agentic-dev 0.2.10 → 0.2.12

package/infra/terraform/openstack/server/variables.tf

@@ -1,233 +0,0 @@
-variable "auth_url" {
-  type        = string
-  description = "OpenStack Keystone auth URL."
-}
-
-variable "region" {
-  type        = string
-  description = "OpenStack region name."
-  default     = "RegionOne"
-}
-
-variable "interface" {
-  type        = string
-  description = "OpenStack endpoint interface."
-  default     = "public"
-}
-
-variable "auth_type" {
-  type        = string
-  description = "OpenStack auth type."
-  default     = "password"
-}
-
-variable "username" {
-  type        = string
-  description = "OpenStack username."
-  default     = ""
-}
-
-variable "password" {
-  type        = string
-  description = "OpenStack password."
-  default     = ""
-  sensitive   = true
-}
-
-variable "project_name" {
-  type        = string
-  description = "OpenStack project name."
-  default     = ""
-}
-
-variable "user_domain_name" {
-  type        = string
-  description = "OpenStack user domain name."
-  default     = "Default"
-}
-
-variable "project_domain_name" {
-  type        = string
-  description = "OpenStack project domain name."
-  default     = "Default"
-}
-
-variable "application_credential_id" {
-  type        = string
-  description = "OpenStack application credential id."
-  default     = ""
-}
-
-variable "application_credential_secret" {
-  type        = string
-  description = "OpenStack application credential secret."
-  default     = ""
-  sensitive   = true
-}
-
-variable "insecure" {
-  type        = bool
-  description = "Disable TLS validation."
-  default     = false
-}
-
-variable "service_name" {
-  type        = string
-  description = "Service short name."
-  default     = "template-service"
-}
-
-variable "application_name" {
-  type        = string
-  description = "Human-readable application name passed to the backend environment."
-  default     = "Template API"
-}
-
-variable "phase" {
-  type        = string
-  description = "Deployment phase."
-  default     = "dev"
-
-  validation {
-    condition     = contains(["dev", "prod"], lower(var.phase))
-    error_message = "phase must be one of: dev, prod"
-  }
-}
-
-variable "external_network_name" {
-  type        = string
-  description = "External provider network used for router gateway and floating IP."
-  default     = "public"
-}
-
-variable "app_network_name" {
-  type        = string
-  description = "Tenant app network name. Leave empty to derive from service+phase."
-  default     = ""
-}
-
-variable "app_subnet_name" {
-  type        = string
-  description = "Tenant app subnet name. Leave empty to derive from service+phase."
-  default     = ""
-}
-
-variable "app_subnet_cidr" {
-  type        = string
-  description = "App subnet CIDR."
-  default     = "10.42.0.0/24"
-}
-
-variable "dns_nameservers" {
-  type        = list(string)
-  description = "Optional DNS nameservers for the app subnet."
-  default     = ["1.1.1.1", "8.8.8.8"]
-}
-
-variable "backend_image_name" {
-  type        = string
-  description = "Boot image name for the API compute instance."
-  default     = "ubuntu-24.04-noble-amd64"
-}
-
-variable "instance_flavor_name" {
-  type        = string
-  description = "Flavor for the API compute instance."
-  default     = "m1.small"
-}
-
-variable "backend_port" {
-  type        = number
-  description = "API service port."
-  default     = 8080
-}
-
-variable "associate_floating_ip" {
-  type        = bool
-  description = "Whether to attach a floating IP to the API instance."
-  default     = true
-}
-
-variable "backend_ingress_cidrs" {
-  type        = list(string)
-  description = "CIDRs allowed to reach the API service port."
-  default     = ["0.0.0.0/0"]
-}
-
-variable "ssh_ingress_cidrs" {
-  type        = list(string)
-  description = "CIDRs allowed to SSH to the API instance."
-  default     = []
-}
-
-variable "ssh_keypair_name" {
-  type        = string
-  description = "OpenStack keypair name used for browser-terminal SSH access."
-  default     = ""
-}
-
-variable "ssh_public_key" {
-  type        = string
-  description = "Public key material registered in OpenStack for browser-terminal SSH access."
-  default     = ""
-}
-
-variable "desired_state" {
-  type        = string
-  description = "Desired server instance power state."
-  default     = "running"
-
-  validation {
-    condition     = contains(["running", "stopped"], lower(var.desired_state))
-    error_message = "desired_state must be one of: running, stopped"
-  }
-}
-
-variable "backend_container_image" {
-  type        = string
-  description = "Prebuilt backend image. If empty, repo bootstrap build is used."
-  default     = ""
-}
-
-variable "backend_container_name" {
-  type        = string
-  description = "Runtime container name."
-  default     = "template-service-server"
-}
-
-variable "backend_repo_url" {
-  type        = string
-  description = "Repo URL used for bootstrap build."
-  default     = "https://github.com/example-org/example-service.git"
-}
-
-variable "backend_repo_ref" {
-  type        = string
-  description = "Repo ref for bootstrap build."
-  default     = "main"
-}
-
-variable "backend_repo_subdir" {
-  type        = string
-  description = "Repo-relative server directory."
-  default     = "server"
-}
-
-variable "jwt_secret_key" {
-  type        = string
-  description = "JWT secret key. Leave empty to auto-generate."
-  default     = ""
-  sensitive   = true
-}
-
-variable "backend_env" {
-  type        = map(string)
-  description = "Additional backend environment variables."
-  default     = {}
-}
-
-variable "tags" {
-  type        = map(string)
-  description = "Additional metadata tags."
-  default     = {}
-}

