agent-control-plane 0.3.0 → 0.6.0

package/tools/bin/agent-project-run-codex-session

@@ -1,435 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-usage() {
-  cat <<'EOF'
-Usage:
-  agent-project-run-codex-session --mode safe|bypass --session <id> --worktree <path> --prompt-file <path> --runs-root <path> --adapter-id <id> --task-kind <kind> --task-id <id> [options]
-
-Launch a Codex worker session inside tmux for a project adapter and persist the
-standard run artifacts.
-
-Options:
-  --safe-profile <name>         Codex profile for safe mode
-  --bypass-profile <name>       Codex profile for bypass mode
-  --env-prefix <prefix>         Export prefixed runtime/context env vars inside the worker
-  --context <KEY=VALUE>         Extra metadata written to run.env and exported to the worker
-  --collect-file <name>         Copy sandbox artifact file into the host run dir after execution
-  --reconcile-command <cmd>     Host-side command queued after the worker exits
-  --sandbox-subdir <name>       Subdir under the worktree for worker artifacts (default: .openclaw-artifacts)
-  --help                        Show this help
-EOF
-}
-
-mode=""
-session=""
-worktree=""
-worktree_realpath=""
-prompt_file=""
-runs_root=""
-adapter_id=""
-task_kind=""
-task_id=""
-safe_profile="default"
-bypass_profile="default"
-env_prefix=""
-sandbox_subdir=".openclaw-artifacts"
-reconcile_command=""
-declare -a context_items=()
-declare -a collect_files=()
-
-resolve_codex_bin() {
-  local configured_bin="${CODEX_BIN:-${ACP_CODEX_BIN:-${F_LOSNING_CODEX_BIN:-}}}"
-  local best_version=""
-  local best_bin=""
-  local candidate version_line version
-  local -a fallback_paths=(
-    "${HOME}/.local/bin/codex"
-    "${HOME}/.codex/local/bin/codex"
-    "/usr/local/bin/codex"
-    "/opt/homebrew/bin/codex"
-  )
-
-  if [[ -n "$configured_bin" && -x "$configured_bin" ]]; then
-    printf '%s\n' "$configured_bin"
-    return 0
-  fi
-
-  if command -v codex >/dev/null 2>&1; then
-    command -v codex
-    return 0
-  fi
-
-  for candidate in "${fallback_paths[@]}"; do
-    if [[ -x "$candidate" ]]; then
-      printf '%s\n' "$candidate"
-      return 0
-    fi
-  done
-
-  if [[ -d "${HOME:-}/.nvm/versions/node" ]]; then
-    while IFS= read -r candidate; do
-      [[ -x "$candidate" ]] || continue
-      version_line="$("$candidate" --version 2>/dev/null | head -n 1 || true)"
-      version="$(sed -E 's/.*([0-9]+\.[0-9]+\.[0-9]+).*/\1/' <<<"$version_line")"
-      if [[ ! "$version" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
-        continue
-      fi
-      if [[ -z "$best_version" || "$(printf '%s\n%s\n' "$best_version" "$version" | sort -V | tail -n 1)" == "$version" ]]; then
-        best_version="$version"
-        best_bin="$candidate"
-      fi
-    done < <(find "${HOME}/.nvm/versions/node" -path '*/bin/codex' -type f 2>/dev/null | sort -u)
-  fi
-
-  if [[ -n "$best_bin" ]]; then
-    printf '%s\n' "$best_bin"
-    return 0
-  fi
-
-  return 1
