@zerwiz/ymir 0.1.4 → 0.1.7

package/bin/bootstrap-macos.sh

@@ -0,0 +1,112 @@
+#!/usr/bin/env bash
+# bootstrap-macos.sh — give a macOS operator the Linux host Ymir needs.
+#
+# Ymir's core is portable, but what it installs is a Linux runtime (service
+# scripts, apt/deb package work, /proc and systemd-adjacent assumptions in the
+# Omarchy-first layer). So macOS gets its Linux host the way Windows does — a
+# VM. This raises one with **Lima** (lightest, brew-installable, no GUI) and then
+# hands the install to bin/ymir-install.sh *inside* the VM.
+#
+# It is a bootstrap, not a hack: the VM is the Ymir host, and the Mac is the
+# desktop in front of it.
+#
+# Usage:
+#   bin/bootstrap-macos.sh                 # raise the VM + install Ymir in it
+#   bin/bootstrap-macos.sh --check         # report readiness, change nothing
+#   bin/bootstrap-macos.sh --name ymir     # VM name (default: ymir)
+#   bin/bootstrap-macos.sh --repo <url>    # clone source (default: this checkout's origin)
+#   bin/bootstrap-macos.sh --version
+#
+# Gated on its host (Rule 05): off macOS it skips cleanly and points at
+# bin/host-sense.sh.
+set -u
+
+VERSION="1.0.0"
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
+VM="ymir"; CHECK=0; REPO=""
+# The VM's home is resolved, never assumed (Rule 07B). Inside the Lima VM the
+# operator is `ubuntu`, but that is the VM's fact, not this script's — it comes
+# from env with one documented default, and the guest user is overridable so a
+# host that provisions a different user still works.
+VM_USER="${YMIR_VM_USER:-ubuntu}"
+VM_HOME="${YMIR_HOME:-/home/${VM_USER}/Documents/Ymir}"
+
+while [ $# -gt 0 ]; do
+  case "$1" in
+    --check) CHECK=1; shift ;;
+    --name) VM="${2:-ymir}"; shift 2 ;;
+    --repo) REPO="${2:-}"; shift 2 ;;
+    --version|-v|-V) printf '%s\n' "$VERSION"; exit 0 ;;
+    -h|--help) sed -n '2,22p' "$0" | sed 's/^# \{0,1\}//'; exit 0 ;;
+    *) printf 'error: unknown flag %s\nhelp: bin/bootstrap-macos.sh [--check] [--name VM] [--repo URL]\n' "$1" >&2; exit 2 ;;
+  esac
+done
+
+have() { command -v "$1" >/dev/null 2>&1; }
+
+# ── host gate ────────────────────────────────────────────────────────────────
+if [ "$(uname -s 2>/dev/null)" != "Darwin" ]; then
+  printf 'macos-bootstrap[1]{step,status,detail}:\n'
+  printf '  "layer","SKIP","not macOS — this layer applies on a Mac; run bin/host-sense.sh for THIS machine"\n'
+  exit 0
+fi
+
+BREW=no; have brew && BREW=yes
+LIMA=no; have limactl && LIMA=yes
+ARCH="$(uname -m 2>/dev/null || printf unknown)"
+
+if [ -z "$REPO" ] && git -C "$ROOT" remote get-url origin >/dev/null 2>&1; then
+  REPO="$(git -C "$ROOT" remote get-url origin)"
+fi
+
+if [ "$CHECK" = 1 ]; then
+  printf 'macos-bootstrap[5]{step,status,detail}:\n'
+  printf '  "host","OK","macOS %s (%s)"\n' "$(sw_vers -productVersion 2>/dev/null || printf '?')" "$ARCH"
+  printf '  "homebrew","%s","%s"\n' "$([ "$BREW" = yes ] && printf OK || printf MISSING)" \
+    "$([ "$BREW" = yes ] && printf 'brew present' || printf 'install Homebrew first: https://brew.sh')"
+  printf '  "lima","%s","%s"\n' "$([ "$LIMA" = yes ] && printf OK || printf 'MISSING (installable: brew install lima)')" \