package/infra/terraform/openstack/server/zz_aspace.auto.tfvars.example.json

@@ -1,29 +0,0 @@
-{
-  "auth_type": "password",
-  "auth_url": "https://keystone.example.com:5000/v3",
-  "backend_repo_ref": "main",
-  "backend_repo_url": "https://github.com/example-org/example-service.git",
-  "backend_image_name": "ubuntu-24.04-noble-amd64",
-  "backend_port": 8080,
-  "instance_flavor_name": "m1.small",
-  "ssh_ingress_cidrs": ["0.0.0.0/0"],
-  "ssh_keypair_name": "template-dev-terminal",
-  "ssh_public_key": "ssh-ed25519 AAAA... replace-me",
-  "insecure": false,
-  "interface": "public",
-  "phase": "dev",
-  "external_network_name": "public",
-  "app_subnet_cidr": "10.52.0.0/24",
-  "project_domain_name": "Default",
-  "project_name": "template-service",
-  "region": "RegionOne",
-  "service_name": "template-service",
-  "application_name": "Template API",
-  "user_domain_name": "Default",
-  "username": "admin",
-  "backend_env": {
-    "API_PREFIX": "/api/v1",
-    "DATABASE_BACKEND": "postgres",
-    "POSTGRES_URL": "postgresql://template:template@db:5432/template"
-  }
-}

