mirror of https://github.com/garrytan/gstack.git
89 lines
3.8 KiB
TypeScript
89 lines
3.8 KiB
TypeScript
import type { TemplateContext } from './types';
|
|
|
|
/**
|
|
* Host-native agent spawn for /spec --execute (U4 / R3).
|
|
*
|
|
* Grok research matrix (local CLI grok 0.2.x):
|
|
* -p / --single <PROMPT> short single-turn
|
|
* --prompt-file <PATH> single-turn from file (preferred for archives)
|
|
* --cwd <CWD> working directory
|
|
* --always-approve elevated auto-approve (opt-in / documented)
|
|
* Never: $(cat …) into argv (ARG_MAX); never invent --permission-mode acceptEdits.
|
|
*
|
|
* Claude host generation unchanged: stdin pipe into claude -p.
|
|
*/
|
|
export function generateSpecSpawn(ctx: TemplateContext): string {
|
|
if (ctx.host === 'grok-build') {
|
|
return `If A and worktree created: spawn **Grok** headless with the archived
|
|
spec as a prompt file (never \`$(cat …)\` into argv — ARG_MAX / quoting risk).
|
|
|
|
**Auth gate (fail closed):** before spawn, verify Grok is available and configured:
|
|
|
|
\`\`\`bash
|
|
command -v grok >/dev/null 2>&1 || { echo "STOP: grok CLI not on PATH. Install Grok Build, or re-run with --no-execute / --file-only."; exit 1; }
|
|
if [ ! -f "$HOME/.grok/auth.json" ] && [ -z "\${XAI_API_KEY:-}\${GROK_API_KEY:-}" ]; then
|
|
echo "STOP: Grok not authenticated (no ~/.grok/auth.json and no XAI_API_KEY/GROK_API_KEY). Log in via \`grok\`, or use --no-execute."
|
|
exit 1
|
|
fi
|
|
# ARCHIVE_PATH must stay under SPAWN_PATH parent or the gstack projects allowlist
|
|
ARCHIVE_REAL=$(cd "$(dirname "$ARCHIVE_PATH")" && pwd -P)/$(basename "$ARCHIVE_PATH")
|
|
SPAWN_REAL=$(cd "$SPAWN_PATH" 2>/dev/null && pwd -P || echo "")
|
|
case "$ARCHIVE_REAL" in
|
|
"$HOME/.gstack/projects"/*|"$HOME/.gstack/projects"/*/*) ;; # allowlisted archive dir
|
|
*)
|
|
if [ -n "$SPAWN_REAL" ]; then
|
|
case "$ARCHIVE_REAL" in
|
|
"$SPAWN_REAL"/*) ;;
|
|
*) echo "STOP: ARCHIVE_PATH realpath not under SPAWN_PATH or allowlisted archive dir."; exit 1 ;;
|
|
esac
|
|
fi
|
|
;;
|
|
esac
|
|
\`\`\`
|
|
|
|
**Security:** \`--always-approve\` auto-approves tool use (elevated). Only spawn
|
|
when the user confirmed the D16 gate. Spec archives must not contain secrets.
|
|
Third-party note: archive body is sent to xAI for processing.
|
|
|
|
\`\`\`bash
|
|
# Prefer --prompt-file (researched). Optional elevated approve is documented opt-in.
|
|
(cd "$SPAWN_PATH" && grok --prompt-file "$ARCHIVE_PATH" --cwd "$SPAWN_PATH" --always-approve 2>&1) &
|
|
SPAWN_PID=$!
|
|
echo "Spawned: PID $SPAWN_PID in $SPAWN_PATH (branch $SPAWN_BRANCH)"
|
|
echo "Follow with: cd $SPAWN_PATH && grok --continue"
|
|
\`\`\`
|
|
|
|
**Optional Claude execute:** if the user asked for \`--execute-claude\` instead of
|
|
default Grok execute, and \`claude\` is on PATH, you may spawn:
|
|
|
|
\`\`\`bash
|
|
cat "$ARCHIVE_PATH" | (cd "$SPAWN_PATH" && claude -p 2>&1) &
|
|
\`\`\`
|
|
|
|
Do **not** silently fall through to Claude when Grok is missing — STOP instead.
|
|
|
|
If no safe multi-line file ingest is available on an older Grok CLI (no
|
|
\`--prompt-file\`), demote to \`--no-execute\` / file-only and tell the user:
|
|
"This Grok CLI lacks --prompt-file; filed the issue only. Upgrade Grok Build or
|
|
use --execute-claude if Claude is installed."`;
|
|
}
|
|
|
|
// Claude + all other hosts: classic claude -p stdin pipe
|
|
return `If A and worktree created: spawn \`claude -p\` with the spec piped via stdin:
|
|
|
|
\`\`\`bash
|
|
cat "$ARCHIVE_PATH" | (cd "$SPAWN_PATH" && claude -p 2>&1) &
|
|
SPAWN_PID=$!
|
|
echo "Spawned: PID $SPAWN_PID in $SPAWN_PATH (branch $SPAWN_BRANCH)"
|
|
echo "Follow with: cd $SPAWN_PATH && claude --resume"
|
|
\`\`\``;
|
|
}
|
|
|
|
/** Flag-table row for --execute (host-aware description). */
|
|
export function generateSpecExecuteFlag(ctx: TemplateContext): string {
|
|
if (ctx.host === 'grok-build') {
|
|
return '| `--execute` | conditional default (see Phase 5) | Spawn `grok --prompt-file` headless in a fresh worktree after filing the issue. |';
|
|
}
|
|
return '| `--execute` | conditional default (see Phase 5) | Spawn `claude -p` in a fresh worktree after filing the issue. |';
|
|
}
|