create-egregore 0.20.2 → 0.21.0-runtime-mvp.1

package/runtime/claude/bin/codex-sync-skills.sh

@@ -0,0 +1,237 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")/.." && pwd)"
+CLAUDE_DIR="$SCRIPT_DIR/.claude/skills"
+CODEX_DIR="$SCRIPT_DIR/.codex/skills"
+CHECK=0
+
+NATIVE_SKILLS=(
+  activity
+  handoff
+  wrap
+  announce
+  harvest
+  the-spiral
+  dashboard
+  deep-reflect
+  quest
+  invite
+  ask
+  save
+  search
+  view
+  scroll
+  plate
+)
+
+STRUCTURED_UX_SKILLS=(
+  activity
+  dashboard
+  handoff
+  wrap
+  todo
+  quest
+  project
+  issue
+  test
+  qa
+  checkup
+  infra
+  graph-maintain
+  telemetry-admin
+  waitlist
+  hosting
+  review-pr
+  triage
+  eval
+  eval-multiagent
+  summon
+  reflect
+  deep-reflect
+  archive
+  meeting
+  ingest-user-interview
+  harvest
+  tutorial
+  onboarding
+  emissary
+  launch-site
+  view
+  scroll
+  visual-explain
+  tui-design
+)
+
+GENERATED_MARKER='generated-by: bin/codex-sync-skills.sh'
+
+while [ $# -gt 0 ]; do
+  case "$1" in
+    --check) CHECK=1; shift ;;
+    --help|-h)
+      echo "usage: bin/codex-sync-skills.sh [--check]"
+      exit 0
+      ;;
+    *) echo "unknown option: $1" >&2; exit 2 ;;
+  esac
+done
+
+is_native() {
+  local name="$1"
+  local native
+  for native in "${NATIVE_SKILLS[@]}"; do
+    [ "$name" = "$native" ] && return 0
+  done
+  return 1
+}
+
+is_structured_ux() {
+  local name="$1"
+  local structured
+  for structured in "${STRUCTURED_UX_SKILLS[@]}"; do
+    [ "$name" = "$structured" ] && return 0
+  done
+  return 1
+}
+
+skill_description() {
+  local file="$1"
+  awk '
+    NR == 1 && $0 == "---" { in_fm = 1; next }
+    in_fm && $0 == "---" { exit }
+    in_fm && /^description:/ {
+      sub(/^description:[[:space:]]*/, "")
+      # Block scalars (description: >) keep the text on continuation lines we
+      # do not read. Emit nothing so the caller falls back, which the skill-v1
+      # contract check reports, rather than publishing the indicator itself.
+      if ($0 ~ /^[>|][-+]?[[:space:]]*$/) { exit }
+      if ($0 ~ /^".*"$/) { gsub(/^"|"$/, "") }
+      else if ($0 ~ /^\047.*\047$/) { gsub(/^\047|\047$/, ""); gsub(/\047\047/, "\047") }
+      print
+      exit
+    }
+  ' "$file"
+}
+
+yaml_single_quote() {
+  local value="$1"
+  printf "'%s'" "$(printf '%s' "$value" | sed "s/'/''/g")"
+}
+
+render_adapter() {
+  local name="$1"
+  local source="$2"
+  local description="$3"
+  local structured="$4"
+  [ -n "$description" ] || description="Fallback Codex adapter for the Egregore ${name} workflow."
+  local description_yaml
+  description_yaml="$(yaml_single_quote "$description")"
+  cat <<EOF
+---
+name: ${name}
+description: ${description_yaml}
+---
+
+<!-- ${GENERATED_MARKER} -->
+
+# Egregore ${name} Adapter
+
+This is fallback coverage for a long-tail Egregore workflow that has not been
+ported to a hand-written Codex-native skill yet.
+
+Use the project shell and filesystem directly. Do not invoke Claude Code
+commands. Translate interactive choices to structured Codex question tooling
+when it is available; otherwise render compact numbered choices with an
+\`Other:\` option and wait for the user.
+
+EOF
+  if [ "$structured" = "1" ]; then
+    cat <<EOF
+## Structured UX parity
+
+This workflow has a Claude skill with user-visible structured output. After