-}
-
-while [[ $# -gt 0 ]]; do
-  case "$1" in
-    --mode) mode="${2:-}"; shift 2 ;;
-    --session) session="${2:-}"; shift 2 ;;
-    --worktree) worktree="${2:-}"; shift 2 ;;
-    --prompt-file) prompt_file="${2:-}"; shift 2 ;;
-    --runs-root) runs_root="${2:-}"; shift 2 ;;
-    --adapter-id) adapter_id="${2:-}"; shift 2 ;;
-    --task-kind) task_kind="${2:-}"; shift 2 ;;
-    --task-id) task_id="${2:-}"; shift 2 ;;
-    --safe-profile) safe_profile="${2:-}"; shift 2 ;;
-    --bypass-profile) bypass_profile="${2:-}"; shift 2 ;;
-    --env-prefix) env_prefix="${2:-}"; shift 2 ;;
-    --context) context_items+=("${2:-}"); shift 2 ;;
-    --collect-file) collect_files+=("${2:-}"); shift 2 ;;
-    --reconcile-command) reconcile_command="${2:-}"; shift 2 ;;
-    --sandbox-subdir) sandbox_subdir="${2:-}"; shift 2 ;;
-    --help|-h) usage; exit 0 ;;
-    *) echo "Unknown argument: $1" >&2; usage >&2; exit 1 ;;
-  esac
-done
-
-if [[ -z "$mode" || -z "$session" || -z "$worktree" || -z "$prompt_file" || -z "$runs_root" || -z "$adapter_id" || -z "$task_kind" || -z "$task_id" ]]; then
-  usage >&2
-  exit 1
-fi
-
-worktree_realpath="$(cd "$worktree" 2>/dev/null && pwd -P || true)"
-if [[ -z "$worktree_realpath" || ! -d "$worktree_realpath" ]]; then
-  echo "unable to resolve worktree realpath: $worktree" >&2
-  exit 1
-fi
-
-case "$mode" in
-  safe|bypass) ;;
-  *)
-    echo "--mode must be safe or bypass" >&2
-    exit 1
-    ;;
-esac
-
-artifact_dir="${runs_root}/${session}"
-output_file="${artifact_dir}/${session}.log"
-inner_script="${artifact_dir}/${session}.sh"
-meta_file="${artifact_dir}/run.env"
-result_file="${artifact_dir}/result.env"
-runner_state_file="${artifact_dir}/runner.env"
-sandbox_run_dir="${worktree_realpath%/}/${sandbox_subdir}/${session}"
-started_at="$(date -u +"%Y-%m-%dT%H:%M:%SZ")"
-codex_bin="$(resolve_codex_bin || true)"
-runner_bin="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/agent-project-run-codex-resilient"
-
-mkdir -p "$artifact_dir"
-mkdir -p "$sandbox_run_dir"
-
-if tmux has-session -t "$session" 2>/dev/null; then
-  echo "tmux session already exists: $session" >&2
-  exit 1
-fi
-
-if [[ -z "$codex_bin" || ! -x "$codex_bin" ]]; then
-  echo "unable to resolve a runnable codex binary" >&2
-  exit 1
-fi
-
-branch_name="$(git -C "$worktree_realpath" branch --show-current 2>/dev/null || true)"
-
-printf -v session_q '%q' "$session"
-printf -v task_kind_q '%q' "$task_kind"
-printf -v task_id_q '%q' "$task_id"
-printf -v mode_q '%q' "$mode"
-printf -v worktree_q '%q' "$worktree"
-printf -v worktree_realpath_q '%q' "$worktree_realpath"
-printf -v prompt_q '%q' "$prompt_file"
-printf -v output_q '%q' "$output_file"
-printf -v artifact_dir_q '%q' "$artifact_dir"
-printf -v script_q '%q' "$inner_script"
-printf -v result_q '%q' "$result_file"
-printf -v meta_file_q '%q' "$meta_file"
-printf -v runner_state_q '%q' "$runner_state_file"
-printf -v branch_q '%q' "$branch_name"
-printf -v sandbox_run_dir_q '%q' "$sandbox_run_dir"
