KeiSeiKit-1.0/install/lib-dev-hub-zoekt.sh
KeiSei84 3aff00290f
Some checks are pending
CI (Forgejo Actions — self-hosted runner on Mac, host mode) / preflight (push) Waiting to run
CI (Forgejo Actions — self-hosted runner on Mac, host mode) / vps-smoke (push) Waiting to run
CI (Forgejo Actions — self-hosted runner on Mac, host mode) / rust-primitives (map[crates:frustration-matrix,kei-frustration-loop,kei-skill-importer,kei-projects-index,kei-projects-watcher,kei-gdrive-import,kei-leak-matrix,kei-skills,kei-gateway,kei-cron-scheduler,kei-export-trajectories,kei-backend-daytona,kei-d… (push) Blocked by required conditions
CI (Forgejo Actions — self-hosted runner on Mac, host mode) / rust-primitives (map[crates:kei-compute-baremetal,kei-compute-vultr,kei-compute-linode,kei-compute-digitalocean,kei-svc-systemd,kei-llm-bridge-mlx name:hosted-sleep-compute]) (push) Blocked by required conditions
CI (Forgejo Actions — self-hosted runner on Mac, host mode) / rust-primitives (map[crates:kei-diff,kei-scheduler,kei-watch,kei-prune,kei-discover,kei-brain-view,kei-hibernate,kei-ledger-sign,kei-fork name:wave13-15]) (push) Blocked by required conditions
CI (Forgejo Actions — self-hosted runner on Mac, host mode) / rust-primitives (map[crates:kei-git-gitea,kei-git-forgejo,kei-git-gitlab,kei-git-bitbucket,kei-memory-sled,kei-memory-redis,kei-memory-postgres,kei-memory-sqlite,kei-auth-google,kei-auth-apple,kei-auth-magiclink,kei-auth-webauthn,kei-notify-slack,kei-n… (push) Blocked by required conditions
CI (Forgejo Actions — self-hosted runner on Mac, host mode) / rust-primitives (map[crates:kei-ledger,kei-migrate,kei-changelog,kei-memory,kei-store,kei-conflict-scan,kei-refactor-engine,kei-graph-check,kei-shared,kei-dna-index,kei-pet name:core]) (push) Blocked by required conditions
CI (Forgejo Actions — self-hosted runner on Mac, host mode) / rust-primitives (map[crates:kei-machine-probe,kei-llm-ollama,kei-llm-llamacpp,kei-llm-mlx,kei-llm-router,kei-model name:llm-stack]) (push) Blocked by required conditions
CI (Forgejo Actions — self-hosted runner on Mac, host mode) / rust-primitives (map[crates:kei-router,kei-sage,kei-task,kei-chat-store,kei-crossdomain,kei-search-core,kei-content-store,kei-social-store,kei-curator,kei-auth,kei-artifact name:mcp-lbm]) (push) Blocked by required conditions
CI (Forgejo Actions — self-hosted runner on Mac, host mode) / rust-primitives (map[crates:keisei,kei-forge,kei-runtime,kei-runtime-core,kei-atom-discovery,kei-agent-runtime,kei-capability,kei-provision,kei-entity-store,kei-pipe,kei-cache,kei-spawn,kei-replay name:atom-substrate]) (push) Blocked by required conditions
fix: pre-public audit — critical install regression + 7 blockers
CRITICAL: lib-hooks.sh had an apostrophe ("user's") inside the jq
program's bash single-quote, closing the quote and producing a parse
error so EVERY install aborted at source time (install.sh:71). Caught
by a full minimal e2e (rc=2 then rc=0 after fix). Reworded the jq
comment to drop the apostrophe.

Audit blockers fixed:
- MANIFEST: drop cortex-ui (no such primitive) from 4 profiles + block;
  lib-menu desc no longer references it. Profile resolution verified clean.
- lib-dev-hub-forgejo / -zoekt: source lib-launchd.sh (register_launchd
  was undefined, so full-hub dev-hub install would fail at runtime).