+    "$([ "$LIMA" = yes ] && printf 'limactl present' || printf 'the VM engine has not been installed yet')"
+  printf '  "repo","%s","%s"\n' "$([ -n "$REPO" ] && printf OK || printf MISSING)" "${REPO:-no origin remote and no --repo given}"
+  printf '  "next","%s","%s"\n' "$([ "$BREW" = yes ] && [ -n "$REPO" ] && printf 'ready' || printf 'resolve the rows above')" \
+    "bin/bootstrap-macos.sh"
+  exit 0
+fi
+
+# ── 1. the VM engine ─────────────────────────────────────────────────────────
+if [ "$LIMA" = no ]; then
+  if [ "$BREW" = no ]; then
+    printf 'error: Homebrew is required to install Lima\nhelp: https://brew.sh, then re-run bin/bootstrap-macos.sh\n' >&2
+    exit 1
+  fi
+  echo "installing Lima (the Linux VM engine)…" >&2
+  brew install lima >/dev/null 2>&1 || { printf 'error: brew install lima failed\nhelp: run it by hand to see why\n' >&2; exit 1; }
+fi
+
+# ── 2. the Ubuntu host ───────────────────────────────────────────────────────
+if limactl list --format '{{.Name}}' 2>/dev/null | grep -qx "$VM"; then
+  echo "VM '$VM' already exists — starting it" >&2
+  limactl start --name="$VM" >/dev/null 2>&1 || true
+else
+  echo "raising Ubuntu in Lima as '$VM' (downloads an image; this takes a while)…" >&2
+  limactl start --name="$VM" --mount-writable --tty=false template://ubuntu >/dev/null 2>&1 \
+    || { printf 'error: could not raise the VM\nhelp: limactl start --name=%s template://ubuntu\n' "$VM" >&2; exit 1; }
+fi
+
+# ── 3. Ymir inside it ────────────────────────────────────────────────────────
+if [ -n "$REPO" ]; then
+  echo "installing Ymir inside '$VM'…" >&2
+  limactl shell "$VM" -- bash -lc "set -e
+    command -v git >/dev/null 2>&1 || sudo apt-get update -qq && sudo apt-get install -y -qq git
+    [ -d \"\$HOME/Ymir/.git\" ] || git clone '$REPO' \"\$HOME/Ymir\"
+    cd \"\$HOME/Ymir\" && git pull --ff-only || true
+    YMIR_HOME='$VM_HOME' bin/ymir-install.sh --yes" >&2 \
+    || { printf 'error: the in-VM install failed\nhelp: limactl shell %s -- bash -lc "cd ~/Ymir && bin/ymir-install.sh"\n' "$VM" >&2; exit 1; }
+fi
+
+printf 'macos-bootstrap[3]{step,status,detail}:\n'
+printf '  "vm","OK","%s (Lima)"\n' "$VM"
+printf '  "engine","OK","%s"\n' "$([ "$LIMA" = yes ] && printf 'limactl (pre-existing)' || printf 'limactl (just installed)')"
+printf '  "ymir","%s","%s"\n' "$([ -n "$REPO" ] && printf OK || printf SKIP)" \
+  "$([ -n "$REPO" ] && printf 'installed inside the VM' || printf 'no repo to clone — run: limactl shell %s -- bash -lc "cd ~/Ymir && bin/ymir-install.sh --yes"' "$VM")"
+printf '\nnext: limactl shell %s            # the Linux host\n      open http://127.0.0.1:3888/  # Hlidskjalf, forwarded by Lima\n' "$VM"

package/bin/bootstrap-windows.ps1

@@ -0,0 +1,112 @@
+# bootstrap-windows.ps1 — give a Windows operator the Ubuntu host Ymir needs.
+#
+# Ymir's core is portable, but what it installs is a Linux runtime. On Windows
+# the host is Ubuntu inside WSL2. This enables WSL, installs Ubuntu, and then
+# hands the install to bin/ymir-install.sh *inside* that distro.
