@dusky-bluehour/agent-service 0.6.6 → 0.6.7

package/scripts/generate-from-common.mjs

@@ -36,6 +36,41 @@ function quoteYamlString(value) {
   return `"${normalized.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
 }
 
+function normalizeCommandBasename(commandId) {
+  const normalized = String(commandId ?? '')
+    .trim()
+    .toLowerCase()
+    .replace(/[^a-z0-9-]+/g, '-')
+    .replace(/^-+|-+$/g, '');
+
+  if (!normalized) {
+    throw new Error(`[commands] command id가 비어 있습니다: ${commandId}`);
+  }
+  return normalized;
+}
+
+function toBulletLines(values) {
+  if (!Array.isArray(values) || values.length === 0) {
+    return ['- (없음)'];
+  }
+  return values.map((value) => `- ${value}`);
+}
+
+function toNumberedLines(values) {
+  if (!Array.isArray(values) || values.length === 0) {
+    return ['1. (없음)'];
+  }
+  return values.map((value, index) => `${index + 1}. ${value}`);
+}
+
+function toBashRule(pattern) {
+  return `Bash(${pattern})`;
+}
+
+function toPathRule(kind, pattern) {
+  return `${kind}(${pattern})`;
+}
+
 function renderCodexOpenAiYaml(skill) {
   const ui = skill.codex_openai ?? {};
   return [
@@ -153,6 +188,339 @@ function renderAntigravityWorkflowDefinition(workflow) {
   return lines.join('\n');
 }
 
+function renderClaudeCommandMarkdown(command) {
+  const requiredInputs = command.input_contract?.required;
+  const optionalInputs = command.input_contract?.optional;
+  const executionSteps = command.execution_contract?.steps;
+  const qualityGates = command.quality_gates;
+  const artifacts = command.output_contract?.artifacts;
+  const nextRoles = command.handoff?.next_roles;
+  const blockers = command.handoff?.blockers;
+
+  return [
+    '---',
+    `description: ${quoteYamlString(`${command.name} (${command.id})`)}`,
+    'argument-hint: "[추가 컨텍스트]"',
+    '---',
+    '',
+    `이 명령은 \`${command.id}\` 계약을 그대로 적용합니다.`,
+    `추가 컨텍스트가 있으면 반영하세요: $ARGUMENTS`,
+    '',
+    '## 목적',
+    '',
+    String(command.purpose ?? ''),
+    '',
+    '## 입력 계약',
+    '',
+    '### 필수 입력',
+    ...toBulletLines(requiredInputs),
+    '',
+    '### 선택 입력',
+    ...toBulletLines(optionalInputs),
+    '',
+    '## 실행 절차',
+    '',
+    ...toNumberedLines(executionSteps),
+    '',
+    '## 품질 게이트',
+    '',
+    ...toBulletLines(qualityGates),
+    '',
+    '## 산출물',
+    '',
+    ...toBulletLines(artifacts),
+    '',
+    '## 핸드오프',
+    '',
+    `- 다음 역할: ${(Array.isArray(nextRoles) && nextRoles.length > 0 ? nextRoles.join(', ') : '(없음)')}`,
+    `- 차단 요인: ${(Array.isArray(blockers) && blockers.length > 0 ? blockers.join(', ') : '(없음)')}`,
+    '',
+    '## 결과 응답 형식',
+    '',
+    '- 실행 요약(무엇을 왜 수행했는지)',
+    '- 입력 검증(충족/누락 항목)',
+    '- 품질 게이트 통과 여부',
+    '- 산출물 및 다음 핸드오프',
+    ''
+  ].join('\n');
+}
+
+function renderAntigravityCommandDefinition(command) {
+  const requiredInputs = command.input_contract?.required;
+  const optionalInputs = command.input_contract?.optional;
+  const executionSteps = command.execution_contract?.steps;
+  const qualityGates = command.quality_gates;
+  const artifacts = command.output_contract?.artifacts;
+  const nextRoles = command.handoff?.next_roles;
+  const blockers = command.handoff?.blockers;
+
+  return [
+    '# generated by scripts/generate-from-common.mjs',
+    '',
+    `# ${command.id} - ${command.name}`,
+    '',
+    `- phase: ${command.phase ?? ''}`,
+    `- owner_role: ${command.owner_role ?? ''}`,
+    '',
+    '## Purpose',
+    '',
