feat(tier2): add setup_tier2_clone.ps1 bootstrap script with -WhatIf support

2026-06-16 19:47:06 -04:00
parent 796da0de60
commit a9be60ae50
1 changed files with 113 additions and 0 deletions
@@ -0,0 +1,113 @@
+# scripts/tier2/setup_tier2_clone.ps1
+<#
+.SYNOPSIS
+  One-time bootstrap for the Tier 2 autonomous sandbox.
+.DESCRIPTION
+  Clones the main repo to C:\projects\manual_slop_tier2\, sets origin
+  to the main repo's local path, copies the agent/command/opencode.json
+  templates, installs the git hooks, creates the app-data temp dir with
+  restricted ACLs, and creates a "Tier 2 (Sandboxed)" desktop shortcut.
+  Idempotent: re-running updates templates and re-fetches, but does not
+  destroy existing feature branches in the clone.
+.PARAMETER WhatIf
+  Show what would happen without making changes.
+.PARAMETER MainRepoPath
+  Path to the main repo. Default: C:\projects\manual_slop
+.PARAMETER Tier2ClonePath
+  Path to the Tier 2 clone. Default: C:\projects\manual_slop_tier2
+#>
+[CmdletBinding(SupportsShouldProcess = $true)]
+param(
+    [string]$MainRepoPath = "C:\projects\manual_slop",
+    [string]$Tier2ClonePath = "C:\projects\manual_slop_tier2",
+    [string]$AppDataDir = "$env:LOCALAPPDATA\manual_slop\tier2"
+)
+
+$ErrorActionPreference = "Stop"
+
+# Resolve to absolute paths
+$MainRepoPath = (Resolve-Path $MainRepoPath).Path
+$AppDataFailuresDir = "$env:LOCALAPPDATA\manual_slop\tier2_failures"
+
+if ($PSCmdlet.ShouldProcess("Bootstrap Tier 2 clone at $Tier2ClonePath")) {
+    Write-Host "[tier2-bootstrap] starting bootstrap"
+    Write-Host "[tier2-bootstrap] main repo: $MainRepoPath"
+    Write-Host "[tier2-bootstrap] tier2 clone: $Tier2ClonePath"
+
+    # 1. Clone the main repo (if not already present)
+    if (-not (Test-Path $Tier2ClonePath)) {
+        Write-Host "[tier2-bootstrap] cloning $MainRepoPath -> $Tier2ClonePath"
+        git clone $MainRepoPath $Tier2ClonePath
+        if ($LASTEXITCODE -ne 0) { throw "git clone failed" }
+    } else {
+        Write-Host "[tier2-bootstrap] clone already exists, skipping clone"
+    }
+
+    # 2. Set origin to the main repo's local path (if not already)
+    Push-Location $Tier2ClonePath
+    try {
+        $currentOrigin = git remote get-url origin 2>$null
+        if ($currentOrigin -ne $MainRepoPath) {
+            Write-Host "[tier2-bootstrap] setting origin to $MainRepoPath"
+            git remote set-url origin $MainRepoPath
+        } else {
+            Write-Host "[tier2-bootstrap] origin already set correctly"
+        }
+
+        # 3. Copy templates
+        Write-Host "[tier2-bootstrap] copying templates"
+        New-Item -ItemType Directory -Force -Path "$Tier2ClonePath\.opencode\agents" | Out-Null
+        New-Item -ItemType Directory -Force -Path "$Tier2ClonePath\.opencode\commands" | Out-Null
+        Copy-Item -Force "$MainRepoPath\conductor\tier2\agents\tier2-autonomous.md" "$Tier2ClonePath\.opencode\agents\tier2-autonomous.md"
+        Copy-Item -Force "$MainRepoPath\conductor\tier2\commands\tier-2-auto-execute.md" "$Tier2ClonePath\.opencode\commands\tier-2-auto-execute.md"
+
+        # Merge opencode.json.fragment into the clone's opencode.json
+        $cloneConfig = "$Tier2ClonePath\opencode.json"
+        $fragment = Get-Content "$MainRepoPath\conductor\tier2\opencode.json.fragment" -Raw | ConvertFrom-Json
+        if (Test-Path $cloneConfig) {
+            $existing = Get-Content $cloneConfig -Raw | ConvertFrom-Json
+            if (-not $existing.agent) { $existing | Add-Member -MemberType NoteProperty -Name agent -Value ([PSCustomObject]@{}) }
+            $existing.agent | Add-Member -MemberType NoteProperty -Name "tier2-autonomous" -Value $fragment.agent."tier2-autonomous" -Force
+            $existing | Add-Member -MemberType NoteProperty -Name default_agent -Value "tier2-autonomous" -Force
+            $existing | ConvertTo-Json -Depth 10 | Set-Content $cloneConfig
+        } else {
+            Copy-Item -Force "$MainRepoPath\conductor\tier2\opencode.json.fragment" $cloneConfig
+        }
+
+        # 4. Install git hooks
+        Write-Host "[tier2-bootstrap] installing git hooks"
+        Copy-Item -Force "$MainRepoPath\conductor\tier2\githooks\pre-push" "$Tier2ClonePath\.git\hooks\pre-push"
+        Copy-Item -Force "$MainRepoPath\conductor\tier2\githooks\post-checkout" "$Tier2ClonePath\.git\hooks\post-checkout"
+
+        # 5. Create app-data dir with restricted ACLs
+        Write-Host "[tier2-bootstrap] creating app-data dir: $AppDataDir"
+        New-Item -ItemType Directory -Force -Path $AppDataDir | Out-Null
+        New-Item -ItemType Directory -Force -Path $AppDataFailuresDir | Out-Null
+        $acl = Get-Acl $AppDataDir
+        $acl.SetAccessRuleProtection($true, $false)
+        $userRule = New-Object System.Security.AccessControl.FileSystemAccessRule(
+            $env:USERNAME, "FullControl", "ContainerInherit,ObjectInherit", "None", "Allow"
+        )
+        $acl.AddAccessRule($userRule)
+        Set-Acl $AppDataDir $acl
+        Set-Acl $AppDataFailuresDir (Get-Acl $AppDataDir)
+
+        # 6. Create desktop shortcut
+        Write-Host "[tier2-bootstrap] creating desktop shortcut"
+        $shell = New-Object -ComObject WScript.Shell
+        $shortcut = $shell.CreateShortcut("$env:USERPROFILE\Desktop\Tier 2 (Sandboxed).lnk")
+        $shortcut.TargetPath = "pwsh.exe"
+        $shortcut.Arguments = "-File `"$MainRepoPath\scripts\tier2\run_tier2_sandboxed.ps1`""
+        $shortcut.WorkingDirectory = $Tier2ClonePath
+        $shortcut.Description = "Open OpenCode in the Tier 2 sandboxed clone"
+        $shortcut.Save()
+
+    } finally {
+        Pop-Location
+    }
+
+    Write-Host "[tier2-bootstrap] done"
+    Write-Host "[tier2-bootstrap] next steps:"
+    Write-Host "[tier2-bootstrap]   1. Double-click 'Tier 2 (Sandboxed)' on your desktop"
+    Write-Host "[tier2-bootstrap]   2. Type: /tier-2-auto-execute <track-name>"
+}