@cyanautomation/kaseki-agent 1.4.1

package/scripts/kaseki-setup.sh

@@ -0,0 +1,265 @@
+#!/usr/bin/env bash
+#
+# kaseki-setup.sh — Interactive setup for kaseki-agent on a local host
+#
+# This script:
+# 1. Validates Docker installation (or guides to install)
+# 2. Prompts for OpenRouter API key securely
+# 3. Stores the key in ~/.kaseki/secrets/openrouter_api_key
+# 4. Runs final health checks
+#
+# Usage: ./scripts/kaseki-setup.sh
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
+SECRETS_DIR="$HOME/.kaseki/secrets"
+API_KEY_FILE="$SECRETS_DIR/openrouter_api_key"
+
+# Colors for output
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+NC='\033[0m'  # No Color
+
+# Helper functions
+print_header() {
+  echo -e "${BLUE}=== $1 ===${NC}"
+}
+
+print_success() {
+  echo -e "${GREEN}✓ $1${NC}"
+}
+
+print_error() {
+  echo -e "${RED}✗ $1${NC}" >&2
+}
+
+print_warning() {
+  echo -e "${YELLOW}⚠ $1${NC}"
+}
+
+# Check Docker installation
+check_docker() {
+  print_header "Checking Docker Installation"
+  
+  if command -v docker >/dev/null 2>&1; then
+    print_success "Docker is installed"
+    
+    # Check if daemon is running
+    if docker ps >/dev/null 2>&1; then
+      print_success "Docker daemon is running"
+      return 0
+    else
+      print_error "Docker daemon is not running"
+      print_warning "Start Docker and try again"
+      print_warning "  Linux: sudo systemctl start docker"
+      print_warning "  macOS: open -a Docker"
+      return 1
+    fi
+  else
+    print_error "Docker is not installed"
+    
+    # Suggest installation
+    if [[ "$OSTYPE" == "linux-gnu"* ]]; then
+      print_warning "Install Docker with one of these commands:"
+      print_warning ""
+      print_warning "Debian/Ubuntu:"
+      print_warning "  sudo apt update && sudo apt install -y docker.io"
+      print_warning ""
+      print_warning "Fedora/RHEL/CentOS:"
+      print_warning "  sudo dnf install -y docker"
+      print_warning ""
+      print_warning "Arch:"
+      print_warning "  sudo pacman -S --needed docker"
+    elif [[ "$OSTYPE" == "darwin"* ]]; then
+      print_warning "Install Docker Desktop for macOS:"
+      print_warning "  https://docs.docker.com/desktop/install/mac-install/"
+      print_warning "Or via Homebrew:"
+      print_warning "  brew install --cask docker"
+    fi
+    
+    return 1
+  fi
+}
+
+# Set up OpenRouter API key
+setup_api_key() {
+  print_header "OpenRouter API Key Setup"
+  
+  # Create secrets directory
+  mkdir -p "$SECRETS_DIR"
+  chmod 700 "$SECRETS_DIR"
+  
+  # Check if key already exists
+  if [ -f "$API_KEY_FILE" ] && [ -s "$API_KEY_FILE" ]; then
+    print_warning "API key file already exists at $API_KEY_FILE"
+    read -p "Do you want to replace it? (y/n) " -n 1 -r
+    echo
+    if [[ ! $REPLY =~ ^[Yy]$ ]]; then
+      print_success "Using existing API key"
+      return 0
+    fi
+  fi
+  
+  # Prompt for API key securely
+  echo "You can obtain an API key from: https://openrouter.ai/keys"
+  echo ""
+  read -rsp "Enter your OpenRouter API key (sk-or-v1-...): " API_KEY
+  echo
+  
+  # Validate key format
+  if [[ ! "$API_KEY" =~ ^sk-or ]]; then
+    print_error "Invalid API key format. Must start with 'sk-or'"
+    return 1
+  fi
+  
+  # Store key securely
+  echo "$API_KEY" > "$API_KEY_FILE"
+  chmod 600 "$API_KEY_FILE"
+  print_success "API key stored in $API_KEY_FILE (mode 600)"
+}
+
+# Run preflight checks
+run_preflight_checks() {
+  print_header "Running Preflight Checks"
+  
+  # Use enhanced preflight script if available
+  if [ -x "$SCRIPT_DIR/kaseki-preflight.sh" ]; then
+    if "$SCRIPT_DIR/kaseki-preflight.sh" run; then
+      print_success "All preflight checks passed"
+      return 0
+    else
+      print_error "Some preflight checks failed"
+      return 1
+    fi
+  else
+    print_warning "kaseki-preflight.sh not found, skipping enhanced checks"
+    return 0
+  fi
+}
+
+# Run health check
+run_health_check() {
+  print_header "Running Health Check"
+  
+  cd "$PROJECT_ROOT"
+  
+  if ./run-kaseki.sh --doctor 2>&1 | tail -20; then
+    print_success "Health check passed"
+    return 0
+  else
+    print_error "Health check failed"
+    return 1
+  fi
+}
+
+# Optional: Add to shell profile
+offer_shell_profile_update() {
+  print_header "Shell Profile Configuration (Optional)"
+  
+  echo "Would you like to add the API key path to your shell profile?"