package/pnpm-workspace.yaml

@@ -1,2 +0,0 @@
-packages:
-  - client/*

package/scripts/dev/audit_sdd_build_ast.py

@@ -1,277 +0,0 @@
-#!/usr/bin/env python3
-
-from __future__ import annotations
-
-import argparse
-import json
-import re
-from pathlib import Path
-
-
-ROOT = Path(__file__).resolve().parents[2]
-
-SERVICE_DOCS = {
-    "mobile": ROOT / "sdd/03_build/01_feature/service/mobile_surface.md",
-    "web": ROOT / "sdd/03_build/01_feature/service/web_surface.md",
-    "admin": ROOT / "sdd/03_build/01_feature/service/admin_surface.md",
-    "landing": ROOT / "sdd/03_build/01_feature/service/landing_surface.md",
-}
-
-BUILD_AST_DOC = ROOT / "sdd/03_build/03_architecture/build_ast_runtime_tree_governance.md"
-
-
-def read(path: Path) -> str:
-    return path.read_text(encoding="utf-8")
-
-
-def score(value: float, maximum: float) -> int:
-    if maximum <= 0:
-        return 0
-    scaled = round((value / maximum) * 10)
-    return max(0, min(10, scaled))
-
-
-def contains_all(text: str, needles: list[str]) -> bool:
-    return all(needle in text for needle in needles)
-
-
-def ast_similarity() -> tuple[int, list[str]]:
-    findings: list[str] = []
-    points = 0.0
-    maximum = 10.0
-
-    mobile = read(SERVICE_DOCS["mobile"])
-    if contains_all(
-        mobile,
-        [
-            "client/mobile/src/main.tsx",
-            "AuthProvider",
-            "BrowserRouter",
-            "client/mobile/src/app/App.tsx",
-            "ProtectedRoute",
-            "InShell",
-            "DashboardPage",
-            "FulfillmentPage",
-            "ShippingPage",
-        ],
-    ):
-        points += 2.5
-    else:
-        findings.append("mobile surface summary does not reflect the real provider/router/shell chain.")
-
-    web = read(SERVICE_DOCS["web"])
-    if contains_all(
-        web,
-        [
-            "client/web/src/main.tsx",
-            "AuthProvider",
-            "BrowserRouter",
-            "client/web/src/app/App.tsx",
-            "ProtectedRoute",
-            "AppShell",
-            "DashboardPage",
-            "OrdersPage",
-        ],
-    ):
-        points += 2.5
-    else:
-        findings.append("web surface summary does not reflect the real app shell route tree.")
-
-    admin = read(SERVICE_DOCS["admin"])
-    if contains_all(
-        admin,
-        [
-            "client/admin/src/main.tsx",
-            "AuthProvider",
-            "BrowserRouter",
-            "client/admin/src/app/App.tsx",
-            "ProtectedRoute",
-            "AdminShell",
-            "AdminDashboardPage",
-            "AdminQueuePage",
-            "AdminSupportPage",
-        ],
-    ):
-        points += 2.5
-    else:
-        findings.append("admin surface summary does not reflect the real admin shell route tree.")
-
-    landing = read(SERVICE_DOCS["landing"])
-    if contains_all(
-        landing,
-        [
-            "client/landing/src/main.tsx",
-            "AuthProvider",
-            "BrowserRouter",
-            "client/landing/src/App.tsx",
-            "LandingHomePage",
-            "LandingLoginPage",
-            "ProtectedRoute",
-            "LandingShell",
-            "LandingWorkspacePage",
-        ],
-    ):
-        points += 2.5
-    else:
-        findings.append("landing surface summary does not reflect the public and gated route assembly.")
-
-    return score(points, maximum), findings
-
-
-def implementation_traceability() -> tuple[int, list[str]]:
-    findings: list[str] = []
-    points = 0.0
-    maximum = 10.0
-
-    mobile = read(SERVICE_DOCS["mobile"])
-    if contains_all(
-        mobile,
-        [
-            "server/main.py",
-            "server/api/http/app.py",
-            "server/api/http/router.py",
-            "contexts/auth/contracts/http/router.py",
-            "contexts/fulfillment/contracts/http/router.py",
-            "contexts/shipping/contracts/http/router.py",
-        ],
-    ):
-        points += 2.0
-    else:
-        findings.append("mobile surface summary does not trace route leaves to backend contract leaves.")
-
-    web = read(SERVICE_DOCS["web"])
-    if contains_all(
-        web,
-        [
-            "server/main.py",
-            "server/api/http/app.py",
-            "server/api/http/router.py",
-            "contexts/auth/contracts/http/router.py",
-            "contexts/catalog/contracts/http/router.py",