+    String(command.purpose ?? ''),
+    '',
+    '## Input Contract',
+    '',
+    '### Required',
+    ...toBulletLines(requiredInputs),
+    '',
+    '### Optional',
+    ...toBulletLines(optionalInputs),
+    '',
+    '## Execution Contract',
+    '',
+    ...toNumberedLines(executionSteps),
+    '',
+    '## Quality Gates',
+    '',
+    ...toBulletLines(qualityGates),
+    '',
+    '## Output Contract',
+    '',
+    ...toBulletLines(artifacts),
+    '',
+    '## Handoff',
+    '',
+    `- next_roles: ${(Array.isArray(nextRoles) && nextRoles.length > 0 ? nextRoles.join(', ') : '(none)')}`,
+    `- blockers: ${(Array.isArray(blockers) && blockers.length > 0 ? blockers.join(', ') : '(none)')}`,
+    ''
+  ].join('\n');
+}
+
+function renderCodexCommandSkillMarkdown(command, skillName) {
+  const requiredInputs = Array.isArray(command.input_contract?.required)
+    ? command.input_contract.required.map((item) => `[필수] ${item}`)
+    : [];
+  const optionalInputs = Array.isArray(command.input_contract?.optional)
+    ? command.input_contract.optional.map((item) => `[선택] ${item}`)
+    : [];
+  const executionSteps = Array.isArray(command.execution_contract?.steps)
+    ? command.execution_contract.steps
+    : [];
+  const qualityGates = Array.isArray(command.quality_gates) ? command.quality_gates : [];
+  const artifacts = Array.isArray(command.output_contract?.artifacts)
+    ? command.output_contract.artifacts
+    : [];
+  const nextRoles = Array.isArray(command.handoff?.next_roles) ? command.handoff.next_roles : [];
+  const blockers = Array.isArray(command.handoff?.blockers) ? command.handoff.blockers : [];
+
+  const checklistLines = toBulletLines([...requiredInputs, ...optionalInputs]);
+  const procedureLines = toNumberedLines([
+    `명령 계약을 확인한다: ${command.id} (${command.name})`,
+    ...executionSteps,
+    '품질 게이트를 검증한다.',
+    '산출물과 핸드오프를 보고한다.'
+  ]);
+  const reportLines = toBulletLines([
+    `실행 명령: ${command.id}`,
+    `입력 검증: 필수 입력 충족 여부 / 누락 항목`,
+    `품질 게이트: ${qualityGates.length > 0 ? qualityGates.join(' | ') : '(없음)'}`,
+    `산출물: ${artifacts.length > 0 ? artifacts.join(', ') : '(없음)'}`,
+    `핸드오프: 다음 역할 ${nextRoles.length > 0 ? nextRoles.join(', ') : '(없음)'}`
+  ]);
+  const stopLines = toBulletLines([
+    '필수 입력이 누락된 경우',
+    '품질 게이트를 충족하지 못한 경우',
+    ...blockers
+  ]);
+  const qualityRuleLines = toBulletLines([
+    '검증되지 않은 추정은 사실과 분리해서 기록한다.',
+    '품질 게이트를 우회하지 않는다.',
+    ...qualityGates
+  ]);
+
+  return [
+    '---',
+    `name: ${skillName}`,
+    `description: ${command.name} 명령 계약을 Codex 스킬 형태로 실행한다.`,
+    '---',
+    '',
+    '# 시작 전 체크리스트',
+    '',
+    ...checklistLines,
+    '',
+    '# 실행 절차',
+    '',
+    ...procedureLines,
+    '',
+    '# 결과 보고 형식',
+    '',
+    ...reportLines,
+    '',
+    '# 중단 조건',
+    '',
+    ...stopLines,
+    '',
+    '# 품질 규칙',
+    '',
+    ...qualityRuleLines,
+    ''
+  ].join('\n');
+}
+
+function renderCodexCommandOpenAiYaml(command) {
+  return [
+    'skill:',
+    `  display_name: ${quoteYamlString(command.name ?? command.id)}`,
+    `  short_description: ${quoteYamlString(`${command.phase ?? ''} · ${command.owner_role ?? ''}`)}`,
+    `  default_prompt: ${quoteYamlString(`${command.id} 명령 계약을 준수해 실행해줘.`)}`,
+    ''
+  ].join('\n');
+}
+
+function buildClaudePermissionsFromSecurityPolicy(securityPolicy, includeLocalOverrides = false) {
+  const shared = securityPolicy.shared_permissions ?? {};
+  const claude = securityPolicy.claude_code ?? {};
