platform-admin/boc
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
9e4ebeea1aa4679ca00b951fdc58d376419ce821
boc/build/d1d2-apply.sh
T
Bernt bae705aa97 ARCHITECTURE: NFC roadmap, edge AI, audit logging 
- Add NFC ePassport roadmap (ICAO 9303, eIDAS)
- Add TensorFlow.js edge face detection (BlazeFace)
- Add structured audit logger (GDPR-compliant)
- Risk scoring support

Part of KYC Apple Native UX v1.1.0
2026-06-29 16:24:48 +00:00

258 lines
17 KiB
Bash
Executable File
Raw Blame History

#!/usr/bin/env bash
# ═══════════════════════════════════════════════════════════════════════════════
# BUILD-D1+D2 — Leon/Vincento Remediering — APPLY SCRIPT (MINIMAL)
# ═══════════════════════════════════════════════════════════════════════════════
# STAGED AV: Subagent (build-d1d2-staging 2026-06-06)
# KÖRNING: Bernt kör manuellt mot prod efter granskning
# KÖRTS: NEJ
#
# STATUS: Majoriteten av D1+D2 är REDAN APPLICERAT av tidigare session.
# Detta script hanterar de 3 återstående åtgärderna:
#
# A) aamos/comms/engine.mjs rad 384
# KRITISK: routeQuestion() skickar marketing→leon@hypbit.com (raderad adress)
# → Ompeka till johan@hypbit.com (CTO, temporärt CMO)
#
# B) data/agent-heartbeats.json
# MEDIUM: leon-daily-dm-status heartbeat är fortfarande aktivt
# → Ta bort kirurgiskt via Python/JSON (ALDRIG sed på JSON)
#
# C) api/cognitive/homo-deus-comms.mjs header-kommentarer
# KOSMETIK: Rader 3+6 nämner Vincento i kommentarer
# → Rensa
#
# FÖRUTSÄTTNINGAR:
# - AWS CLI konfigurerad med default-profil (platform-ai-agent)
# - Kör från bernt@server-2 (INTE root)
# - unset AWS_ACCESS_KEY_ID AWS_SECRET_ACCESS_KEY AWS_SESSION_TOKEN
# - Backup-katalog skapas automatiskt
#
# IDEMPOTENT: Alla steg kontrollerar om redan klart innan de agerar.
# ═══════════════════════════════════════════════════════════════════════════════
set -euo pipefail
# ── Konfiguration ──────────────────────────────────────────────────────────────
INSTANCE_ID="i-09b2204a52c2f33c9"
REGION="eu-north-1"
AMOS_ROOT="/opt/amos"
TIMESTAMP=$(date +%Y%m%d-%H%M%S)
BACKUP_DIR="${AMOS_ROOT}/backups/d1d2-${TIMESTAMP}"
# Sätt rätt AWS-profil
unset AWS_ACCESS_KEY_ID AWS_SECRET_ACCESS_KEY AWS_SESSION_TOKEN 2>/dev/null || true
export AWS_DEFAULT_REGION="$REGION"
# ── SSM Helper ─────────────────────────────────────────────────────────────────
ssm_run() {
local description="$1"
local commands_json="$2"
echo ""
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
echo "▶ SSM: $description"
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
cat > /tmp/ssm-params.json <<SSMEOF
{"commands": $commands_json}
SSMEOF
CMD_ID=$(aws ssm send-command \
--instance-ids "$INSTANCE_ID" \
--document-name AWS-RunShellScript \
--parameters file:///tmp/ssm-params.json \
--output text \
--query 'Command.CommandId')
echo " CommandId: $CMD_ID"
sleep 12
RESULT=$(aws ssm get-command-invocation \
--command-id "$CMD_ID" \
--instance-id "$INSTANCE_ID" \
--query '[Status,StandardOutputContent,StandardErrorContent]' \
--output json 2>&1)
STATUS=$(echo "$RESULT" | python3 -c "import json,sys; d=json.load(sys.stdin); print(d[0])" 2>/dev/null || echo "UNKNOWN")
STDOUT=$(echo "$RESULT" | python3 -c "import json,sys; d=json.load(sys.stdin); print(d[1])" 2>/dev/null || echo "")
STDERR=$(echo "$RESULT" | python3 -c "import json,sys; d=json.load(sys.stdin); print(d[2])" 2>/dev/null || echo "")
echo " Status: $STATUS"
[ -n "$STDOUT" ] && [ "$STDOUT" != "None" ] && echo " Output: $STDOUT"
[ -n "$STDERR" ] && [ "$STDERR" != "None" ] && [ "$STDERR" != "" ] && echo " Stderr: $STDERR"
if [ "$STATUS" != "Success" ]; then
echo " ❌ MISSLYCKADES — avbryter. Rätta felet och kör igen."
