fix: set NEXT_PUBLIC_CODEBUFF_APP_URL in worktree root .env.development.local

- CLI and SDK now hit local web server in worktrees instead of production
- Added documentation about SDK E2E tests requiring local server
- Added reminder in init-worktree completion message

Author: brandonkachen

knowledge.md

@@ -389,6 +389,30 @@ For git worktrees running on different ports:
 - Bun loads `.env.development.local` with highest precedence, so it overrides ports from `.env.local`
 - The `scripts/init-worktree.ts` script creates this file automatically
 
+#### Worktree App URL Configuration
+
+The `init-worktree.ts` script sets `NEXT_PUBLIC_CODEBUFF_APP_URL=http://localhost:${webPort}` in the root `.env.development.local`. This means:
+
+- **CLI**: Will hit the local web server instead of production
+- **SDK**: Will also use the local web server for API calls
+- **SDK E2E Tests**: Require the local web server to be running
+
+**Running SDK E2E tests in a worktree:**
+
+```bash
+# First, start the web server in one terminal
+bun run --cwd web dev
+
+# Then run SDK E2E tests in another terminal
+bun test sdk/e2e
+```
+
+If you need to run SDK tests against production instead, override the environment variable:
+
+```bash
+NEXT_PUBLIC_CODEBUFF_APP_URL=https://codebuff.com bun test sdk/e2e
+```
+
 ### Bun Wrapper Script (`.bin/bun`)
 
 The wrapper's role is simple: ensure `.env.local` is synced from Infisical before running bun.

scripts/init-worktree.ts

@@ -210,22 +210,24 @@ function createEnvDevelopmentLocalFile(
   worktreePath: string,
   args: WorktreeArgs,
 ): void {
-  // Root .env.development.local - only port overrides that apply globally
-  const rootEnvContent = `# Worktree-specific port overrides
+  // Root .env.development.local - worktree-specific overrides that apply globally (CLI, web, scripts, etc.)
+  const rootEnvContent = `# Worktree-specific overrides
 # Generated by init-worktree.ts for worktree: ${args.name}
 # This file has highest precedence in Bun's .env loading order, overriding .env.local
 PORT=${args.webPort}
 NEXT_PUBLIC_WEB_PORT=${args.webPort}
+NEXT_PUBLIC_CODEBUFF_APP_URL=http://localhost:${args.webPort}
 `
 
   writeFileSync(join(worktreePath, '.env.development.local'), rootEnvContent)
-  console.log('Created .env.development.local with port configurations')
+  console.log('Created .env.development.local with port and app URL configurations')
 
-  // Web-specific .env.development.local - URL override only affects web package
-  // This prevents SDK integration tests from hitting localhost instead of production
+  // Web-specific .env.development.local - keep an explicit copy for the web package
+  // The root .env.development.local already ensures the CLI and other packages use the same app URL.
   const webEnvContent = `# Web-specific worktree overrides
 # Generated by init-worktree.ts for worktree: ${args.name}
-# This URL override only affects the web package, not SDK tests
+# This URL override is duplicated here for clarity; the root .env.development.local
+# already sets NEXT_PUBLIC_CODEBUFF_APP_URL for all packages.
 NEXT_PUBLIC_CODEBUFF_APP_URL=http://localhost:${args.webPort}
 `
 
@@ -247,6 +249,82 @@ function copyInfisicalConfig(worktreePath: string): void {
   }
 }
 