+  echo "This makes running kaseki-agent easier (no need to set OPENROUTER_API_KEY_FILE)."
+  echo ""
+  
+  read -p "Add to shell profile? (y/n) " -n 1 -r
+  echo
+  
+  if [[ ! $REPLY =~ ^[Yy]$ ]]; then
+    return 0
+  fi
+  
+  # Detect shell
+  if [ -f "$HOME/.bashrc" ]; then
+    PROFILE_FILE="$HOME/.bashrc"
+  elif [ -f "$HOME/.zshrc" ]; then
+    PROFILE_FILE="$HOME/.zshrc"
+  else
+    print_warning "Could not detect shell profile. Skipping."
+    return 0
+  fi
+  
+  EXPORT_LINE="export OPENROUTER_API_KEY_FILE=$API_KEY_FILE"
+  
+  # Check if already in profile
+  if grep -q "OPENROUTER_API_KEY_FILE" "$PROFILE_FILE"; then
+    print_warning "OPENROUTER_API_KEY_FILE already in $PROFILE_FILE"
+    return 0
+  fi
+  
+  # Add to profile
+  {
+    echo ""
+    echo "# Kaseki Agent API key (added by kaseki-setup.sh)"
+    echo "$EXPORT_LINE"
+  } >> "$PROFILE_FILE"
+  
+  print_success "Added to $PROFILE_FILE"
+  echo ""
+  echo "Reload your shell with:"
+  echo "  source $PROFILE_FILE"
+  echo "or restart your terminal"
+}
+
+# Main workflow
+main() {
+  echo ""
+  echo "╔════════════════════════════════════════════════════════════╗"
+  echo "║         Kaseki Agent - Interactive Setup Wizard             ║"
+  echo "╚════════════════════════════════════════════════════════════╝"
+  echo ""
+  
+  # Step 1: Check Docker
+  if ! check_docker; then
+    print_error "Setup cannot continue without Docker. Please install Docker first."
+    exit 1
+  fi
+  echo ""
+  
+  # Step 2: Set up API key
+  if ! setup_api_key; then
+    print_error "Failed to set up API key."
+    exit 1
+  fi
+  echo ""
+  
+  # Step 3: Run preflight checks
+  if ! run_preflight_checks; then
+    print_warning "Some checks failed. Installation may have issues."
+  fi
+  echo ""
+  
+  # Step 4: Run health check
+  if ! run_health_check; then
+    print_warning "Health check failed. Please review the output above."
+  fi
+  echo ""
+  
+  # Step 5: Offer shell profile update
+  offer_shell_profile_update
+  echo ""
+  
+  # Success message
+  echo "╔════════════════════════════════════════════════════════════╗"
+  echo -e "${GREEN}║                  Setup Complete! ✓                           ║${NC}"
+  echo "╚════════════════════════════════════════════════════════════╝"
+  echo ""
+  echo "Next steps:"
+  echo "  1. Reload your shell (or restart terminal):"
+  echo "     source $HOME/.bashrc  # or .zshrc"
+  echo ""
+  echo "  2. Run your first task:"
+  echo "     cd $PROJECT_ROOT"
+  echo "     ./run-kaseki.sh https://github.com/your-org/your-repo main"
+  echo ""
+  echo "  3. Learn more:"
+  echo "     - Single host: docs/SETUP_GUIDE.md"
+  echo "     - Multi-host:  scripts/templates/MULTI_HOST_DISTRIBUTED.md"
+  echo "     - REST API:    scripts/templates/REST_API_SERVICE.md"
+  echo ""
+}
+
+# Run main
+main "$@"

package/scripts/pi-setup-remote.sh

@@ -0,0 +1,213 @@
+#!/usr/bin/env bash
+#
+# pi-setup-remote.sh — Remote setup for kaseki-agent via SSH
+#
+# This script bootstraps a remote Pi or host for kaseki-agent execution.