+
+  const allow = [];
+  const ask = [];
+  const deny = [];
+
+  if (shared.read_all) {
+    allow.push('Read');
+  }
+  if (shared.edit_all) {
+    allow.push('Edit');
+  }
+
+  for (const pattern of shared.allow_bash ?? []) {
+    allow.push(toBashRule(pattern));
+  }
+  for (const pattern of shared.ask_bash ?? []) {
+    ask.push(toBashRule(pattern));
+  }
+  for (const pattern of shared.deny_bash ?? []) {
+    deny.push(toBashRule(pattern));
+  }
+  for (const pattern of shared.deny_read ?? []) {
+    deny.push(toPathRule('Read', pattern));
+  }
+  for (const pattern of shared.deny_edit ?? []) {
+    deny.push(toPathRule('Edit', pattern));
+  }
+
+  if (includeLocalOverrides) {
+    for (const pattern of claude.local_overrides?.ask_bash ?? []) {
+      ask.push(toBashRule(pattern));
+    }
+  }
+
+  return {
+    defaultMode: claude.default_mode ?? 'acceptEdits',
+    disableBypassPermissionsMode: claude.disable_bypass_permissions_mode ?? 'disable',
+    additionalDirectories: includeLocalOverrides
+      ? (claude.local_overrides?.additional_directories ?? [])
+      : (claude.additional_directories ?? []),
+    allow: [...new Set(allow)],
+    ask: [...new Set(ask)],
+    deny: [...new Set(deny)]
+  };
+}
+
+function renderClaudeProjectSettingsJson(securityPolicy) {
+  return {
+    $schema: 'https://json.schemastore.org/claude-code-settings.json',
+    permissions: buildClaudePermissionsFromSecurityPolicy(securityPolicy, false),
+    enabledPlugins: securityPolicy.claude_code?.enabled_plugins ?? {}
+  };
+}
+
+function renderClaudeLocalSettingsJson(securityPolicy) {
+  const claude = securityPolicy.claude_code ?? {};
+  return {
+    $schema: 'https://json.schemastore.org/claude-code-settings.json',
+    permissions: {
+      additionalDirectories: claude.local_overrides?.additional_directories ?? [],
+      ask: [...new Set((claude.local_overrides?.ask_bash ?? []).map((pattern) => toBashRule(pattern)))]
+    }
+  };
+}
+
+function renderAntigravityEditorPolicyJson(securityPolicy) {
+  const shared = securityPolicy.shared_permissions ?? {};
+  return {
+    schema_version: '1.0.0',
+    policy_id: securityPolicy.policy_id ?? 'strict-dev',
+    description_ko:
+      'Antigravity Editor에서 수동 반영할 수 있는 프로젝트 보안/권한 정책 템플릿',
+    editor: securityPolicy.antigravity?.editor_settings ?? {},
+    command_policy: {
+      allow_shell: shared.allow_bash ?? [],
+      ask_shell: shared.ask_bash ?? [],
+      deny_shell: shared.deny_bash ?? []
+    },
+    path_policy: {
+      deny_read: shared.deny_read ?? [],
+      deny_edit: shared.deny_edit ?? []
+    }
+  };
+}
+
+function renderCodexRuntimePolicyJson(securityPolicy) {
+  const shared = securityPolicy.shared_permissions ?? {};
+  return {
+    schema_version: '1.0.0',
+    policy_id: securityPolicy.policy_id ?? 'strict-dev',
+    description_ko:
+      'Codex 프로젝트 규칙(AGENTS.md)과 함께 사용하는 런타임 권한 정책 템플릿',
+    runtime: securityPolicy.codex?.runtime_policy ?? {},
+    command_policy: {
+      allow_shell: shared.allow_bash ?? [],
+      ask_shell: shared.ask_bash ?? [],
+      deny_shell: shared.deny_bash ?? []
+    },
+    path_policy: {
+      deny_read: shared.deny_read ?? [],
+      deny_edit: shared.deny_edit ?? []
+    }
+  };
+}
+
+function renderCodexPermissionsMarkdown(securityPolicy) {
+  const shared = securityPolicy.shared_permissions ?? {};
+  const runtime = securityPolicy.codex?.runtime_policy ?? {};
+  const allowShell = shared.allow_bash ?? [];