-            "contexts/orders/contracts/http/router.py",
-        ],
-    ):
-        points += 2.0
-    else:
-        findings.append("web surface summary does not trace dashboard and orders routes to backend contracts.")
-
-    admin = read(SERVICE_DOCS["admin"])
-    if contains_all(
-        admin,
-        [
-            "server/main.py",
-            "server/api/http/app.py",
-            "server/api/http/router.py",
-            "contexts/alerts/contracts/http/router.py",
-            "contexts/inventory/contracts/http/router.py",
-            "contexts/support/contracts/http/router.py",
-        ],
-    ):
-        points += 2.0
-    else:
-        findings.append("admin surface summary does not trace admin routes to backend contracts.")
-
-    landing = read(SERVICE_DOCS["landing"])
-    if contains_all(
-        landing,
-        [
-            "server/main.py",
-            "server/api/http/app.py",
-            "server/api/http/router.py",
-            "contexts/catalog/contracts/http/router.py",
-            "contexts/health/contracts/http/router.py",
-            "contexts/user/contracts/http/router.py",
-        ],
-    ):
-        points += 2.0
-    else:
-        findings.append("landing surface summary does not trace public/workspace routes to backend contracts.")
-
-    architecture = read(BUILD_AST_DOC)
-    if contains_all(
-        architecture,
-        [
-            ".agent/ralph.sh",
-            ".claude/agents/",
-            ".codex/skills/SKILL.md",
-            "infra/terraform/README.md",
-        ],
-    ):
-        points += 2.0
-    else:
-        findings.append("build AST architecture summary does not retain the canonical harness and infra roots.")
-
-    return score(points, maximum), findings
-
-
-def human_agent_readability() -> tuple[int, list[str]]:
-    findings: list[str] = []
-    points = 10.0
-    maximum = 10.0
-
-    build_md_files = sorted((ROOT / "sdd/03_build").rglob("*.md"))
-    combined = "\n".join(read(path) for path in build_md_files)
-
-    pattern_penalties = [
-        (r"## Current Build Note", 2.0, "build docs still use a Current Build Note section instead of current-state structure."),
-        (r"\bRalph\b", 2.0, "build docs still contain Ralph loop narrative."),
-        (r"2026-\d{2}-\d{2}", 2.0, "build docs still contain dated history markers."),
-        (r"이번 턴", 1.0, "build docs still contain turn-specific execution narrative."),
-        (r"run `\d+", 1.0, "build docs still contain run-id style execution narrative."),
-        (r"\biteration\b", 1.0, "build docs still contain iteration-oriented loop narrative."),
-    ]
-
-    for pattern, penalty, message in pattern_penalties:
-        if re.search(pattern, combined):
-            points -= penalty
-            findings.append(message)
-
-    for path in SERVICE_DOCS.values():
-        if len(read(path).splitlines()) > 80:
-            points -= 0.5
-            findings.append(f"{path.name} is too large to serve as a concise runtime tree summary.")
-
-    if points < 0:
-        points = 0
-
-    return score(points, maximum), findings
-
-
-def main() -> int:
-    parser = argparse.ArgumentParser()
-    parser.add_argument("--write", type=Path, default=None)
-    args = parser.parse_args()
-
-    ast_score, ast_findings = ast_similarity()
-    trace_score, trace_findings = implementation_traceability()
-    readability_score, readability_findings = human_agent_readability()
-
-    payload = {
-        "scores": {
-            "ast_similarity": ast_score,
-            "implementation_traceability": trace_score,
-            "human_agent_readability": readability_score,
-        },
-        "all_ten": ast_score == 10 and trace_score == 10 and readability_score == 10,
-        "findings": {
-            "ast_similarity": ast_findings,
-            "implementation_traceability": trace_findings,
-            "human_agent_readability": readability_findings,
-        },
-    }
-
-    output = json.dumps(payload, ensure_ascii=False, indent=2)
-    print(output)
-
-    if args.write is not None:
-        target = args.write
-        if not target.is_absolute():
-            target = ROOT / target
-        target.parent.mkdir(parents=True, exist_ok=True)
-        target.write_text(output + "\n", encoding="utf-8")
-
-    return 0 if payload["all_ten"] else 1
-
-
-if __name__ == "__main__":
-    raise SystemExit(main())

