume rm superlog_sandbox_pg_data superlog_sandbox_ch_data +rm -rf /home/smlflg/Projekte/Experimente/superlog +``` diff --git a/superlog/SECURITY.md b/superlog/SECURITY.md new file mode 100644 index 0000000000000000000000000000000000000000..0b0a7d9fddb9a379074b315070646c26bc662e79 --- /dev/null +++ b/superlog/SECURITY.md @@ -0,0 +1,67 @@ +# Security Policy + +We take the security of Superlog and its users seriously. Thank you for helping +keep Superlog and the people who use it safe. + +## Supported Versions + +Superlog ships from `main`. Security fixes are applied to the latest release and +the current `main` branch only. Older commits and tags are not patched — please +upgrade to the latest version before reporting an issue. + +| Version | Supported | +| ------------------ | ------------------ | +| Latest release / `main` | :white_check_mark: | +| Anything older | :x: | + +## Reporting a Vulnerability + +**Please do not report security vulnerabilities through public GitHub issues, +pull requests, or our Discord.** + +Instead, use either of these private channels: + +- **GitHub Private Vulnerability Reporting** (preferred): open a report from the + [Security tab](https://github.com/superloglabs/superlog/security/advisories/new) + of this repository. This keeps the discussion private until a fix is released. +- **Email**: send details to **security@superlog.sh**. + +Please include as much of the following as you can: + +- The type of issue (e.g. injection, authn/authz bypass, SSRF, RCE, data exposure). +- The affected component (`apps/web`, `apps/api`, `apps/proxy`, `apps/worker`, + `packages/*`) and file paths or commit if known. +- Step-by-step instructions to reproduce, including any required configuration. +- Proof-of-concept or exploit code, if you have it. +- The impact of the issue and how an attacker might exploit it. + +This information helps us triage your report more quickly. + +## What to Expect + +- **Acknowledgement** within 3 business days of your report. +- An **initial assessment** and severity triage within 7 business days. +- We will keep you informed of progress as we work on a fix, and we will let you + know when the issue is resolved. +- We practice **coordinated disclosure**: we ask that you give us a reasonable + opportunity to release a fix before any public disclosure. We are happy to + credit you in the release notes and advisory unless you prefer to remain + anonymous. + +## Scope + +This policy covers the open-source code in this repository. Issues in the hosted +**Superlog Cloud** service should also be reported through the channels above. + +Out of scope (please do not report these): + +- Reports from automated scanners without a demonstrated, exploitable impact. +- Denial-of-service achievable only through unrealistic traffic volumes. +- Vulnerabilities in third-party dependencies that are already publicly known — + open a regular issue or PR to bump the dependency instead. + +## Safe Harbor + +We will not pursue legal action against researchers who act in good faith, +follow this policy, avoid privacy violations and service degradation, and give +us a reasonable time to remediate before disclosing. diff --git a/superlog/apps/api/Dockerfile b/superlog/apps/api/Dockerfile new file mode 100644 index 0000000000000000000000000000000000000000..34affa2891969460a14c03be69db0306de2ccb79 --- /dev/null +++ b/superlog/apps/api/Dockerfile @@ -0,0 +1,23 @@ +# Build context: repo root. Build with `docker build -f apps/api/Dockerfile .` +FROM node:20-slim + +WORKDIR /app + +RUN corepack enable && corepack prepare pnpm@9.12.0 --activate + +COPY pnpm-lock.yaml pnpm-workspace.yaml package.json ./ +COPY apps/api/package.json apps/api/ +COPY packages/db/package.json packages/db/ +COPY packages/fingerprint/package.json packages/fingerprint/ + +RUN pnpm install --frozen-lockfile --filter @superlog/api... + +COPY tsconfig.base.json ./ +COPY apps/api apps/api +COPY packages/db packages/db +COPY packages/fingerprint packages/fingerprint + +ENV PORT=4100 +EXPOSE 4100 + +CMD ["pnpm", "--filter", "@superlog/api", "start"] diff --git a/superlog/apps/api/node_modules/.bin/nanoid b/superlog/apps/api/node_modules/.bin/nanoid new file mode 100644 index 0000000000000000000000000000000000000000..d428edeed232d3196a0ddd62cc1460e6619250fa --- /dev/null +++ b/superlog/apps/api/node_modules/.bin/nanoid @@ -0,0 +1,17 @@ +#!