@ludecker/aaac 1.1.6 → 1.2.0

package/templates/cursor/aaac/scripts/remediation/record-fallow-fp.mjs

@@ -0,0 +1,107 @@
+#!/usr/bin/env node
+/**
+ * Record swarm/check-risk false-positive or protected findings into campaign SSOT.
+ *
+ * Usage:
+ *   node record-fallow-fp.mjs --campaign-id <id> --path <file> \
+ *     --classification false_positive|review|true_positive \
+ *     [--export <name>] [--reason <text>] [--source check-risk] [--iteration <n>]
+ *
+ * Batch:
+ *   node record-fallow-fp.mjs --campaign-id <id> --from-json <entries.json>
+ */
+import fs from "fs";
+import path from "path";
+import { REPO_ROOT, isoNow, readJson, writeJson } from "../run-engine/lib.mjs";
+
+const CAMPAIGNS_ROOT = path.join(REPO_ROOT, ".cursor/aaac/state/campaigns");
+
+function parseArgs(argv) {
+  const out = {
+    campaignId: null,
+    filePath: null,
+    exportName: null,
+    classification: null,
+    reason: "",
+    source: "check-risk",
+    iteration: null,
+    fromJson: null,
+  };
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === "--campaign-id") out.campaignId = argv[++i];
+    else if (a === "--path") out.filePath = argv[++i];
+    else if (a === "--export") out.exportName = argv[++i];
+    else if (a === "--classification") out.classification = argv[++i];
+    else if (a === "--reason") out.reason = argv[++i];
+    else if (a === "--source") out.source = argv[++i];
+    else if (a === "--iteration") out.iteration = Number(argv[++i]);
+    else if (a === "--from-json") out.fromJson = argv[++i];
+  }
+  return out;
+}
+
+function normalizePath(p) {
+  return p.replace(/^frontend\//, "").replace(/^\//, "");
+}
+
+function entryId(filePath, exportName) {
+  const p = normalizePath(filePath);
+  return exportName ? `path:${p}:export:${exportName}` : `path:${p}`;
+}
+
+const args = parseArgs(process.argv.slice(2));
+if (!args.campaignId) {
+  console.error("record-fallow-fp: --campaign-id required");
+  process.exit(2);
+}
+
+const campaignDir = path.join(CAMPAIGNS_ROOT, args.campaignId);
+const registryPath = path.join(campaignDir, "fallow-false-positives.json");
+const registry = readJson(registryPath, { version: 1, entries: [] });
+
+let newEntries = [];
+if (args.fromJson) {
+  const batch = readJson(args.fromJson, { entries: [] });
+  newEntries = batch.entries ?? batch;
+} else if (args.filePath && args.classification) {
+  newEntries = [
+    {
+      path: normalizePath(args.filePath),
+      export_name: args.exportName ?? null,
+      classification: args.classification,
+      reason: args.reason || args.source,
+      source: args.source,
+      iteration: args.iteration,
+    },
+  ];
+} else {
+  console.error("record-fallow-fp: --path + --classification or --from-json required");
+  process.exit(2);
+}
+
+for (const e of newEntries) {
+  const id = e.id ?? entryId(e.path, e.export_name);
+  const record = {
+    id,
+    path: normalizePath(e.path),
+    export_name: e.export_name ?? null,
+    classification: e.classification ?? "false_positive",
+    reason: e.reason ?? "manual",
+    source: e.source ?? args.source,
+    iteration: e.iteration ?? args.iteration,
+    recorded_at: isoNow(),
+  };
+  registry.entries = (registry.entries ?? []).filter((x) => x.id !== id);
+  registry.entries.push(record);
+}
+
+registry.updated_at = isoNow();
+writeJson(registryPath, registry);
+
+fs.appendFileSync(
+  path.join(campaignDir, "journal.md"),
+  `\n- **Fallow FP registry** +${newEntries.length} entries (total ${registry.entries.length})\n`,
+);
+
+console.log(JSON.stringify({ ok: true, added: newEntries.length, total: registry.entries.length }));

