sentix 2.0.1

package/bin/sentix.js

@@ -0,0 +1,116 @@
+#!/usr/bin/env node
+
+/**
+ * sentix — Autonomous multi-agent DevSecOps pipeline CLI
+ *
+ * Entry point + plugin loader.
+ * Loading order: src/commands/ → src/plugins/ → .sentix/plugins/ (project-local)
+ */
+
+import { readdir } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { resolve, dirname } from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import { getAllCommands, getCommand, runHooks } from '../src/registry.js';
+import { createContext } from '../src/context.js';
+import { VERSION } from '../src/version.js';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+const srcDir = resolve(__dirname, '..', 'src');
+
+// ── Load built-in commands ──────────────────────────────
+
+async function loadModules(dir) {
+  if (!existsSync(dir)) return;
+  const files = await readdir(dir);
+  for (const file of files.sort()) {
+    if (file.endsWith('.js')) {
+      await import(pathToFileURL(resolve(dir, file)).href);
+    }
+  }
+}
+
+// ── Load project-local plugins ──────────────────────────
+
+async function loadProjectPlugins(cwd) {
+  const pluginDir = resolve(cwd, '.sentix', 'plugins');
+  if (!existsSync(pluginDir)) return;
+  const files = await readdir(pluginDir);
+  for (const file of files.sort()) {
+    if (file.endsWith('.js')) {
+      await import(pathToFileURL(resolve(pluginDir, file)).href);
+    }
+  }
+}
+
+// ── Help ─────────────────────────────────────────────────
+
+function showHelp() {
+  console.log(`
+sentix v${VERSION} — Autonomous multi-agent DevSecOps pipeline
+
+Usage: sentix <command> [args...]
+
+Commands:`);
+
+  const cmds = getAllCommands();
+  const maxLen = Math.max(...[...cmds.keys()].map(k => k.length));
+  for (const [name, cmd] of cmds) {
+    console.log(`  ${name.padEnd(maxLen + 2)} ${cmd.description}`);
+  }
+
+  console.log(`
+Run 'sentix <command> --help' for details on a specific command.
+`);
+}
+
+// ── Main ─────────────────────────────────────────────────
+
+async function main() {
+  // Load in order: commands → built-in plugins → project plugins
+  await loadModules(resolve(srcDir, 'commands'));
+  await loadModules(resolve(srcDir, 'plugins'));
+
+  const cwd = process.cwd();
+  await loadProjectPlugins(cwd);
+
+  const [commandName, ...args] = process.argv.slice(2);
+
+  if (!commandName || commandName === '--help' || commandName === '-h') {
+    showHelp();
+    process.exit(0);
+  }
+
+  if (commandName === '--version' || commandName === '-v') {
+    console.log(`sentix v${VERSION}`);
+    process.exit(0);
+  }
+
+  const cmd = getCommand(commandName);
+  if (!cmd) {
+    console.error(`Unknown command: ${commandName}`);
+    console.error(`Run 'sentix --help' to see available commands.`);
+    process.exit(1);
+  }
+
+  // Per-command --help
+  if (args.includes('--help') || args.includes('-h')) {
+    console.log(`\n${cmd.description}\n`);
+    console.log(`Usage: ${cmd.usage}\n`);
+    process.exit(0);
+  }
+
+  const ctx = createContext(cwd);
+
+  try {
+    await runHooks('before:command', { command: commandName, args, ctx });
+    await cmd.run(args.filter(a => a !== '--help' && a !== '-h'), ctx);
+    await runHooks('after:command', { command: commandName, args, ctx });
+  } catch (err) {
+    ctx.error(err.message);
+    process.exit(1);
+  }
+}
+
+main();

package/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "sentix",
+  "version": "2.0.1",
+  "description": "Autonomous multi-agent DevSecOps pipeline CLI",
+  "type": "module",
+  "bin": {
+    "sentix": "./bin/sentix.js"
+  },
+  "scripts": {
+    "dev": "node src/dev-server.js",
+    "start": "node bin/sentix.js",
+    "test": "node --test __tests__/*.test.js",
+    "doctor": "node bin/sentix.js doctor"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "files": [
+    "bin/",
+    "src/"
+  ],
+  "keywords": [
+    "devops",
+    "devsecops",
+    "pipeline",
+    "autonomous",
+    "multi-agent",
+    "claude",
+    "ai"
+  ],
+  "author": "JANUS",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/kgg1226/sentix.git"
+  }
+}

