@atolis-hq/wake 0.1.0

package/docker/log-command.sh

@@ -0,0 +1,107 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+label="${WAKE_SANDBOX_LABEL:-sandbox.exec}"
+host_wake_root="${WAKE_SANDBOX_HOST_WAKE_ROOT:-/wake}"
+container_wake_root="${WAKE_SANDBOX_CONTAINER_WAKE_ROOT:-/wake}"
+prompts_root="${WAKE_SANDBOX_PROMPTS_ROOT:-/wake/prompts}"
+container_home="${WAKE_SANDBOX_CONTAINER_HOME:-/home/wake}"
+host_container_home="${WAKE_SANDBOX_HOST_CONTAINER_HOME:-}"
+container_mount="${WAKE_SANDBOX_CONTAINER_MOUNT:-/wake}"
+container_name="${WAKE_SANDBOX_CONTAINER_NAME:-wake-sandbox}"
+working_dir="${WAKE_SANDBOX_CWD:-}"
+codex_bootstrap_home="${container_home}/.codex"
+codex_runtime_home="${container_home}/.codex-runtime"
+
+mirror_stdout() {
+  local line="$1"
+  printf '%s\n' "${line}"
+  if [ -w /proc/1/fd/1 ]; then
+    printf '%s\n' "${line}" > /proc/1/fd/1 || true
+  fi
+}
+
+mirror_stderr() {
+  local line="$1"
+  printf '%s\n' "${line}" >&2
+  if [ -w /proc/1/fd/2 ]; then
+    printf '%s\n' "${line}" > /proc/1/fd/2 || true
+  fi
+}
+
+scrub() {
+  sed -E \
+    -e 's/([A-Za-z0-9_]*(TOKEN|SECRET|PASSWORD|PASS|KEY)[A-Za-z0-9_]*=)[^[:space:]]+/\1[REDACTED]/Ig' \
+    -e 's/(gho|ghp|github_pat)_[A-Za-z0-9_]+/[REDACTED]/g'
+}
+
+emit_check() {
+  local description="$1"
+  shift
+  local output
+  set +e
+  output="$("$@" 2>&1)"
+  local status=$?
+  set -e
+  if [ -n "${output}" ]; then
+    while IFS= read -r line; do
+      [ -n "${line}" ] && mirror_stdout "[${label}] ${description}: ${line}"
+    done < <(printf '%s\n' "${output}" | scrub)
+  else
+    mirror_stdout "[${label}] ${description}: (no output)"
+  fi
+  mirror_stdout "[${label}] ${description}: exit_code=${status}"
+}
+
+prepare_codex_home() {
+  mkdir -p "${codex_runtime_home}"
+
+  if [ -f "${codex_bootstrap_home}/config.toml" ]; then
+    cp "${codex_bootstrap_home}/config.toml" "${codex_runtime_home}/config.toml"
+  fi
+
+  if [ -f "${codex_bootstrap_home}/auth.json" ] && [ ! -f "${codex_runtime_home}/auth.json" ]; then
+    cp "${codex_bootstrap_home}/auth.json" "${codex_runtime_home}/auth.json"
+  fi
+
+  export CODEX_HOME="${codex_runtime_home}"
+}
+
+if [ "${1:-}" != "--" ]; then
+  mirror_stderr "[${label}] expected -- before the wrapped command"
+  exit 64
+fi
+shift
+
+if [ "$#" -eq 0 ]; then
+  mirror_stderr "[${label}] no wrapped command was provided"
+  exit 64
+fi
+
+if [ -n "${working_dir}" ]; then
+  cd "${working_dir}"
+fi
+
+prepare_codex_home
+
+mirror_stdout "[${label}] begin ts=$(date -u +%FT%TZ) cwd=$(pwd) command=$*"
+mirror_stdout "[${label}] paths hostWakeRoot=${host_wake_root} containerWakeRoot=${container_wake_root} promptsRoot=${prompts_root} containerHome=${container_home} hostContainerHome=${host_container_home} containerMount=${container_mount} containerName=${container_name}"
+
+emit_check "wake-config" test -f "${container_mount}/config.json"
+emit_check "prompts-root" test -d "${prompts_root}"
+emit_check "workspaces-root" test -d "${container_mount}/workspaces"
+emit_check "repos-root" test -d "${container_mount}/repos"
+emit_check "gh-auth-status" gh auth status
+emit_check "claude-auth-status" claude auth status
+emit_check "codex-auth-status" codex login status
+emit_check "cursor-auth-status" cursor status
+
+set +e
+"$@" \
+  > >(while IFS= read -r line; do mirror_stdout "[${label}] stdout: ${line}"; done) \
+  2> >(while IFS= read -r line; do mirror_stderr "[${label}] stderr: ${line}"; done)
+status=$?
+set -e
+
+mirror_stdout "[${label}] end exit_code=${status}"
+exit "${status}"

