spurline-core 0.3.0

data/lib/spurline/cli/credentials.rb

@@ -0,0 +1,181 @@
+# frozen_string_literal: true
+
+require "fileutils"
+require "openssl"
+require "securerandom"
+require "shellwords"
+require "tempfile"
+require "yaml"
+
+module Spurline
+  module CLI
+    class Credentials
+      DEFAULT_TEMPLATE = <<~YAML
+        # Spurline credentials - encrypted at rest.
+        # Edit with: spur credentials:edit
+        #
+        anthropic_api_key: ""
+        # brave_api_key: ""
+      YAML
+
+      IV_BYTES = 12
+      AUTH_TAG_BYTES = 16
+      KEY_BYTES = 32
+
+      def initialize(project_root:)
+        @project_root = File.expand_path(project_root)
+      end
+
+      def edit!
+        ensure_master_key!
+        plaintext = File.file?(credentials_path) ? decrypt_existing_credentials : project_template
+
+        Tempfile.create(["spurline-credentials", ".yml"]) do |file|
+          path = file.path
+          File.write(path, plaintext)
+          open_editor!(file.path)
+          edited = File.read(path)
+          parse_yaml(edited)
+          encrypt_and_write(edited)
+        end
+      end
+
+      def read
+        return {} unless File.file?(credentials_path)
+
+        parse_yaml(decrypt_existing_credentials)
+      end
+
+      def master_key
+        @master_key ||= resolve_master_key
+      end
+
+      private
+
+      attr_reader :project_root
+
+      def project_template
+        template_path = File.join(project_root, "config", "credentials.template.yml")
+        File.file?(template_path) ? File.read(template_path) : DEFAULT_TEMPLATE
+      end
+
+      def credentials_path
+        File.join(project_root, "config", "credentials.enc.yml")
+      end
+
+      def master_key_path
+        File.join(project_root, "config", "master.key")
+      end
+
+      def ensure_master_key!
+        return if master_key
+
+        generate_master_key!
+        @master_key = resolve_master_key
+      end
+
+      def generate_master_key!
+        FileUtils.mkdir_p(File.dirname(master_key_path))
+        hex_key = SecureRandom.random_bytes(KEY_BYTES).unpack1("H*")
+        File.write(master_key_path, "#{hex_key}\n")
+        File.chmod(0o600, master_key_path)
+      end
+
+      def resolve_master_key
+        hex = ENV.fetch("SPURLINE_MASTER_KEY", nil)
+        hex = read_master_key_file if hex.nil? || hex.strip.empty?
+        return nil if hex.nil? || hex.strip.empty?
+
+        decode_hex_key(hex)
+      end
+
+      def read_master_key_file
+        return nil unless File.file?(master_key_path)
+
+        File.read(master_key_path)
+      end
+
+      def decode_hex_key(hex)
+        stripped = hex.to_s.strip
+        unless stripped.match?(/\A[0-9a-fA-F]{#{KEY_BYTES * 2}}\z/)
+          raise Spurline::CredentialsMissingKeyError,
+            "Master key must be #{KEY_BYTES * 2} hex characters"
+        end
+
+        [stripped].pack("H*")
+      end
+
+      def decrypt_existing_credentials
+        key = master_key
+        unless key
+          raise Spurline::CredentialsMissingKeyError,
+            "Missing master key. Set SPURLINE_MASTER_KEY or create config/master.key"
+        end
+
+        payload = File.binread(credentials_path)
+        decrypt(payload, key)
+      end
+
+      def encrypt_and_write(plaintext)
+        key = master_key
+        unless key
+          raise Spurline::CredentialsMissingKeyError,
+            "Missing master key. Set SPURLINE_MASTER_KEY or create config/master.key"
+        end
+
+        payload = encrypt(plaintext, key)
+        FileUtils.mkdir_p(File.dirname(credentials_path))
+        File.binwrite(credentials_path, payload)
+      end
+
+      def encrypt(plaintext, key)
+        cipher = OpenSSL::Cipher.new("aes-256-gcm")
+        cipher.encrypt
+        cipher.key = key
+        iv = SecureRandom.random_bytes(IV_BYTES)
+        cipher.iv = iv
+        ciphertext = cipher.update(plaintext) + cipher.final
+        tag = cipher.auth_tag
+        iv + tag + ciphertext
+      end
+
+      def decrypt(payload, key)
+        unless payload && payload.bytesize >= (IV_BYTES + AUTH_TAG_BYTES)
+          raise Spurline::CredentialsDecryptionError, "Encrypted credentials file is invalid"
+        end
+
+        iv = payload.byteslice(0, IV_BYTES)
+        tag = payload.byteslice(IV_BYTES, AUTH_TAG_BYTES)
+        ciphertext = payload.byteslice(IV_BYTES + AUTH_TAG_BYTES, payload.bytesize)
+
+        cipher = OpenSSL::Cipher.new("aes-256-gcm")
+        cipher.decrypt
+        cipher.key = key
+        cipher.iv = iv
+        cipher.auth_tag = tag
+        cipher.update(ciphertext) + cipher.final
+      rescue OpenSSL::Cipher::CipherError
+        raise Spurline::CredentialsDecryptionError, "Could not decrypt credentials with provided master key"
+      end
+
+      def open_editor!(path)
+        editor = ENV.fetch("EDITOR", "vi")
+        command = Shellwords.split(editor)
+        ok = system(*command, path)
+        return if ok
+
+        raise Spurline::ConfigurationError, "EDITOR command failed: #{editor}"
+      end
+
+      def parse_yaml(content)
+        parsed = YAML.safe_load(content, aliases: false)
+        return {} if parsed.nil?
+        return parsed.transform_keys(&:to_s) if parsed.is_a?(Hash)
+
+        raise Spurline::ConfigurationError, "Credentials YAML must contain a mapping"
+      rescue Psych::SyntaxError => e
+        raise Spurline::ConfigurationError, "Invalid credentials YAML: #{e.message}"
+      end
+    end
+  end
+end