-printf -v adapter_id_q '%q' "$adapter_id"
-printf -v started_at_q '%q' "$started_at"
-printf -v codex_bin_q '%q' "$codex_bin"
-printf -v runner_bin_q '%q' "$runner_bin"
-printf -v safe_profile_q '%q' "$safe_profile"
-printf -v bypass_profile_q '%q' "$bypass_profile"
-helper_bin_dir="${artifact_dir}/worker-bin"
-printf -v helper_bin_dir_q '%q' "$helper_bin_dir"
-
-{
-  printf 'TASK_KIND=%s\n' "$task_kind_q"
-  printf 'TASK_ID=%s\n' "$task_id_q"
-  printf 'SESSION=%s\n' "$session_q"
-  printf 'MODE=%s\n' "$mode_q"
-  printf 'WORKTREE=%s\n' "$worktree_q"
-  printf 'WORKTREE_REALPATH=%s\n' "$worktree_realpath_q"
-  printf 'PROMPT_FILE=%s\n' "$prompt_q"
-  printf 'OUTPUT_FILE=%s\n' "$output_q"
-  printf 'SCRIPT=%s\n' "$script_q"
-  printf 'BRANCH=%s\n' "$branch_q"
-  printf 'RESULT_FILE=%s\n' "$result_q"
-  printf 'RUNNER_STATE_FILE=%s\n' "$runner_state_q"
-  printf 'SANDBOX_RUN_DIR=%s\n' "$sandbox_run_dir_q"
-  printf 'ADAPTER_ID=%s\n' "$adapter_id_q"
-  printf 'STARTED_AT=%s\n' "$started_at_q"
-  printf 'CODEX_BIN=%s\n' "$codex_bin_q"
-  printf 'RUNNER_BIN=%s\n' "$runner_bin_q"
-} >"$meta_file"
-
-context_exports=""
-if ((${#context_items[@]} > 0)); then
-  for item in "${context_items[@]}"; do
-    if [[ "$item" != *=* ]]; then
-      echo "--context must use KEY=VALUE syntax: $item" >&2
-      exit 1
-    fi
-    key="${item%%=*}"
-    value="${item#*=}"
-    if [[ ! "$key" =~ ^[A-Z0-9_]+$ ]]; then
-      echo "Invalid context key: $key" >&2
-      exit 1
-    fi
-    printf -v value_q '%q' "$value"
-    printf '%s=%s\n' "$key" "$value_q" >>"$meta_file"
-    if [[ -n "$env_prefix" ]]; then
-      context_exports+="export ${env_prefix}${key}=${value_q}"$'\n'
-    fi
-    context_exports+="export ACP_${key}=${value_q}"$'\n'
-    if [[ "$env_prefix" != "F_LOSNING_" ]]; then
-      context_exports+="export F_LOSNING_${key}=${value_q}"$'\n'
-    fi
-  done
-fi
-
-runtime_exports=$(
-  cat <<EOF
-export AGENT_PROJECT_SESSION=${session_q}
-export AGENT_PROJECT_RUN_DIR=${sandbox_run_dir_q}
-export AGENT_PROJECT_HOST_RUN_DIR=${artifact_dir_q}
-export AGENT_PROJECT_RESULT_FILE=${sandbox_run_dir_q}/result.env
-export AGENT_PROJECT_CODEX_BIN=${codex_bin_q}
-export ACP_SESSION=${session_q}
-export ACP_RUN_DIR=${sandbox_run_dir_q}
-export ACP_HOST_RUN_DIR=${artifact_dir_q}
-export ACP_RESULT_FILE=${sandbox_run_dir_q}/result.env
-export ACP_CODEX_BIN=${codex_bin_q}
-export F_LOSNING_SESSION=${session_q}
-export F_LOSNING_RUN_DIR=${sandbox_run_dir_q}
-export F_LOSNING_HOST_RUN_DIR=${artifact_dir_q}
-export F_LOSNING_RESULT_FILE=${sandbox_run_dir_q}/result.env
-export F_LOSNING_CODEX_BIN=${codex_bin_q}
-EOF
-)
-
-if [[ -n "$env_prefix" ]]; then
-  runtime_exports+=$'\n'
-  runtime_exports+=$(cat <<EOF
-export ${env_prefix}SESSION=${session_q}
-export ${env_prefix}RUN_DIR=${sandbox_run_dir_q}
-export ${env_prefix}HOST_RUN_DIR=${artifact_dir_q}
-export ${env_prefix}RESULT_FILE=${sandbox_run_dir_q}/result.env
-export ${env_prefix}CODEX_BIN=${codex_bin_q}