/bin/sh +basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')") + +case `uname` in + *CYGWIN*) basedir=`cygpath -w "$basedir"`;; +esac + +if [ -z "$NODE_PATH" ]; then + export NODE_PATH="/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/nanoid@5.1.9/node_modules/nanoid/bin/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/nanoid@5.1.9/node_modules/nanoid/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/nanoid@5.1.9/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/node_modules" +else + export NODE_PATH="/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/nanoid@5.1.9/node_modules/nanoid/bin/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/nanoid@5.1.9/node_modules/nanoid/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/nanoid@5.1.9/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/node_modules:$NODE_PATH" +fi +if [ -x "$basedir/node" ]; then + exec "$basedir/node" "$basedir/../nanoid/bin/nanoid.js" "$@" +else + exec node "$basedir/../nanoid/bin/nanoid.js" "$@" +fi diff --git a/superlog/apps/api/node_modules/.bin/pino b/superlog/apps/api/node_modules/.bin/pino new file mode 100644 index 0000000000000000000000000000000000000000..dc3214724f83daa042ee09d324798cbf76e71918 --- /dev/null +++ b/superlog/apps/api/node_modules/.bin/pino @@ -0,0 +1,17 @@ +#!/bin/sh +basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')") + +case `uname` in + *CYGWIN*) basedir=`cygpath -w "$basedir"`;; +esac + +if [ -z "$NODE_PATH" ]; then + export NODE_PATH="/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/pino@10.3.1/node_modules/pino/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/pino@10.3.1/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/node_modules" +else + export NODE_PATH="/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/pino@10.3.1/node_modules/pino/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/pino@10.3.1/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/node_modules:$NODE_PATH" +fi +if [ -x "$basedir/node" ]; then + exec "$basedir/node" "$basedir/../pino/bin.js" "$@" +else + exec node "$basedir/../pino/bin.js" "$@" +fi diff --git a/superlog/apps/api/node_modules/.bin/tsc b/superlog/apps/api/node_modules/.bin/tsc new file mode 100644 index 0000000000000000000000000000000000000000..5a3027f858d7058aef8886d341f0b32c85ab95db --- /dev/null +++ b/superlog/apps/api/node_modules/.bin/tsc @@ -0,0 +1,17 @@ +#!/bin/sh +basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')") + +case `uname` in + *CYGWIN*) basedir=`cygpath -w "$basedir"`;; +esac + +if [ -z "$NODE_PATH" ]; then + export NODE_PATH="/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/bin/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/typescript@5.9.3/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/node_modules" +else + export NODE_PATH="/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/bin/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/typescript@5.9.3/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/node_modules:$NODE_PATH" +fi +if [ -x "$basedir/node" ]; then + exec "$basedir/node" "$basedir/../typescript/bin/tsc" "$@" +else + exec node "$basedir/../typescript/bin/tsc" "$@" +fi diff --git a/superlog/apps/api/node_modules/.bin/tsserver b/superlog/apps/api/node_modules/.bin/tsserver new file mode 100644 index 0000000000000000000000000000000000000000..95999db035aafe7ad567730b16e83c6114b243ae --- /dev/null +++ b/superlog/apps/api/node_modules/.bin/tsserver @@ -0,0 +1,17 @@ +#!/bin/sh +basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')") + +case `uname` in + *CYGWIN*) basedir=`cygpath -w "$basedir"`;; +esac + +if [ -z "$NODE_PATH" ]; then + export NODE_PATH="/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/bin/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/typescript@5.9.3/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/node_modules" +else + export NODE_PATH="/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/bin/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/typescript@5.9.3/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/node_modules:$NODE_PATH" +fi +if [ -x "$basedir/node" ]; then + exec "$basedir/node" "$basedir/../typescript/bin/tsserver" "$@" +else + exec node "$basedir/../typescript/bin/tsserver" "$@" +fi diff --git a/superlog/apps/api/node_modules/.bin/tsx b/superlog/apps/api/node_modules/.bin/tsx new file mode 100644 index 0000000000000000000000000000000000000000..82e6578c601cd86d9e2b3768fd274df4f0f6d556 --- /dev/null +++ b/superlog/apps/api/node_modules/.bin/tsx @@ -0,0 +1,17 @@ +#!