data/lib/spurline/cli/generators/CLAUDE.md

@@ -0,0 +1,11 @@
+<claude-mem-context>
+# Recent Activity
+
+<!-- This section is auto-generated by claude-mem. Edit content outside the tags. -->
+
+### Feb 21, 2026
+
+| ID | Time | T | Title | Read |
+|----|------|---|-------|------|
+| #3661 | 7:57 PM | 🔵 | Code quality review confirmed Plans 01-02 are production-ready with zero issues | ~791 |
+</claude-mem-context>

data/lib/spurline/cli/generators/agent.rb

@@ -0,0 +1,123 @@
+# frozen_string_literal: true
+
+require "fileutils"
+
+module Spurline
+  module CLI
+    module Generators
+      # Generates a new agent class file.
+      # Usage: spur generate agent research
+      class Agent
+        attr_reader :name
+
+        def initialize(name:)
+          @name = name.to_s
+        end
+
+        def generate!
+          verify_project_structure!
+
+          path = File.join("app", "agents", "#{snake_name}_agent.rb")
+
+          if File.exist?(path)
+            $stderr.puts "File already exists: #{path}"
+            exit 1
+          end
+
+          FileUtils.mkdir_p(File.dirname(path))
+          File.write(path, agent_template)
+          puts "  create  #{path}"
+
+          generate_spec_file!
+        end
+
+        private
+
+        def verify_project_structure!
+          unless Dir.exist?("app/agents")
+            $stderr.puts "No app/agents directory found. " \
+                         "Run this from a Spurline project root, or run 'spur new' first."
+            exit 1
+          end
+
+          unless File.exist?(File.join("app", "agents", "application_agent.rb"))
+            $stderr.puts "No application_agent.rb found. Run 'spur new' first."
+            exit 1
+          end
+        end
+
+        def agent_template
+          <<~RUBY
+            # frozen_string_literal: true
+
+            require_relative "application_agent"
+
+            class #{class_name}Agent < ApplicationAgent
+              persona(:default) do
+                system_prompt "You are a #{name.tr("_", " ")} agent."
+              end
+
+              # Uncomment to register tools:
+              # tools :example_tool
+
+              # Uncomment to override guardrails from ApplicationAgent:
+              # guardrails do
+              #   max_tool_calls 5
+              # end
+            end
+          RUBY
+        end
+
+        def generate_spec_file!
+          spec_path = File.join("spec", "agents", "#{snake_name}_agent_spec.rb")
+          if File.exist?(spec_path)
+            puts "  skip    #{spec_path} (already exists)"
+            return
+          end
+
+          FileUtils.mkdir_p(File.dirname(spec_path))
+          File.write(spec_path, spec_template)
+          puts "  create  #{spec_path}"
+        end
+
+        def spec_template
+          <<~RUBY
+            # frozen_string_literal: true
+
+            RSpec.describe #{class_name}Agent do
+              let(:agent) do
+                described_class.new.tap do |a|
+                  a.use_stub_adapter(responses: [stub_text("Test response")])
+                end
+              end
+
+              describe "#run" do
+                it "streams a response" do
+                  chunks = []
+                  agent.run("Test input") { |chunk| chunks << chunk }
+                  text = chunks.select(&:text?).map(&:text).join
+                  expect(text).not_to be_empty
+                end
+              end
+            end
+          RUBY
+        end
+
+        def class_name
+          name.to_s
+            .gsub(/[-_]/, " ")
+            .split(" ")
+            .map(&:capitalize)
+            .join
+        end
+
+        def snake_name
+          name.to_s
+            .gsub(/([a-z])([A-Z])/, '\1_\2')
+            .gsub(/[-\s]/, "_")
+            .downcase
+        end
+      end
+    end
+  end
+end