-EOF
-)
-fi
-
-collect_copy_snippet=""
-if ((${#collect_files[@]} > 0)); then
-  for artifact_name in "${collect_files[@]}"; do
-    if [[ -z "$artifact_name" ]]; then
-      continue
-    fi
-    printf -v artifact_q '%q' "$artifact_name"
-    collect_copy_snippet+=$(
-      cat <<EOF
-if [[ -f ${sandbox_run_dir_q}/${artifact_q} ]]; then
-  cp ${sandbox_run_dir_q}/${artifact_q} ${artifact_dir_q}/${artifact_q}
-fi
-EOF
-    )
-    collect_copy_snippet+=$'\n'
-  done
-fi
-
-reconcile_snippet=""
-if [[ -n "$reconcile_command" ]]; then
-  printf -v delayed_reconcile_q '%q' "export ACP_EXPECTED_RUN_STARTED_AT=${started_at_q}; export F_LOSNING_EXPECTED_RUN_STARTED_AT=${started_at_q}; while tmux has-session -t ${session_q} 2>/dev/null; do sleep 1; done; sleep 2; $reconcile_command"
-  reconcile_snippet="nohup bash -lc ${delayed_reconcile_q} >> ${output_q} 2>&1 </dev/null &"
-fi
-
-cat >"$inner_script" <<EOF
-#!/usr/bin/env bash
-set -euo pipefail
-${runtime_exports}
-${context_exports}cd ${worktree_realpath_q}
-bootstrap_codex_helper_env() {
-  local helper_bin_dir=${helper_bin_dir_q}
-  local openspec_shim=""
-
-  mkdir -p "\${helper_bin_dir}"
-
-  if [[ -d ${worktree_realpath_q}/node_modules/.bin ]]; then
-    export PATH="${worktree_realpath_q}/node_modules/.bin:\${PATH}"
-  fi
-  export PATH="\${helper_bin_dir}:\${PATH}"
-
-  if command -v openspec >/dev/null 2>&1; then
-    return 0
-  fi
-
-  if [[ ! -d ${worktree_realpath_q}/openspec ]]; then
-    return 0
-  fi
-
-  openspec_shim="\${helper_bin_dir}/openspec"
-  cat >"\${openspec_shim}" <<'SHIM'
-#!/usr/bin/env bash
-set -euo pipefail
-
-repo_root="\${ACP_REPO_ROOT:-\${F_LOSNING_REPO_ROOT:-\$(pwd)}}"
-openspec_root="\${repo_root}/openspec"
-
-if [[ ! -d "\${openspec_root}" ]]; then
-  echo "openspec directory not found: \${openspec_root}" >&2
-  exit 1
-fi
-
-command_name="\${1:-}"
-case "\${command_name}" in
-  list)
-    shift || true
-    if [[ "\${1:-}" == "--specs" ]]; then
-      find "\${openspec_root}/specs" -mindepth 1 -maxdepth 1 -type d 2>/dev/null \
-        | xargs -n1 basename 2>/dev/null \
-        | sort
-      exit 0
-    fi
-    find "\${openspec_root}/changes" -mindepth 1 -maxdepth 1 -type d ! -name archive 2>/dev/null \
-      | xargs -n1 basename 2>/dev/null \
-      | sort
-    exit 0
-    ;;
-  *)
-    echo "openspec shim only supports 'list' and 'list --specs'; use direct file reads for other operations" >&2
-    exit 64
-    ;;
-esac
-SHIM
-  chmod +x "\${openspec_shim}"
-}
-reset_sandbox_run_dir() {
-  mkdir -p ${sandbox_run_dir_q}
-  find ${sandbox_run_dir_q} -mindepth 1 -maxdepth 1 -exec rm -rf {} + 2>/dev/null || true
-}
-find_logged_artifact_path() {
-  local artifact_name="\${1:?artifact name required}"
-  local candidate=""
-
-  while IFS= read -r candidate; do
-    [[ -n "\${candidate}" ]] || continue
-    while [[ "\${candidate}" == *')' || "\${candidate}" == *']' || "\${candidate}" == *',' || "\${candidate}" == *'"' || "\${candidate}" == *"'" ]]; do