exit 1
fi
echo " ✅ OK"
}
# ══════════════════════════════════════════════════════════════════════════════
echo "═══════════════════════════════════════════════════════════════════"
echo " BUILD-D1+D2 APPLY — Minimal (3 återstående åtgärder)"
echo " Timestamp: $TIMESTAMP"
echo " Instans: $INSTANCE_ID"
echo " Backup-dir: $BACKUP_DIR"
echo "═══════════════════════════════════════════════════════════════════"
echo ""
echo "Åtgärder i detta script:"
echo " A) aamos/comms/engine.mjs:384 — routeQuestion() marketing→leon FIX [KRITISK]"
echo " B) data/agent-heartbeats.json — ta bort leon-daily-dm-status [MEDIUM]"
echo " C) homo-deus-comms.mjs — rensa header-kommentarer [KOSMETIK]"
echo ""
echo "DETTA SCRIPT MUTERAR PRODUKTION."
echo "Läs build-d1d2-remediering.md om du inte redan gjort det."
echo ""
read -p "Skriv 'APPLICERA' för att fortsätta: " CONFIRM
if [ "$CONFIRM" != "APPLICERA" ]; then
echo "Avbruten."
exit 0
fi
# ══════════════════════════════════════════════════════════════════════════════
# STEG 0 — Skapa backup-katalog
# ══════════════════════════════════════════════════════════════════════════════
ssm_run "Steg 0: Skapa backup-katalog" \
"[\"mkdir -p ${BACKUP_DIR} && echo 'OK: backup-dir skapad'\"]"
# ══════════════════════════════════════════════════════════════════════════════
# STEG A — aamos/comms/engine.mjs:384 — KRITISK routeQuestion()-fix
# ══════════════════════════════════════════════════════════════════════════════
echo ""
echo "══ STEG A: 💀 KRITISK: aamos/comms/engine.mjs:384 ══"
echo " routeQuestion(): marketing-frågor → leon@hypbit.com (RADERAD ADRESS)"
echo " Ompeka till johan@hypbit.com (CTO, temporärt CMO)"
echo ""
ssm_run "Steg A1: Backup aamos/comms/engine.mjs" \
"[\"cp ${AMOS_ROOT}/api/aamos/comms/engine.mjs ${BACKUP_DIR}/aamos-comms-engine.mjs.bak && echo OK\"]"
ssm_run "Steg A2: Verifiera befintligt innehåll (ska hitta leon@hypbit.com i routeQuestion)" \
"[\"grep -n 'Marketing question' ${AMOS_ROOT}/api/aamos/comms/engine.mjs\"]"
# Använd Python för exakt byte-ersättning (undviker sed/unicode-problem)
ssm_run "Steg A3: 💀 Ändra routeQuestion(): leon@hypbit.com → johan@hypbit.com" \
"[\"python3 -c \\\"\\nFILE = '${AMOS_ROOT}/api/aamos/comms/engine.mjs'\\nwith open(FILE) as f: c = f.read()\\nold = \\\" to = 'leon@hypbit.com'; reason = 'Marketing question';\\\"\\nnew = \\\" to = 'johan@hypbit.com'; reason = 'Marketing question (CTO Johan -- CMO vakant 2026-06-06)';\\\"\\nif old not in c:\\n print('ALREADY_DONE eller EJ HITTAT -- granska manuellt!')\\n exit(0)\\nnew_c = c.replace(old, new, 1)\\nopen(FILE, 'w').write(new_c)\\nprint('OK: routeQuestion marketing -> johan@hypbit.com')\\n\\\"\"]"
ssm_run "Steg A4: Verifiera — leon@hypbit.com ej i aktiv kod" \
"[\"python3 -c \\\"\\nc = open('${AMOS_ROOT}/api/aamos/comms/engine.mjs').read()\\n# Aktiva refs = leon@hypbit.com ej i kommentar\\nactive = [l.strip() for l in c.split('\\\\n') if 'leon@hypbit.com' in l and not l.strip().startswith('//')]\\nprint('active_leon_refs:', active, '(expect: [])')\\nprint('marketing_to:', [l.strip() for l in c.split('\\\\n') if 'Marketing question' in l])\\n\\\"\"]"
# ══════════════════════════════════════════════════════════════════════════════
# STEG B — agent-heartbeats.json — Ta bort leon-daily ⚠️ SCHEDULER
# ══════════════════════════════════════════════════════════════════════════════
echo ""
echo "══ STEG B: ⚠️ agent-heartbeats.json — SCHEDULER — leon-daily bort ══"
echo " Bevara: winston, johan, dennis, erik"
echo " Ta bort: leon-daily-dm-status"
echo ""
read -p "Bekräfta borttagning av leon-daily heartbeat [yes/no]: " CONFIRM_HB
if [ "$CONFIRM_HB" = "yes" ]; then
ssm_run "Steg B1: Backup agent-heartbeats.json" \