+#
+# Run elevated (WSL needs it). Expect ONE reboot on a machine that has never had
+# WSL — the script says so plainly and tells you the single command to run after.
+#
+#   powershell -ExecutionPolicy Bypass -File bin\bootstrap-windows.ps1
+#   powershell -ExecutionPolicy Bypass -File bin\bootstrap-windows.ps1 -Check
+#
+# Gated on its host (Rule 05): off Windows it skips cleanly.
+
+[CmdletBinding()]
+param(
+  [switch]$Check,
+  [string]$Repo = "",
+  [string]$Distro = "Ubuntu"
+)
+
+$ErrorActionPreference = "Stop"
+$VERSION = "1.0.0"
+
+function Row($step, $status, $detail) { Write-Host ("  `"{0}`",`"{1}`",`"{2}`"" -f $step, $status, $detail) }
+
+if (-not ($env:OS -eq "Windows_NT")) {
+  Write-Host 'windows-bootstrap[1]{step,status,detail}:'
+  Row "layer" "SKIP" "not Windows - this layer applies on Windows; run bin/host-sense.sh for THIS machine"
+  exit 0
+}
+
+# --- 1. administrator -------------------------------------------------------
+$admin = ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole(
+  [Security.Principal.WindowsBuiltInRole]::Administrator)
+
+# --- 2. is the Linux host already here? -------------------------------------
+$wsl = $null
+try { $wsl = & wsl.exe --status 2>$null } catch { }
+$hasWsl = $LASTEXITCODE -eq 0
+$hasDistro = $false
+if ($hasWsl) {
+  try {
+    $list = & wsl.exe -l -q 2>$null
+    $hasDistro = ($list | ForEach-Object { $_.Trim() }) -contains $Distro
+  } catch { }
+}
+
+if ($Check) {
+  Write-Host 'windows-bootstrap[4]{step,status,detail}:'
+  Row "host"      "OK"      ("Windows " + [System.Environment]::OSVersion.Version)
+  Row "admin"     $(if ($admin) { "OK" } else { "MISSING" })  "WSL setup needs an elevated shell"
+  Row "wsl"       $(if ($hasWsl) { "OK" } else { "MISSING" }) "the Windows Subsystem for Linux"
+  Row "distro"    $(if ($hasDistro) { "OK" } else { "MISSING" }) "$Distro - the Linux host Ymir installs into"
+  exit 0
+}
+
+if (-not $admin) {
+  Write-Error "an elevated PowerShell is required to enable WSL"
+  Write-Host "help: re-open PowerShell as Administrator, then run this script again"
+  exit 1
+}
+
+# --- 3. enable WSL + install Ubuntu -----------------------------------------
+if (-not ($hasWsl -and $hasDistro)) {
+  Write-Host "enabling WSL and installing $Distro (this may take a while)..." -ForegroundColor Cyan
+  & wsl.exe --install -d $Distro
+  if ($LASTEXITCODE -ne 0) {
+    Write-Host "wsl --install did not complete."
+    Write-Host "help: run 'wsl --install -d $Distro' by hand to see the error."
+    Write-Host "      If the machine has never had WSL, a REBOOT is required first:"
+    Write-Host "      reboot, then run this script again."