+  const askShell = shared.ask_bash ?? [];
+  const denyShell = shared.deny_bash ?? [];
+
+  return [
+    '# Codex 권한 정책 템플릿',
+    '',
+    '이 문서는 `common/settings/security-policy.json`에서 자동 생성됩니다.',
+    '`AGENTS.md`의 프로젝트 규칙 섹션에 붙여 넣어 팀 기본 정책으로 사용하세요.',
+    '',
+    '## 런타임 정책',
+    '',
+    ...toBulletLines([
+      `sandbox_mode: ${runtime.sandbox_mode ?? 'workspace-write'}`,
+      `network_access: ${runtime.network_access ?? 'restricted'}`,
+      `git_write_actions: ${runtime.git_write_actions ?? 'ask'}`,
+      `destructive_shell: ${runtime.destructive_shell ?? 'deny'}`,
+      `global_package_installs: ${runtime.global_package_installs ?? 'deny'}`
+    ]),
+    '',
+    '## Shell 허용 규칙',
+    '',
+    ...toBulletLines(allowShell.map((rule) => `\`${rule}\``)),
+    '',
+    '## Shell 확인(ask) 규칙',
+    '',
+    ...toBulletLines(askShell.map((rule) => `\`${rule}\``)),
+    '',
+    '## Shell 차단 규칙',
+    '',
+    ...toBulletLines(denyShell.map((rule) => `\`${rule}\``)),
+    ''
+  ].join('\n');
+}
+
 function buildWorkflowCatalogByTool(commonWorkflowCatalog) {
   const toolIds = Array.isArray(commonWorkflowCatalog.tools)
     ? commonWorkflowCatalog.tools
@@ -268,12 +636,11 @@ async function writeOrCheck(filePath, expected, state) {
   state.written += 1;
 }
 
-async function pruneAntigravityWorkflowDefinitions(expectedFileNames, state) {
-  const dir = path.join(rootDir, 'antigravity', 'workflows', 'definitions');
+async function pruneGeneratedFilesBySuffix(dir, suffix, expectedFileNames, state) {
   await fs.mkdir(dir, { recursive: true });
   const entries = await fs.readdir(dir, { withFileTypes: true });
   for (const entry of entries) {
-    if (!entry.isFile() || !entry.name.endsWith('.workflow.yaml')) {
+    if (!entry.isFile() || !entry.name.endsWith(suffix)) {
       continue;
     }
     if (expectedFileNames.has(entry.name)) {
@@ -289,10 +656,34 @@ async function pruneAntigravityWorkflowDefinitions(expectedFileNames, state) {
   }
 }
 
+async function pruneCodexCommandSkills(expectedDirNames, state) {
+  const dir = path.join(rootDir, 'codex', 'skills');
+  await fs.mkdir(dir, { recursive: true });
+  const entries = await fs.readdir(dir, { withFileTypes: true });
+
+  for (const entry of entries) {
+    if (!entry.isDirectory() || !/^cmd-[a-z0-9-]+$/.test(entry.name)) {
+      continue;
+    }
+    if (expectedDirNames.has(entry.name)) {
+      continue;
+    }
+
+    const removePath = path.join(dir, entry.name);
+    if (checkMode) {
+      state.outOfDate.push(path.relative(rootDir, removePath));
+      continue;
+    }
+    await fs.rm(removePath, { recursive: true, force: true });
+    state.deleted += 1;
+  }
+}
+
 async function main() {
   const commands = await readJson('common/commands/command-catalog.json');
   const commonWorkflowCatalog = await readJson('common/workflows/workflow-catalog.json');
   const skillCatalog = await readJson('common/skills/skill-catalog.json');
+  const securityPolicy = await readJson('common/settings/security-policy.json');
   const claudeSubagents = await readJson('common/claude/subagent-catalog.json');
   const claudeTeams = await readJson('common/claude/team-catalog.json');
   const antigravityAgents = await readJson('common/antigravity/agent-catalog.json');
@@ -313,6 +704,95 @@ async function main() {
     await writeOrCheck(commandPath, toPrettyJson(commands), state);
   }
 
+  await writeOrCheck(
+    path.join(rootDir, 'claude-code', 'settings', 'settings.json'),