package/src/CLAUDE.md

@@ -0,0 +1,26 @@
+# src/ — Sentix Core
+
+ESM 모듈 (`"type": "module"`). 외부 의존성 제로 — Node.js 내장 모듈만 사용.
+
+## 로딩 순서
+
+```
+bin/sentix.js
+  → src/commands/*.js   (내장 명령어)
+  → src/plugins/*.js    (내장 플러그인)
+  → .sentix/plugins/*.js (프로젝트 로컬 플러그인)
+```
+
+## 핵심 모듈
+
+| 파일 | 역할 |
+|------|------|
+| `registry.js` | 명령어/훅 등록 (`registerCommand`, `registerHook`) |
+| `context.js` | 명령어에 주입되는 `ctx` 객체 (fs 헬퍼, 로깅) |
+| `version.js` | `package.json`에서 버전 읽기 |
+| `dev-server.js` | 개발용 HTTP API 서버 (`:4400`) |
+
+## 새 모듈 추가 시
+
+- `commands/` 또는 `plugins/` 에 `.js` 파일을 넣으면 자동 로드
+- `registerCommand()` 또는 `registerHook()`으로 등록

package/src/commands/CLAUDE.md

@@ -0,0 +1,29 @@
+# src/commands/ — CLI 명령어
+
+## 명령어 추가법
+
+```js
+import { registerCommand } from '../registry.js';
+
+registerCommand('name', {
+  description: '명령어 설명',
+  usage: 'sentix name [args]',
+  async run(args, ctx) {
+    // args: string[], ctx: context object
+  },
+});
+```
+
+## 기존 명령어
+
+| 파일 | 명령어 | 설명 |
+|------|--------|------|
+| `init.js` | `sentix init` | 프로젝트 초기화 |
+| `run.js` | `sentix run "요청"` | Governor 파이프라인 실행 |
+| `doctor.js` | `sentix doctor` | 설치 상태 진단 |
+| `status.js` | `sentix status` | Governor 상태 조회 |
+| `metrics.js` | `sentix metrics` | 에이전트 메트릭 분석 |
+| `update.js` | `sentix update` | 프레임워크 업데이트 |
+| `plugin.js` | `sentix plugin` | 플러그인 관리 |
+
+파일은 알파벳순으로 자동 로드됨.

