agentic-dev 0.2.11 → 0.2.13

package/infra/terraform/openstack/server/templates/server-user-data.sh.tftpl

@@ -1,50 +0,0 @@
-#!/bin/bash
-set -Eeuo pipefail
-
-mkdir -p ${runtime_root}
-
-cat > ${runtime_root}/server.env <<'ENVEOF'
-${backend_env_text}
-ENVEOF
-
-install_container_runtime() {
-  if command -v apt-get >/dev/null 2>&1; then
-    export DEBIAN_FRONTEND=noninteractive
-    apt-get update
-    apt-get install -y docker.io git ca-certificates curl
-  elif command -v dnf >/dev/null 2>&1; then
-    dnf update -y
-    dnf install -y docker git ca-certificates curl
-  else
-    yum update -y
-    yum install -y docker git ca-certificates curl
-  fi
-
-  systemctl enable docker
-  systemctl start docker
-  usermod -aG docker ubuntu >/dev/null 2>&1 || true
-
-  docker rm -f ${backend_container_name} >/dev/null 2>&1 || true
-
-  if [ -n "${backend_container_image}" ]; then
-    docker pull "${backend_container_image}"
-    docker run -d \
-      --name "${backend_container_name}" \
-      --restart unless-stopped \
-      --env-file ${runtime_root}/server.env \
-      -p ${backend_port}:${backend_port} \
-      "${backend_container_image}"
-  elif [ -n "${backend_repo_url}" ]; then
-    rm -rf "${runtime_root}/src"
-    git clone --depth 1 --branch "${backend_repo_ref}" "${backend_repo_url}" "${runtime_root}/src"
-    docker build -t ${backend_container_name}:bootstrap "${runtime_root}/src/${backend_repo_subdir}"
-    docker run -d \
-      --name "${backend_container_name}" \
-      --restart unless-stopped \
-      --env-file ${runtime_root}/server.env \
-      -p ${backend_port}:${backend_port} \
-      ${backend_container_name}:bootstrap
-  fi
-}
-
-install_container_runtime