data/lib/spurline/cli/generators/migration.rb

@@ -0,0 +1,62 @@
+# frozen_string_literal: true
+
+require "fileutils"
+
+module Spurline
+  module CLI
+    module Generators
+      # Generates built-in SQL migrations.
+      # Usage: spur generate migration sessions
+      class Migration
+        MIGRATIONS = { "sessions" => :sessions_migration_sql }.freeze
+
+        attr_reader :name
+
+        def initialize(name:)
+          @name = name.to_s
+        end
+
+        def generate!
+          unless MIGRATIONS.key?(name)
+            $stderr.puts "Unknown migration: #{name}. Available: #{MIGRATIONS.keys.join(", ")}"
+            exit 1
+          end
+
+          if Dir.glob(File.join("db", "migrations", "*_create_spurline_#{name}.sql")).any?
+            $stderr.puts "Migration for #{name} already exists."
+            exit 1
+          end
+
+          timestamp = Time.now.utc.strftime("%Y%m%d%H%M%S")
+          filename = "#{timestamp}_create_spurline_#{name}.sql"
+          path = File.join("db", "migrations", filename)
+
+          FileUtils.mkdir_p(File.dirname(path))
+          File.write(path, send(MIGRATIONS[name]))
+          puts "  create  #{path}"
+        end
+
+        private
+
+        def sessions_migration_sql
+          <<~SQL
+            CREATE TABLE IF NOT EXISTS spurline_sessions (
+              id TEXT PRIMARY KEY,
+              state TEXT NOT NULL,
+              agent_class TEXT,
+              created_at TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT NOW(),
+              updated_at TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT NOW(),
+              data JSONB NOT NULL
+            );
+
+            CREATE INDEX IF NOT EXISTS idx_spurline_sessions_state
+              ON spurline_sessions(state);
+
+            CREATE INDEX IF NOT EXISTS idx_spurline_sessions_agent_class
+              ON spurline_sessions(agent_class);
+          SQL
+        end
+      end
+    end
+  end
+end