+    toPrettyJson(renderClaudeProjectSettingsJson(securityPolicy)),
+    state
+  );
+  await writeOrCheck(
+    path.join(rootDir, 'claude-code', 'settings', 'settings.local.json'),
+    toPrettyJson(renderClaudeLocalSettingsJson(securityPolicy)),
+    state
+  );
+  await writeOrCheck(
+    path.join(rootDir, 'antigravity', 'settings', 'editor-policy.json'),
+    toPrettyJson(renderAntigravityEditorPolicyJson(securityPolicy)),
+    state
+  );
+  await writeOrCheck(
+    path.join(rootDir, 'codex', 'settings', 'runtime-policy.json'),
+    toPrettyJson(renderCodexRuntimePolicyJson(securityPolicy)),
+    state
+  );
+  await writeOrCheck(
+    path.join(rootDir, 'codex', 'instructions', 'AGENTS.permissions.generated.md'),
+    renderCodexPermissionsMarkdown(securityPolicy),
+    state
+  );
+  await pruneGeneratedFilesBySuffix(
+    path.join(rootDir, 'claude-code', 'settings'),
+    '.json',
+    new Set(['settings.json', 'settings.local.json']),
+    state
+  );
+  await pruneGeneratedFilesBySuffix(
+    path.join(rootDir, 'antigravity', 'settings'),
+    '.json',
+    new Set(['editor-policy.json']),
+    state
+  );
+  await pruneGeneratedFilesBySuffix(
+    path.join(rootDir, 'codex', 'settings'),
+    '.json',
+    new Set(['runtime-policy.json']),
+    state
+  );
+
+  const commandFileNames = new Set();
+  const codexCommandSkillNames = new Set();
+  for (const command of commands.commands ?? []) {
+    if (!command?.id) {
+      throw new Error('[commands] command id가 비어 있습니다.');
+    }
+    const basename = normalizeCommandBasename(command.id);
+    commandFileNames.add(`${basename}.md`);
+    codexCommandSkillNames.add(basename);
+
+    await writeOrCheck(
+      path.join(rootDir, 'claude-code', 'commands', 'native', `${basename}.md`),
+      renderClaudeCommandMarkdown(command),
+      state
+    );
+    await writeOrCheck(
+      path.join(rootDir, 'antigravity', 'commands', 'definitions', `${basename}.md`),
+      renderAntigravityCommandDefinition(command),
+      state
+    );
+    await writeOrCheck(
+      path.join(rootDir, 'codex', 'skills', basename, 'SKILL.md'),
+      renderCodexCommandSkillMarkdown(command, basename),
+      state
+    );
+    await writeOrCheck(
+      path.join(rootDir, 'codex', 'skills', basename, 'agents', 'openai.yaml'),
+      renderCodexCommandOpenAiYaml(command),
+      state
+    );
+  }
+  await pruneGeneratedFilesBySuffix(
+    path.join(rootDir, 'claude-code', 'commands', 'native'),
+    '.md',
+    commandFileNames,
+    state
+  );
+  await pruneGeneratedFilesBySuffix(
+    path.join(rootDir, 'antigravity', 'commands', 'definitions'),
+    '.md',
+    commandFileNames,
+    state
+  );
+  await pruneCodexCommandSkills(codexCommandSkillNames, state);
+
   for (const toolId of toolIds) {
     const catalog = workflowCatalogByTool?.[toolId];
     if (!catalog) {
@@ -329,7 +809,12 @@ async function main() {
     const definitionPath = path.join(rootDir, 'antigravity', 'workflows', 'definitions', filename);
     await writeOrCheck(definitionPath, renderAntigravityWorkflowDefinition(workflow), state);
   }
-  await pruneAntigravityWorkflowDefinitions(antigravityWorkflowNames, state);
+  await pruneGeneratedFilesBySuffix(
+    path.join(rootDir, 'antigravity', 'workflows', 'definitions'),
+    '.workflow.yaml',
+    antigravityWorkflowNames,
+    state
+  );
 
   for (const skill of skillCatalog.skills ?? []) {
     for (const toolId of toolIds) {