package/infra/terraform/openstack/server/variables.tf

@@ -1,233 +0,0 @@
-variable "auth_url" {
-  type        = string
-  description = "OpenStack Keystone auth URL."
-}
-
-variable "region" {
-  type        = string
-  description = "OpenStack region name."
-  default     = "RegionOne"
-}
-
-variable "interface" {
-  type        = string
-  description = "OpenStack endpoint interface."
-  default     = "public"
-}
-
-variable "auth_type" {
-  type        = string
-  description = "OpenStack auth type."
-  default     = "password"
-}
-
-variable "username" {
-  type        = string
-  description = "OpenStack username."
-  default     = ""
-}
-
-variable "password" {
-  type        = string
-  description = "OpenStack password."
-  default     = ""
-  sensitive   = true
-}
-
-variable "project_name" {
-  type        = string
-  description = "OpenStack project name."
-  default     = ""
-}
-
-variable "user_domain_name" {
-  type        = string
-  description = "OpenStack user domain name."
-  default     = "Default"
-}
-
-variable "project_domain_name" {
-  type        = string
-  description = "OpenStack project domain name."
-  default     = "Default"
-}
-
-variable "application_credential_id" {
-  type        = string
-  description = "OpenStack application credential id."
-  default     = ""
-}
-
-variable "application_credential_secret" {
-  type        = string
-  description = "OpenStack application credential secret."
-  default     = ""
-  sensitive   = true
-}
-
-variable "insecure" {
-  type        = bool
-  description = "Disable TLS validation."
-  default     = false
-}
-
-variable "service_name" {
-  type        = string
-  description = "Service short name."
-  default     = "template-service"
-}
-
-variable "application_name" {
-  type        = string
-  description = "Human-readable application name passed to the backend environment."
-  default     = "Template API"
-}
-
-variable "phase" {
-  type        = string
-  description = "Deployment phase."
-  default     = "dev"
-
-  validation {
-    condition     = contains(["dev", "prod"], lower(var.phase))
-    error_message = "phase must be one of: dev, prod"
-  }
-}
-
-variable "external_network_name" {
-  type        = string
-  description = "External provider network used for router gateway and floating IP."
-  default     = "public"
-}
-
-variable "app_network_name" {
-  type        = string
-  description = "Tenant app network name. Leave empty to derive from service+phase."
-  default     = ""
-}
-
-variable "app_subnet_name" {
-  type        = string
-  description = "Tenant app subnet name. Leave empty to derive from service+phase."
-  default     = ""
-}
-
-variable "app_subnet_cidr" {
-  type        = string
-  description = "App subnet CIDR."
-  default     = "10.42.0.0/24"
-}
-
-variable "dns_nameservers" {
-  type        = list(string)
-  description = "Optional DNS nameservers for the app subnet."
-  default     = ["1.1.1.1", "8.8.8.8"]
-}
-
-variable "backend_image_name" {
-  type        = string
-  description = "Boot image name for the API compute instance."
-  default     = "ubuntu-24.04-noble-amd64"
-}
-
-variable "instance_flavor_name" {
-  type        = string
-  description = "Flavor for the API compute instance."
-  default     = "m1.small"
-}
-
-variable "backend_port" {
-  type        = number
-  description = "API service port."
-  default     = 8080
-}
-
-variable "associate_floating_ip" {
-  type        = bool
-  description = "Whether to attach a floating IP to the API instance."
-  default     = true
-}
-
-variable "backend_ingress_cidrs" {
-  type        = list(string)
-  description = "CIDRs allowed to reach the API service port."
-  default     = ["0.0.0.0/0"]
-}
-
-variable "ssh_ingress_cidrs" {
-  type        = list(string)
-  description = "CIDRs allowed to SSH to the API instance."
-  default     = []
-}
-
-variable "ssh_keypair_name" {
-  type        = string
-  description = "OpenStack keypair name used for browser-terminal SSH access."
-  default     = ""
-}
-
-variable "ssh_public_key" {
-  type        = string
-  description = "Public key material registered in OpenStack for browser-terminal SSH access."
-  default     = ""
-}
-
-variable "desired_state" {
-  type        = string
-  description = "Desired server instance power state."
-  default     = "running"
-
-  validation {
-    condition     = contains(["running", "stopped"], lower(var.desired_state))
-    error_message = "desired_state must be one of: running, stopped"
-  }
-}
-
-variable "backend_container_image" {
-  type        = string
-  description = "Prebuilt backend image. If empty, repo bootstrap build is used."
-  default     = ""
-}
-
-variable "backend_container_name" {
-  type        = string
-  description = "Runtime container name."
-  default     = "template-service-server"
-}
-
-variable "backend_repo_url" {
-  type        = string
-  description = "Repo URL used for bootstrap build."
-  default     = "https://github.com/example-org/example-service.git"
-}
-
-variable "backend_repo_ref" {
-  type        = string
-  description = "Repo ref for bootstrap build."
-  default     = "main"
-}
-
-variable "backend_repo_subdir" {
-  type        = string
-  description = "Repo-relative server directory."
-  default     = "server"
-}
-
-variable "jwt_secret_key" {
-  type        = string
-  description = "JWT secret key. Leave empty to auto-generate."
-  default     = ""
-  sensitive   = true
-}
-
-variable "backend_env" {
-  type        = map(string)
-  description = "Additional backend environment variables."
-  default     = {}
-}
-
-variable "tags" {
-  type        = map(string)
-  description = "Additional metadata tags."
-  default     = {}
-}