+reading \`${source}\`, reproduce the same visible UX in Codex:
+
+- Preserve TUI boxes, markdown tables, rich cards, browser artifact rendering,
+  exact confirmation blocks, and "no preamble" rules from the source skill.
+- Use the source skill's frame width, section order, labels, status footer,
+  and examples as the contract for the final response.
+- Never replace a required box/table/card/artifact view with a prose summary
+  unless the user explicitly asks for a summary.
+- When the source says to output a TUI box directly, paste that box as the
+  visible response, preferably in a \`text\` fenced block.
+- Never show raw JSON, raw command output, or unformatted script output when
+  the source skill requires formatted status or rendered output.
+
+EOF
+  fi
+  cat <<EOF
+1. Read \`${source}\` for the workflow details.
+2. Run the referenced \`bin/\` scripts directly from Codex.
+3. Treat graph and publish steps as best-effort unless that workflow explicitly
+   says they are required.
+4. For every external notification, follow
+   \`.claude/context/notification-consent.md\`: plan without sending, then show
+   a separate exact Send / Edit / Cancel checkpoint. Never infer notification
+   consent from the workflow request or a batch approval.
+5. Keep local-mode behavior filesystem-first and avoid graph or notification
+   calls when \`egregore.json\` declares \`"mode": "local"\`.
+6. Never call the deprecated \`egregore-handoff\` CLI for Egregore project
+   handoffs.
+EOF
+}
+
+[ -d "$CLAUDE_DIR" ] || { echo "missing Claude skills directory: $CLAUDE_DIR" >&2; exit 1; }
+mkdir -p "$CODEX_DIR"
+
+changed=0
+native_present=0
+adapter_present=0
+
+for native in "${NATIVE_SKILLS[@]}"; do
+  if [ -f "$CODEX_DIR/$native/SKILL.md" ]; then
+    native_present=$((native_present + 1))
+  else
+    echo "missing native Codex skill: $native" >&2
+    changed=1
+  fi
+done
+
+while IFS= read -r source_file; do
+  name="$(basename "$(dirname "$source_file")")"
+  is_native "$name" && continue
+
+  target_dir="$CODEX_DIR/$name"
+  target_file="$target_dir/SKILL.md"
+  if [ -f "$target_file" ] && ! grep -q "$GENERATED_MARKER" "$target_file" 2>/dev/null; then
+    continue
+  fi
+
+  description="$(skill_description "$source_file")"
+  rel_source=".claude/skills/$name/SKILL.md"
+  structured=0
+  is_structured_ux "$name" && structured=1
+  tmp="$(mktemp -t codex-skill-adapter-XXXXXX)"
+  render_adapter "$name" "$rel_source" "$description" "$structured" > "$tmp"
+
+  if [ ! -f "$target_file" ] || ! cmp -s "$tmp" "$target_file"; then
+    changed=1
+    if [ "$CHECK" = "1" ]; then
+      echo "adapter out of date: $name"
+    else
+      mkdir -p "$target_dir"
+      cp "$tmp" "$target_file"
+      echo "generated adapter: $name"
+    fi
+  fi
+  rm -f "$tmp"
+done < <(find "$CLAUDE_DIR" -mindepth 2 -maxdepth 2 -name SKILL.md | sort)
+
+adapter_present="$({ grep -rl "$GENERATED_MARKER" "$CODEX_DIR"/*/SKILL.md 2>/dev/null || true; } | wc -l | tr -d ' ')"
+
+if [ "$CHECK" = "1" ] && [ "$changed" -ne 0 ]; then
+  echo "codex skills out of sync (native: $native_present/${#NATIVE_SKILLS[@]}, adapters: $adapter_present)" >&2
+  exit 1
+fi
+
+echo "codex skills synced (native: $native_present/${#NATIVE_SKILLS[@]}, adapters: $adapter_present)"