- kei-message: portable 16-digit id. BSD date prints literal "N" for %N;
  fall back to /dev/urandom. Verified numeric in both code paths.
- bootstrap non-TTY default cortex to minimal (matches install.sh; avoids
  divergent curl-bash vs direct-install behaviour and 105-crate surprise).
- install.sh stamps ~/.claude/.kei-profile; bin/kei reads it (splash
  showed "profile: ?" before, since .installed holds only primitive names).
- README hook count 38 to 54 (real: ls hooks star dot sh).
- web-install warns before it discards local edits in the managed clone.

Verified: 106 shell files bash -n clean; minimal e2e rc=0 (38 agents,
57 hooks, 69 skills, profile stamped, mailbox present).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-24 10:48:06 +08:00

166 lines
5.9 KiB
Bash

# shellcheck shell=bash
# lib-dev-hub-zoekt.sh — install/uninstall/verify the local Zoekt code-search
# (Wave 45 dev-hub bundle, local-mirror profile and supersets).
#
# Two services land on launchd:
# * com.keisei.zoekt-webserver — HTTP UI on 127.0.0.1:6070 (KeepAlive=true)
# * com.keisei.zoekt-indexer — every 6h, re-indexes repos in repos.txt
#
# Re-running is safe — brew install is no-op, repos.txt regen is deterministic,
# launchd plists re-bootstrap. Index data is preserved on uninstall (rebuild
# is expensive).
#
# Sources only lib-log.sh (say/warn/err) + lib-launchd.sh (install_service /
# unload_plist / detect_brew_prefix). Reads $KIT_DIR + $HOME_DIR globals
# already set by install.sh.
# Per-service paths derived from globals — match render_plist's ${DATA}/${LOGS}.
_dhz_data_dir() { printf '%s/Library/Application Support/keisei/zoekt' "$HOME_DIR"; }
_dhz_logs_dir() { printf '%s/Library/Logs/keisei/zoekt' "$HOME_DIR"; }
_dhz_index_dir() { printf '%s/index' "$(_dhz_data_dir)"; }
_dhz_repos_file() { printf '%s/repos.txt' "$(_dhz_data_dir)"; }
_dhz_kit_root() { printf '%s/.claude/agents/_primitives' "$HOME_DIR"; }
_dhz_wrapper() { printf '%s/dev-hub/zoekt-reindex.sh' "$(_dhz_kit_root)"; }
# Step a — verify brew is on PATH; emit install URL on miss.
_dhz_check_brew() {
if ! command -v brew >/dev/null 2>&1; then
err "brew not found — Zoekt requires Homebrew on macOS arm64."
err " Install: https://brew.sh/ (then re-run this installer)"
return 1
fi
}
# Step a' — Zoekt is a Go binary; brew formula bundles its own runtime, so
# a separate `go` is not required, but warn loudly if missing for the user
# who might want to `go install` upstream tip later.
_dhz_check_go_runtime() {
if ! command -v go >/dev/null 2>&1; then
warn "go not on PATH — brew zoekt bundles its own runtime, but upstream"
warn " builds (zoekt-mirror, etc.) will need it. Install via 'brew install go'."
fi
}
# Step b — brew install zoekt (idempotent).
_dhz_brew_install() {
say "installing zoekt via brew (idempotent)"
if ! brew install zoekt; then
err "brew install zoekt failed — see brew log above"
return 1
fi
}
# Step c — ensure data dir tree (+ index dir).
_dhz_ensure_data_dir() {
mkdir -p "$(_dhz_data_dir)" "$(_dhz_index_dir)" "$(_dhz_logs_dir)"