package/sdd/01_planning/01_feature/INDEX.md

@@ -1,16 +0,0 @@
-# Feature Index
-
-현재 canonical feature spec은 backend domain 기준으로 작성한다.
-
-- [auth_feature_spec.md](./auth_feature_spec.md)
-- [alerts_feature_spec.md](./alerts_feature_spec.md)
-- [catalog_feature_spec.md](./catalog_feature_spec.md)
-- [fulfillment_feature_spec.md](./fulfillment_feature_spec.md)
-- [health_feature_spec.md](./health_feature_spec.md)
-- [inventory_feature_spec.md](./inventory_feature_spec.md)
-- [order_feature_spec.md](./order_feature_spec.md)
-- [shipping_feature_spec.md](./shipping_feature_spec.md)
-- [support_feature_spec.md](./support_feature_spec.md)
-- [user_feature_spec.md](./user_feature_spec.md)
-
-현재 canonical owner domain은 `auth`, `user`, `catalog`, `inventory`, `orders`, `fulfillment`, `shipping`, `alerts`, `support`, `health`다.

package/sdd/01_planning/01_feature/README.md

@@ -1,76 +0,0 @@
-# Feature Planning
-
-## Naming
-
-- Folder name: `01_feature`
-- Document naming: `{domain}_feature_spec.md`
-- Source-of-truth feature spec files are backend domain based.
-
-## Scope
-
-- feature spec은 DDD 관점의 도메인 유스케이스 문서다.
-- route, navigation, sidebar, modal, tab, client local state, 화면 전이는 feature spec에 쓰지 않는다.
-- 위 항목은 `02_screen`에서 관리한다.
-- 하나의 feature code는 하나의 핵심 query 또는 command 유스케이스를 대표한다.
-
-## Implementation Basis
-
-- `Bounded Context`는 실제 backend owner module에 맞춰 작성한다.
-- feature spec은 현재 구현을 기준으로 먼저 정리하고, 미구현 요구는 `02_plan` backlog로 관리한다.
-- frontend-only mock, redirect, client local state machine은 feature spec에 쓰지 않는다.
-- 개별 domain feature spec은 `Purpose -> Scope -> Actor Summary -> Domain Summary -> Aggregate / Model -> Use Case Matrix` 흐름을 기본 뼈대로 사용한다.
-
-## Code Rule
-
-- Feature code format: `{DOMAIN}-F{NNN}`
-- 각 segment는 고정 길이로 유지한다.
-
-| Segment | Rule | Example |
-| --- | --- | --- |
-| `DOMAIN` | 3-letter uppercase domain code | `AUT`, `USR`, `CAT` |
-| `TYPE` | feature 식별자 고정값 | `F` |
-| `NNN` | 3-digit sequence | `001`, `002` |
-
-현재 canonical backend domain code는 `AUT`, `USR`, `CAT`, `INV`, `ORD`, `FUL`, `SHP`, `ALR`, `SUP`, `HLT`다.
-
-## Required Fields
-
-모든 feature row는 아래 정보를 포함한다.
-
-| Field | Purpose |
-| --- | --- |
-| `Feature Code` | 유스케이스의 고유 식별자 |
-| `Use Case` | 비즈니스 의도 |
-| `Actor` | 유스케이스를 시작하거나 소비하는 주체 |
-| `Bounded Context` | 해당 유스케이스가 속한 DDD 경계 |
-| `Aggregate / Model` | 핵심 aggregate, entity, policy, read model |
-| `Type` | `Query` 또는 `Command` |
-| `Preconditions` | 유스케이스가 성립하기 위한 선행 조건 |
-| `Domain Outcome` | 도메인 상태 변화 또는 조회 결과 |
-| `Invariant / Business Rule` | 반드시 지켜야 하는 규칙 |
-
-개별 domain feature spec은 use case matrix 외에 아래 섹션을 포함한다.
-
-| Section | Purpose |
-| --- | --- |
-| `Scope` | 포함/제외 범위를 분리해 screen, transport, backlog와의 경계를 명시한다 |
-| `Actor Summary` | use case matrix에 등장하는 각 actor의 책임과 사용 맥락을 설명한다 |
-
-## Document Boundary
-
-| Folder | Role |
-| --- | --- |
-| `01_feature` | actor, use case, aggregate, invariant 중심의 도메인 유스케이스 |
-| `02_screen` | route, UI surface, CTA, local interaction, transition |
-| `03_architecture` | bounded context 관계, 시스템 경계, 런타임 구조 |
-| `04_data` | 저장 모델, 관계, 키 정책 |
-| `05_api` | request/response, endpoint contract, transport 규약 |
-
-## Writing Rule
-
-- feature spec은 도메인 유스케이스 문서다.
-- `Type`은 `Query` 또는 `Command`만 사용한다.
-- use case matrix에 등장하는 모든 actor는 같은 문서의 `Actor Summary`에서 최소 1회 설명한다.
-- actor 이름은 화면 이름이 아니라 도메인 상호작용을 시작하거나 소비하는 주체 기준으로 유지한다.
-- 식별자는 UUID v7을 기준으로 해석하고, legacy numeric id는 기준 식별자로 간주하지 않는다.
-- 기본 정렬은 `created_at` 또는 time-ordered UUID v7을 사용하고, 명시 순서가 필요해질 때만 `order` 계열 필드를 추가한다.