package/templates/cursor/aaac/scripts/remediation/record-iteration-step.mjs

@@ -0,0 +1,56 @@
+#!/usr/bin/env node
+/**
+ * Append a structured step record to campaign journal and optionally advance iteration.
+ *
+ * Usage:
+ *   node record-iteration-step.mjs --campaign-id <id> --step <name> --detail "<text>" [--status pass|fail]
+ */
+import fs from "fs";
+import path from "path";
+import { REPO_ROOT, isoNow, readJson, writeJson } from "../run-engine/lib.mjs";
+
+const CAMPAIGNS_ROOT = path.join(REPO_ROOT, ".cursor/aaac/state/campaigns");
+
+function parseArgs(argv) {
+  const out = { campaignId: null, step: "step", detail: "", status: "info", iteration: null };
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === "--campaign-id") out.campaignId = argv[++i];
+    else if (a === "--step") out.step = argv[++i];
+    else if (a === "--detail") out.detail = argv[++i];
+    else if (a === "--status") out.status = argv[++i];
+    else if (a === "--iteration") out.iteration = Number(argv[++i]);
+  }
+  return out;
+}
+
+const args = parseArgs(process.argv.slice(2));
+if (!args.campaignId) {
+  console.error("record-iteration-step: --campaign-id required");
+  process.exit(2);
+}
+
+const dir = path.join(CAMPAIGNS_ROOT, args.campaignId);
+const stepsPath = path.join(dir, "steps.jsonl");
+const line = JSON.stringify({
+  at: isoNow(),
+  step: args.step,
+  status: args.status,
+  detail: args.detail,
+  iteration: args.iteration,
+});
+fs.appendFileSync(stepsPath, `${line}\n`);
+
+const journal = `\n- \`${args.step}\` (${args.status}) — ${args.detail}\n`;
+fs.appendFileSync(path.join(dir, "journal.md"), journal);
+
+if (args.iteration !== null) {
+  const campaign = readJson(path.join(dir, "campaign.json"));
+  if (campaign) {
+    campaign.iteration = args.iteration;
+    campaign.updated_at = isoNow();
+    writeJson(path.join(dir, "campaign.json"), campaign);
+  }
+}
+
+console.log(JSON.stringify({ ok: true }));