+    exit 1
+  }
+  Write-Host ""
+  Write-Host "WSL + $Distro are being installed. A REBOOT may be required." -ForegroundColor Yellow
+  Write-Host "After the reboot, finish with:" -ForegroundColor Yellow
+  Write-Host "  powershell -ExecutionPolicy Bypass -File bin\bootstrap-windows.ps1"
+  exit 0
+}
+
+# --- 4. Ymir inside the distro ----------------------------------------------
+Write-Host "installing Ymir inside $Distro..." -ForegroundColor Cyan
+if (-not $Repo) {
+  try { $Repo = (git remote get-url origin) } catch { $Repo = "" }
+}
+$inner = @'
+set -e
+command -v git >/dev/null 2>&1 || { sudo apt-get update -qq && sudo apt-get install -y -qq git; }
+if [ -n "%REPO%" ]; then
+  [ -d "$HOME/Ymir/.git" ] || git clone "%REPO%" "$HOME/Ymir"
+  cd "$HOME/Ymir" && { git pull --ff-only || true; }
+fi
+cd "$HOME/Ymir" && bin/ymir-install.sh --yes
+'@
+$inner = $inner.Replace("%REPO%", $Repo)
+
+& wsl.exe -d $Distro -- bash -lc $inner
+if ($LASTEXITCODE -ne 0) {
+  Write-Host "the in-distro install failed." -ForegroundColor Red
+  Write-Host "help: wsl -d $Distro -- bash -lc 'cd ~/Ymir && bin/ymir-install.sh'"
+  exit 1
+}
+
+Write-Host ''
+Write-Host 'windows-bootstrap[3]{step,status,detail}:'
+Row "wsl"    "OK"   "Windows Subsystem for Linux"
+Row "distro" "OK"   $Distro
+Row "ymir"   $(if ($Repo) { "OK" } else { "SKIP" }) $(if ($Repo) { "installed inside the distro" } else { "no repo to clone" })
+Write-Host ''
+Write-Host ("next: wsl -d {0}                      # the Linux host" -f $Distro)
+Write-Host "      open http://127.0.0.1:3888/     # Hlidskjalf (WSL forwards localhost)"

package/bin/branch-guard.sh

@@ -0,0 +1,64 @@
+#!/usr/bin/env bash
+# branch-guard.sh — Rule 08: no push may land on a protected branch.
+#
+# Extracted from the ad-hoc .git/hooks/pre-push so the delivery gate is
+# versioned and reproducible (installed by bin/changelog-guard.sh --install,
+# or run by hand). A local merge on a verbal word is a decision, not a
+# delivery — the gate is only fed by a PR (RULES/08-delivery-gate.md).
+#
+#   bin/branch-guard.sh            # pre-push: refs on stdin (hook mode)
+#   bin/branch-guard.sh --branch X # check one branch name
+#
+# Exit codes: 0 = clear, 1 = blocked, 2 = usage.
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
+
+PROTECTED="main master release production"
+
+usage() {
+  sed -n '2,12p' "$0" | sed 's/^# \{0,1\}//'
+  exit 2
+}
+
+block() {  # <branch>
+  cat >&2 <<EOF
+⛔ Rule 08 violation: direct push to '$1' is forbidden.
+   Work leaves by PR: branch → commit → push → gh pr create → Glitnir review.
+   See RULES/08-delivery-gate.md
+EOF
+  printf 'error: branch-guard blocked a push to protected branch "%s"\n' "$1" >&2
+  printf 'help: push a feature branch and open a PR instead (gh pr create)\n' >&2
+  exit 1
+}
+
+is_protected() {  # <branch> — exit 0 when protected
+  local b=${1-} p
+  [ -n "$b" ] || return 1
+  for p in $PROTECTED; do [ "$b" = "$p" ] && return 0; done
+  return 1
+}
+
+case "${1:-}" in
+  -v|-V|--version) printf '1.0.0\n'; exit 0 ;;
+  -h|--help) usage ;;
+  --branch)
+    b="${2:-}"; [ -n "$b" ] || usage
+    is_protected "$b" && block "$b"
+    printf 'branch-guard[1]{gate,result}:\n  "branch","ok"\n'; exit 0 ;;
+  "") : ;;
+  *) usage ;;
+esac
+
+current="$(git -C "$ROOT" symbolic-ref --short HEAD 2>/dev/null || echo '')"
+is_protected "$current" && block "$current"
+
+while read -r _local_ref _local_sha remote_ref _remote_sha; do
+  [ -n "${remote_ref:-}" ] || continue
+  rb="${remote_ref#refs/heads/}"
+  is_protected "$rb" && block "$rb"
+done
+
+printf 'branch-guard[1]{gate,result}:\n  "branch","ok"\n'
+exit 0

package/bin/brokk

@@ -0,0 +1,73 @@
+#!/usr/bin/env bash
+# brokk — the primary agent's CLI (Brokk, the bellows-smith).
