feat(sync): support remote exclude patterns for syncthing

Author: acmore

docs/okdev-design.md

@@ -113,6 +113,8 @@ spec:
       - .git/
       - .venv/
       - node_modules/
+    remoteExclude:
+      - checkpoints/
   ports:
     - name: api
       local: 8080
@@ -241,7 +243,7 @@ Ownership model:
 - `okdev sync [--mode=bi|up|down] [--background] [--dry-run]`
   - syncthing engine: continuous sync for single path mapping
   - supports detached syncthing mode via `--background`
-  - exclude support, `.stignore` generation for syncthing
+  - exclude support, `.stignore` generation for local (`exclude`) and remote (`remoteExclude`)
 
 - `okdev ports`
   - establish all declared forwards

docs/quickstart.md

@@ -64,6 +64,7 @@ For a named session:
 
 `okdev` auto-installs local Syncthing and auto-injects a pod sidecar when `sync.engine=syncthing`.
 Default sidecar image tag follows the running `okdev` binary version (`ghcr.io/<repo-owner>/okdev:<okdev-version>`). For dev builds, fallback is `ghcr.io/<repo-owner>/okdev:edge`. Update `spec.sync.syncthing.image` only if you publish to a different registry/repository.
+Use `spec.sync.exclude` for local ignore patterns and `spec.sync.remoteExclude` for remote-only ignore patterns.
 
 Preview-only mode (no cluster changes):
 

internal/cli/syncthing.go

@@ -72,6 +72,9 @@ func runSyncthingSync(cmd *cobra.Command, opts *Options, cfg *config.DevEnvironm
 	if _, err := k.ExecShInContainer(ctx, namespace, pod, syncthingContainerName, fmt.Sprintf("mkdir -p %s", syncengine.ShellEscape(pair.Remote))); err != nil {
 		return err
 	}
+	if err := writeRemoteSTIgnoreInPod(ctx, k, namespace, pod, pair.Remote, cfg.Spec.Sync.RemoteExclude); err != nil {
+		return err
+	}
 
 	localHome, err := localSyncthingHome(sessionName)
 	if err != nil {
@@ -144,9 +147,17 @@ func runSyncthingSync(cmd *cobra.Command, opts *Options, cfg *config.DevEnvironm
 }
 
 func writeSTIgnore(localPath string, excludes []string) error {
-	if len(excludes) == 0 {
+	content, ok := buildSTIgnoreContent(excludes)
+	if !ok {
 		return nil
 	}
+	return os.WriteFile(filepath.Join(localPath, ".stignore"), []byte(content), 0o644)
+}
+
+func buildSTIgnoreContent(excludes []string) (string, bool) {
+	if len(excludes) == 0 {
+		return "", false
+	}
 	var b strings.Builder
 	for _, ex := range excludes {
 		ex = strings.TrimSpace(ex)
@@ -159,9 +170,25 @@ func writeSTIgnore(localPath string, excludes []string) error {
 		}
 	}
 	if b.Len() == 0 {
+		return "", false
+	}
+	return b.String(), true
+}
+
+func writeRemoteSTIgnoreInPod(ctx context.Context, k interface {
+	ExecShInContainer(context.Context, string, string, string, string) ([]byte, error)
+}, namespace, pod, remotePath string, excludes []string) error {
+	content, ok := buildSTIgnoreContent(excludes)
+	if !ok {
 		return nil
 	}
-	return os.WriteFile(filepath.Join(localPath, ".stignore"), []byte(b.String()), 0o644)
+	ignorePath := strings.TrimRight(remotePath, "/") + "/.stignore"
+	if ignorePath == "/.stignore" || strings.TrimSpace(ignorePath) == "" {
+		return fmt.Errorf("invalid remote sync path %q for remoteExclude", remotePath)
+	}
+	cmd := fmt.Sprintf("cat > %s <<'OKDEV_STIGNORE_EOF'\n%sOKDEV_STIGNORE_EOF\n", syncengine.ShellEscape(ignorePath), content)
+	_, err := k.ExecShInContainer(ctx, namespace, pod, syncthingContainerName, cmd)
+	return err
 }
 
 func localSyncthingHome(session string) (string, error) {

internal/cli/syncthing_test.go

@@ -57,3 +57,13 @@ func TestSyncthingCompletion(t *testing.T) {
 		t.Fatalf("unexpected completion values pct=%v need=%d", pct, need)
 	}
 }
+
+func TestBuildSTIgnoreContent(t *testing.T) {
+	content, ok := buildSTIgnoreContent([]string{" .git/ ", "", "node_modules/"})
+	if !ok {
+		t.Fatal("expected content")
+	}
+	if content != ".git/\nnode_modules/\n" {
+		t.Fatalf("unexpected content %q", content)
+	}
+}

internal/config/config.go

@@ -68,10 +68,11 @@ type MetadataMap struct {
 }
 
 type SyncSpec struct {
-	Paths     []string      `yaml:"paths"`
-	Exclude   []string      `yaml:"exclude"`
-	Engine    string        `yaml:"engine"`
-	Syncthing SyncthingSpec `yaml:"syncthing"`
+	Paths         []string      `yaml:"paths"`
+	Exclude       []string      `yaml:"exclude"`
+	RemoteExclude []string      `yaml:"remoteExclude"`
+	Engine        string        `yaml:"engine"`
+	Syncthing     SyncthingSpec `yaml:"syncthing"`
 }
 
 type SyncthingSpec struct {

internal/config/template.go

@@ -29,6 +29,7 @@ spec:
       - .git/
       - .venv/
       - node_modules/
+    remoteExclude: []
   ports:
     - name: app
       local: 8080
@@ -69,6 +70,7 @@ spec:
       - node_modules/
       - checkpoints/
       - data/
+    remoteExclude: []
   ports:
     - name: api
       local: 8080
@@ -134,6 +136,7 @@ spec:
       - node_modules/
       - checkpoints/
       - data/
+    remoteExclude: []
   ports:
     - name: app
       local: 8080