package/infra/terraform/openstack/server/zz_aspace.auto.tfvars.example.json

@@ -1,29 +0,0 @@
-{
-  "auth_type": "password",
-  "auth_url": "https://keystone.example.com:5000/v3",
-  "backend_repo_ref": "main",
-  "backend_repo_url": "https://github.com/example-org/example-service.git",
-  "backend_image_name": "ubuntu-24.04-noble-amd64",
-  "backend_port": 8080,
-  "instance_flavor_name": "m1.small",
-  "ssh_ingress_cidrs": ["0.0.0.0/0"],
-  "ssh_keypair_name": "template-dev-terminal",
-  "ssh_public_key": "ssh-ed25519 AAAA... replace-me",
-  "insecure": false,
-  "interface": "public",
-  "phase": "dev",
-  "external_network_name": "public",
-  "app_subnet_cidr": "10.52.0.0/24",
-  "project_domain_name": "Default",
-  "project_name": "template-service",
-  "region": "RegionOne",
-  "service_name": "template-service",
-  "application_name": "Template API",
-  "user_domain_name": "Default",
-  "username": "admin",
-  "backend_env": {
-    "API_PREFIX": "/api/v1",
-    "DATABASE_BACKEND": "postgres",
-    "POSTGRES_URL": "postgresql://template:template@db:5432/template"
-  }
-}

