disinto/docker/runner/entrypoint-runner.sh

#!/usr/bin/env bash
# entrypoint-runner.sh — Vault runner entrypoint
#
# Receives an action-id, reads the vault action TOML to get the formula name,
# then dispatches to the appropriate executor:
#   - formulas/<name>.sh  → bash (mechanical operations like release)
#   - formulas/<name>.toml → claude -p (reasoning tasks like triage, architect)
#
# Usage: entrypoint-runner.sh <action-id>
#
# Expects:
#   OPS_REPO_ROOT  — path to the ops repo (mounted by compose)
#   FACTORY_ROOT   — path to disinto code (default: /home/agent/disinto)
#
# Part of #516.

set -euo pipefail

FACTORY_ROOT="${FACTORY_ROOT:-/home/agent/disinto}"
OPS_REPO_ROOT="${OPS_REPO_ROOT:-/home/agent/ops}"

log() {
  printf '[%s] runner: %s\n' "$(date -u '+%Y-%m-%dT%H:%M:%SZ')" "$*"
}

# ── Argument parsing ─────────────────────────────────────────────────────

action_id="${1:-}"
if [ -z "$action_id" ]; then
  log "ERROR: action-id argument required"
  echo "Usage: entrypoint-runner.sh <action-id>" >&2
  exit 1
fi

# ── Read vault action TOML ───────────────────────────────────────────────

action_toml="${OPS_REPO_ROOT}/vault/actions/${action_id}.toml"
if [ ! -f "$action_toml" ]; then
  log "ERROR: vault action TOML not found: ${action_toml}"
  exit 1
fi

# Extract formula name from TOML
formula=$(grep -E '^formula\s*=' "$action_toml" \
  | sed -E 's/^formula\s*=\s*"(.*)"/\1/' | tr -d '\r')

if [ -z "$formula" ]; then
  log "ERROR: no 'formula' field found in ${action_toml}"
  exit 1
fi

# Extract context for logging
context=$(grep -E '^context\s*=' "$action_toml" \
  | sed -E 's/^context\s*=\s*"(.*)"/\1/' | tr -d '\r')

log "Action: ${action_id}, formula: ${formula}, context: ${context:-<none>}"

# Export action TOML path so formula scripts can use it directly
export VAULT_ACTION_TOML="$action_toml"

# ── Dispatch: .sh (mechanical) vs .toml (Claude reasoning) ──────────────

formula_sh="${FACTORY_ROOT}/formulas/${formula}.sh"
formula_toml="${FACTORY_ROOT}/formulas/${formula}.toml"

if [ -f "$formula_sh" ]; then
  # Mechanical operation — run directly
  log "Dispatching to shell script: ${formula_sh}"
  exec bash "$formula_sh" "$action_id"

elif [ -f "$formula_toml" ]; then
  # Reasoning task — launch Claude with the formula as prompt
  log "Dispatching to Claude with formula: ${formula_toml}"

  formula_content=$(cat "$formula_toml")
  action_context=$(cat "$action_toml")

  prompt="You are a vault runner executing a formula-based operational task.

## Vault action
\`\`\`toml
${action_context}
\`\`\`

## Formula
\`\`\`toml
${formula_content}
\`\`\`

## Instructions
Execute the steps defined in the formula above. The vault action context provides
the specific parameters for this run. Execute each step in order, verifying
success before proceeding to the next.

FACTORY_ROOT=${FACTORY_ROOT}
OPS_REPO_ROOT=${OPS_REPO_ROOT}
"

  exec claude -p "$prompt" \
    --dangerously-skip-permissions \
    ${CLAUDE_MODEL:+--model "$CLAUDE_MODEL"}

else
  log "ERROR: no formula found for '${formula}' — checked ${formula_sh} and ${formula_toml}"
  exit 1
fi