Kai
07dd648b5f
Scenarios - memo-inbox: mirrored by copying; the live directory was not moved or modified and the service was not restarted. All four tracked files match byte for byte (pi-diff.sh reports SAME). Marked deploy = "mirror" so deploy-scenario.sh refuses --apply: applying a mirror would invert the direction of truth and could change a service in daily use. - curator: target configuration, not yet deployed. .pi/SYSTEM.md replaces pi's coding-assistant prompt; durable role text is in .pi/APPEND_SYSTEM.md; profile.toml is the single source of truth for the launch contract. - pi-grok: registered only. It is genuinely a coding agent, so the isolation baseline does not apply in full. Corrections to the documentation, found by testing rather than by reading - AGENTS.override.md does NOT block parent-directory context files; it only shadows its own directory. Verified: with an override file in the workspace, a marker in /tmp/AGENTS.md still reached the system prompt. The only effective switch is --no-context-files, so durable role text must live in .pi/APPEND_SYSTEM.md, which is a system-prompt file and unaffected by -nc. Verified end state: no coding-assistant framing, no pi-docs block, own identity and role text present, no parent pollution, only own skills/tools. - PI_CODING_AGENT_DIR isolates settings/models/auth/trust/extensions/skills/ prompts/themes under the agent directory -- stronger than the --no-* flags because it also repoints credentials -- but does NOT cover ~/.agents/skills. Measured: find-skills, modsearch and summarize still leak. So it complements --no-skills rather than replacing it. - --append-system-prompt accepts a file path, which pi-grok relies on. - cwd is what anchors .pi discovery: a probe that forgot cwd silently lost .pi/SYSTEM.md and kept the coding-assistant persona. Tooling (all dry-run by default; none of them restarts a service) - pi-diff.sh: compares tracked config against the live install in both directions, with a key-redacted comparison for models.json - deploy-scenario.sh: installs a workspace and renders profile.toml into .pi/launch.json, then checks that every referenced path exists - deploy-runtime.sh: renders models.json from its template, refusing placeholder or missing keys. Verified byte-identical to the live file - pi-backup.sh / pi-restore.sh: archives outside the repo, sha256 manifest verified before any restore, live paths preserved rather than overwritten Fixed while testing: pi-backup.sh compared the destination against the repo root literally, so a relative --dest ./backups wrote credential archives into the work tree. Now canonicalised with realpath; ./backups, an absolute in-repo path and ./docs/../backups are all refused.
82 lines
2.6 KiB
Bash
Executable File
82 lines
2.6 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Shared helpers for the pi-agent-config scripts.
|
|
# shellcheck shell=bash
|
|
|
|
set -uo pipefail
|
|
|
|
REPO_ROOT="$(git rev-parse --show-toplevel 2>/dev/null)" || {
|
|
echo "error: not inside the pi-agent-config git work tree" >&2
|
|
exit 1
|
|
}
|
|
export REPO_ROOT
|
|
|
|
if [ -t 1 ]; then
|
|
C_RED=$'\033[31m'; C_GREEN=$'\033[32m'; C_YELLOW=$'\033[33m'
|
|
C_BOLD=$'\033[1m'; C_DIM=$'\033[2m'; C_OFF=$'\033[0m'
|
|
else
|
|
C_RED=''; C_GREEN=''; C_YELLOW=''; C_BOLD=''; C_DIM=''; C_OFF=''
|
|
fi
|
|
|
|
info() { printf '%s\n' "$*"; }
|
|
ok() { printf '%s %s%s\n' "${C_GREEN}OK${C_OFF}" "$*" ''; }
|
|
warn() { printf '%s %s\n' "${C_YELLOW}WARN${C_OFF}" "$*" >&2; }
|
|
die() { printf '%s %s\n' "${C_RED}ERROR${C_OFF}" "$*" >&2; exit 1; }
|
|
head1() { printf '\n%s%s%s\n' "$C_BOLD" "$*" "$C_OFF"; }
|
|
|
|
# List the scenarios that exist, excluding the template.
|
|
list_scenarios() {
|
|
find "$REPO_ROOT/scenarios" -mindepth 1 -maxdepth 1 -type d \
|
|
-not -name '_*' -printf '%f\n' | sort
|
|
}
|
|
|
|
require_scenario() {
|
|
local name="${1:-}"
|
|
[ -n "$name" ] || die "a scenario name is required. Available: $(list_scenarios | tr '\n' ' ')"
|
|
[ -d "$REPO_ROOT/scenarios/$name" ] \
|
|
|| die "unknown scenario '$name'. Available: $(list_scenarios | tr '\n' ' ')"
|
|
printf '%s' "$REPO_ROOT/scenarios/$name"
|
|
}
|
|
|
|
# Read a flat "key = value" entry from a TOML section.
|
|
# Intentionally minimal: these profiles are hand-written and flat. Anything more
|
|
# structured should be read by the Python consumer, not by shell.
|
|
toml_get() {
|
|
local file="$1" section="$2" key="$3"
|
|
awk -v want_section="$section" -v want_key="$key" '
|
|
/^[[:space:]]*\[/ {
|
|
s = $0; sub(/^[[:space:]]*\[/, "", s); sub(/\][[:space:]]*$/, "", s)
|
|
current = s; next
|
|
}
|
|
{
|
|
line = $0
|
|
sub(/[[:space:]]*#.*$/, "", line)
|
|
if (current != want_section) next
|
|
if (line !~ /=/) next
|
|
k = line; sub(/=.*$/, "", k); gsub(/[[:space:]]/, "", k)
|
|
if (k != want_key) next
|
|
v = line; sub(/^[^=]*=[[:space:]]*/, "", v)
|
|
gsub(/^"|"$/, "", v)
|
|
gsub(/[[:space:]]+$/, "", v)
|
|
print v; exit
|
|
}
|
|
' "$file"
|
|
}
|
|
|
|
# Print a unified diff between a tracked file and its live counterpart.
|
|
# Returns 0 when identical, 1 when different or missing.
|
|
diff_file() {
|
|
local tracked="$1" live="$2" label="$3"
|
|
if [ ! -f "$live" ]; then
|
|
printf '%s %s %s(live file absent)%s\n' "${C_YELLOW}DIFF${C_OFF}" "$label" "$C_DIM" "$C_OFF"
|
|
return 1
|
|
fi
|
|
if cmp -s "$tracked" "$live"; then
|
|
printf '%s %s\n' "${C_GREEN}SAME${C_OFF}" "$label"
|
|
return 0
|
|
fi
|
|
printf '%s %s\n' "${C_YELLOW}DIFF${C_OFF}" "$label"
|
|
diff -u --label "repo/$label" "$tracked" --label "live/$label" "$live" \
|
|
| sed 's/^/ /' || true
|
|
return 1
|
|
}
|