package/runtime/claude/bin/connect-refresh.sh

@@ -0,0 +1,33 @@
+#!/usr/bin/env bash
+# Refresh the Connect runtime overlay (skills served by the org's API) for
+# this instance. Fired fire-and-forget from session start on every runtime;
+# local-mode instances exit immediately and nothing here may block or break
+# a session. New Connect features appear without re-running the launcher.
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
+cd "$ROOT" || exit 0
+
+# Connected instances only — resolved the same way the runtime does.
+MODE=$(jq -r '.mode // empty' egregore.json 2>/dev/null)
+API_URL=$(jq -r '.api_url // empty' egregore.json 2>/dev/null)
+if [ "$MODE" != "connected" ] && [ -z "$API_URL" ]; then
+  exit 0
+fi
+
+LOG_DIR="$ROOT/.egregore"
+mkdir -p "$LOG_DIR" 2>/dev/null || true
+LOG="$LOG_DIR/connect-refresh.log"
+
+# The refresh logic lives in the installed create-egregore tooling (client
+# instances do not carry packages/ in their tree). --prefer-offline keeps the
+# common case fast; the first run may fetch the package once.
+{
+  echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] connect refresh"
+  npx --yes --prefer-offline create-egregore --refresh-connect 2>&1
+} >>"$LOG" 2>&1 || true
+
+# Keep the log bounded.
+tail -n 200 "$LOG" >"$LOG.tmp" 2>/dev/null && mv "$LOG.tmp" "$LOG" 2>/dev/null || true
+exit 0

package/runtime/claude/bin/contribute-guard.sh

@@ -0,0 +1,79 @@
+#!/usr/bin/env bash
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "$0")/.." && pwd)"
+CONFIG="$SCRIPT_DIR/egregore.json"
+EXPECTED_REPO=""
+
+usage() {
+  echo "usage: bash bin/contribute-guard.sh [--config <path>] [--expect <owner/repo>]" >&2
+  exit 2
+}
+
+fail() {
+  echo "contribute: $1" >&2
+  exit "${2:-2}"
+}
+
+while [ $# -gt 0 ]; do
+  case "$1" in
+    --config)
+      [ $# -ge 2 ] || usage
+      CONFIG="$2"
+      shift 2
+      ;;
+    --expect)
+      [ $# -ge 2 ] || usage
+      EXPECTED_REPO="$2"
+      shift 2
+      ;;
+    --help|-h)
+      usage
+      ;;
+    *)
+      usage
+      ;;
+  esac
+done
+
+[ -f "$CONFIG" ] || fail "cannot read configuration at $CONFIG; refusing to select an upstream target"
+
+UPSTREAM_URL=$(jq -er '
+  if has("upstream_url") then
+    if .upstream_url == null then ""
+    elif (.upstream_url | type) == "string" then .upstream_url
+    else error("upstream_url must be a string")
+    end
+  else ""
+  end
+' "$CONFIG" 2>/dev/null) ||
+  fail "configuration is invalid; refusing to select an upstream target"
+
+if [ "$UPSTREAM_URL" = "none" ]; then
+  fail 'disabled because upstream_url is "none"; this checkout is a framework source, so use the save workflow for its configured integration branch' 3
+fi
+
+[ -n "$UPSTREAM_URL" ] || UPSTREAM_URL="https://github.com/egregore-labs/egregore.git"
+
+case "$UPSTREAM_URL" in
+  https://github.com/*/*)
+    UPSTREAM_REPO="${UPSTREAM_URL#*github.com/}"
+    ;;
+  git@github.com:*/*)
+    UPSTREAM_REPO="${UPSTREAM_URL#git@github.com:}"
+    ;;
+  *)
+    fail "unsupported upstream_url '$UPSTREAM_URL'; expected a GitHub repository URL"
+    ;;
+esac
+
+UPSTREAM_REPO="${UPSTREAM_REPO%/}"
+UPSTREAM_REPO="${UPSTREAM_REPO%.git}"
+printf '%s\n' "$UPSTREAM_REPO" | grep -Eq '^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$' ||
+  fail "invalid upstream repository '$UPSTREAM_REPO'; refusing external Git operations"
+
+if [ -n "$EXPECTED_REPO" ] && [ "$EXPECTED_REPO" != "$UPSTREAM_REPO" ]; then
+  fail "target changed from '$EXPECTED_REPO' to '$UPSTREAM_REPO'; refusing external Git operations"
+fi
+
+printf '%s\n' "$UPSTREAM_REPO"