package/src/commands/context.js

@@ -0,0 +1,227 @@
+/**
+ * sentix context — 연동 프로젝트의 컨텍스트를 가져온다
+ *
+ * registry.md에 등록된 프로젝트의 INTERFACE.md, README.md 등을
+ * 로컬(../) 또는 GitHub API로 가져와 tasks/context/에 캐시한다.
+ *
+ * 사용법:
+ *   sentix context                    # 전체 프로젝트 컨텍스트 동기화
+ *   sentix context asset-manager      # 특정 프로젝트만
+ *   sentix context asset-manager --full  # src/ 스키마까지 포함
+ *   sentix context --list             # 등록된 프로젝트 목록만 출력
+ *   sentix context --clean            # 캐시 삭제
+ */
+
+import { registerCommand } from '../registry.js';
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { execSync } from 'node:child_process';
+
+registerCommand('context', {
+  description: 'Fetch cross-project context from registry',
+  usage: 'sentix context [project] [--full] [--list] [--clean]',
+
+  async run(args, ctx) {
+    const listOnly = args.includes('--list');
+    const fullMode = args.includes('--full');
+    const cleanMode = args.includes('--clean');
+    const target = args.find(a => !a.startsWith('--'));
+
+    // ── registry.md 파싱 ────────────────────────────
+    if (!ctx.exists('registry.md')) {
+      ctx.error('registry.md not found. Run: sentix init');
+      return;
+    }
+
+    const registry = await ctx.readFile('registry.md');
+    const projects = parseRegistry(registry);
+
+    if (projects.length === 0) {
+      ctx.warn('No projects registered in registry.md');
+      ctx.log('Add projects to the table in registry.md');
+      return;
+    }
+
+    // ── --list ──────────────────────────────────────
+    if (listOnly) {
+      ctx.log('=== Registered Projects ===\n');
+      for (const p of projects) {
+        const status = checkProjectAccess(p, ctx.cwd);
+        ctx.log(`  ${status.icon} ${p.name.padEnd(20)} ${status.label}`);
+      }
+      return;
+    }
+
+    // ── --clean ─────────────────────────────────────
+    if (cleanMode) {
+      if (ctx.exists('tasks/context')) {
+        const { rmSync } = await import('node:fs');
+        rmSync(resolve(ctx.cwd, 'tasks/context'), { recursive: true, force: true });
+        ctx.success('Cleared tasks/context/');
+      } else {
+        ctx.log('tasks/context/ does not exist');
+      }
+      return;
+    }
+
+    // ── 대상 프로젝트 필터링 ────────────────────────
+    const targets = target
+      ? projects.filter(p => p.name === target)
+      : projects;
+
+    if (target && targets.length === 0) {
+      ctx.error(`Project "${target}" not found in registry.md`);
+      ctx.log('Registered: ' + projects.map(p => p.name).join(', '));
+      return;
+    }
+
+    ctx.log(`=== Cross-Project Context Sync ===\n`);
+
+    let synced = 0;
+    let failed = 0;
+
+    for (const project of targets) {
+      ctx.log(`--- ${project.name} ---`);
+
+      const access = checkProjectAccess(project, ctx.cwd);
+      const contextDir = `tasks/context/${project.name}`;
+
+      if (access.type === 'local') {
+        // ── 로컬 파일시스템 ───────────────────────
+        ctx.log(`  Source: ${access.path} (local)`);
+        synced += await syncLocal(project, access.path, contextDir, fullMode, ctx);
+      } else if (access.type === 'github') {
+        // ── GitHub API ────────────────────────────
+        ctx.log(`  Source: github.com/kgg1226/${project.name}`);
+        synced += await syncGitHub(project, contextDir, fullMode, ctx);
+      } else {
+        ctx.warn(`  Cannot access ${project.name} — not found locally or on GitHub`);
+        failed++;
+      }
+
+      ctx.log('');
+    }
+