+# It:
+# 1. Validates SSH connectivity
+# 2. Creates secrets directory on remote host
+# 3. Securely transfers OpenRouter API key
+# 4. Runs kaseki bootstrap (installs/deploys kaseki-agent)
+# 5. Validates readiness with health check
+#
+# Usage:
+#   ./scripts/pi-setup-remote.sh pi@192.168.88.201 sk-or-v1-xxx
+#   ./scripts/pi-setup-remote.sh pi@192.168.88.201 ~/my-openrouter-key.txt
+
+set -euo pipefail
+
+# Colors for output
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+NC='\033[0m'
+
+# Helper functions
+print_header() {
+  echo -e "${BLUE}=== $1 ===${NC}"
+}
+
+print_success() {
+  echo -e "${GREEN}✓ $1${NC}"
+}
+
+print_error() {
+  echo -e "${RED}✗ $1${NC}" >&2
+}
+
+print_warning() {
+  echo -e "${YELLOW}⚠ $1${NC}"
+}
+
+# Validate arguments
+if [ $# -lt 2 ]; then
+  echo "Usage: $0 <remote-host> <api-key-or-file>"
+  echo ""
+  echo "Examples:"
+  echo "  $0 pi@192.168.88.201 sk-or-v1-your-key"
+  echo "  $0 pi@192.168.88.201 ~/my-openrouter-key.txt"
+  echo ""
+  exit 1
+fi
+
+REMOTE_HOST="$1"
+API_KEY_SOURCE="$2"
+REMOTE_SECRETS_DIR="$HOME/.kaseki/secrets"
+REMOTE_API_KEY_FILE="$REMOTE_SECRETS_DIR/openrouter_api_key"
+REMOTE_KASEKI_TEMPLATE="/agents/kaseki-template"
+REMOTE_KASEKI_INSTALL_SCRIPT="$REMOTE_KASEKI_TEMPLATE/scripts/kaseki-install.sh"
+
+# Determine if API_KEY_SOURCE is a file or inline key
+if [ -f "$API_KEY_SOURCE" ]; then
+  # It's a file, read it
+  if [ ! -r "$API_KEY_SOURCE" ]; then
+    print_error "Cannot read API key file: $API_KEY_SOURCE"
+    exit 1
+  fi
+  API_KEY=$(<"$API_KEY_SOURCE")
+elif [[ "$API_KEY_SOURCE" =~ ^sk-or ]]; then
+  # It's an inline key
+  API_KEY="$API_KEY_SOURCE"
+else
+  print_error "Invalid API key source. Must be either:"
+  print_error "  - A file path"
+  print_error "  - An inline key starting with 'sk-or'"
+  exit 1
+fi
+
+# Validate API key format
+if [[ ! "$API_KEY" =~ ^sk-or ]]; then
+  print_error "Invalid API key format. Must start with 'sk-or'"
+  exit 1
+fi
+
+main() {
+  echo ""
+  echo "╔════════════════════════════════════════════════════════════╗"
+  echo "║       Kaseki Agent - Remote Setup via SSH                   ║"
+  echo "╚════════════════════════════════════════════════════════════╝"
+  echo ""
+  
+  print_header "Setup Configuration"
+  echo "Remote host:     $REMOTE_HOST"
+  echo "Secrets dir:     $REMOTE_SECRETS_DIR"
+  echo "API key file:    $REMOTE_API_KEY_FILE"
+  echo "Kaseki template: $REMOTE_KASEKI_TEMPLATE"
+  echo ""
+  
+  # Step 1: Test SSH connectivity
+  print_header "SSH Connectivity Check"
+  if ssh -o ConnectTimeout=5 "$REMOTE_HOST" "echo 'SSH OK'" >/dev/null 2>&1; then
+    print_success "SSH connectivity to $REMOTE_HOST"
+  else
+    print_error "Cannot connect to $REMOTE_HOST via SSH"
+    print_warning "Make sure:"
+    print_warning "  1. Host is reachable"
+    print_warning "  2. SSH keys are configured (or use -i flag)"
+    print_warning "  3. You have permission to connect"
+    exit 1
+  fi
+  echo ""
+  
+  # Step 2: Create secrets directory
+  print_header "Creating Secrets Directory on Remote Host"
+  # shellcheck disable=SC2029
+  if ssh "$REMOTE_HOST" "
+    mkdir -p '$REMOTE_SECRETS_DIR'
+    chmod 700 '$REMOTE_SECRETS_DIR'
+    [ -d '$REMOTE_SECRETS_DIR' ] && echo 'Secrets directory created'
+  " >/dev/null 2>&1; then
+    print_success "Secrets directory created/verified"
+  else
+    print_error "Failed to create secrets directory on remote host"
+    exit 1
+  fi
+  echo ""
+  
+  # Step 3: Transfer API key securely via SSH
+  print_header "Transferring OpenRouter API Key"
+  echo "API key:"
+  echo "  Source: $([ -f "$API_KEY_SOURCE" ] && echo "$API_KEY_SOURCE" || echo 'inline')"
+  echo "  Destination: $REMOTE_HOST:$REMOTE_API_KEY_FILE"
+  echo ""
+  
+  # Use stdin to pipe key to remote host (avoids exposing in process list)
+  # shellcheck disable=SC2029
+  if echo "$API_KEY" | ssh "$REMOTE_HOST" "
+    cat > '$REMOTE_API_KEY_FILE'
+    chmod 600 '$REMOTE_API_KEY_FILE'
+    [ -f '$REMOTE_API_KEY_FILE' ] && echo 'API key transferred'
+  " >/dev/null 2>&1; then
+    print_success "API key transferred securely"
+  else
+    print_error "Failed to transfer API key"
+    exit 1
+  fi
+  echo ""
+  
+  # Step 4: Bootstrap kaseki-agent on remote host
+  print_header "Bootstrapping Kaseki Agent"
+  echo "This may take a few minutes the first time (cloning repo, pulling image)..."
