CLI auth (PAT/device) + direct-to-org-database data plane

[sagnik11]

Summary

This branch finishes CLI ↔ platform authentication and reworks how the CLI persists data, removing the intermediate data-plane backend entirely.

Authentication

• OAuth 2.0 device-authorization flow + token refresh against autter.dev.
• Personal Access Tokens (autter login --token autter_pat_…) for non-interactive/CI sign-in, with per-org token minting and repo→org resolution.
• JWT verification/decoding hardening and JWKS URL fixes.

Direct-to-org-database data plane (no more CLI backend)

The CLI now writes authorship notes, prompt transcripts (CAS), and usage metrics straight to each organization's own Postgres, using the org_db_url claim already carried in the signed access token. The previous pass-through server/ crate is deleted.

• New src/api/org_db.rs: decode org_db_url/identity from the token, cached TLS connection per org DB, schema auto-creation (authorship_notes, cas_objects, cli_audit_log, cli_metrics), and the upsert/read/audit logic the server used to do.
• upload_notes / read_notes / upload_cas / metrics upload now write to the org DB; data.push audit rows are written by the CLI.
• Removed the server/ crate, the obsolete notes-backend-spec.md, and the in-memory reference HTTP backend (notes serve).

Editor extension install fix

• When an editor's marketplace can't resolve the extension by ID (e.g. Cursor resolves against the MS Marketplace, not Open VSX), onboarding now falls back to downloading the .vsix from Open VSX and installing from the local file — works across VS Code / Cursor / Windsurf / VSCodium.
• Publish workflow now derives the extension version from the vscode-v* tag so the tag and published version can't drift.

Testing

Verified end-to-end against a real org's Neon Postgres from a clean install: authorship notes, ~2k usage-metric rows, and data.push audit rows all landed via the direct connection (TLS + schema auto-create confirmed); the CLI's own upload queue reported synced=1 with no errors.

---

Created with PostHog Code

Summary by CodeRabbit

• New Features

  • Personal Access Token (PAT) login for simplified, non-interactive authentication.
  • Organization-scoped database backend enabling seamless multi-org data management.

• Improvements

  • Streamlined sign-in flow with browser-based token generation and dashboard integration.
  • VS Code extension installation with automatic fallback to Open VSX package registry.
  • Comprehensive documentation updates covering authentication methods and local/cloud configuration options.

[coderabbitai]

Caution

Review failed

Pull request was closed or merged during review

📝 Walkthrough

Walkthrough

This PR migrates the CLI's notes, CAS, and metrics API calls from HTTP worker endpoints to direct per-org PostgreSQL writes via a new src/api/org_db.rs module that decodes JWT routing claims. It adds PAT-based login with org-scoped token caching, propagates repo_url through the local notes queue for per-org routing in the telemetry worker, removes the in-memory reference server, and adds an Open VSX VSIX fallback installer with a publish CI workflow.