package/docker/setup.sh

@@ -0,0 +1,72 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+echo "Wake sandbox setup starting."
+
+codex_bootstrap_home="/home/wake/.codex"
+codex_runtime_home="/home/wake/.codex-runtime"
+
+prompt_yes_no() {
+  local message="$1"
+  local reply
+  read -r -p "${message} [y/N] " reply
+  case "$reply" in
+    [Yy]|[Yy][Ee][Ss])
+      return 0
+      ;;
+    *)
+      return 1
+      ;;
+  esac
+}
+
+prepare_codex_home() {
+  mkdir -p "${codex_runtime_home}"
+
+  if [ -f "${codex_bootstrap_home}/config.toml" ]; then
+    cp "${codex_bootstrap_home}/config.toml" "${codex_runtime_home}/config.toml"
+  fi
+
+  if [ -f "${codex_bootstrap_home}/auth.json" ] && [ ! -f "${codex_runtime_home}/auth.json" ]; then
+    cp "${codex_bootstrap_home}/auth.json" "${codex_runtime_home}/auth.json"
+  fi
+
+  export CODEX_HOME="${codex_runtime_home}"
+}
+
+prepare_codex_home
+
+if [ ! -f /home/wake/.ssh/id_ed25519 ]; then
+  mkdir -p /home/wake/.ssh
+  chmod 700 /home/wake/.ssh
+  ssh-keygen -t ed25519 -f /home/wake/.ssh/id_ed25519 -N ""
+fi
+
+if prompt_yes_no "Configure GitHub auth?"; then
+  echo "Optional best practice: sign in with a dedicated GitHub identity for Wake-managed agent work,"
+  echo "rather than your main personal account. Make sure it has only the repository access Wake needs."
+  gh auth login
+  gh auth setup-git
+else
+  echo "Skipping GitHub auth setup."
+fi
+
+cat /home/wake/.ssh/id_ed25519.pub
+
+if prompt_yes_no "Configure Claude auth?"; then
+  claude auth login --claudeai
+else
+  echo "Skipping Claude auth setup."
+fi
+
+if prompt_yes_no "Configure Codex auth?"; then
+  codex login
+else
+  echo "Skipping Codex auth setup."
+fi
+
+if prompt_yes_no "Configure Cursor auth?"; then
+  agent login
+else
+  echo "Skipping Cursor auth setup."
+fi

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@atolis-hq/wake",
+  "version": "0.1.0",
+  "description": "Local autonomous agent control plane for software development",
+  "license": "Apache-2.0",
+  "type": "module",
+  "bin": {
+    "wake": "./dist/src/main.js"
+  },
+  "main": "./dist/src/main.js",
+  "exports": "./dist/src/main.js",
+  "files": [
+    "dist/src",
+    "docker",
+    "prompts",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json && node scripts/embed-version.mjs",
+    "prepack": "npm run build",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "start": "tsx src/main.ts start",
+    "tick": "tsx src/main.ts tick",
+    "ui": "tsx src/main.ts ui",
+    "e2e:github-fake": "tsx scripts/e2e-github-fake.ts",
+    "smoke": "tsx src/main.ts smoke",
+    "smoke:claude": "tsx src/main.ts smoke claude",
+    "smoke:codex": "tsx src/main.ts smoke codex",
+    "smoke:cursor": "tsx src/main.ts smoke cursor",
+    "verify": "npm run build && npm test"
+  },
+  "dependencies": {
+    "@octokit/rest": "^22.0.0",
+    "handlebars": "^4.7.9",
+    "ulid": "^3.0.2",
+    "zod": "^4.1.5"
+  },
+  "devDependencies": {
+    "@types/node": "^24.3.0",
+    "tsx": "^4.20.5",
+    "typescript": "^5.9.2",
+    "vitest": "^3.2.4"
+  }
+}

