Function stepDbtRepoRepoint

scripts/dev-github-reconcile.cjs:214–259

(client, kvs)

// open PRs. Verifies dbt_project.yml is reachable at repo/branch/subpath with the install
// token BEFORE writing, and preserves compiler-base fields (target/environment/selector).
async function stepDbtRepoRepoint(client, kvs) {
  const secret = need('RUNNING_SECRET');
  const org = await orgUuid(client);
  const repo = (kvs.repo || '').trim();
  const branch = (kvs.branch || 'main').trim();
  let subpath = (kvs.subpath || '/dbt').trim();
  if (!subpath.startsWith('/')) subpath = `/${subpath}`;
  if (!repo || repo.indexOf('/') < 0) throw new Error('repoint requires repo=owner/name');

  const { id, token } = await installationToken(client);

  const clean = subpath.replace(/^\/+|\/+$/g, '');
  const ymlPath = `${clean ? `${clean}/` : ''}dbt_project.yml`;
  const check = await fetch(`https://api.github.com/repos/${repo}/contents/${ymlPath}?ref=${encodeURIComponent(branch)}`, {
    headers: { Authorization: `Bearer ${token}`, Accept: 'application/vnd.github+json', 'X-GitHub-Api-Version': '2022-11-28' },
  });
  if (check.status !== 200) throw new Error(`dbt_project.yml not found at ${repo}:${branch}/${ymlPath} (HTTP ${check.status}) — check repo/branch/subpath and that the App installation covers this repo`);

  const r = await client.query(
    `SELECT project_uuid, encode(dbt_connection,'hex') AS hex
       FROM projects WHERE organization_id=(SELECT organization_id FROM organizations WHERE organization_uuid=$1)
       ORDER BY project_id LIMIT 1`, [org]);
  if (!r.rows.length) throw new Error('no project to repoint');
  let cur = {};
  try { cur = JSON.parse(decrypt(Buffer.from(r.rows[0].hex, 'hex'), secret)); } catch (_) {}
  const next = {
    type: 'github',
    authorization_method: 'installation_id',
    installation_id: String(id),
    repository: repo,
    branch,
    project_sub_path: subpath,
  };
  if (cur.target) next.target = cur.target;
  if (cur.environment) next.environment = cur.environment;
  if (cur.selector) next.selector = cur.selector;
  if (cur.host_domain) next.host_domain = cur.host_domain;
  const enc = encrypt(JSON.stringify(next), secret);
  // Two columns hold the type: the encrypted dbt_connection blob AND the plaintext
  // dbt_connection_type that ProjectModel maintains and the writeback gate reads. Both
  // must change or proposeWriteback still sees 'dbt' and ParameterErrors.
  await client.query(
    'UPDATE projects SET dbt_connection=$1, dbt_connection_type=$2 WHERE project_uuid=$3',
    [enc, 'github', r.rows[0].project_uuid]);
  console.log(`OK: repointed project ${r.rows[0].project_uuid} dbt_connection -> github ${repo}@${branch}${subpath} (installation_id=${id})`);
}

async function stepVerifyToken(client) {
  const secret = need('RUNNING_SECRET');