ai-core-framework 0.1.0

package/core/scripts/install-codex-prompts.sh

@@ -0,0 +1,127 @@
+#!/usr/bin/env bash
+# core/scripts/install-codex-prompts.sh
+#
+# Installs AI Core command wrappers as Codex custom slash prompts.
+#
+# Usage:
+#   bash core/scripts/install-codex-prompts.sh
+#   CODEX_PROMPTS_DIR=~/.codex/prompts bash core/scripts/install-codex-prompts.sh
+
+set -euo pipefail
+
+PROMPTS_DIR="${CODEX_PROMPTS_DIR:-$HOME/.codex/prompts}"
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+BLUE='\033[0;34m'
+NC='\033[0m'
+
+log_info() { echo -e "${BLUE}i${NC}  $1"; }
+log_pass() { echo -e "${GREEN}+${NC}  $1"; }
+log_fail() { echo -e "${RED}x${NC}  $1"; }
+
+repo_root() {
+  git rev-parse --show-toplevel 2>/dev/null || pwd
+}
+
+extract_frontmatter_value() {
+  local key="$1"
+  local file="$2"
+  awk -F': *' -v key="$key" '
+    $0 == "---" { markers += 1; next }
+    markers == 1 && $1 == key { print $2; exit }
+    markers >= 2 { exit }
+  ' "$file" | sed -E 's/^"//; s/"$//'
+}
+
+write_prompt() {
+  local command_file="$1"
+  local root="$2"
+  local command display_name description prompt_file rel_command_file fallback_command_file fallback_rules_file fallback_agents_dir fallback_log_script
+
+  command="$(extract_frontmatter_value command "$command_file")"
+  display_name="$(extract_frontmatter_value display_name "$command_file")"
+
+  if [ -z "$command" ]; then
+    log_info "Skipping non-command file: $command_file"
+    return 0
+  fi
+
+  prompt_file="$PROMPTS_DIR/${command#/}.md"
+  rel_command_file="${command_file#./}"
+  fallback_command_file="${root}/${rel_command_file}"
+  fallback_rules_file="${root}/core/rules/00-global-rules.md"
+  fallback_agents_dir="${root}/core/agents"
+  fallback_log_script="${root}/core/scripts/log-user-request.sh"
+  description="${display_name:-AI Core command ${command}}"
+
+  cat > "$prompt_file" <<EOF
+# ${command}
+
+${description}
+
+You are executing the AI Core custom slash command \`${command}\`.
+
+User arguments:
+
+\`\`\`text
+\$ARGUMENTS
+\`\`\`
+
+Mandatory steps:
+
+1. Log this user request first. Prefer the project-local script when it exists; otherwise use the installed AI Core fallback:
+   \`\`\`bash
+   if [ -f core/scripts/log-user-request.sh ]; then
+     AI_AGENT=codex bash core/scripts/log-user-request.sh "${command} \$ARGUMENTS"
+   else
+     AI_AGENT=codex bash ${fallback_log_script} "${command} \$ARGUMENTS"
+   fi
+   \`\`\`
+
+2. Read and follow this command spec exactly. Prefer the project-local path when it exists; otherwise use the installed AI Core fallback:
+   \`\`\`text
+   ${rel_command_file}
+   ${fallback_command_file}
+   \`\`\`
+
+3. Read and follow the global rules. Prefer the project-local path when it exists; otherwise use the installed AI Core fallback:
+   \`\`\`text
+   core/rules/00-global-rules.md
+   ${fallback_rules_file}
+   \`\`\`
+
+4. Infer the owner agent from the command frontmatter. If an agent file exists, read it before acting. Prefer the project-local path, then the installed fallback:
+   \`\`\`text
+   core/agents/<owner_agent>.md
+   ${fallback_agents_dir}/<owner_agent>.md
+   \`\`\`
+
+5. Execute in chat-first mode. Do not ask the user to run shell wrappers unless the command explicitly requires deterministic script execution.
+
+6. Report the command executed, inferred agent, files changed, validation result, and suggested next AI Core command.
+EOF
+
+  log_pass "Installed ${prompt_file}"
+}
+
+main() {
+  local root
+  root="$(repo_root)"
+  cd "$root"
+
+  if [ ! -d "core/commands" ]; then
+    log_fail "Missing core/commands. Run from AI Core repo root."
+    exit 1
+  fi
+
+  mkdir -p "$PROMPTS_DIR"
+
+  while IFS= read -r command_file; do
+    write_prompt "$command_file" "$root"
+  done < <(find core/commands -name '*.md' -type f | sort)
+
+  log_pass "AI Core Codex prompts installed in ${PROMPTS_DIR}"
+}
+
+main "$@"