package/pnpm-workspace.yaml

@@ -1,2 +0,0 @@
-packages:
-  - client/*

package/scripts/dev/audit_sdd_build_ast.py

@@ -1,277 +0,0 @@
-#!/usr/bin/env python3
-
-from __future__ import annotations
-
-import argparse
-import json
-import re
-from pathlib import Path
-
-
-ROOT = Path(__file__).resolve().parents[2]
-
-SERVICE_DOCS = {
-    "mobile": ROOT / "sdd/03_build/01_feature/service/mobile_surface.md",
-    "web": ROOT / "sdd/03_build/01_feature/service/web_surface.md",
-    "admin": ROOT / "sdd/03_build/01_feature/service/admin_surface.md",
-    "landing": ROOT / "sdd/03_build/01_feature/service/landing_surface.md",
-}
-
-BUILD_AST_DOC = ROOT / "sdd/03_build/03_architecture/build_ast_runtime_tree_governance.md"
-
-
-def read(path: Path) -> str:
-    return path.read_text(encoding="utf-8")
-
-
-def score(value: float, maximum: float) -> int:
-    if maximum <= 0:
-        return 0
-    scaled = round((value / maximum) * 10)
-    return max(0, min(10, scaled))
-
-
-def contains_all(text: str, needles: list[str]) -> bool:
-    return all(needle in text for needle in needles)
-
-
-def ast_similarity() -> tuple[int, list[str]]:
-    findings: list[str] = []
-    points = 0.0
-    maximum = 10.0
-
-    mobile = read(SERVICE_DOCS["mobile"])
-    if contains_all(
-        mobile,
-        [
-            "client/mobile/src/main.tsx",
-            "AuthProvider",
-            "BrowserRouter",
-            "client/mobile/src/app/App.tsx",
-            "ProtectedRoute",
-            "InShell",
-            "DashboardPage",
-            "FulfillmentPage",
-            "ShippingPage",
-        ],
-    ):
-        points += 2.5
-    else:
-        findings.append("mobile surface summary does not reflect the real provider/router/shell chain.")
-
-    web = read(SERVICE_DOCS["web"])
-    if contains_all(
-        web,
-        [
-            "client/web/src/main.tsx",
-            "AuthProvider",
-            "BrowserRouter",
-            "client/web/src/app/App.tsx",
-            "ProtectedRoute",
-            "AppShell",
-            "DashboardPage",
-            "OrdersPage",
-        ],
-    ):
-        points += 2.5
-    else:
-        findings.append("web surface summary does not reflect the real app shell route tree.")
-
-    admin = read(SERVICE_DOCS["admin"])
-    if contains_all(
-        admin,
-        [
-            "client/admin/src/main.tsx",
-            "AuthProvider",
-            "BrowserRouter",
-            "client/admin/src/app/App.tsx",
-            "ProtectedRoute",
-            "AdminShell",
-            "AdminDashboardPage",
-            "AdminQueuePage",
-            "AdminSupportPage",
-        ],
-    ):
-        points += 2.5
-    else:
-        findings.append("admin surface summary does not reflect the real admin shell route tree.")
-
-    landing = read(SERVICE_DOCS["landing"])
-    if contains_all(
-        landing,
-        [
-            "client/landing/src/main.tsx",
-            "AuthProvider",
-            "BrowserRouter",
-            "client/landing/src/App.tsx",
-            "LandingHomePage",
-            "LandingLoginPage",
-            "ProtectedRoute",
-            "LandingShell",
-            "LandingWorkspacePage",
-        ],
-    ):
-        points += 2.5
-    else:
-        findings.append("landing surface summary does not reflect the public and gated route assembly.")
-
-    return score(points, maximum), findings
-
-
-def implementation_traceability() -> tuple[int, list[str]]:
-    findings: list[str] = []
-    points = 0.0
-    maximum = 10.0
-
-    mobile = read(SERVICE_DOCS["mobile"])
-    if contains_all(
-        mobile,
-        [
-            "server/main.py",
-            "server/api/http/app.py",
-            "server/api/http/router.py",
-            "contexts/auth/contracts/http/router.py",
-            "contexts/fulfillment/contracts/http/router.py",
-            "contexts/shipping/contracts/http/router.py",
-        ],
-    ):
-        points += 2.0
-    else:
-        findings.append("mobile surface summary does not trace route leaves to backend contract leaves.")
-
-    web = read(SERVICE_DOCS["web"])
-    if contains_all(
-        web,
-        [
-            "server/main.py",
-            "server/api/http/app.py",
-            "server/api/http/router.py",
-            "contexts/auth/contracts/http/router.py",
-            "contexts/catalog/contracts/http/router.py",
