KeiSeiKit-1.0/install/lib-onboarding-state.sh
KeiSei84 abae256c1d feat(install): opt-in hook packs + stack profiles (public posture)
A fresh install now activates only the safety pack; discipline hooks and
agents are opt-in via an onboarding step (step 6) or `kei configure`.
"People don't need Rust-only" — they pick their own stack.

- _primitives/hook-packs.toml: SSoT mapping pack -> hooks, stack -> packs +
  agent groups. safety always on; evidence/observability/epistemic/
  orchestration/git-guard/stack-rust opt-in. rust-first/no-python only under
  the systems stack; git-guard (no-github-push) opt-in only, pulled by no stack.
- lib-profile: extract generic _toml_array (reused by lib-packs); profile_members
  becomes a thin wrapper (no behavior change).
- lib-packs: pack/stack/agent resolvers + selection loader.
- lib-hooks: filter_snippet_by_packs (install-time allowlist) + prune_kit_hooks
  (reconfigure removes deselected kit hooks, keeps foreign ones); activate_hooks
  rewired to prune + filter + merge. No custom settings.json fields (/doctor safe).
- lib-agents: install_manifests filters by stack agent set (empty = install all).
- onboarding: pick_stack step (reuse _onb_read_choice), persists stack_profile +
  enabled_packs to onboarding.toml; i18n STR_* added.
- bin/kei configure -> scripts/kei-configure.sh (re-pick without reinstall);
  install stamps ~/.claude/.kei-kit-dir.
- numeric-claims-guard: money regex no longer matches shell positionals ($1..$9);
  requires decimal / unit / 2+ digits / tilde. Real money + time still caught.
- gate one-liner added to 8 discipline hooks (runtime toggle via hooks-control).

Verified end-to-end (scratch HOME): fresh=safety only; evidence pack adds
numeric+citation; systems stack wires rust-first + 14 base/systems agents (no
data-science/swift); reconfigure-shrink prunes kit hooks but keeps a foreign
hook; settings schema clean; assembler golden 3/3.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-25 17:27:14 +08:00

59 lines
2.4 KiB
Bash

# shellcheck shell=bash
# lib-onboarding-state.sh — запись результата мастера на диск.
#
# Constructor Pattern: 1 файл = state-запись. UI — в ui.sh, парсеры — в registry.sh.
#
# Пишет:
# ~/.claude/.onboarded — флаг прохождения
# ~/.claude/config/onboarding.toml — выбор lang/transport/provider/model
# ~/.claude/config/user-model-override.toml — для kei-model-router (HIGH аудит-1)
# ~/.claude/secrets/.env — добавляет ключи провайдера (chmod 600)
ONBOARDED_FLAG="${ONBOARDED_FLAG:-$HOME/.claude/.onboarded}"
ONBOARDING_CONFIG="${ONBOARDING_CONFIG:-$HOME/.claude/config/onboarding.toml}"
SECRETS_ENV="${SECRETS_ENV:-$HOME/.claude/secrets/.env}"
onboarding_write_secrets() {
[ "${#ONBOARDING_AUTH_ENV_KEYS[@]}" = "0" ] && return
mkdir -p "$(dirname "$SECRETS_ENV")"
touch "$SECRETS_ENV"; chmod 600 "$SECRETS_ENV"
local i
for i in "${!ONBOARDING_AUTH_ENV_KEYS[@]}"; do
local k="${ONBOARDING_AUTH_ENV_KEYS[$i]}"
local v="${ONBOARDING_AUTH_ENV_VALUES[$i]}"
if grep -q "^${k}=" "$SECRETS_ENV" 2>/dev/null; then
grep -v "^${k}=" "$SECRETS_ENV" > "$SECRETS_ENV.tmp"
mv "$SECRETS_ENV.tmp" "$SECRETS_ENV"
fi
printf '%s=%s\n' "$k" "$v" >> "$SECRETS_ENV"
done
chmod 600 "$SECRETS_ENV"
}
onboarding_write_config() {
mkdir -p "$(dirname "$ONBOARDING_CONFIG")"
cat > "$ONBOARDING_CONFIG" <<EOF
# KeiSeiKit onboarding choices. Auto-generated by lib-onboarding.sh.
# Re-run wizard: rm ~/.claude/.onboarded && ./install.sh
language = "$ONBOARDING_LANG"
transport = "$ONBOARDING_TRANSPORT"
provider = "$ONBOARDING_PROVIDER"
default_model = "$ONBOARDING_MODEL"
stack_profile = "$ONBOARDING_STACK"
enabled_packs = "$ONBOARDING_PACKS"
EOF
# Override для kei-model-router (HIGH аудит-1).
# Приоритет: --pinned flag > этот файл > agent-profiles.toml default_model_ref.
local override_path="$HOME/.claude/config/user-model-override.toml"
cat > "$override_path" <<EOF
# User-tier model override. Auto-generated by onboarding wizard.
# Format: kei-model-router::Registry::load_user_override().
# Priority: --pinned flag > этот файл > agent-profiles.toml default_model_ref.
provider = "$ONBOARDING_PROVIDER"
model = "$ONBOARDING_MODEL"
transport = "$ONBOARDING_TRANSPORT"
EOF
: > "$ONBOARDED_FLAG"
}