+async function syncInfisicalSecrets(worktreePath: string): Promise<boolean> {
+  const envLocalPath = join(worktreePath, '.env.local')
+  const infisicalJsonPath = join(worktreePath, '.infisical.json')
+
+  // Check if .infisical.json exists in worktree
+  if (!existsSync(infisicalJsonPath)) {
+    console.warn('Skipping Infisical sync: .infisical.json not found in worktree')
+    return false
+  }
+
+  console.log('Syncing secrets from Infisical to .env.local...')
+
+  return new Promise((resolve) => {
+    const proc = spawn('infisical', ['export'], {
+      cwd: worktreePath,
+      stdio: 'pipe',
+      shell: false,
+      env: {
+        ...process.env,
+        INFISICAL_DISABLE_UPDATE_CHECK: 'true',
+      },
+    })
+
+    let stdout = ''
+    let stderr = ''
+
+    proc.stdout?.on('data', (data) => {
+      stdout += data.toString()
+    })
+
+    proc.stderr?.on('data', (data) => {
+      stderr += data.toString()
+    })
+
+    // 10 second timeout
+    const timeout = setTimeout(() => {
+      proc.kill()
+      console.warn('Warning: Infisical sync timed out after 10 seconds')
+      console.warn('You may need to run `infisical login` and try again')
+      resolve(false)
+    }, 10000)
+
+    proc.on('close', (code) => {
+      clearTimeout(timeout)
+
+      if (code === 0 && stdout.length > 0) {
+        writeFileSync(envLocalPath, stdout)
+        console.log('Synced secrets from Infisical to .env.local')
+        resolve(true)
+      } else {
+        if (stderr.includes('Select the environment') || stderr.includes('not logged in')) {
+          console.warn('Warning: Infisical session expired or not logged in')
+          console.warn('Please run `infisical login` in the worktree')
+        } else if (code !== 0) {
+          console.warn(`Warning: Infisical sync failed (exit code ${code})`)
+          if (stderr) {
+            console.warn(`  ${stderr.trim()}`)
+          }
+        }
+        resolve(false)
+      }
+    })
+
+    proc.on('error', (error) => {
+      clearTimeout(timeout)
+      if ((error as NodeJS.ErrnoException).code === 'ENOENT') {
+        console.warn('Warning: infisical CLI not found, skipping secret sync')
+        console.warn('Install it with: brew install infisical/get-cli/infisical')
+      } else {
+        console.warn(`Warning: Failed to run infisical: ${error.message}`)
+      }
+      resolve(false)
+    })
+  })
+}
+
 // Wrapper script no longer needed - .bin/bun handles .env.worktree loading
 // function createWrapperScript(worktreePath: string): void {
 //   // This function is deprecated - the .bin/bun wrapper now handles .env.worktree loading
@@ -324,7 +402,10 @@ async function main(): Promise<void> {
     // Create configuration files
     createEnvDevelopmentLocalFile(worktreePath, args)
     copyInfisicalConfig(worktreePath)
-    // Note: Bun loads .env.development.local with highest precedence, overriding .env.local
+
+    // Sync secrets from Infisical to .env.local before running bun install
+    // This ensures the .bin/bun wrapper doesn't complain about missing .env.local
+    await syncInfisicalSecrets(worktreePath)
 
     // Run direnv allow
     await runDirenvAllow(worktreePath)
@@ -333,18 +414,14 @@ async function main(): Promise<void> {
     console.log('Installing dependencies with bun...')
     await runCommand('bun', ['install'], worktreePath)
 
-    // Build web directory
-    console.log('Building web directory...')
-    await runCommand('bun', ['run', '--cwd', 'web', 'build'], worktreePath)
-
-    // Run typecheck
-    console.log('Running typecheck...')
-    await runCommand('bun', ['run', 'typecheck'], worktreePath)
-
     console.log(`✅ Worktree '${args.name}' created and set up successfully!`)
     console.log(`📁 Location: ${worktreePath}`)
     console.log(`🚀 You can now cd into the worktree and start working:`)
     console.log(`   cd ${worktreePath}`)
+    console.log(``)
+    console.log(`⚠️  Note: NEXT_PUBLIC_CODEBUFF_APP_URL is set to http://localhost:${args.webPort}`)
+    console.log(`   The CLI and SDK will hit your local web server.`)
+    console.log(`   To run SDK E2E tests, start the web server first: bun run --cwd web dev`)
   } catch (error) {
     if (error instanceof WorktreeError) {
       console.error(`Error: ${error.message}`)