package/prompts/implement.md

@@ -0,0 +1,49 @@
+---
+stage: implement
+permissionMode: acceptEdits
+allowedTools: Bash(git *), Bash(gh *), Bash(npm *), Bash(curl *), Bash(jq *), Edit, Write, Read, Glob, Grep, WebSearch, WebFetch
+extraArgs:
+maxTurns: 150
+skipApproval: false
+---
+{{#if isStart}}
+You are Wake, in the IMPLEMENT stage for {{workItemKey}}.
+
+Your current working directory is a git checkout of {{repo}}, already on
+branch {{branch}}, created from the latest main.
+
+Completion requirements:
+- Make the code changes needed to resolve the issue directly in this working
+  directory.
+- Stage and commit all changes with `git add -A` and a clear, descriptive
+  commit message.
+- Push the branch with `git push -u origin {{branch}}`.
+- Open a pull request against main with `gh pr create --base main --head
+  {{branch}} --title "<summary>" --body "Closes #{{issueNumber}}
+
+  <!-- wake:work-item {{workItemKey}} -->"`. Include the
+  `<!-- wake:work-item {{workItemKey}} -->` marker verbatim in the PR body,
+  exactly as written here.
+- Do not merge the pull request yourself; a human reviews and merges it.
+- Include the pull request URL in your prose response.
+- If you cannot safely complete the change, leave the workspace as-is and end
+  with BLOCKED or FAILED instead of guessing.
+
+Wake will provide the issue data and comments below in a delimited untrusted
+data block.
+{{else}}
+Resuming the IMPLEMENT stage session for {{workItemKey}}.
+
+Your current working directory is still the git checkout of {{repo}} on
+branch {{branch}}. Continue from where you left off rather than starting
+over, unless the new comments below change the approach.
+
+{{feedbackCommandNote}}
+New comments since your last turn (excludes Wake/bot comments):
+Wake will provide them below in a delimited untrusted data block.
+
+Reminder of the completion requirements: commit, push {{branch}}, open a PR
+with `gh pr create` closing #{{issueNumber}}, and never merge it yourself. The
+PR body must include the `<!-- wake:work-item {{workItemKey}} -->` marker
+verbatim.
+{{/if}}

package/prompts/refine.md

@@ -0,0 +1,44 @@
+---
+stage: refine
+permissionMode: default
+allowedTools: Read, Glob, Grep, Bash(git fetch), Bash(git status), WebSearch, WebFetch
+extraArgs:
+maxTurns: 40
+skipApproval: false
+---
+{{#if isStart}}
+You are Wake, in the REFINE stage for {{workItemKey}}.
+
+This is a planning-only stage.
+{{toolCapabilityNote}}
+
+The canonical clone has already been fetched and reset to the latest `origin/main`
+by Wake before this session started - you do not need to run `git fetch`. You may
+run `git status` to inspect repository state.
+
+Your job here is only to:
+- Read the repository (via your available tools) and decide whether the
+  issue is well-specified enough to implement as-is.
+- If well-specified, write a short implementation plan as plain text in your
+  response (do not try to save it to a file).
+- If underspecified, ask the smallest set of clarifying questions needed.
+
+Wake will provide the issue data and comments below in a delimited untrusted
+data block.
+{{else}}
+Resuming the REFINE stage session for {{workItemKey}}.
+
+{{toolCapabilityNote}}
+
+You may run `git fetch origin` to ensure the canonical clone is up-to-date,
+and `git status` to inspect repository state. If any git operation results in
+merge conflicts, cancel the action and return BLOCKED rather than attempting
+to resolve conflicts.
+
+{{feedbackCommandNote}}
+New comments since your last turn (excludes Wake/bot comments):
+Wake will provide them below in a delimited untrusted data block.
+
+Re-evaluate whether the issue is now well-specified enough to implement,
+incorporating the new context above.
+{{/if}}