@sebastienrousseau/dotfiles 0.2.499 → 0.2.500

package/scripts/dot/commands/fleet.sh

@@ -0,0 +1,399 @@
+#!/usr/bin/env bash
+# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# Dotfiles CLI - Fleet Commands
+# fleet status|nodes|drift|events|namespace
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=../lib/utils.sh
+source "$SCRIPT_DIR/../lib/utils.sh"
+# shellcheck source=../lib/log.sh
+source "$SCRIPT_DIR/../lib/log.sh"
+
+dot_ui_command_banner "Fleet" "${1:-}"
+
+_FLEET_STATE_DIR="${XDG_STATE_HOME:-$HOME/.local/state}/dotfiles/fleet"
+_FLEET_EVENTS_FILE="$_FLEET_STATE_DIR/events.jsonl"
+
+_fleet_enabled() {
+  local data_file
+  data_file="$(resolve_source_dir)/.chezmoidata.toml"
+  if [[ -f "$data_file" ]] && grep -q '^enabled = true' "$data_file" 2>/dev/null; then
+    return 0
+  fi
+  return 1
+}
+
+_fleet_node_id() {
+  local data_file node_id=""
+  data_file="$(resolve_source_dir)/.chezmoidata.toml"
+  if [[ -f "$data_file" ]]; then
+    node_id="$(sed -n 's/^node_id = "\(.*\)"/\1/p' "$data_file" | head -1)"
+  fi
+  if [[ -z "$node_id" ]]; then
+    node_id="$(hostname -s 2>/dev/null || echo "unknown")"
+  fi
+  printf '%s\n' "$node_id"
+}
+
+_fleet_namespace() {
+  local data_file ns=""
+  data_file="$(resolve_source_dir)/.chezmoidata.toml"
+  if [[ -f "$data_file" ]]; then
+    ns="$(sed -n 's/^namespace = "\(.*\)"/\1/p' "$data_file" | head -1)"
+  fi
+  printf '%s\n' "${ns:-default}"
+}
+
+_fleet_emit_event() {
+  local event="$1" status="${2:-ok}"
+  shift 2 || true
+  local ts node_id namespace
+  ts="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+  node_id="$(_fleet_node_id)"
+  namespace="$(_fleet_namespace)"
+  mkdir -p "$_FLEET_STATE_DIR" 2>/dev/null || return 0
+  local payload
+  payload=$(printf '{"time":"%s","event":"%s","status":"%s","node_id":"%s","namespace":"%s","trace_id":"%s"' \
+    "$ts" "$event" "$status" "$node_id" "$namespace" "$DOT_TRACE_ID")
+  while [[ $# -gt 0 ]]; do
+    payload+=$(printf ',"%s":"%s"' "${1%%=*}" "${1#*=}")
+    shift
+  done
+  payload+='}'
+  printf '%s\n' "$payload" >>"$_FLEET_EVENTS_FILE" 2>/dev/null || true
+
+  # Forward to endpoint if configured
+  local endpoint=""
+  local data_file
+  data_file="$(resolve_source_dir)/.chezmoidata.toml"
+  if [[ -f "$data_file" ]]; then
+    endpoint="$(sed -n 's/^endpoint = "\(.*\)"/\1/p' "$data_file" | head -1)"
+  fi
+  if [[ -n "$endpoint" ]] && [[ "$endpoint" == https://* ]]; then
+    curl -fsSL -X POST -H "Content-Type: application/json" \
+      -d "$payload" "$endpoint" >/dev/null 2>&1 || true
+  fi
+}
+
+cmd_fleet_status() {
+  local json_mode=0
+  [[ "${1:-}" == "--json" || "${1:-}" == "-j" ]] && json_mode=1
+
+  local node_id namespace version os_type kernel shell_type
+  node_id="$(_fleet_node_id)"
+  namespace="$(_fleet_namespace)"
+  version="$(dotfiles_version)"
+  os_type="$(uname -s)"
+  kernel="$(uname -r)"
+  shell_type="${SHELL##*/}"
+
+  local drift_status="clean"
+  if has_command chezmoi; then
+    local drift_output
+    drift_output="$(chezmoi status 2>/dev/null || true)"
+    if [[ -n "$drift_output" ]]; then
+      drift_status="drifted"
+    fi
+  fi
+
+  local last_apply=""
+  local state_log="${XDG_STATE_HOME:-$HOME/.local/state}/dotfiles/dot.log"
+  if [[ -f "$state_log" ]]; then
+    last_apply="$(grep 'apply' "$state_log" 2>/dev/null | tail -1 | sed -n 's/^\[\([^]]*\)\].*/\1/p')"
+  fi
+
+  if [[ "$json_mode" -eq 1 ]]; then
+    printf '{"node_id":"%s","namespace":"%s","version":"%s","os":"%s","kernel":"%s","shell":"%s","drift":"%s","last_apply":"%s"}\n' \