+    // ── 요약 ────────────────────────────────────────
+    ctx.log('=== Summary ===');
+    ctx.log(`  Synced: ${synced} file(s)`);
+    if (failed > 0) ctx.warn(`  Failed: ${failed} project(s)`);
+    if (synced > 0) {
+      ctx.success(`Context cached in tasks/context/`);
+      ctx.log('  Claude Code can now read these files for cross-project reference.');
+    }
+  },
+});
+
+// ── registry.md 파서 ──────────────────────────────────
+function parseRegistry(content) {
+  const projects = [];
+  const lines = content.split('\n');
+
+  for (const line of lines) {
+    // 테이블 행 파싱: | name | path | condition |
+    const match = line.match(/^\|\s*([^|]+?)\s*\|\s*([^|]+?)\s*\|\s*([^|]*?)\s*\|$/);
+    if (!match) continue;
+
+    const [, name, path, condition] = match;
+    // 헤더 행, 구분선 건너뛰기
+    if (name === '프로젝트' || name === '---' || name.includes('---')) continue;
+
+    projects.push({
+      name: name.trim(),
+      path: path.trim(),
+      condition: condition.trim(),
+    });
+  }
+
+  return projects;
+}
+
+// ── 프로젝트 접근 가능성 확인 ─────────────────────────
+function checkProjectAccess(project, cwd) {
+  // 1. 로컬 경로 확인
+  const localPath = resolve(cwd, project.path);
+  if (existsSync(resolve(localPath, 'INTERFACE.md')) || existsSync(resolve(localPath, 'README.md'))) {
+    return { type: 'local', path: localPath, icon: '●', label: `local (${project.path})` };
+  }
+
+  // 2. GitHub 접근 가능성 (gh CLI 또는 curl)
+  try {
+    const result = execSync(
+      `curl -sf -o /dev/null -w "%{http_code}" "https://api.github.com/repos/kgg1226/${project.name}"`,
+      { encoding: 'utf-8', timeout: 5000, stdio: 'pipe' }
+    ).trim();
+    if (result === '200') {
+      return { type: 'github', icon: '○', label: 'github (remote)' };
+    }
+  } catch {
+    // GitHub 접근 불가
+  }
+
+  return { type: 'none', icon: '✗', label: 'not accessible' };
+}
+
+// ── 로컬 동기화 ──────────────────────────────────────
+async function syncLocal(project, sourcePath, contextDir, fullMode, ctx) {
+  let count = 0;
+
+  const files = [
+    { src: 'INTERFACE.md', label: 'INTERFACE.md (API contract)' },
+    { src: 'README.md', label: 'README.md' },
+  ];
+
+  if (fullMode) {
+    // --full: 주요 설정 파일도 포함
+    const extraFiles = [
+      'package.json',
+      '.sentix/config.toml',
+      'tasks/lessons.md',
+    ];
+    for (const f of extraFiles) {
+      files.push({ src: f, label: f });
+    }
+  }
+
+  for (const { src, label } of files) {
+    const srcPath = resolve(sourcePath, src);
+    if (existsSync(srcPath)) {
+      const content = readFileSync(srcPath, 'utf-8');
+      await ctx.writeFile(`${contextDir}/${src}`, content);
+      ctx.success(`  ${label}`);
+      count++;
+    }
+  }
+
+  return count;
+}
+
+// ── GitHub 동기화 ────────────────────────────────────
+async function syncGitHub(project, contextDir, fullMode, ctx) {
+  let count = 0;
+
+  const files = ['INTERFACE.md', 'README.md'];
+  if (fullMode) {
+    files.push('package.json', '.sentix/config.toml', 'tasks/lessons.md');
+  }
+
+  for (const file of files) {
+    try {
+      const url = `https://raw.githubusercontent.com/kgg1226/${project.name}/main/${file}`;
+      const content = execSync(`curl -sf "${url}"`, {
+        encoding: 'utf-8',
+        timeout: 10000,
+        stdio: 'pipe',
+      });
+
+      if (content) {
+        await ctx.writeFile(`${contextDir}/${file}`, content);
+        ctx.success(`  ${file}`);
+        count++;
+      }
+    } catch {
+      // File not found on GitHub — skip silently
+    }
+  }
+
+  return count;
+}