/bin/sh +basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')") + +case `uname` in + *CYGWIN*) basedir=`cygpath -w "$basedir"`;; +esac + +if [ -z "$NODE_PATH" ]; then + export NODE_PATH="/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/tsx@4.21.0/node_modules/tsx/dist/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/tsx@4.21.0/node_modules/tsx/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/tsx@4.21.0/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/node_modules" +else + export NODE_PATH="/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/tsx@4.21.0/node_modules/tsx/dist/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/tsx@4.21.0/node_modules/tsx/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/tsx@4.21.0/node_modules:/home/smlflg/Projekte/Experimente/superlog/node_modules/.pnpm/node_modules:$NODE_PATH" +fi +if [ -x "$basedir/node" ]; then + exec "$basedir/node" "$basedir/../tsx/dist/cli.mjs" "$@" +else + exec node "$basedir/../tsx/dist/cli.mjs" "$@" +fi diff --git a/superlog/apps/api/package.json b/superlog/apps/api/package.json new file mode 100644 index 0000000000000000000000000000000000000000..4b21bfec7b1dc81b1a2784f3ab788806d697979e --- /dev/null +++ b/superlog/apps/api/package.json @@ -0,0 +1,51 @@ +{ + "name": "@superlog/api", + "version": "0.0.0", + "private": true, + "license": "Apache-2.0", + "type": "module", + "scripts": { + "dev": "tsx watch --import ./tracing.ts src/index.ts", + "start": "tsx --import ./tracing.ts src/index.ts", + "test": "tsx --test src/**/*.test.ts", + "test:mcp-clickhouse-ranges": "tsx scripts/test-mcp-clickhouse-ranges.ts", + "typecheck": "tsc --noEmit" + }, + "dependencies": { + "@aws-sdk/client-s3": "^3.1053.0", + "@clickhouse/client": "^1.9.0", + "@hono/node-server": "^1.13.7", + "@hono/standard-validator": "^0.2.2", + "@jridgewell/trace-mapping": "^0.3.31", + "@modelcontextprotocol/sdk": "^1.29.0", + "@opentelemetry/api": "^1.9.1", + "@opentelemetry/api-logs": "^0.215.0", + "@opentelemetry/auto-instrumentations-node": "^0.73.0", + "@opentelemetry/exporter-logs-otlp-http": "^0.215.0", + "@opentelemetry/exporter-metrics-otlp-http": "^0.215.0", + "@opentelemetry/exporter-trace-otlp-http": "^0.215.0", + "@opentelemetry/resources": "^2.7.0", + "@opentelemetry/sdk-logs": "^0.215.0", + "@opentelemetry/sdk-metrics": "^2.7.0", + "@opentelemetry/sdk-node": "^0.215.0", + "@opentelemetry/semantic-conventions": "^1.40.0", + "@scalar/hono-api-reference": "^0.10.19", + "@superlog/db": "workspace:*", + "@superlog/fingerprint": "workspace:*", + "autumn-js": "^1.2.27", + "better-auth": "^1.6.11", + "dotenv": "^17.4.2", + "drizzle-orm": "^0.45.2", + "hono": "^4.6.12", + "hono-openapi": "^1.3.0", + "nanoid": "^5.0.9", + "pino": "^10.3.1", + "resend": "^6.12.3", + "zod": "^4.4.3" + }, + "devDependencies": { + "@types/node": "^22.10.1", + "tsx": "^4.19.2", + "typescript": "^5.7.2" + } +} diff --git a/superlog/apps/api/scripts/test-agent-tracking-e2e.ts b/superlog/apps/api/scripts/test-agent-tracking-e2e.ts new file mode 100644 index 0000000000000000000000000000000000000000..902bc99d942fc1f61736811d34fd5f026b18da96 --- /dev/null +++ b/superlog/apps/api/scripts/test-agent-tracking-e2e.ts @@ -0,0 +1,634 @@ +/** + * End-to-end integration test for agent PR / Linear ticket tracking. + * + * What this exercises: + * 1. Migrations apply cleanly (creates the four new tables + linear webhook columns). + * 2. Worker-side row creation: agent_pull_requests + initial pr_opened event. + * 3. GitHub webhook handler updates parent state and appends agent_pr_events + * for: pull_request closed/merged, push, pull_request_review, + * pull_request_review_comment, issue_comment. + * A merged PR also resolves the incident, cascades linked issues, and + * writes an incident timeline event. + * 4. Worker-side Linear ticket creation: agent_linear_tickets + ticket_filed event. + * 5. Linear webhook handler updates