data/lib/spurline/cli/generators/project.rb

@@ -0,0 +1,331 @@
+# frozen_string_literal: true
+
+require "fileutils"
+
+module Spurline
+  module CLI
+    module Generators
+      # Generates a new Spurline agent project scaffold.
+      # Usage: spur new my_agent
+      class Project
+        attr_reader :name, :root
+
+        def initialize(name:)
+          @name = name
+          @root = File.expand_path(name)
+        end
+
+        def generate!
+          if Dir.exist?(root)
+            $stderr.puts "Directory '#{name}' already exists."
+            exit 1
+          end
+
+          puts "Creating new Spurline project: #{name}"
+
+          create_directories!
+          create_gemfile!
+          create_rakefile!
+          create_initializer!
+          create_application_agent!
+          create_example_agent!
+          create_spec_helper!
+          create_example_agent_spec!
+          create_permissions!
+          create_gitignore!
+          create_ruby_version!
+          create_env_example!
+          create_readme!
+
+          puts ""
+          puts "Project '#{name}' created successfully!"
+          puts ""
+          puts "Next steps:"
+          puts "  cd #{name}"
+          puts "  bundle install"
+          puts "  bundle exec rspec"
+          puts ""
+        end
+
+        private
+
+        def create_directories!
+          dirs = %w[
+            app/agents
+            app/tools
+            config
+            spec
+            spec/agents
+            spec/tools
+          ]
+          dirs.each { |dir| FileUtils.mkdir_p(File.join(root, dir)) }
+        end
+
+        def create_gemfile!
+          write_file("Gemfile", <<~RUBY)
+            # frozen_string_literal: true
+
+            source "https://rubygems.org"
+
+            gem "spurline-core"
+
+            # Uncomment to add bundled spurs:
+            # gem "spurline-web-search"
+
+            group :development, :test do
+              gem "rspec"
+              # gem "webmock"   # Useful for testing tools that make HTTP calls
+            end
+          RUBY
+        end
+
+        def create_rakefile!
+          write_file("Rakefile", <<~RUBY)
+            # frozen_string_literal: true
+
+            require "rspec/core/rake_task"
+            RSpec::Core::RakeTask.new(:spec)
+            task default: :spec
+          RUBY
+        end
+
+        def create_initializer!
+          write_file("config/spurline.rb", <<~RUBY)
+            # frozen_string_literal: true
+
+            require "spurline"
+
+            Spurline.configure do |config|
+              config.default_model = :claude_sonnet
+              config.session_store = :memory
+              config.permissions_file = "config/permissions.yml"
+
+              # Durable sessions (survives process restart):
+              # config.session_store = :sqlite
+              # config.session_store_path = "tmp/spurline_sessions.db"
+              #
+              # PostgreSQL sessions (for team deployments):
+              # config.session_store = :postgres
+              # config.session_store_postgres_url = "postgresql://localhost/my_app_development"
+            end
+          RUBY
+        end
+
+        def create_application_agent!
+          write_file("app/agents/application_agent.rb", <<~RUBY)
+            # frozen_string_literal: true
+
+            require "spurline"
+
+            # The shared base class for all agents in this project.
+            # Configure defaults here -- individual agents inherit and override.
+            class ApplicationAgent < Spurline::Agent
+              use_model :claude_sonnet
+
+              guardrails do
+                max_tool_calls 10
+                injection_filter :strict
+                pii_filter :off
+              end
+
+              # Uncomment to add a default persona with date injection:
+              # persona(:default) do
+              #   system_prompt "You are a helpful assistant."
+              #   inject_date true
+              # end
+
+              # Uncomment to add lifecycle hooks:
+              # on_start  { |session| puts "Session \#{session.id} started" }
+              # on_finish { |session| puts "Session \#{session.id} finished" }
+              # on_error  { |error| $stderr.puts "Error: \#{error.message}" }
+
+              # Uncomment for memory window customization:
+              # memory :short_term, window: 20
+            end
+          RUBY
+        end
+
+        def create_example_agent!
+          write_file("app/agents/assistant_agent.rb", <<~RUBY)
+            # frozen_string_literal: true
+
+            require_relative "application_agent"
+
+            class AssistantAgent < ApplicationAgent
+              persona(:default) do
+                system_prompt "You are a helpful assistant for the #{classify(name)} project."
+                inject_date true
+              end
+
+              # Uncomment to register tools:
+              # tools :example_tool
+
+              # Uncomment to override guardrails from ApplicationAgent:
+              # guardrails do
+              #   max_tool_calls 5
+              # end
+            end
+          RUBY
+        end
+
+        def create_spec_helper!
+          write_file("spec/spec_helper.rb", <<~RUBY)
+            # frozen_string_literal: true
+
+            require_relative "../config/spurline"
+            require "spurline/testing"
+
+            # Load application files
+            Dir[File.join(__dir__, "..", "app", "**", "*.rb")].sort.each { |f| require f }
+
+            RSpec.configure do |config|
+              config.expect_with :rspec do |expectations|
+                expectations.include_chain_clauses_in_custom_matcher_descriptions = true
+              end
+
+              config.mock_with :rspec do |mocks|
+                mocks.verify_partial_doubles = true
+              end
+
+              config.order = :random
+              Kernel.srand config.seed
+            end
+          RUBY
+        end
+
+        def create_example_agent_spec!
+          write_file("spec/agents/assistant_agent_spec.rb", <<~RUBY)
+            # frozen_string_literal: true
+
+            RSpec.describe AssistantAgent do
+              let(:agent) do
+                described_class.new.tap do |a|
+                  a.use_stub_adapter(responses: [stub_text("Hello!")])
+                end
+              end
+
+              describe "#run" do
+                it "streams a response" do
+                  chunks = []
+                  agent.run("Say hello") { |chunk| chunks << chunk }
+
+                  text = chunks.select(&:text?).map(&:text).join
+                  expect(text).to eq("Hello!")
+                end
+              end
+            end
+          RUBY
+        end
+
+        def create_permissions!
+          write_file("config/permissions.yml", <<~YAML)
+            # Tool permission configuration.
+            # See: https://github.com/dylanwilcox/spurline
+            #
+            # tools:
+            #   dangerous_tool:
+            #     denied: true
+            #   sensitive_tool:
+            #     requires_confirmation: true
+            #     allowed_users:
+            #       - admin
+            tools: {}
+          YAML
+        end
+
+        def create_gitignore!
+          write_file(".gitignore", <<~TEXT)
+            /.bundle/
+            /vendor/bundle
+            /tmp/
+            /log/
+            config/master.key
+            tmp/spurline_sessions.db
+            *.gem
+            .env
+            Gemfile.lock
+          TEXT
+        end
+
+        def create_ruby_version!
+          write_file(".ruby-version", "3.4.5\n")
+        end
+
+        def create_env_example!
+          write_file(".env.example", <<~TEXT)
+            # Spurline environment variables.
+            # Copy this file to .env and fill in your values.
+            # Never commit .env to version control.
+
+            ANTHROPIC_API_KEY=your_key_here
+
+            # Uncomment for encrypted credentials support:
+            # SPURLINE_MASTER_KEY=your_32_byte_hex_key
+          TEXT
+        end
+
+        def create_readme!
+          write_file("README.md", <<~MARKDOWN)
+            # #{classify(name)}
+
+            A [Spurline](https://github.com/dylanwilcox/spurline) agent project.
+
+            ## Setup
+
+            ```bash
+            bundle install
+            cp .env.example .env
+            # Edit .env with your ANTHROPIC_API_KEY
+            ```
+
+            ## Validate
+
+            ```bash
+            bundle exec spur check
+            ```
+
+            ## Run Tests
+
+            ```bash
+            bundle exec rspec
+            ```
+
+            ## Project Structure
+
+            ```
+            app/
+              agents/           # Agent classes (inherit from ApplicationAgent)
+              tools/            # Tool classes (inherit from Spurline::Tools::Base)
+            config/
+              spurline.rb       # Framework configuration
+              permissions.yml   # Tool permission rules
+            spec/               # RSpec test files
+            ```
+
+            ## Generators
+
+            ```bash
+            spur generate agent researcher    # Creates app/agents/researcher_agent.rb
+            spur generate tool web_scraper    # Creates app/tools/web_scraper.rb + spec
+            ```
+          MARKDOWN
+        end
+
+        def write_file(relative_path, content)
+          path = File.join(root, relative_path)
+          FileUtils.mkdir_p(File.dirname(path))
+          File.write(path, content)
+          puts "  create  #{relative_path}"
+        end
+
+        def classify(str)
+          str.to_s
+            .gsub(/[-_]/, " ")
+            .split(" ")
+            .map(&:capitalize)
+            .join
+        end
+      end
+    end
+  end
+end