}
# Step d — generate repos.txt by walking $HOME/Projects/ 1-level deep.
# Skips _archive and any dotfile dir. Idempotent: regenerates each install.
regenerate_repo_list() {
local projects="$HOME_DIR/Projects"
local out; out="$(_dhz_repos_file)"
mkdir -p "$(_dhz_data_dir)"
if [ ! -d "$projects" ]; then
warn " $projects does not exist — writing empty repos.txt"
: > "$out"
return 0
fi
: > "$out"
local entry name
for entry in "$projects"/*; do
[ -d "$entry" ] || continue
name="$(basename "$entry")"
case "$name" in
_archive|.*) continue ;;
esac
[ -d "$entry/.git" ] || continue
printf '%s\n' "$entry" >> "$out"
done
say " → wrote $(wc -l < "$out" | tr -d ' ') repo paths to $out"
}
# Step e — emit the reindex wrapper script + chmod +x.
# Uses printf into a heredoc-free path to keep the wrapper byte-exact across
# re-runs (idempotent: overwrite on every install so upstream wrapper-edits
# in this lib propagate).
write_reindex_wrapper() {
local path; path="$(_dhz_wrapper)"
mkdir -p "$(dirname "$path")"
cat > "$path" <<'WRAPPER'
#!/usr/bin/env bash
# Re-build zoekt index for all repos in repos.txt.
set -e
DATA="$HOME/Library/Application Support/keisei/zoekt"
INDEX="$DATA/index"
REPOS="$DATA/repos.txt"
LOGS="$HOME/Library/Logs/keisei/zoekt"
mkdir -p "$INDEX" "$LOGS"
if [ ! -s "$REPOS" ]; then
echo "no repos in $REPOS — skipping" >&2
exit 0
fi
while IFS= read -r repo; do
[ -d "$repo/.git" ] || continue
BREW="$(brew --prefix)"
"$BREW/bin/zoekt-git-index" -index "$INDEX" -shard 0 "$repo" 2>>"$LOGS/indexer.err.log"
done < "$REPOS"
echo "indexed $(wc -l < "$REPOS") repos at $(date -u +%FT%TZ)"
WRAPPER
chmod +x "$path"
say " → wrote reindex wrapper: $path"
}
# Step g — print success banner with repo count + URL.
_dhz_print_banner() {
local count; count="$(wc -l < "$(_dhz_repos_file)" 2>/dev/null | tr -d ' ')"
count="${count:-0}"
say ""
say "Zoekt webserver on http://127.0.0.1:6070/. Indexing ${count} repos every 6h."
say " index data: $(_dhz_index_dir)"
say " repo list: $(_dhz_repos_file) (regenerate via regenerate_repo_list)"
say ""
}
# Public — install entry point. Called from install.sh primitives phase.
install_dev_hub_zoekt() {
say "[dev-hub-zoekt] install starting"
# shellcheck source=./lib-launchd.sh
. "$KIT_DIR/install/lib-launchd.sh" # install_service / detect_brew_prefix (was unsourced → command not found)
_dhz_check_brew || return 1
_dhz_check_go_runtime
_dhz_brew_install || return 1
_dhz_ensure_data_dir || return 1
regenerate_repo_list || return 1
write_reindex_wrapper || return 1
install_service zoekt-webserver || return 1
install_service zoekt-indexer || return 1
_dhz_print_banner
say "[dev-hub-zoekt] install complete"
}
# Public — uninstall (unload both services, KEEP index — rebuild is expensive).
uninstall_dev_hub_zoekt() {
say "[dev-hub-zoekt] uninstall — unloading launchd services"
unload_plist zoekt-webserver
unload_plist zoekt-indexer
say " index preserved at: $(_dhz_index_dir)"
}
# Public — health check used by kei-doctor. Returns 0 iff the webserver
# answers HTTP 200 on its bind port.
verify_dev_hub_zoekt() {
local code
code="$(curl -s -o /dev/null -w '%{http_code}' \
--max-time 3 \
http://127.0.0.1:6070/ 2>/dev/null || echo "000")"
if [ "$code" = "200" ]; then
say "[dev-hub-zoekt] webserver OK (200)"
return 0
fi
err "[dev-hub-zoekt] webserver FAIL (got $code, expected 200)"
return 1
}