+#
+# One front door for the runtime: the seat, the crew (Eindri), the tree
+# (Yggdrasil), the well (Mimirsbrunn), and the ledger (Runes). Thin dispatcher:
+# it calls the owning scripts, never reimplements them. Galdr-style TOON.
+#
+# Usage:
+#   brokk status
+#   brokk agent spawn <id> <project> --mode <no-mistakes|direct-PR|local-only> [--scout] [--isolation auto|on|off] [--harness H]
+#   brokk agent list | status <id> | merge <id> | cleanup <id> [--force]
+#   brokk recall <query> [--k N] | observe <text> [--tags a,b] | timeline [--entity X]
+#   brokk runes [n]
+#   brokk version | help
+set -u
+
+VERSION="1.0.0"
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+B="$SCRIPT_DIR"
+
+usage() { sed -n '2,15p' "$0" | sed 's/^# \{0,1\}//'; }
+
+CMD="${1-}"; shift || true
+case "$CMD" in
+  version|-v|-V|--version) printf '%s\n' "$VERSION"; exit 0 ;;
+  help|-h|--help|"") usage; exit 0 ;;
+esac
+
+status() {
+  local lock started cron bridge well lock_file
+  # The primary's lock is machine-global; an Eindri-home's is per-home. The
+  # resolved path is recorded in state/.lock-path by gleipnir_lock_acquire.
+  lock_file="$B/../state/.lock"
+  [ -r "$B/../state/.lock-path" ] && lock_file=$(tr -d '[:space:]' <"$B/../state/.lock-path")
+  lock=$(tr -d '[:space:]' <"$lock_file" 2>/dev/null || echo '—')
+  [ -e "$B/../state/.session-start-complete" ] && started=yes || started=no
+  cron=$(bash "$B/nornir-cron-start.sh" --status 2>/dev/null | sed 's/^cron: //')
+  bridge=$(bash "$B/bifrost-bridge.sh" --status 2>/dev/null | tail -1 | sed 's/.*,"//; s/"$//')
+  well=$(bash "$B/mimir.sh" health 2>/dev/null | tail -1 | cut -d, -f2)
+  printf 'brokk[1]{lock,seated,cron,bridge,well}:\n  "%s","%s","%s","%s",%s\n' "$lock" "$started" "$cron" "$bridge" "$well"
+}
+
+case "$CMD" in
+  status) status ;;
+
+  agent)
+    AG="${1-}"; shift || true
+    case "$AG" in
+      spawn) exec "$B/einherjar-spawn.sh" "$@" ;;
+      list) exec "$B/yggdrasil.sh" list ;;
+      status) exec "$B/yggdrasil.sh" status "$@" ;;
+      merge) exec "$B/yggdrasil.sh" merge "$@" ;;
+      cleanup) exec "$B/yggdrasil.sh" cleanup "$@" ;;
+      *) printf 'error: unknown agent subcommand %s\nhelp: brokk agent [spawn|list|status|merge|cleanup]\n' "${AG:-}" >&2; exit 2 ;;
+    esac
+    ;;
+
+  recall) exec "$B/mimir.sh" recall "$@" ;;
+  observe) exec "$B/mimir.sh" observe "$@" ;;
+  timeline) exec "$B/mimir.sh" timeline "$@" ;;
+
+  runes)
+    n=${1:-10}
+    printf 'runes[%s]{ts,actor,event}:\n' "$n"
+    grep '^{' "$B/../workspace/memory/runes_audit.md" 2>/dev/null | tail -n "$n" | while IFS= read -r l; do
+      printf '%s\n' "$l" | python3 -c 'import json,sys
+e=json.loads(sys.stdin.read())
+print("  \"%s\",\"%s\",\"%s\"" % (e.get("timestamp",""), e.get("actor",""), e.get("event","")))' 2>/dev/null
+    done
+    ;;
+
+  *) printf 'error: unknown command %s\nhelp: brokk [status|agent|recall|observe|timeline|runes|version|help]\n' "$CMD" >&2; exit 2 ;;
+esac