-      candidate="\${candidate%?}"
-    done
-    if [[ "\$(basename "\${candidate}")" == "\${artifact_name}" && -f "\${candidate}" ]]; then
-      printf '%s\n' "\${candidate}"
-    fi
-  done < <(grep -oE '/[^[:space:])"]+' ${output_q} 2>/dev/null || true)
-}
-recover_logged_artifact() {
-  local artifact_name="\${1:?artifact name required}"
-  local destination="\${2:?destination required}"
-  local source_path=""
-
-  source_path="\$(find_logged_artifact_path "\${artifact_name}" | tail -n 1)"
-  [[ -n "\${source_path}" ]] || return 0
-  mkdir -p "\$(dirname "\${destination}")"
-  if [[ "\${source_path}" != "\${destination}" ]]; then
-    cp "\${source_path}" "\${destination}"
-  fi
-}
-recover_collected_artifact() {
-  local artifact_name="\${1:?artifact name required}"
-  local destination="\${2:?destination required}"
-
-  if [[ -f ${sandbox_run_dir_q}/"\${artifact_name}" ]]; then
-    if [[ ${sandbox_run_dir_q}/"\${artifact_name}" != "\${destination}" ]]; then
-      cp ${sandbox_run_dir_q}/"\${artifact_name}" "\${destination}"
-    fi
-    return 0
-  fi
-
-  recover_logged_artifact "\${artifact_name}" "\${destination}"
-}
-record_final_git_state() {
-  local final_head final_branch tmp_file
-
-  final_head="\$(git -C ${worktree_realpath_q} rev-parse HEAD 2>/dev/null || true)"
-  final_branch="\$(git -C ${worktree_realpath_q} branch --show-current 2>/dev/null || true)"
-  tmp_file=${meta_file_q}.tmp.final.$$
-  grep -vE '^(FINAL_HEAD|FINAL_BRANCH|WORKTREE_REALPATH)=' ${meta_file_q} >"\${tmp_file}" 2>/dev/null || true
-  {
-    printf 'WORKTREE_REALPATH=%s\n' ${worktree_realpath_q}
-    printf 'FINAL_HEAD=%q\n' "\${final_head}"
-    printf 'FINAL_BRANCH=%q\n' "\${final_branch}"
-  } >>"\${tmp_file}"
-  mv "\${tmp_file}" ${meta_file_q}
-}
-bootstrap_codex_helper_env
-reset_sandbox_run_dir
-set +e
-bash ${runner_bin_q} \\
-  --mode ${mode_q} \\
-  --worktree ${worktree_realpath_q} \\
-  --prompt-file ${prompt_q} \\
-  --output-file ${output_q} \\
-  --host-run-dir ${artifact_dir_q} \\
-  --sandbox-run-dir ${sandbox_run_dir_q} \\
-  --safe-profile ${safe_profile_q} \\
-  --bypass-profile ${bypass_profile_q} \\
-  --codex-bin ${codex_bin_q}
-status=\$?
-record_final_git_state
-recover_collected_artifact result.env ${result_q}
-recover_collected_artifact issue-comment.md ${artifact_dir_q}/issue-comment.md
-recover_collected_artifact pr-comment.md ${artifact_dir_q}/pr-comment.md
-recover_collected_artifact verification.jsonl ${artifact_dir_q}/verification.jsonl
-${collect_copy_snippet}${reconcile_snippet}
-printf '\n__CODEX_EXIT__:%s\n' "\$status" | tee -a ${output_q}
-exit "\$status"
-EOF
-
-chmod +x "$inner_script"
-tmux new-session -d -s "$session" "$inner_script"
-
-printf 'SESSION=%s\n' "$session"
-printf 'TASK_KIND=%s\n' "$task_kind"
-printf 'TASK_ID=%s\n' "$task_id"
-printf 'WORKTREE=%s\n' "$worktree"
-printf 'OUTPUT=%s\n' "$output_file"
-printf 'SCRIPT=%s\n' "$inner_script"
-printf 'META=%s\n' "$meta_file"