parent state and appends agent_linear_ticket_events + * for: Issue update (state change), Comment create. + * 6. Timeline merge: incident_events + agent_pr_events + agent_linear_ticket_events + * come back chronologically with actor metadata. + * + * What this does NOT exercise: + * - Real GitHub PR creation (requires installed GitHub App + repo). + * - Real Linear ticket creation (requires agent run with OAuth + MCP). + * - Linear webhook auto-registration on OAuth (requires public API_BASE_URL). + * + * Run: pnpm exec tsx scripts/test-agent-tracking-e2e.ts + */ + +import { strict as assert } from "node:assert"; +import crypto from "node:crypto"; +import "dotenv/config"; +import { Hono } from "hono"; +import { db, runMigrations, schema } from "@superlog/db"; +import { and, asc, desc, eq, inArray } from "drizzle-orm"; +import { mountGithubPublic } from "../src/github.js"; +import { mountLinearPublic } from "../src/linear.js"; + +const TEST_TAG = `e2e-${Date.now()}`; +const GH_INSTALLATION_ID = Math.floor(Date.now() / 1000) + 9_000_000; // unique-ish +const REPO_FULL_NAME = `acme/${TEST_TAG}`; +const PR_NUMBER = 42; +const LINEAR_WORKSPACE_ID = `ws-${TEST_TAG}`; +const LINEAR_TICKET_ID = `linear-issue-${TEST_TAG}`; +const LINEAR_WEBHOOK_ID = `wh-${TEST_TAG}`; +const LINEAR_WEBHOOK_SECRET = "linear-test-secret"; + +process.env.GITHUB_APP_WEBHOOK_SECRET ??= "github-test-secret"; +const GH_WEBHOOK_SECRET = process.env.GITHUB_APP_WEBHOOK_SECRET; + +function step(label: string) { + console.log(`\n— ${label}`); +} + +function ok(label: string) { + console.log(` ✓ ${label}`); +} + +async function seed(): Promise<{ + orgId: string; + projectId: string; + incidentId: string; + issueId: string; + agentRunId: string; + ghInstallRowId: string; + linearInstallRowId: string; + agentPrRowId: string; + agentTicketRowId: string; +}> { + // Org / user / project + const [org] = await db + .insert(schema.orgs) + .values({ name: `e2e-${TEST_TAG}`, slug: `e2e-${TEST_TAG}` }) + .returning(); + if (!org) throw new Error("seed org failed"); + + const [project] = await db + .insert(schema.projects) + .values({ orgId: org.id, name: "test", slug: `test-${TEST_TAG}` }) + .returning(); + if (!project) throw new Error("seed project failed"); + + // Incident + agentRun + const [incident] = await db + .insert(schema.incidents) + .values({ + projectId: project.id, + title: "Test incident", + service: "api", + firstSeen: new Date(), + lastSeen: new Date(), + }) + .returning(); + if (!incident) throw new Error("seed incident failed"); + + const [issue] = await db + .insert(schema.issues) + .values({ + projectId: project.id, + fingerprint: `fp-${TEST_TAG}`, + kind: "span", + service: "api", + exceptionType: "Error", + title: "Test issue", + message: "boom", + firstSeen: new Date(), + lastSeen: new Date(), + }) + .returning(); + if (!issue) throw new Error("seed issue failed"); + + await db.insert(schema.incidentIssues).values({ + incidentId: incident.id, + issueId: issue.id, + }); + + const [agentRun] = await db + .insert(schema.agentRuns) + .values({ incidentId: incident.id, runtime: "anthropic", state: "running" }) + .returning(); + if (!agentRun) throw new Error("seed agent run failed"); + + await db.insert(schema.incidentEvents).values({ + agentRunId: agentRun.id, + kind: "agent.session_started", + summary: "Agent session started", + }); + + // GitHub installation + const [ghInstall] = await db + .insert(schema.githubInstallations) + .values({ + orgId: org.id, + projectId: project.id, + installationId: GH_INSTALLATION_ID, + accountLogin: "acme-bot", + accountType: "Organization", + repos: [{ id: 1, fullName: REPO_FULL_NAME, private: false }], + }) + .returning(); + if (!ghInstall) throw new Error("seed gh install failed"); + + // Linear installation (with webhook id/secret pre-populated) + const [linearInstall] = await db + .insert(schema.linearInstallations) + .values({ + projectId: project.id, + workspaceId: LINEAR_WORKSPACE_ID, + workspaceName: "Acme", + accessToken: "fake-token", + webhookId: LINEAR_WEBHOOK_ID, + webhookSecret: LINEAR_WEBHOOK_SECRET, + }) + .returning(); + if (!linearInstall) throw new Error("seed linear install failed"); + + // Worker-created rows: pretend the worker already opened a PR + filed a ticket. + const [agentPr] = await