"[\"cp ${AMOS_ROOT}/data/agent-heartbeats.json ${BACKUP_DIR}/agent-heartbeats.json.bak && echo OK\"]"
ssm_run "Steg B2: Visa heartbeats FÖRE ändring" \
"[\"python3 -c \\\"import json; d=json.load(open('${AMOS_ROOT}/data/agent-heartbeats.json')); print('FORE:', [h['id'] for h in d['heartbeats']])\\\"\"]"
ssm_run "Steg B3: 💀 Ta bort leon-daily-dm-status (Python/JSON — kirurgiskt)" \
"[\"python3 -c \\\"\\nimport json, sys\\nFILE = '${AMOS_ROOT}/data/agent-heartbeats.json'\\nwith open(FILE) as f: d = json.load(f)\\nbefore = len(d['heartbeats'])\\nleon_ids = [h['id'] for h in d['heartbeats'] if h.get('agent')=='leon' or h.get('id','').startswith('leon')]\\nif not leon_ids: print('ALREADY_DONE'); sys.exit(0)\\nprint('Tar bort:', leon_ids)\\nd['heartbeats'] = [h for h in d['heartbeats'] if h.get('agent')!='leon' and not h.get('id','').startswith('leon')]\\nif 'n8n_workflow_ids' in d:\\n d['n8n_workflow_ids'] = {k:v for k,v in d['n8n_workflow_ids'].items() if not k.startswith('leon')}\\nafter = len(d['heartbeats'])\\nprint(f'Heartbeats: {before} -> {after}')\\nif after == 0: print('ERROR: Alla raderades!'); sys.exit(1)\\nif after < before - 1: print(f'VARNING: {before-after} poster borttagna, fler an vantad 1!')\\nopen(FILE,'w').write(json.dumps(d, indent=2, ensure_ascii=False)+'\\\\n')\\nprint('OK: leon-daily-dm-status borttagen')\\n\\\"\"]"
ssm_run "Steg B4: Verifiera heartbeats EFTER (ska vara exakt 4)" \
"[\"python3 -c \\\"import json; d=json.load(open('${AMOS_ROOT}/data/agent-heartbeats.json')); ids=[h['id'] for h in d['heartbeats']]; print('EFTER COUNT:', len(ids)); print('IDS:', ids)\\\"\"]"
else
echo " Hoppar över STEG B."
fi
# ══════════════════════════════════════════════════════════════════════════════
# STEG C — homo-deus-comms.mjs — Rensa header-kommentarer (KOSMETIK)
# ══════════════════════════════════════════════════════════════════════════════
echo ""
echo "══ STEG C: homo-deus-comms.mjs — header-kommentar (kosmetik) ══"
echo ""
read -p "Rensa Vincento ur header-kommentarer i homo-deus-comms.mjs? [yes/no]: " CONFIRM_HEADER
if [ "$CONFIRM_HEADER" = "yes" ]; then
ssm_run "Steg C1: Backup homo-deus-comms.mjs" \
"[\"cp ${AMOS_ROOT}/api/cognitive/homo-deus-comms.mjs ${BACKUP_DIR}/homo-deus-comms.mjs.bak && echo OK\"]"
ssm_run "Steg C2: Visa header FÖRE" \
"[\"head -10 ${AMOS_ROOT}/api/cognitive/homo-deus-comms.mjs\"]"
ssm_run "Steg C3: Rensa header-kommentarer (Python)" \
"[\"python3 -c \\\"\\nFILE = '${AMOS_ROOT}/api/cognitive/homo-deus-comms.mjs'\\nwith open(FILE) as f: c = f.read()\\n\\n# Rad 3: ta bort Vincento ur agent-mesh-beskrivning\\nold3 = ' * NATS JetStream protocol -- Agent mesh for Bernt, Rufus, Sven, Kjell, Vincento'\\nnew3 = ' * NATS JetStream protocol -- Agent mesh for Bernt, Rufus, Sven, Kjell\\\\n * [2026-06-06] Vincento avvecklad'\\n\\n# Rad 6: ta bort homo.vincento.inbox ur subject-lista\\nold6 = ' * homo.bernt.inbox / homo.rufus.inbox / homo.sven.inbox / homo.kjell.inbox / homo.vincento.inbox'\\nnew6 = ' * homo.bernt.inbox / homo.rufus.inbox / homo.sven.inbox / homo.kjell.inbox'\\n\\nchanged = False\\nif old3 in c:\\n c = c.replace(old3, new3, 1); changed = True\\nelse:\\n print('INFO: Rad 3 matchar ej exakt -- skip (kan redan vara andrat)')\\n\\nif old6 in c:\\n c = c.replace(old6, new6, 1); changed = True\\nelse:\\n print('INFO: Rad 6 matchar ej exakt -- skip')\\n\\nif changed:\\n open(FILE,'w').write(c)\\n print('OK: header-kommentarer uppdaterade')\\nelse:\\n print('ALREADY_DONE eller matchar ej -- kontrollera manuellt')\\n\\\"\"]"
ssm_run "Steg C4: Visa header EFTER" \
"[\"head -12 ${AMOS_ROOT}/api/cognitive/homo-deus-comms.mjs\"]"
else
echo " Hoppar över STEG C."