package/templates/cursor/aaac/scripts/remediation/remediation-cli.mjs

@@ -0,0 +1,157 @@
+#!/usr/bin/env node
+/**
+ * Remediation CLI — foreground watch with readable progress for Cursor terminal.
+ *
+ * Usage:
+ *   node remediation-cli.mjs watch --run-id <id> --campaign-id <id>
+ *   node remediation-cli.mjs status --campaign-id <id> [--run-id <id>]
+ *   node remediation-cli.mjs cursor --run-id <id> --campaign-id <id>
+ */
+import { spawnSync } from "child_process";
+import fs from "fs";
+import path from "path";
+import { REPO_ROOT, readJson } from "../run-engine/lib.mjs";
+import { campaignDir } from "./lib/runner-state.mjs";
+import {
+  buildProgressSnapshot,
+  formatProgressLine,
+  writeProgressArtifact,
+} from "./lib/remediation-progress.mjs";
+import { runRemediationWatchLoop } from "./lib/remediation-watch-loop.mjs";
+import { resolveCursorBin } from "./lib/invoke-cursor-agent.mjs";
+
+function parseArgs(argv) {
+  const out = {
+    command: argv[0] ?? "help",
+    runId: null,
+    campaignId: null,
+    pollMs: 5000,
+    maxRetries: 5,
+  };
+  const rest = argv[0]?.startsWith("-") ? argv : argv.slice(1);
+  if (!argv[0]?.startsWith("-")) {
+    out.command = argv[0] ?? "help";
+  }
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === "watch" || a === "status" || a === "cursor" || a === "help") out.command = a;
+    else if (a === "--run-id") out.runId = argv[++i];
+    else if (a === "--campaign-id") out.campaignId = argv[++i];
+    else if (a === "--poll-ms") out.pollMs = Number(argv[++i]);
+    else if (a === "--max-retries") out.maxRetries = Number(argv[++i]);
+  }
+  return out;
+}
+
+function printBanner(args) {
+  console.log("");
+  console.log("═══════════════════════════════════════════════════════════");
+  console.log("  Remediation watch — health focus until satisfaction goal");
+  console.log(`  campaign: ${args.campaignId}`);
+  console.log(`  run:      ${args.runId}`);
+  console.log(`  progress: .cursor/aaac/state/campaigns/${args.campaignId}/progress.json`);
+  console.log("  Ctrl+C to stop (campaign state is persisted; resume with watch)");
+  console.log("═══════════════════════════════════════════════════════════");
+  console.log("");
+}
+
+function cmdStatus(args) {
+  if (!args.campaignId) {
+    console.error("status requires --campaign-id");
+    process.exit(2);
+  }
+  const snap = buildProgressSnapshot(args.campaignId, args.runId ?? "—");
+  writeProgressArtifact(args.campaignId, snap);
+  console.log(formatProgressLine(snap));
+  console.log(JSON.stringify(snap, null, 2));
+}
+
+async function cmdWatch(args) {
+  if (!args.runId || !args.campaignId) {
+    console.error("watch requires --run-id and --campaign-id");
+    process.exit(2);
+  }
+  printBanner(args);
+  const code = await runRemediationWatchLoop({
+    ...args,
+    reporter: {
+      onProgress: (snap, event) => {
+        console.log(formatProgressLine(snap, event));
+      },
+      onEvent: (event, detail) => {
+        if (event === "handle_failed" || event === "blocked" || event === "runner_error") {
+          console.log(`  ⚠ ${event}: ${(detail.stderr ?? detail.message ?? JSON.stringify(detail)).slice(0, 200)}`);
+        }
+        if (event === "goal_achieved" || event === "runner_complete") {
+          console.log("");
+          console.log("✓ Remediation campaign complete.");
+        }
+      },
+    },
+  });
+  process.exit(code);
+}
+
+function cmdCursor(args) {
+  if (!args.runId || !args.campaignId) {
+    console.error("cursor requires --run-id and --campaign-id");
+    process.exit(2);
+  }
+  const bin = resolveCursorBin();
+  if (!bin) {
+    console.error("cursor CLI not found");
+    process.exit(127);
+  }
+  const cliPath = path.join(REPO_ROOT, ".cursor/aaac/scripts/remediation/remediation-cli.mjs");
+  const watchCmd = `node ${cliPath} watch --run-id ${args.runId} --campaign-id ${args.campaignId}`;
+  const prompt = [
+    "You are driving an autonomous remediation campaign until satisfaction threshold is met.",
+    "Run this command in the FOREGROUND with live stdout (never background it):",
+    watchCmd,
+    "Summarize each [remediate] progress line. If the command exits non-zero, diagnose from progress.json and retry watch once.",
+    "Do not stop until watch exits 0 (goal achieved) or reports blocked.",
+  ].join("\n");
+
+  console.log("Launching Cursor agent with foreground remediation watch…");
+  console.log(`Command: ${watchCmd}`);
+  console.log("");
+
+  const result = spawnSync(bin, ["agent", "-p", "-f", "--approve-mcps", "--output-format", "text", prompt], {
+    cwd: REPO_ROOT,
+    encoding: "utf8",
+    stdio: "inherit",
+  });
+  process.exit(result.status ?? 1);
+}
+
+function cmdHelp() {
+  console.log(`Usage:
+  node remediation-cli.mjs watch --run-id <id> --campaign-id <id>
+  node remediation-cli.mjs status --campaign-id <id> [--run-id <id>]
+  node remediation-cli.mjs cursor --run-id <id> --campaign-id <id>
+
+Recommended (Cursor integrated terminal — readable live progress):
+  node .cursor/aaac/scripts/remediation/remediation-cli.mjs watch \
+    --run-id run_20260618_remediate-app-frontend-9431df20 \
+    --campaign-id campaign_20260618_remediate-app-health
+
+Or via Cursor agent CLI (agent session monitors the watch command):
+  node .cursor/aaac/scripts/remediation/remediation-cli.mjs cursor \
+    --run-id <run_id> --campaign-id <campaign_id>
+`);
+}
+
+const args = parseArgs(process.argv.slice(2));
+switch (args.command) {
+  case "watch":
+    cmdWatch(args);
+    break;
+  case "status":
+    cmdStatus(args);
+    break;
+  case "cursor":
+    cmdCursor(args);
+    break;
+  default:
+    cmdHelp();
+}

package/templates/cursor/aaac/scripts/remediation/remediation-cursor-watch.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+# Launch remediation watch via Cursor CLI (foreground, monitorable).
+set -euo pipefail
+ROOT="$(cd "$(dirname "$0")/../../../.." && pwd)"
+cd "$ROOT"
+RUN_ID="${1:?run_id required}"
+CAMPAIGN_ID="${2:?campaign_id required}"
+exec node .cursor/aaac/scripts/remediation/remediation-cli.mjs cursor \
+  --run-id "$RUN_ID" \
+  --campaign-id "$CAMPAIGN_ID"

package/templates/cursor/aaac/scripts/remediation/remediation-runner-daemon.sh

@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+# Deprecated for interactive use — prefer remediation-cli.mjs watch in Cursor terminal.
+# This wrapper still runs the machine sentinel watcher for headless CI.
+set -euo pipefail
+ROOT="$(cd "$(dirname "$0")/../../../.." && pwd)"
+cd "$ROOT"
+RUN_ID="${1:?run_id required}"
+CAMPAIGN_ID="${2:?campaign_id required}"
+echo "Tip: for readable progress in Cursor, run:" >&2
+echo "  node .cursor/aaac/scripts/remediation/remediation-cli.mjs watch --run-id $RUN_ID --campaign-id $CAMPAIGN_ID" >&2
+exec node .cursor/aaac/scripts/remediation/remediation-cli.mjs watch \
+  --run-id "$RUN_ID" \
+  --campaign-id "$CAMPAIGN_ID"