package/core/scripts/log-user-request.sh

@@ -0,0 +1,113 @@
+#!/usr/bin/env bash
+# core/scripts/log-user-request.sh
+#
+# Append a sanitized user request record to project/user-requests.jsonl.
+#
+# Usage:
+#   bash core/scripts/log-user-request.sh "user request text"
+
+set -euo pipefail
+
+REQUEST_TEXT="${*:-}"
+LOG_FILE="${AI_CORE_USER_REQUEST_LOG:-project/user-requests.jsonl}"
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+NC='\033[0m'
+
+log_pass() { echo -e "${GREEN}+${NC}  $1"; }
+log_fail() { echo -e "${RED}x${NC}  $1"; }
+
+if [ -z "$REQUEST_TEXT" ]; then
+  log_fail "Usage: bash core/scripts/log-user-request.sh \"user request text\""
+  exit 2
+fi
+
+if ! command -v jq >/dev/null 2>&1; then
+  log_fail "jq not installed. Install with: brew install jq"
+  exit 2
+fi
+
+now_utc() {
+  date -u +%Y-%m-%dT%H:%M:%SZ
+}
+
+agent_name() {
+  local agent="${AI_AGENT:-unknown-agent}"
+  if [[ "$agent" == *-agent ]]; then
+    printf '%s' "$agent"
+  else
+    printf '%s-agent' "$agent"
+  fi
+}
+
+hash_value() {
+  local value="$1"
+  if command -v sha256sum >/dev/null 2>&1; then
+    printf '%s' "$value" | sha256sum | awk '{print $1}'
+  else
+    printf '%s' "$value" | shasum -a 256 | awk '{print $1}'
+  fi
+}
+
+sanitize_request() {
+  printf '%s' "$1" |
+    sed -E \
+      -e 's/([Pp][Aa][Ss][Ss][Ww][Oo][Rr][Dd][[:space:]]*[:=][[:space:]]*)[^[:space:]]+/\1[REDACTED]/g' \
+      -e 's/([Tt][Oo][Kk][Ee][Nn][[:space:]]*[:=][[:space:]]*)[^[:space:]]+/\1[REDACTED]/g' \
+      -e 's/([Aa][Pp][Ii][_-]?[Kk][Ee][Yy][[:space:]]*[:=][[:space:]]*)[^[:space:]]+/\1[REDACTED]/g' \
+      -e 's/(Bearer[[:space:]]+)[A-Za-z0-9._~+\/=-]+/\1[REDACTED]/g' \
+      -e 's/(AKIA[A-Z0-9]{16})/[REDACTED_AWS_KEY]/g'
+}
+
+detect_command() {
+  printf '%s' "$1" | awk '{print $1}' | grep -E '^/' || true
+}
+
+detect_ticket() {
+  printf '%s' "$1" | grep -Eo 'TICKET-[0-9]+' | head -1 || true
+}
+
+last_hash() {
+  if [ ! -s "$LOG_FILE" ]; then
+    printf ''
+    return 0
+  fi
+  tail -1 "$LOG_FILE" | jq -r '.hash // empty'
+}
+
+mkdir -p "$(dirname "$LOG_FILE")"
+touch "$LOG_FILE"
+
+AT="$(now_utc)"
+BY="$(agent_name)"
+SANITIZED="$(sanitize_request "$REQUEST_TEXT")"
+REQUEST_HASH="$(hash_value "$REQUEST_TEXT")"
+COMMAND="$(detect_command "$SANITIZED")"
+TICKET_ID="$(detect_ticket "$SANITIZED")"
+PREV_HASH="$(last_hash)"
+
+PAYLOAD="$(jq -cn \
+  --arg at "$AT" \
+  --arg by "$BY" \
+  --arg source "chat" \
+  --arg request "$SANITIZED" \
+  --arg request_hash "$REQUEST_HASH" \
+  --arg command "$COMMAND" \
+  --arg ticket_id "$TICKET_ID" \
+  --arg prev_hash "$PREV_HASH" \
+  '{
+    at:$at,
+    by_agent:$by,
+    source:$source,
+    request:$request,
+    request_hash:$request_hash,
+    command:(if ($command | length) > 0 then $command else null end),
+    ticket_id:(if ($ticket_id | length) > 0 then $ticket_id else null end),
+    redaction:"Secrets and obvious credentials are redacted before logging.",
+    prev_hash:$prev_hash
+  }')"
+HASH="$(hash_value "$PAYLOAD")"
+
+jq -cn --argjson payload "$PAYLOAD" --arg hash "$HASH" '$payload + {hash:$hash}' >> "$LOG_FILE"
+log_pass "Logged user request to $LOG_FILE"