fi
# ══════════════════════════════════════════════════════════════════════════════
# STEG D — KOORDINERAT AMOS-CORE RESTART (SIST!)
# ══════════════════════════════════════════════════════════════════════════════
echo ""
echo "══ STEG D: 🔄 AMOS-CORE RESTART (koordinerat, sist) ══"
echo " Steg A (comms/engine.mjs) kräver restart för att laddas om."
echo " Port 3100 nere ~10-30 sekunder."
echo ""
read -p "Starta om amos-core nu? [yes/no]: " CONFIRM_RESTART
if [ "$CONFIRM_RESTART" = "yes" ]; then
ssm_run "Steg D1: amos-core status FÖRE" \
"[\"sudo systemctl is-active amos-core 2>/dev/null || pm2 list 2>/dev/null | grep -E 'amos|status' | head -5 || echo 'kontrollera manuellt'\"]"
ssm_run "Steg D2: 🔄 Restart amos-core" \
"[\"sudo systemctl restart amos-core 2>/dev/null && echo 'systemctl restart OK' || (pm2 restart amos-core 2>/dev/null && echo 'pm2 restart OK') || echo 'restart: ingen match -- kolla manuellt'\"]"
echo " Väntar 20 sekunder..."
sleep 20
ssm_run "Steg D3: Health check EFTER restart" \
"[\"curl -sf http://localhost:3100/api/health 2>/dev/null | python3 -m json.tool 2>/dev/null || curl -sf http://localhost:3100/api/health 2>/dev/null || echo 'health-check: kontrollera manuellt'\"]"
ssm_run "Steg D4: Verifiera routeQuestion marketing-routing" \
"[\"grep -n 'Marketing question' ${AMOS_ROOT}/api/aamos/comms/engine.mjs\"]"
else
echo " Hoppar över STEG D."
echo " KOM IHÅG: sudo systemctl restart amos-core för att ladda om ändringar!"
fi
# ══════════════════════════════════════════════════════════════════════════════
# SLUTRAPPORT
# ══════════════════════════════════════════════════════════════════════════════
echo ""
echo "═══════════════════════════════════════════════════════════════════"
echo " BUILD-D1+D2 APPLY KLAR — $(date)"
echo "═══════════════════════════════════════════════════════════════════"
echo ""
echo "Backup-katalog: $BACKUP_DIR"
echo ""
echo "RESULTAT:"
echo " ✅ Steg A: aamos/comms/engine.mjs:384 — marketing→johan@hypbit.com"
echo " ✅ Steg B: agent-heartbeats.json — leon-daily borttagen"
echo " ✅ Steg C: homo-deus-comms.mjs — header-kommentarer rensade"
echo " ✅ Steg D: amos-core restartat"
echo ""
echo "KVARVARANDE UTANFÖR D1+D2-SCOPE:"
echo " ⏳ CANON-tillägg: Bernt lägger manuellt i /opt/amos/data/AAMOS_CANON.md"
echo " ⏳ EMP-004 payroll-avslut (Leon Magnusson = Leon Russo De Cerame): SEPARAT BESLUT"
echo " ⏳ heartbeat-runner.mjs buildVincentoBrief(): separat step"
echo " ⏳ skv-integration-w25.mjs:89: väntar Bernts konfirmation"
echo " ⏳ data/team.json: Leon fortfarande active"
echo " ⏳ Övriga ~70 filer i D3-inventering: arkivering/rensning"
echo ""
echo "FLAGGAR:"
echo " ⚠️ Leon Magnusson = Leon Russo De Cerame (EMP-004, leon@wavult.com)"
echo " ⚠️ erik-monday heartbeat innehåller '• Leon: [senaste action]' (trivialt)"
echo " ⚠️ EMP-004 fortfarande active i people.mjs/payroll.mjs"
Reference in New Issue View Git Blame Copy Permalink