a4e667de10
Single-commit clean baseline after security scrub of niche-tells, project codenames, internal jargon, and contributor-email leaks. Contents: - 100 Rust crates (_primitives/_rust/) - 37 agent manifests (_manifests/) + generated specs (_generated/) - 67 user-invocable skills (skills/) - 33 hooks (hooks/) - Composition blocks (_blocks/) - Documentation (docs/, README.md) - TS adapter packages (_ts_packages/) - Assembler (_assembler/) - Roles (_roles/) - Templates (_templates/) - Forgejo CI (.forgejo/) Author: Denis Parfionovich <info@greendragon.info> License: see LICENSE.
77 lines
2.5 KiB
Bash
Executable file
77 lines
2.5 KiB
Bash
Executable file
#!/bin/sh
|
|
# kei-sleep-sync.sh — POSIX-sh helper called at session end.
|
|
#
|
|
# Stages any new session traces + backlog in the user's memory-repo and
|
|
# pushes via a dedicated deploy key. NEVER blocks the session: every
|
|
# failure path logs to ~/.claude/memory/sync-errors.log and exits 0.
|
|
#
|
|
# Config resolution order:
|
|
# 1. env var KEI_MEMORY_REPO_PATH / KEI_MEMORY_SSH_KEY
|
|
# 2. ~/.claude/secrets/.env (sourced if present)
|
|
# 3. sync-repo's .keisei-sync.toml (informational only)
|
|
#
|
|
# Emergency bypass: `KEI_SLEEP_SYNC_BYPASS=1 ...` — silent exit 0.
|
|
|
|
set -u
|
|
|
|
ERR_LOG="${HOME}/.claude/memory/sync-errors.log"
|
|
|
|
log_err() {
|
|
mkdir -p "$(dirname "$ERR_LOG")" 2>/dev/null || return 0
|
|
printf '[%s] %s\n' "$(date -u +%Y-%m-%dT%H:%M:%SZ)" "$*" >> "$ERR_LOG" 2>/dev/null || true
|
|
}
|
|
|
|
# ---- bypass + env -----------------------------------------------------------
|
|
|
|
[ "${KEI_SLEEP_SYNC_BYPASS:-0}" = "1" ] && exit 0
|
|
|
|
SECRETS_FILE="${HOME}/.claude/secrets/.env"
|
|
if [ -f "$SECRETS_FILE" ] && [ -z "${KEI_MEMORY_REPO_PATH:-}" ]; then
|
|
# shellcheck disable=SC1090
|
|
. "$SECRETS_FILE" 2>/dev/null || true
|
|
fi
|
|
|
|
REPO_PATH="${KEI_MEMORY_REPO_PATH:-}"
|
|
SSH_KEY="${KEI_MEMORY_SSH_KEY:-}"
|
|
|
|
# Silent no-op when sync isn't configured yet (most users).
|
|
[ -z "$REPO_PATH" ] && exit 0
|
|
[ -d "${REPO_PATH}/.git" ] || exit 0
|
|
|
|
# ---- stage, commit, push ---------------------------------------------------
|
|
|
|
# cd may fail (permissions / path vanished) — silent exit.
|
|
cd "$REPO_PATH" 2>/dev/null || exit 0
|
|
|
|
# Mirror traces from the canonical local dump dir into the repo.
|
|
TRACES_SRC="${HOME}/.claude/memory/traces"
|
|
if [ -d "$TRACES_SRC" ]; then
|
|
mkdir -p traces 2>/dev/null || true
|
|
# -n = never overwrite; append-only semantics.
|
|
cp -n "$TRACES_SRC"/*.jsonl traces/ 2>/dev/null || true
|
|
fi
|
|
|
|
git add traces/ backlog.md 2>/dev/null || { log_err "git add failed"; exit 0; }
|
|
|
|
# Nothing staged — silent exit.
|
|
if git diff --cached --quiet 2>/dev/null; then
|
|
exit 0
|
|
fi
|
|
|
|
COMMIT_MSG="memory: session traces $(date +%Y-%m-%dT%H:%M:%S%z)"
|
|
if ! git commit -q -m "$COMMIT_MSG" 2>/dev/null; then
|
|
log_err "git commit failed"
|
|
exit 0
|
|
fi
|
|
|
|
# Push via the dedicated deploy key so we don't clobber the user's default SSH.
|
|
if [ -n "$SSH_KEY" ] && [ -f "$SSH_KEY" ]; then
|
|
GIT_SSH_COMMAND="ssh -i $SSH_KEY -o StrictHostKeyChecking=accept-new" \
|
|
git push -q origin HEAD 2>/dev/null \
|
|
|| { log_err "git push failed via $SSH_KEY"; exit 0; }
|
|
else
|
|
git push -q origin HEAD 2>/dev/null \
|
|
|| { log_err "git push failed (no SSH_KEY set)"; exit 0; }
|
|
fi
|
|
|
|
exit 0
|