+  echo ""
+  
+  # Bootstrap via remote kaseki-install.sh if it exists, else via curl
+  # shellcheck disable=SC2029
+  BOOTSTRAP_CMD='
+    if [ -f '"$REMOTE_KASEKI_INSTALL_SCRIPT"' ]; then
+      KASEKI_CONTROLLER_MODE=1 KASEKI_REPLACE_STALE=1 '"$REMOTE_KASEKI_INSTALL_SCRIPT"'
+    else
+      echo "Kaseki template not found. Installing via curl..." >&2
+      curl -fsSL https://raw.githubusercontent.com/CyanAutomation/kaseki-agent/main/scripts/kaseki-install.sh | \
+        KASEKI_CONTROLLER_MODE=1 KASEKI_REPLACE_STALE=1 sh
+    fi
+  '
+  
+  # shellcheck disable=SC2029
+  if ssh "$REMOTE_HOST" "${BOOTSTRAP_CMD}" 2>&1 | tail -20; then
+    print_success "Bootstrap completed"
+  else
+    print_error "Bootstrap failed. Check the output above."
+    exit 1
+  fi
+  echo ""
+  
+  # Step 5: Verify readiness with health check
+  print_header "Verifying Readiness (Running --doctor)"
+  # shellcheck disable=SC2029
+  HEALTH_CHECK_CMD="
+    export OPENROUTER_API_KEY_FILE=$REMOTE_API_KEY_FILE
+    $REMOTE_KASEKI_TEMPLATE/run-kaseki.sh --doctor
+  "
+  
+  # shellcheck disable=SC2029
+  if ssh "$REMOTE_HOST" "${HEALTH_CHECK_CMD}" 2>&1 | tail -15; then
+    print_success "Health check passed"
+  else
+    print_warning "Health check reported issues. Review the output above."
+  fi
+  echo ""
+  
+  # Success message
+  echo "╔════════════════════════════════════════════════════════════╗"
+  echo -e "${GREEN}║            Setup Complete for $REMOTE_HOST! ✓           ║${NC}"
+  echo "╚════════════════════════════════════════════════════════════╝"
+  echo ""
+  echo "Next steps:"
+  echo "  1. Test a remote run:"
+  echo "     ssh $REMOTE_HOST '"
+  echo "       OPENROUTER_API_KEY_FILE=$REMOTE_API_KEY_FILE \\"
+  echo "       $REMOTE_KASEKI_TEMPLATE/run-kaseki.sh \\"
+  echo "       https://github.com/your-org/your-repo main"
+  echo "     '"
+  echo ""
+  echo "  2. Retrieve results:"
+  echo "     scp -r $REMOTE_HOST:/agents/kaseki-results/kaseki-1 ~/results/"
+  echo ""
+  echo "  3. For multi-host setup, repeat for other hosts:"
+  echo "     $0 pi@192.168.88.202 \$(cat ~/.kaseki/secrets/openrouter_api_key)"
+  echo ""
+}
+
+# Run main
+main "$@"

package/scripts/setup-github-labels.sh

@@ -0,0 +1,42 @@
+#!/bin/bash
+# Configure GitHub labels for kaseki-agent
+# This script uses GitHub CLI (gh) to create standard labels
+
+# Requires: gh CLI with authentication
+# Install: https://cli.github.com/
+# Login: gh auth login
+
+set -e
+
+REPO="CyanAutomation/kaseki-agent"
+
+echo "🏷️  Creating GitHub labels for $REPO..."