db + .insert(schema.agentPullRequests) + .values({ + incidentId: incident.id, + agentRunId: agentRun.id, + installationId: ghInstall.id, + repoFullName: REPO_FULL_NAME, + prNumber: PR_NUMBER, + prNodeId: "PR_node_1", + url: `https://github.com/${REPO_FULL_NAME}/pull/${PR_NUMBER}`, + branchName: "superlog/fix-1", + baseBranch: "main", + headSha: "deadbeef", + title: "[superlog] Fix bug", + state: "open", + lastSyncedAt: new Date(), + }) + .returning(); + if (!agentPr) throw new Error("seed agent_pr failed"); + + await db.insert(schema.agentPrEvents).values({ + agentPrId: agentPr.id, + kind: "pr_opened", + summary: `Opened PR #${PR_NUMBER}`, + actorLogin: "superlog-bot", + payload: { url: agentPr.url }, + providerEventId: `pr_opened:${REPO_FULL_NAME}#${PR_NUMBER}`, + occurredAt: new Date(), + }); + + const [agentTicket] = await db + .insert(schema.agentLinearTickets) + .values({ + incidentId: incident.id, + agentRunId: agentRun.id, + installationId: linearInstall.id, + workspaceId: LINEAR_WORKSPACE_ID, + ticketId: LINEAR_TICKET_ID, + url: `https://linear.app/acme/issue/ENG-1`, + lastSyncedAt: new Date(), + }) + .returning(); + if (!agentTicket) throw new Error("seed agent_ticket failed"); + + await db.insert(schema.agentLinearTicketEvents).values({ + agentLinearTicketId: agentTicket.id, + kind: "ticket_filed", + summary: `Filed ${LINEAR_TICKET_ID}`, + occurredAt: new Date(), + providerEventId: `ticket_filed:${LINEAR_WORKSPACE_ID}:${LINEAR_TICKET_ID}`, + }); + + return { + orgId: org.id, + projectId: project.id, + incidentId: incident.id, + issueId: issue.id, + agentRunId: agentRun.id, + ghInstallRowId: ghInstall.id, + linearInstallRowId: linearInstall.id, + agentPrRowId: agentPr.id, + agentTicketRowId: agentTicket.id, + }; +} + +async function cleanup(orgId: string): PromiseConfirm your email to start using Superlog.
+ +If you didn't sign up, you can ignore this email.
`, + }; +} + +export function passwordResetEmailBody(url: string): { html: string; text: string } { + const safe = escape(url); + return { + text: `Reset your Superlog password.\n\n${url}\n\nThis link expires in 1 hour. If you didn't request a reset, ignore this email.`, + html: `Reset your Superlog password.
+ +This link expires in 1 hour. If you didn't request a reset, ignore this email.
`, + }; +} + +export function orgInvitationEmailBody(args: { + url: string; + orgName: string; + inviterEmail: string; + inviterName?: string | null; + role: string; +}): { html: string; text: string } { + const safe = escape(args.url); + const org = escape(args.orgName); + const inviter = escape(args.inviterName?.trim() ? args.inviterName : args.inviterEmail); + const role = escape(args.role); + return { + text: `${args.inviterName?.trim() || args.inviterEmail} invited you to join ${args.orgName} on Superlog as ${args.role}.\n\nAccept: ${args.url}\n\nIf you weren't expecting this invite, you can ignore it.`, + html: `${inviter} invited you to join ${org} on Superlog as ${role}.
+ +If you weren't expecting this invite, you can ignore it.
`, + }; +} diff --git a/superlog/apps/api/src/env.ts b/superlog/apps/api/src/env.ts new file mode 100644 index 0000000000000000000000000000000000000000..d5e10e9f55499f3f76ae6db5a1081fac9f6d7f77 --- /dev/null +++ b/superlog/apps/api/src/env.ts @@ -0,0 +1,8 @@ +import { config as loadDotenv } from "dotenv"; +const portlessPort = process.env.PORTLESS_URL ? process.env.PORT : undefined; +loadDotenv(); +loadDotenv({ path: ".env.local", override: true }); +if (process.env.SUPERLOG_ENV_FILE) { + loadDotenv({ path: process.env.SUPERLOG_ENV_FILE, override: true }); +} +if (portlessPort) process.env.PORT = portlessPort; diff --git a/superlog/apps/api/src/feedback.ts b/superlog/apps/api/src/feedback.ts new file mode 100644 index 0000000000000000000000000000000000000000..4bc4f489f92d511945f65fa356739096c387693c --- /dev/null +++ b/superlog/apps/api/src/feedback.ts @@ -0,0 +1,299 @@ +import { db, schema } from "@superlog/db"; +import { and, eq } from "drizzle-orm"; +import type { Hono } from "hono"; +import { HTTPException } from "hono/http-exception"; +import { auth } from "./auth.js"; +import { logger } from "./logger.js"; + +const log = logger.child({ scope: "feedback" }); + +const MAX_BODY_LEN = 8_000; +const FEEDBACK_KINDS = new Set