package/core/scripts/setup-project.sh

@@ -0,0 +1,183 @@
+#!/usr/bin/env bash
+# core/scripts/setup-project.sh
+#
+# Makes a copied core/ framework operational in a project.
+#
+# Usage:
+#   bash core/scripts/setup-project.sh
+
+set -euo pipefail
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+NC='\033[0m'
+
+log_info() { echo -e "${BLUE}i${NC}  $1"; }
+log_pass() { echo -e "${GREEN}+${NC}  $1"; }
+log_warn() { echo -e "${YELLOW}!${NC}  $1"; }
+log_fail() { echo -e "${RED}x${NC}  $1"; }
+
+copy_if_missing() {
+  local src="$1"
+  local dst="$2"
+
+  if [ -f "$dst" ]; then
+    log_pass "Preserved existing $dst"
+    return 0
+  fi
+
+  cp "$src" "$dst"
+  log_pass "Created $dst"
+}
+
+write_backlog_if_missing() {
+  local path="project/backlog/backlog.json"
+
+  if [ -f "$path" ]; then
+    log_pass "Preserved existing $path"
+    return 0
+  fi
+
+  printf '{\n  "version": "1.0.0",\n  "updated_at": "%s",\n  "updated_by": "setup-project",\n  "strategy": "ranked",\n  "items": []\n}\n' "$(date -u +%Y-%m-%dT%H:%M:%SZ)" > "$path"
+  log_pass "Created $path"
+}
+
+install_framework_scripts() {
+  mkdir -p scripts
+
+  for script in ai-core.sh workflow.sh validate-state.sh validate-docs.sh validate-permissions.sh validate-audit-log.sh generate-views.sh install-codex-prompts.sh log-user-request.sh setup-project.sh; do
+    local src="core/scripts/$script"
+    local dst="scripts/$script"
+
+    if [ ! -f "$src" ]; then
+      log_warn "Missing $src; cannot install $dst"
+      continue
+    fi
+
+    if [ -f "$dst" ]; then
+      log_pass "Preserved existing $dst"
+      continue
+    fi
+
+    cp "$src" "$dst"
+    chmod +x "$dst"
+    log_pass "Installed $dst"
+  done
+}
+
+install_governance_workflow() {
+  local src="core/templates/ci/ai-core-governance.yml"
+  local dst=".github/workflows/ai-core-governance.yml"
+
+  if [ ! -f "$src" ]; then
+    log_warn "Missing $src; governance workflow not installed"
+    return 0
+  fi
+
+  mkdir -p .github/workflows
+
+  if [ -f "$dst" ]; then
+    log_pass "Preserved existing $dst"
+    return 0
+  fi
+
+  cp "$src" "$dst"
+  log_pass "Installed $dst"
+}
+
+main() {
+  echo ""
+  echo "========================================================"
+  echo "  Setting up AI Core project runtime"
+  echo "========================================================"
+  echo ""
+
+  if ! git rev-parse --git-dir >/dev/null 2>&1; then
+    log_fail "Not in a git repository"
+    exit 1
+  fi
+
+  local repo_root
+  repo_root=$(git rev-parse --show-toplevel)
+  cd "$repo_root"
+
+  if [ ! -d "core" ]; then
+    log_fail "Missing core directory"
+    exit 1
+  fi
+
+  if [ ! -f "core/templates/project/project-config.yaml" ] ||
+     [ ! -f "core/templates/project/project-structure.yaml" ]; then
+    log_fail "Missing core project templates"
+    exit 1
+  fi
+
+  mkdir -p config
+  copy_if_missing "core/templates/project/project-config.yaml" "config/project-config.yaml"
+  copy_if_missing "core/templates/project/project-structure.yaml" "config/project-structure.yaml"
+  copy_if_missing "core/templates/project/docs-policy.json" "config/docs-policy.json"
+  copy_if_missing "core/templates/project/CODEOWNERS" "CODEOWNERS"
+
+  for dir in \
+    project/tickets \
+    project/backlog \
+    project/bugs \
+    project/sprints \
+    project/releases \
+    project/metrics \
+    project/views \
+    project/test-runs \
+    project/verifications \
+    project/incidents \
+    project/prs \
+    docs/project/product \
+    docs/project/planning \
+    docs/project/specs \
+    docs/project/user-stories \
+    docs/project/plans \
+    docs/project/requirements \
+    docs/project/api \
+    docs/runtime/refactor \
+    docs/runtime/adr \
+    docs/runtime/technical \
+    docs/runtime/runbooks \
+    docs/runtime/qa \
+    docs/runtime/test-runs \
+    docs/runtime/verifications \
+    docs/runtime/incidents; do
+    mkdir -p "$dir"
+  done
+  log_pass "Created required state and docs directories"
+
+  write_backlog_if_missing
+  touch project/audit-log.jsonl
+  touch project/user-requests.jsonl
+  install_framework_scripts
+  install_governance_workflow
+
+  if [ -f "core/scripts/sync-platforms.sh" ]; then
+    bash core/scripts/sync-platforms.sh
+  else
+    log_warn "Missing core/scripts/sync-platforms.sh; platform configs not synced"
+  fi
+
+  if [ -f "core/scripts/validate-state.sh" ]; then
+    bash core/scripts/validate-state.sh
+  else
+    log_warn "Missing core/scripts/validate-state.sh; skipped state validation"
+  fi
+
+  if [ -d ".githooks" ] && [ -f "scripts/install-hooks.sh" ]; then
+    log_info "Recommended next step: bash scripts/install-hooks.sh"
+  fi
+
+  echo ""
+  echo "========================================================"
+  echo -e "  ${GREEN}AI Core project setup complete${NC}"
+  echo "========================================================"
+  echo ""
+}
+
+main "$@"