Changes

Org DB Data-Plane Migration

Layer / File(s)	Summary
org_db module: identity, connection pool, and CRUD src/api/org_db.rs, src/api/mod.rs	New module decodes JWT org_db_url into OrgIdentity, manages a global TLS connection cache with schema provisioning, and implements upsert_notes, read_notes, upsert_cas, read_cas, and insert_metrics with best-effort audit logging. Unit tests cover JWT decoding edge cases.
PAT & org-scoped token caching src/auth/client.rs, src/auth/identity.rs, src/api/client.rs	OAuthClient gains exchange_pat, exchange_pat_for_org, and resolve_org_for_repo; TokenIdentity gains active_org_id and active_org(); src/api/client.rs adds in-process repo→org and org→token caches with resolve_org_for_repo_cached, access_token_for_org, and ApiClient::org_identity().
PAT login command, config URL defaults, onboard mode src/commands/login.rs, src/config.rs, src/commands/onboard.rs, src/commands/autter_handlers.rs, src/commands/notes_migrate.rs, README.md	Adds run_pat_login, --token argument parsing, web URL derivation helpers, and updated handle_login flow; introduces DEFAULT_NOTES_BACKEND_URL, updates DEFAULT_API_BASE_URL, reworks notes_backend_url() precedence; switches connected-mode onboard to Http notes backend; updates help text and README docs.
API clients migrated from HTTP to org_db src/api/notes.rs, src/api/cas.rs, src/api/metrics.rs	upload_notes, read_notes, upload_cas, read_ca_prompt_store, and upload_metrics are rewritten to call org_identity() then the corresponding org_db function, removing all HTTP request/response handling.
Notes local DB schema v2: repo_url column src/notes/db.rs, src/git/notes_api.rs	Schema bumped to v2 with a migration adding repo_url; PendingNote extended; upsert_note_with_repo and upsert_notes_batch_with_repo added; HTTP backend note helpers updated to accept and persist repo_url; tests updated.
Telemetry worker: per-org note routing and auth gating src/daemon/telemetry_worker.rs, src/commands/flush_metrics_db.rs	flush_notes groups pending notes by resolved owning org and uploads each group with an org-scoped token; flush_metrics and flush_cas gate on is_logged_in() and HTTP-backend URL respectively; handle_flush_metrics_db simplified to skip when not logged in.
Remove in-memory reference server and HTTP spec docs src/notes/reference_server.rs, src/notes/mod.rs, docs/notes-backend-spec.md, Cargo.toml, AGENTS.md	Deletes reference_server.rs (521 lines), removes its module export, deletes the HTTP notes backend spec doc, adds Cargo workspace config and Postgres/base64 dependencies, and removes the notes serve handler from the CLI.

VS Code VSIX Fallback and Publish Workflow

Layer / File(s)	Summary
Open VSX VSIX fallback utility and agent wiring src/mdm/utils.rs, src/mdm/agents/cursor.rs, src/mdm/agents/vscode.rs, src/mdm/agents/windsurf.rs	Adds install_vsc_editor_extension_with_vsix_fallback that downloads from Open VSX on ID-install failure; all three agent installers are updated to call this function.
VS Code extension publish workflow and version bump .github/workflows/publish-vscode-extension.yml, agent-support/vscode/package.json	New workflow triggers on vscode-v* tags, syncs version, packages and publishes to Open VSX and conditionally the VS Code Marketplace, and uploads the .vsix artifact; extension version bumped to 0.1.23.

Sequence Diagram(s)

sequenceDiagram
  participant User
  participant CLI as autter CLI
  participant OAuthClient
  participant CredentialStore
  participant org_db
  participant PostgreSQL

  User->>CLI: autter login --token <PAT>
  CLI->>OAuthClient: exchange_pat(pat)
  OAuthClient-->>CLI: StoredCredentials
  CLI->>CredentialStore: save credentials
  CLI->>CLI: extract TokenIdentity (active_org_id)
  CLI-->>User: signed in as <user> / org <org>

  User->>CLI: autter notes migrate (or telemetry flush)
  CLI->>org_db: identity_from_token(access_token)
  org_db-->>CLI: OrgIdentity{org_db_url}
  CLI->>org_db: upsert_notes / upsert_cas / insert_metrics
  org_db->>PostgreSQL: connect (TLS) + provision schema
  org_db->>PostgreSQL: execute upsert with ON CONFLICT
  org_db->>PostgreSQL: record_push (audit log)
  PostgreSQL-->>org_db: result rows
  org_db-->>CLI: NotesUploadResponse / CasUploadResponse / failures

Loading

Estimated code review effort

🎯 5 (Critical) | ⏱️ ~120 minutes

Poem

🐇 Hop, hop, no more HTTP hops to make,
Direct to Postgres now, for data's sake!
PAT tokens cached, org routed right,
The reference server sleeps—a VSIX takes flight.
From Open VSX we fetch, if IDs fail,
A bunny's CI workflow never goes stale! ✨

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the two main architectural changes: CLI authentication (PAT/device flow) and direct-to-org-database data plane, matching the core objectives.
Docstring Coverage	✅ Passed	Docstring coverage is 100.00% which is sufficient. The required threshold is 80.00%.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch handle-auth

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}