-            "contexts/orders/contracts/http/router.py",
-        ],
-    ):
-        points += 2.0
-    else:
-        findings.append("web surface summary does not trace dashboard and orders routes to backend contracts.")
-
-    admin = read(SERVICE_DOCS["admin"])
-    if contains_all(
-        admin,
-        [
-            "server/main.py",
-            "server/api/http/app.py",
-            "server/api/http/router.py",
-            "contexts/alerts/contracts/http/router.py",
-            "contexts/inventory/contracts/http/router.py",
-            "contexts/support/contracts/http/router.py",
-        ],
-    ):
-        points += 2.0
-    else:
-        findings.append("admin surface summary does not trace admin routes to backend contracts.")
-
-    landing = read(SERVICE_DOCS["landing"])
-    if contains_all(
-        landing,
-        [
-            "server/main.py",
-            "server/api/http/app.py",
-            "server/api/http/router.py",
-            "contexts/catalog/contracts/http/router.py",
-            "contexts/health/contracts/http/router.py",
-            "contexts/user/contracts/http/router.py",
-        ],
-    ):
-        points += 2.0
-    else:
-        findings.append("landing surface summary does not trace public/workspace routes to backend contracts.")
-
-    architecture = read(BUILD_AST_DOC)
-    if contains_all(
-        architecture,
-        [
-            ".agent/ralph.sh",
-            ".claude/agents/",
-            ".codex/skills/SKILL.md",
-            "infra/terraform/README.md",
-        ],
-    ):
-        points += 2.0
-    else:
-        findings.append("build AST architecture summary does not retain the canonical harness and infra roots.")
-
-    return score(points, maximum), findings
-
-
-def human_agent_readability() -> tuple[int, list[str]]:
-    findings: list[str] = []
-    points = 10.0
-    maximum = 10.0
-
-    build_md_files = sorted((ROOT / "sdd/03_build").rglob("*.md"))
-    combined = "\n".join(read(path) for path in build_md_files)
-
-    pattern_penalties = [
-        (r"## Current Build Note", 2.0, "build docs still use a Current Build Note section instead of current-state structure."),
-        (r"\bRalph\b", 2.0, "build docs still contain Ralph loop narrative."),
-        (r"2026-\d{2}-\d{2}", 2.0, "build docs still contain dated history markers."),
-        (r"이번 턴", 1.0, "build docs still contain turn-specific execution narrative."),
-        (r"run `\d+", 1.0, "build docs still contain run-id style execution narrative."),
-        (r"\biteration\b", 1.0, "build docs still contain iteration-oriented loop narrative."),
-    ]
-
-    for pattern, penalty, message in pattern_penalties:
-        if re.search(pattern, combined):
-            points -= penalty
-            findings.append(message)
-
-    for path in SERVICE_DOCS.values():
-        if len(read(path).splitlines()) > 80:
-            points -= 0.5
-            findings.append(f"{path.name} is too large to serve as a concise runtime tree summary.")
-
-    if points < 0:
-        points = 0
-
-    return score(points, maximum), findings
-
-
-def main() -> int:
-    parser = argparse.ArgumentParser()
-    parser.add_argument("--write", type=Path, default=None)
-    args = parser.parse_args()
-
-    ast_score, ast_findings = ast_similarity()
-    trace_score, trace_findings = implementation_traceability()
-    readability_score, readability_findings = human_agent_readability()
-
-    payload = {
-        "scores": {
-            "ast_similarity": ast_score,
-            "implementation_traceability": trace_score,
-            "human_agent_readability": readability_score,
-        },
-        "all_ten": ast_score == 10 and trace_score == 10 and readability_score == 10,
-        "findings": {
-            "ast_similarity": ast_findings,
-            "implementation_traceability": trace_findings,
-            "human_agent_readability": readability_findings,
-        },
-    }
-
-    output = json.dumps(payload, ensure_ascii=False, indent=2)
-    print(output)
-
-    if args.write is not None:
-        target = args.write
-        if not target.is_absolute():
-            target = ROOT / target
-        target.parent.mkdir(parents=True, exist_ok=True)
-        target.write_text(output + "\n", encoding="utf-8")
-
-    return 0 if payload["all_ten"] else 1
-
-
-if __name__ == "__main__":
-    raise SystemExit(main())