+
+# Define labels: name, color, description
+declare -A labels=(
+  ["bug"]="d73a49|Something is broken"
+  ["feature"]="0075ca|New capability or enhancement"
+  ["security"]="ae2a23|Security vulnerability or hardening"
+  ["documentation"]="0e8a16|Documentation, guides, or comments"
+  ["infrastructure"]="8f1a9a|Docker, CI/CD, operations, or deployment"
+  ["good first issue"]="7057ff|Good for newcomers or new contributors"
+  ["help wanted"]="fbca04|Need community input or assistance"
+  ["stale"]="cccccc|Inactive or abandoned issue"
+  ["testing"]="e99695|Tests, test coverage, or test improvements"
+  ["performance"]="fbcf3f|Performance optimization or benchmarking"
+  ["dependencies"]="0366d6|Dependency updates or version management"
+)
+
+for label in "${!labels[@]}"; do
+  IFS='|' read -r color description <<< "${labels[$label]}"
+  echo "  Creating label: $label (color: $color)"
+  gh label create "$label" \
+    --repo "$REPO" \
+    --color "$color" \
+    --description "$description" \
+    --force 2>/dev/null || true
+done
+
+echo "✅ Labels created successfully!"
+echo ""
+echo "Verify labels at: https://github.com/$REPO/labels"

package/scripts/suggest-allowlist.sh

@@ -0,0 +1,68 @@
+#!/bin/bash
+# suggest-allowlist.sh - Suggest allowlist patterns based on a completed kaseki run
+# Usage: ./scripts/suggest-allowlist.sh <results-dir>
+# Example: ./scripts/suggest-allowlist.sh /agents/kaseki-results/kaseki-1
+
+set -e
+
+RESULTS_DIR="${1:-.}"
+
+if [ ! -f "$RESULTS_DIR/changed-files.txt" ]; then
+  echo "❌ changed-files.txt not found in $RESULTS_DIR" >&2
+  exit 1
+fi
+
+# Count files by directory pattern
+declare -A dir_counts
+
+while IFS= read -r file || [ -n "$file" ]; do
+  [ -z "$file" ] && continue
+  
+  # Extract directory pattern (e.g., src/lib -> src/lib, src -> src)
+  dir=$(dirname "$file")
+  dir=${dir#./}  # Remove leading ./
+  
+  # Increment counter
+  dir_counts["$dir"]=$((${dir_counts["$dir"]:-0} + 1))
+  
+  # Also track top-level directory
+  top_dir=$(echo "$dir" | cut -d'/' -f1)
+  dir_counts["$top_dir/**"]=$((${dir_counts["$top_dir/**"]:-0} + 1))
+done < "$RESULTS_DIR/changed-files.txt"
+
+# Sort by count (descending) and print suggestions
+{
+  printf '# Suggested allowlist based on: %s\n\n' "$(basename "$RESULTS_DIR")"
+  printf '## Option 1: Specific directories (most restrictive)\n'
+  printf 'Use this to be more specific about which directories are allowed:\n\n'
+  printf '```bash\nKASEKI_CHANGED_FILES_ALLOWLIST="\n'
+  
+  for dir in "${!dir_counts[@]}"; do
+    printf '  %s\n' "$dir"
+  done | sort | head -10
+  
+  printf '"\n```\n\n'
+  
+  printf '## Option 2: Top-level directories (less restrictive)\n'
+  printf 'Use this to allow entire directory trees:\n\n'
+  printf '```bash\nKASEKI_CHANGED_FILES_ALLOWLIST="\n'
+  
+  for dir in "${!dir_counts[@]}"; do
+    if [[ "$dir" == *"/**" ]]; then
+      printf '  %s\n' "$dir"
+    fi
+  done | sort | uniq
+  
+  printf '"\n```\n\n'
+  
+  printf '## Statistics\n'
+  printf '- Total files changed: %s\n' "$(wc -l < "$RESULTS_DIR/changed-files.txt")"
+  printf '- Unique directories: %s\n' "${#dir_counts[@]}"
+  printf '\n## All changed files\n\n'
+  printf '```\n'
+  sort "$RESULTS_DIR/changed-files.txt"
+  printf '```\n'
+} > "$RESULTS_DIR/allowlist-suggestions.md"
+
+echo "✅ Suggestions written to: $RESULTS_DIR/allowlist-suggestions.md"
+cat "$RESULTS_DIR/allowlist-suggestions.md"