+      "$node_id" "$namespace" "$version" "$os_type" "$kernel" "$shell_type" "$drift_status" "$last_apply"
+    return 0
+  fi
+
+  ui_header "Fleet Node Status"
+  echo ""
+  ui_ok "Node ID" "$node_id"
+  ui_ok "Namespace" "$namespace"
+  ui_ok "Version" "v$version"
+  ui_ok "OS" "$os_type $kernel"
+  ui_ok "Shell" "$shell_type"
+  if [[ "$drift_status" == "clean" ]]; then
+    ui_ok "Drift" "$drift_status"
+  else
+    ui_warn "Drift" "$drift_status"
+  fi
+  if [[ -n "$last_apply" ]]; then
+    ui_info "Last Apply" "$last_apply"
+  fi
+
+  _fleet_emit_event "status" "ok" "version=$version" "drift=$drift_status"
+}
+
+_DRIFT_HISTORY_FILE="$_FLEET_STATE_DIR/drift-history.jsonl"
+
+_fleet_drift_append_history() {
+  local drift_output="$1"
+  local ts
+  ts="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+  mkdir -p "$_FLEET_STATE_DIR" 2>/dev/null || return 0
+  if [[ -z "$drift_output" ]]; then
+    printf '{"time":"%s","status":"clean","files":[]}\n' "$ts" >>"$_DRIFT_HISTORY_FILE" 2>/dev/null || true
+  else
+    local files_json
+    files_json="$(printf '%s\n' "$drift_output" | awk '{print $NF}' | jq -R . | jq -s . 2>/dev/null || echo '[]')"
+    printf '{"time":"%s","status":"drifted","files":%s}\n' "$ts" "$files_json" >>"$_DRIFT_HISTORY_FILE" 2>/dev/null || true
+  fi
+}
+
+cmd_fleet_drift() {
+  local subcommand="${1:-check}"
+  if [[ "${1:-}" == --* ]] || [[ -z "${1:-}" ]]; then
+    subcommand="check"
+  else
+    shift || true
+  fi
+
+  case "$subcommand" in
+    check)
+      ui_header "Fleet Drift Report"
+      echo ""
+
+      if ! has_command chezmoi; then
+        ui_err "chezmoi" "not installed"
+        return 1
+      fi
+
+      local drift_output
+      drift_output="$(chezmoi status 2>/dev/null || true)"
+
+      _fleet_drift_append_history "$drift_output"
+
+      if [[ -z "$drift_output" ]]; then
+        ui_ok "Status" "No drift detected"
+        _fleet_emit_event "drift_check" "clean"
+        return 0
+      fi
+
+      ui_warn "Status" "Configuration drift detected"
+      echo ""
+      printf '%s\n' "$drift_output" | while IFS= read -r line; do
+        local change_type="${line:0:2}"
+        local file_path="${line:3}"
+        case "$change_type" in
+          "MM" | "A " | " M")
+            ui_warn "$change_type" "$file_path"
+            ;;
+          *)
+            ui_info "$change_type" "$file_path"
+            ;;
+        esac
+      done
+
+      _fleet_emit_event "drift_check" "drifted" "count=$(echo "$drift_output" | wc -l | tr -d ' ')"
+      ;;
+    history)
+      ui_header "Drift History"
+      echo ""
+      if [[ ! -f "$_DRIFT_HISTORY_FILE" ]]; then
+        ui_info "No drift history recorded yet."
+        return 0
+      fi
+      local count="${1:-20}"
+      tail -n "$count" "$_DRIFT_HISTORY_FILE" | while IFS= read -r line; do
+        local time status file_count
+        time="$(printf '%s' "$line" | jq -r '.time' 2>/dev/null || echo "?")"
+        status="$(printf '%s' "$line" | jq -r '.status' 2>/dev/null || echo "?")"
+        file_count="$(printf '%s' "$line" | jq '.files | length' 2>/dev/null || echo 0)"
+        if [[ "$status" == "clean" ]]; then
+          ui_ok "$time" "clean"
+        else
+          ui_warn "$time" "drifted ($file_count files)"
+        fi
+      done
+      ;;
+    predict)
+      ui_header "Drift Prediction"
+      echo ""
+      if [[ ! -f "$_DRIFT_HISTORY_FILE" ]]; then
+        ui_info "Not enough history for prediction."