package/sdd/01_planning/01_feature/INDEX.md

@@ -1,16 +0,0 @@
-# Feature Index
-
-현재 canonical feature spec은 backend domain 기준으로 작성한다.
-
-- [auth_feature_spec.md](./auth_feature_spec.md)
-- [alerts_feature_spec.md](./alerts_feature_spec.md)
-- [catalog_feature_spec.md](./catalog_feature_spec.md)
-- [fulfillment_feature_spec.md](./fulfillment_feature_spec.md)
-- [health_feature_spec.md](./health_feature_spec.md)
-- [inventory_feature_spec.md](./inventory_feature_spec.md)
-- [order_feature_spec.md](./order_feature_spec.md)
-- [shipping_feature_spec.md](./shipping_feature_spec.md)
-- [support_feature_spec.md](./support_feature_spec.md)
-- [user_feature_spec.md](./user_feature_spec.md)
-
-현재 canonical owner domain은 `auth`, `user`, `catalog`, `inventory`, `orders`, `fulfillment`, `shipping`, `alerts`, `support`, `health`다.

package/sdd/01_planning/01_feature/README.md

@@ -1,76 +0,0 @@
-# Feature Planning
-
-## Naming
-
-- Folder name: `01_feature`
-- Document naming: `{domain}_feature_spec.md`
-- Source-of-truth feature spec files are backend domain based.
-
-## Scope
-
-- feature spec은 DDD 관점의 도메인 유스케이스 문서다.
-- route, navigation, sidebar, modal, tab, client local state, 화면 전이는 feature spec에 쓰지 않는다.
-- 위 항목은 `02_screen`에서 관리한다.
-- 하나의 feature code는 하나의 핵심 query 또는 command 유스케이스를 대표한다.
-
-## Implementation Basis
-
-- `Bounded Context`는 실제 backend owner module에 맞춰 작성한다.
-- feature spec은 현재 구현을 기준으로 먼저 정리하고, 미구현 요구는 `02_plan` backlog로 관리한다.
-- frontend-only mock, redirect, client local state machine은 feature spec에 쓰지 않는다.
-- 개별 domain feature spec은 `Purpose -> Scope -> Actor Summary -> Domain Summary -> Aggregate / Model -> Use Case Matrix` 흐름을 기본 뼈대로 사용한다.
-
-## Code Rule
-
-- Feature code format: `{DOMAIN}-F{NNN}`
-- 각 segment는 고정 길이로 유지한다.
-
-| Segment | Rule | Example |
-| --- | --- | --- |
-| `DOMAIN` | 3-letter uppercase domain code | `AUT`, `USR`, `CAT` |
-| `TYPE` | feature 식별자 고정값 | `F` |
-| `NNN` | 3-digit sequence | `001`, `002` |
-
-현재 canonical backend domain code는 `AUT`, `USR`, `CAT`, `INV`, `ORD`, `FUL`, `SHP`, `ALR`, `SUP`, `HLT`다.
-
-## Required Fields
-
-모든 feature row는 아래 정보를 포함한다.
-
-| Field | Purpose |
-| --- | --- |
-| `Feature Code` | 유스케이스의 고유 식별자 |
-| `Use Case` | 비즈니스 의도 |
-| `Actor` | 유스케이스를 시작하거나 소비하는 주체 |
-| `Bounded Context` | 해당 유스케이스가 속한 DDD 경계 |
-| `Aggregate / Model` | 핵심 aggregate, entity, policy, read model |
-| `Type` | `Query` 또는 `Command` |
-| `Preconditions` | 유스케이스가 성립하기 위한 선행 조건 |
-| `Domain Outcome` | 도메인 상태 변화 또는 조회 결과 |
-| `Invariant / Business Rule` | 반드시 지켜야 하는 규칙 |
-
-개별 domain feature spec은 use case matrix 외에 아래 섹션을 포함한다.
-
-| Section | Purpose |
-| --- | --- |
-| `Scope` | 포함/제외 범위를 분리해 screen, transport, backlog와의 경계를 명시한다 |
-| `Actor Summary` | use case matrix에 등장하는 각 actor의 책임과 사용 맥락을 설명한다 |
-
-## Document Boundary
-
-| Folder | Role |
-| --- | --- |
-| `01_feature` | actor, use case, aggregate, invariant 중심의 도메인 유스케이스 |
-| `02_screen` | route, UI surface, CTA, local interaction, transition |
-| `03_architecture` | bounded context 관계, 시스템 경계, 런타임 구조 |
-| `04_data` | 저장 모델, 관계, 키 정책 |
-| `05_api` | request/response, endpoint contract, transport 규약 |
-
-## Writing Rule
-
-- feature spec은 도메인 유스케이스 문서다.
-- `Type`은 `Query` 또는 `Command`만 사용한다.
-- use case matrix에 등장하는 모든 actor는 같은 문서의 `Actor Summary`에서 최소 1회 설명한다.
-- actor 이름은 화면 이름이 아니라 도메인 상호작용을 시작하거나 소비하는 주체 기준으로 유지한다.
-- 식별자는 UUID v7을 기준으로 해석하고, legacy numeric id는 기준 식별자로 간주하지 않는다.
-- 기본 정렬은 `created_at` 또는 time-ordered UUID v7을 사용하고, 명시 순서가 필요해질 때만 `order` 계열 필드를 추가한다.