package/sdd/01_planning/01_feature/alerts_feature_spec.md

@@ -1,55 +0,0 @@
-# alerts feature spec
-
-- 작성 버전: 1.0.0
-
-## 1. Purpose
-
-`alerts` bounded context가 제공하는 운영 알람 feed와 읽음 처리 기능을 구현 기준으로 정리한다.
-
-## 2. Scope
-
-- 포함 범위:
-  - admin surface의 운영 알람 목록 조회
-  - 알람 단건 읽음 처리와 전체 읽음 처리
-- 제외 범위:
-  - email, SMS, push 같은 외부 발송 인프라
-  - 주문/배송/재고 도메인 내부의 원인 계산 로직 자체
-
-## 3. Actor Summary
-
-| Actor | Description | Appears In |
-| --- | --- | --- |
-| `Admin Operator` | admin 서비스에서 운영 이벤트와 예외 상황을 확인하고 알람 읽음 상태를 관리하는 운영 관리자다. | `ALR-F001`, `ALR-F002`, `ALR-F003` |
-
-## 4. Bounded Context Summary
-
-| Item | Value |
-| --- | --- |
-| Domain Code | `ALR` |
-| Bounded Context | Alert Center |
-| Primary Backend Owner | `server/contexts/alerts` |
-| Related Context | `orders`, `shipping`, `inventory`, `support` |
-| Main Entry Contract | `GET /api/v1/alerts`, `POST /api/v1/alerts/{alert_id}/read`, `POST /api/v1/alerts/read-all` |
-
-## 5. Aggregate / Model Snapshot
-
-| Aggregate / Model | Role |
-| --- | --- |
-| `AlertRecord` | 운영 알람 저장 모델 |
-| `AlertItem` | 알람 feed 응답 모델 |
-| `AlertsPayload` | unread count와 목록을 묶은 응답 모델 |
-| `AlertReadResult` | 단건 읽음 처리 결과 |
-| `AlertsReadAllResult` | 전체 읽음 처리 결과 |
-
-## 6. Use Case Matrix
-
-| Feature Code | Use Case | Actor | Bounded Context | Aggregate / Model | Type | Preconditions | Domain Outcome | Invariant / Business Rule |
-| --- | --- | --- | --- | --- | --- | --- | --- | --- |
-| `ALR-F001` | 운영 알람 feed를 조회한다 | Admin Operator | Alert Center | `AlertsPayload`, `AlertItem`, `AlertRecord` | Query | 관리자 토큰이 유효하고 alert bootstrap 데이터가 존재해야 한다 | unread count와 최신 운영 알람 목록을 반환한다 | feed 조회는 알람 읽음 상태를 변경하지 않는다 |
-| `ALR-F002` | 운영 알람 1건을 읽음 처리한다 | Admin Operator | Alert Center | `AlertReadResult`, `AlertRecord` | Command | 관리자 토큰이 유효하고 요청한 `alert_id`가 존재해야 한다 | 선택한 알람의 `read` 상태가 `true`가 된다 | 존재하지 않는 `alert_id`면 `404`를 반환한다 |
-| `ALR-F003` | 운영 알람 전체를 읽음 처리한다 | Admin Operator | Alert Center | `AlertsReadAllResult`, `AlertRecord` | Command | 관리자 토큰이 유효하고 alert bootstrap 데이터가 존재해야 한다 | 미읽음 알람이 모두 읽음 상태로 갱신된다 | 이미 읽은 알람은 중복 변경하지 않는다 |
-
-## 7. Notes
-
-- `alerts`는 admin dashboard의 보조 read model이 아니라 독립 운영 피드로 취급한다.
-- 원인 도메인이 무엇이든 admin이 소비하는 알람 표현과 읽음 상태는 `alerts` context가 소유한다.