+        return 0
+      fi
+      # Simple heuristic: files that drifted in >50% of the last 10 checks
+      local threshold=5
+      jq -r '.files[]?' "$_DRIFT_HISTORY_FILE" | tail -n 1000 | sort | uniq -c | sort -rn | while read -r count file; do
+        if [[ "$count" -ge "$threshold" ]]; then
+          ui_warn "Likely to drift" "$file (drifted $count times recently)"
+        fi
+      done
+      local total_checks
+      total_checks="$(wc -l <"$_DRIFT_HISTORY_FILE" | tr -d ' ')"
+      ui_info "History" "$total_checks checks recorded"
+      ;;
+    *)
+      die "Usage: dot fleet drift [check|history|predict]"
+      ;;
+  esac
+}
+
+cmd_fleet_events() {
+  local count="${1:-20}"
+  if [[ ! -f "$_FLEET_EVENTS_FILE" ]]; then
+    ui_info "No fleet events recorded yet."
+    ui_info "Events file" "$_FLEET_EVENTS_FILE"
+    return 0
+  fi
+
+  ui_header "Fleet Events (last $count)"
+  echo ""
+
+  if has_command jq; then
+    tail -n "$count" "$_FLEET_EVENTS_FILE" | jq -r '"\(.time)\t\(.event)\t\(.status)\t\(.node_id)"' | while IFS=$'\t' read -r time event status node; do
+      if [[ "$status" == "ok" || "$status" == "clean" ]]; then
+        ui_ok "$event" "$time ($node)"
+      else
+        ui_warn "$event" "$time ($node)"
+      fi
+    done
+  else
+    tail -n "$count" "$_FLEET_EVENTS_FILE"
+  fi
+}
+
+cmd_fleet_namespace() {
+  local subcommand="${1:-show}"
+  shift || true
+
+  case "$subcommand" in
+    show)
+      local ns
+      ns="$(_fleet_namespace)"
+      ui_header "Fleet Namespace"
+      ui_ok "Active" "$ns"
+
+      local data_file
+      data_file="$(resolve_source_dir)/.chezmoidata.toml"
+      if [[ -f "$data_file" ]]; then
+        echo ""
+        ui_section "Available Namespaces"
+        grep '^\[namespaces\.' "$data_file" | sed 's/\[namespaces\.\(.*\)\]/\1/' | while IFS= read -r name; do
+          if [[ "$name" == "$ns" ]]; then
+            ui_ok "$name" "[active]"
+          else
+            ui_info "$name" ""
+          fi
+        done
+      fi
+      ;;
+    set)
+      local new_ns="${1:-}"
+      [[ -n "$new_ns" ]] || die "Usage: dot fleet namespace set <name>"
+      validate_name "$new_ns" "namespace"
+      local data_file
+      data_file="$(resolve_source_dir)/.chezmoidata.toml"
+      if grep -q "^namespace = " "$data_file" 2>/dev/null; then
+        if sed --version >/dev/null 2>&1; then
+          sed -i "s/^namespace = \".*\"/namespace = \"$new_ns\"/" "$data_file"
+        else
+          sed -i '' "s/^namespace = \".*\"/namespace = \"$new_ns\"/" "$data_file"
+        fi
+      fi
+      ui_ok "Namespace" "Set to '$new_ns'. Run 'dot sync' to apply."