package/src/commands/doctor.js

@@ -0,0 +1,213 @@
+/**
+ * sentix doctor — 설치 상태 진단
+ *
+ * CLAUDE.md, tasks/, Claude Code, git, deprecated 파일 등을 확인.
+ * Exits with code 1 if issues are found.
+ */
+
+import { spawnSync } from 'node:child_process';
+import { registerCommand } from '../registry.js';
+import { isConfigured as isSafetyConfigured } from '../lib/safety.js';
+import { getRuntimeMode, loadProvider } from '../lib/provider.js';
+
+registerCommand('doctor', {
+  description: 'Diagnose Sentix installation health',
+  usage: 'sentix doctor',
+
+  async run(_args, ctx) {
+    ctx.log('=== Sentix Doctor ===\n');
+
+    let issues = 0;
+
+    // ── Required files ──────────────────────────────
+    const required = [
+      { path: 'CLAUDE.md', label: 'CLAUDE.md (execution doc)' },
+      { path: 'FRAMEWORK.md', label: 'FRAMEWORK.md (design doc)' },
+      { path: '.sentix/config.toml', label: '.sentix/config.toml' },
+      { path: '.sentix/rules/hard-rules.md', label: '.sentix/rules/hard-rules.md' },
+      { path: 'tasks/lessons.md', label: 'tasks/lessons.md' },
+      { path: 'tasks/patterns.md', label: 'tasks/patterns.md' },
+      { path: 'tasks/predictions.md', label: 'tasks/predictions.md' },
+    ];
+
+    for (const { path, label } of required) {
+      if (ctx.exists(path)) {
+        ctx.success(label);
+      } else {
+        ctx.error(`${label} — MISSING`);
+        issues++;
+      }
+    }
+
+    // ── tasks/ structure ────────────────────────────
+    const taskDirs = ['tasks/tickets'];
+    for (const dir of taskDirs) {
+      if (ctx.exists(dir)) {
+        ctx.success(`${dir}/`);
+      } else {
+        ctx.warn(`${dir}/ — missing (will be created on first run)`);
+      }
+    }
+
+    // ── Docs (lazy loading) ─────────────────────────
+    ctx.log('\n--- Context Docs ---\n');
+
+    const docs = [
+      { path: 'docs/governor-sop.md', label: 'docs/governor-sop.md (SOP details)' },
+      { path: 'docs/agent-scopes.md', label: 'docs/agent-scopes.md (agent file scopes)' },
+      { path: 'docs/severity.md', label: 'docs/severity.md (severity logic)' },
+      { path: 'docs/architecture.md', label: 'docs/architecture.md (Mermaid diagrams)' },
+    ];
+
+    for (const { path, label } of docs) {
+      if (ctx.exists(path)) {
+        ctx.success(label);
+      } else {
+        ctx.warn(`${label} — missing (run: sentix update)`);
+      }
+    }
+
+    // Ticket index
+    if (ctx.exists('tasks/tickets/index.json')) {
+      ctx.success('tasks/tickets/index.json (ticket index)');
+    } else {
+      ctx.warn('tasks/tickets/index.json — missing (create with: sentix ticket create)');
+    }
+
+    // CHANGELOG
+    if (ctx.exists('CHANGELOG.md')) {
+      ctx.success('CHANGELOG.md');
+    } else {
+      ctx.warn('CHANGELOG.md — missing (create with: sentix version bump)');
+    }
+
+    // ── Deprecated files ────────────────────────────
+    ctx.log('\n--- Deprecated Files ---\n');
+
+    const deprecated = [
+      'AGENTS.md',
+      'DESIGN.md',
+      'PATTERN-ENGINE.md',
+      'VISUAL-PERCEPTION.md',
+      'LEARNING-PIPELINE.md',
+      'SELF-EVOLUTION.md',
+    ];
+
+    let hasDeprecated = false;
+    for (const file of deprecated) {
+      if (ctx.exists(file)) {
+        ctx.warn(`${file} — deprecated (content merged into FRAMEWORK.md)`);
+        hasDeprecated = true;
+        issues++;
+      }
+    }
+
+    if (!hasDeprecated) {
+      ctx.success('No deprecated files found');
+    }
+
+    // ── CLAUDE.md references check ──────────────────
+    if (ctx.exists('CLAUDE.md')) {
+      const claude = await ctx.readFile('CLAUDE.md');
+      if (claude.includes('AGENTS.md')) {
+        ctx.warn('CLAUDE.md references AGENTS.md — should be FRAMEWORK.md');
+        issues++;
+      }
+    }
+
+    // ── Multi-project files ─────────────────────────
+    ctx.log('\n--- Multi-Project ---\n');
+
+    if (ctx.exists('INTERFACE.md')) {
+      ctx.success('INTERFACE.md (API contract)');
+    } else {
+      ctx.warn('INTERFACE.md — not found (needed for multi-project cross-reference)');
+    }
+
+    if (ctx.exists('registry.md')) {
+      ctx.success('registry.md (project registry)');
+    } else {
+      ctx.warn('registry.md — not found (needed for multi-project cascade)');
+    }
+
+    // ── Safety word ───────────────────────────────
+    ctx.log('\n--- Security ---\n');
+
+    const hasSafety = await isSafetyConfigured(ctx);
+    if (hasSafety) {
+      ctx.success('Safety word: configured (.sentix/safety.toml)');
+    } else {
+      ctx.warn('Safety word: NOT configured — LLM injection defense disabled');
+      ctx.log('  Fix: sentix safety set <안전어>');
+      // issue 카운트하지 않음 — CI/CD 환경에서는 safety word 미설정이 정상
+    }
+
+    // ── Runtime mode ──────────────────────────────
+    ctx.log('\n--- Runtime ---\n');
+
+    const runtimeMode = await getRuntimeMode(ctx);
+    ctx.success(`Mode: ${runtimeMode}`);
+
+    if (runtimeMode === 'engine') {
+      try {
+        const provider = await loadProvider(ctx);
+        ctx.success(`Provider: ${provider.name} (${provider.type})`);
+        if (provider.api.api_key) {
+          ctx.success(`API key: ${provider.api.api_key_env} (set)`);
+        } else if (provider.api.api_key_env) {
+          ctx.error(`API key: ${provider.api.api_key_env} (NOT SET — engine mode requires this)`);
+          issues++;
+        }
+      } catch (err) {
+        ctx.error(`Provider: ${err.message}`);
+        issues++;
+      }
+    }
+
+    // ── External tools ──────────────────────────────
+    ctx.log('\n--- External Tools ---\n');
+
+    // Git
+    const git = spawnSync('git', ['--version'], { encoding: 'utf-8', stdio: 'pipe' });
+    if (git.status === 0) {
+      ctx.success(`git: ${git.stdout.trim()}`);
+    } else {
+      ctx.error('git: not found');
+      issues++;
+    }
+
+    // Node.js
+    const node = spawnSync('node', ['--version'], { encoding: 'utf-8', stdio: 'pipe' });
+    if (node.status === 0) {
+      const ver = node.stdout.trim();
+      const major = parseInt(ver.replace('v', ''));
+      if (major >= 18) {
+        ctx.success(`node: ${ver}`);
+      } else {
+        ctx.warn(`node: ${ver} (18+ recommended)`);
+        issues++;
+      }
+    } else {
+      ctx.error('node: not found');
+      issues++;
+    }
+
+    // Claude Code
+    const claude = spawnSync('claude', ['--version'], { encoding: 'utf-8', stdio: 'pipe' });
+    if (claude.status === 0) {
+      ctx.success('claude: installed');
+    } else {
+      ctx.warn('claude: not found (needed for sentix run)');
+    }
+
+    // ── Summary ─────────────────────────────────────
+    ctx.log('');
+    if (issues === 0) {
+      ctx.success('All checks passed!');
+    } else {
+      ctx.warn(`${issues} issue(s) found. Run 'sentix init' to fix missing files.`);
+      process.exitCode = 1;
+    }
+    ctx.log('');
+  },
+});