+      _fleet_emit_event "namespace_set" "ok" "namespace=$new_ns"
+      ;;
+    *)
+      die "Usage: dot fleet namespace [show|set <name>]"
+      ;;
+  esac
+}
+
+cmd_fleet_enforce() {
+  local subcommand="${1:-status}"
+  shift || true
+
+  local repo_root
+  repo_root="$(resolve_source_dir)"
+  local profiles_file="$repo_root/dot_config/dotfiles/agent-profiles.json"
+
+  case "$subcommand" in
+    status)
+      if [[ ! -f "$profiles_file" ]]; then
+        ui_err "Profiles" "agent-profiles.json not found"
+        return 1
+      fi
+      local enforcement
+      enforcement="$(jq -r '.rbac.enforcement // "advisory"' "$profiles_file")"
+      ui_header "RBAC Enforcement"
+      ui_ok "Mode" "$enforcement"
+      ui_ok "Default role" "$(jq -r '.rbac.defaultRole // "developer"' "$profiles_file")"
+      jq -r '.rbac.roles | to_entries[] | "\(.key)\t\(.value.allowedProfiles | join(", "))"' "$profiles_file" | while IFS=$'\t' read -r role profiles; do
+        ui_info "$role" "$profiles"
+      done
+      ;;
+    set)
+      local mode="${1:-}"
+      [[ -n "$mode" ]] || die "Usage: dot fleet enforce set <advisory|strict>"
+      case "$mode" in
+        advisory | strict) ;;
+        *) die "Invalid enforcement mode: $mode (use advisory or strict)" ;;
+      esac
+      [[ -f "$profiles_file" ]] || die "agent-profiles.json not found"
+      local tmp
+      tmp="$(jq --arg mode "$mode" '.rbac.enforcement = $mode' "$profiles_file")"
+      printf '%s\n' "$tmp" >"$profiles_file"
+      ui_ok "Enforcement" "set to '$mode'"
+      _fleet_emit_event "enforcement_set" "ok" "mode=$mode"
+      ;;
+    *)
+      die "Usage: dot fleet enforce [status|set <advisory|strict>]"
+      ;;
+  esac
+}
+
+cmd_fleet() {
+  local subcommand="${1:-status}"
+  if [[ "${1:-}" == --* ]] || [[ -z "${1:-}" ]]; then
+    subcommand="status"
+  else
+    shift || true
+  fi
+
+  case "$subcommand" in
+    status)
+      cmd_fleet_status "$@"
+      ;;
+    drift)
+      cmd_fleet_drift "$@"
+      ;;
+    events)
+      cmd_fleet_events "$@"
+      ;;
+    namespace | ns)
+      cmd_fleet_namespace "$@"
+      ;;
+    enforce)
+      cmd_fleet_enforce "$@"
+      ;;
+    *)
+      ui_header "Fleet Commands"
+      echo ""
+      ui_info "Usage" "dot fleet [command]"
+      echo ""
+      ui_ok "status" "Show this node's fleet status (--json for machine output)"
+      ui_ok "drift" "Check for configuration drift"
+      ui_ok "events" "Show recent fleet events"
+      ui_ok "namespace" "Show or set the active namespace"
+      ui_ok "enforce" "Show or set RBAC enforcement mode (advisory|strict)"
+      ;;
+  esac
+}
+
+# Dispatch
+case "${1:-}" in
+  fleet)
+    shift
+    cmd_fleet "$@"
+    ;;
+  *)
+    cmd_fleet "$@"
+    ;;
+esac

package/scripts/dot/commands/lint.sh

@@ -0,0 +1,177 @@
+#!/usr/bin/env bash
+# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# Dotfiles CLI - Lint Command
+# Wraps shellcheck and shfmt with project-specific flags
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=../lib/utils.sh
+source "$SCRIPT_DIR/../lib/utils.sh"
+
+dot_ui_command_banner "Lint" "${1:-}"
+
+# ── Configuration ────────────────────────────────────────────────────────────
+# Flags from CLAUDE.md conventions:
+#   SC flags: --severity=error -e SC1091 -e SC2030 -e SC2031
+#   shfmt:    -i 2 -ci
+SHELLCHECK_ARGS=(--severity=error -e SC1091 -e SC2030 -e SC2031)
+SHFMT_ARGS=(-i 2 -ci)
+
+cmd_lint() {
+  local mode="${1:-all}"
+  local src_dir
+  src_dir="$(require_source_dir)"
+
+  # Collect target files
+  local -a files=()
+  while IFS= read -r -d '' f; do
+    files+=("$f")
+  done < <(find "$src_dir/scripts" -name '*.sh' -type f -print0 2>/dev/null)
+
+  # install.sh
+  if [[ -f "$src_dir/install.sh" ]]; then
+    files+=("$src_dir/install.sh")
+  fi
+
+  # dot_local/bin/executable_* scripts (shell scripts only)
+  while IFS= read -r -d '' f; do
+    if file "$f" 2>/dev/null | grep -qiE 'shell|bash|sh'; then
+      files+=("$f")
+    elif head -1 "$f" 2>/dev/null | grep -qE '^#!.*(bash|sh)'; then
+      files+=("$f")
+    fi
+  done < <(find "$src_dir/dot_local/bin" -name 'executable_*' -type f -print0 2>/dev/null)
+
+  # .chezmoitemplates/*.sh (non-.tmpl shell scripts)
+  while IFS= read -r -d '' f; do
+    files+=("$f")
+  done < <(find "$src_dir/.chezmoitemplates" -name '*.sh' -type f -print0 2>/dev/null)
+
+  local total=${#files[@]}
+  if [[ "$total" -eq 0 ]]; then
+    ui_warn "No files" "No shell scripts found to lint"
+    return 0
+  fi
+
+  local sc_errors=0
+  local fmt_errors=0
+
+  case "$mode" in
+    all | check)
+      # ── ShellCheck ──────────────────────────────────────────────────────
+      if has_command shellcheck; then
+        ui_section "ShellCheck"
+        echo ""
+        local sc_fail=0
+        for f in "${files[@]}"; do
+          if ! shellcheck "${SHELLCHECK_ARGS[@]}" "$f" 2>/dev/null; then
+            sc_fail=$((sc_fail + 1))
+          fi
+        done
+        if [[ "$sc_fail" -eq 0 ]]; then
+          ui_ok "shellcheck" "$total files clean"
+        else
+          sc_errors=$sc_fail
+          ui_err "shellcheck" "$sc_fail file(s) with errors"
+        fi
+        echo ""
+      else
+        ui_warn "shellcheck" "not installed, skipping"
+        echo ""
+      fi
+
+      # ── shfmt ───────────────────────────────────────────────────────────
+      if has_command shfmt; then
+        ui_section "shfmt"
+        echo ""
+        local fmt_fail=0
+        for f in "${files[@]}"; do
+          if ! shfmt "${SHFMT_ARGS[@]}" -d "$f" >/dev/null 2>&1; then
+            fmt_fail=$((fmt_fail + 1))
+          fi
+        done
+        if [[ "$fmt_fail" -eq 0 ]]; then
+          ui_ok "shfmt" "$total files formatted correctly"
+        else
+          fmt_errors=$fmt_fail
+          ui_err "shfmt" "$fmt_fail file(s) need formatting"
+        fi
+        echo ""
+      else
+        ui_warn "shfmt" "not installed, skipping"
+        echo ""
+      fi
+      ;;
+
+    fix)
+      # ── Auto-fix with shfmt ─────────────────────────────────────────────
+      if ! has_command shfmt; then
+        ui_err "shfmt" "not installed — cannot auto-fix"
+        exit 1
+      fi
+      ui_section "Auto-fixing with shfmt"
+      echo ""
+      local fixed=0
+      for f in "${files[@]}"; do
+        if ! shfmt "${SHFMT_ARGS[@]}" -d "$f" >/dev/null 2>&1; then
+          shfmt "${SHFMT_ARGS[@]}" -w "$f"
+          ui_ok "fixed" "${f#"$src_dir/"}"
+          fixed=$((fixed + 1))
+        fi
+      done
+      if [[ "$fixed" -eq 0 ]]; then
+        ui_ok "shfmt" "All files already formatted"
+      else
+        ui_ok "shfmt" "$fixed file(s) reformatted"
+      fi
+      echo ""
+      ;;
+
+    *)
+      ui_err "Unknown lint mode: $mode"
+      echo "Usage: dot lint [--fix|-f | --check|-c]"
+      exit 1
+      ;;
+  esac
+
+  # ── Summary ───────────────────────────────────────────────────────────────
+  ui_section "Summary"
+  echo ""
+  ui_info "Files scanned" "$total"
+  if [[ "$sc_errors" -gt 0 ]]; then
+    ui_err "ShellCheck errors" "$sc_errors"
+  fi
+  if [[ "$fmt_errors" -gt 0 ]]; then
+    ui_err "Formatting issues" "$fmt_errors"
+  fi
+  if [[ "$sc_errors" -eq 0 ]] && [[ "$fmt_errors" -eq 0 ]]; then
+    ui_ok "Result" "All checks passed"
+  fi
+  echo ""
+
+  # Exit 1 in check mode if any errors
+  if [[ "$mode" == "check" ]] && [[ $((sc_errors + fmt_errors)) -gt 0 ]]; then
+    exit 1
+  fi
+}
+
+# ── Dispatch ─────────────────────────────────────────────────────────────────
+case "${1:-}" in
+  lint)
+    shift
+    case "${1:---}" in
+      --fix | -f) cmd_lint "fix" ;;
+      --check | -c) cmd_lint "check" ;;
+      *) cmd_lint "all" ;;
+    esac
+    ;;
+  *)
+    # Direct invocation (dot lint)
+    case "${1:---}" in
+      --fix | -f) cmd_lint "fix" ;;
+      --check | -c) cmd_lint "check" ;;
+      *) cmd_lint "all" ;;
+    esac
+    ;;
+esac