Files
stack/packages/skills/brain/brain.sh
Jason Woltje bbb2ed45ea fix: address code review feedback
- Replace unsafe JSON string concatenation with jq in cmd_create() and cmd_update()
- Add HTTP status code checking and error message extraction in api_call()
- Prevent JSON injection vulnerabilities from special characters
- Improve error messages with actual API responses
2026-01-29 21:24:01 -06:00

394 lines
9.2 KiB
Bash
Executable File

#!/usr/bin/env bash
set -euo pipefail
# Mosaic Brain CLI - Interface to Mosaic Stack Ideas/Brain API
# Usage: brain.sh <command> [options]
# Load configuration
CONFIG_FILE="${HOME}/.config/mosaic/brain.conf"
if [[ -f "$CONFIG_FILE" ]]; then
# shellcheck source=/dev/null
source "$CONFIG_FILE"
fi
# Configuration with defaults
API_URL="${MOSAIC_API_URL:-http://localhost:3001}"
WORKSPACE_ID="${MOSAIC_WORKSPACE_ID:-}"
API_TOKEN="${MOSAIC_API_TOKEN:-}"
# Color output
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
NC='\033[0m' # No Color
# Helper functions
error() {
echo -e "${RED}Error: $1${NC}" >&2
exit 1
}
success() {
echo -e "${GREEN}$1${NC}"
}
warn() {
echo -e "${YELLOW}$1${NC}"
}
check_config() {
[[ -z "$WORKSPACE_ID" ]] && error "MOSAIC_WORKSPACE_ID not set"
[[ -z "$API_TOKEN" ]] && error "MOSAIC_API_TOKEN not set"
}
# API call helper
api_call() {
local method="$1"
local endpoint="$2"
local data="${3:-}"
local url="${API_URL}${endpoint}"
local args=(
-X "$method"
-H "Authorization: Bearer ${API_TOKEN}"
-H "Content-Type: application/json"
-H "x-workspace-id: ${WORKSPACE_ID}"
-s
-w "\n%{http_code}"
)
if [[ -n "$data" ]]; then
args+=(-d "$data")
fi
local response
response=$(curl "${args[@]}" "$url")
# Extract HTTP status code from last line
local http_code
http_code=$(echo "$response" | tail -n1)
local body
body=$(echo "$response" | sed '$d')
# Check for errors
if [[ "$http_code" -ge 400 ]]; then
local error_msg
error_msg=$(echo "$body" | jq -r '.message // .error // "API request failed"' 2>/dev/null || echo "API request failed")
error "HTTP $http_code: $error_msg"
fi
echo "$body"
}
# Commands
cmd_capture() {
local content=""
local title=""
while [[ $# -gt 0 ]]; do
case $1 in
--title)
title="$2"
shift 2
;;
*)
content="$1"
shift
;;
esac
done
[[ -z "$content" ]] && error "Content required for capture"
local payload
payload=$(jq -n \
--arg content "$content" \
--arg title "$title" \
'{content: $content} + (if $title != "" then {title: $title} else {} end)')
response=$(api_call POST "/api/ideas/capture" "$payload")
echo "$response" | jq -r '.id // empty' > /dev/null || error "Failed to capture idea"
local idea_id
idea_id=$(echo "$response" | jq -r '.id')
success "✓ Idea captured: $idea_id"
echo "$response" | jq '.'
}
cmd_create() {
local content=""
local title=""
local tags=""
local category=""
local status=""
local priority=""
while [[ $# -gt 0 ]]; do
case $1 in
--content)
content="$2"
shift 2
;;
--title)
title="$2"
shift 2
;;
--tags)
tags="$2"
shift 2
;;
--category)
category="$2"
shift 2
;;
--status)
status="$2"
shift 2
;;
--priority)
priority="$2"
shift 2
;;
*)
content="$1"
shift
;;
esac
done
[[ -z "$content" ]] && error "Content required"
# Build JSON payload using jq for safety
local payload
payload=$(jq -n \
--arg content "$content" \
--arg title "$title" \
--arg category "$category" \
--arg status "$status" \
--arg priority "$priority" \
--arg tags "$tags" \
'{content: $content} +
(if $title != "" then {title: $title} else {} end) +
(if $category != "" then {category: $category} else {} end) +
(if $status != "" then {status: $status} else {} end) +
(if $priority != "" then {priority: $priority} else {} end) +
(if $tags != "" then {tags: ($tags | split(",") | map(gsub("^\\s+|\\s+$";"")))} else {} end)'
)
response=$(api_call POST "/api/ideas" "$payload")
echo "$response" | jq -r '.id // empty' > /dev/null || error "Failed to create idea"
local idea_id
idea_id=$(echo "$response" | jq -r '.id')
success "✓ Idea created: $idea_id"
echo "$response" | jq '.'
}
cmd_list() {
local limit="20"
local tags=""
local status=""
while [[ $# -gt 0 ]]; do
case $1 in
--limit)
limit="$2"
shift 2
;;
--tags)
tags="$2"
shift 2
;;
--status)
status="$2"
shift 2
;;
*)
shift
;;
esac
done
local query="?limit=$limit"
[[ -n "$tags" ]] && query+="&tags=$tags"
[[ -n "$status" ]] && query+="&status=$status"
response=$(api_call GET "/api/ideas${query}")
echo "$response" | jq '.'
}
cmd_get() {
local idea_id="$1"
[[ -z "$idea_id" ]] && error "Idea ID required"
response=$(api_call GET "/api/ideas/${idea_id}")
echo "$response" | jq '.'
}
cmd_update() {
local idea_id=""
local title=""
local content=""
local tags=""
local add_tags=""
local remove_tags=""
local status=""
local category=""
idea_id="$1"
shift
[[ -z "$idea_id" ]] && error "Idea ID required"
while [[ $# -gt 0 ]]; do
case $1 in
--title)
title="$2"
shift 2
;;
--content)
content="$2"
shift 2
;;
--tags)
tags="$2"
shift 2
;;
--add-tags)
add_tags="$2"
shift 2
;;
--remove-tags)
remove_tags="$2"
shift 2
;;
--status)
status="$2"
shift 2
;;
--category)
category="$2"
shift 2
;;
*)
shift
;;
esac
done
# Build update payload using jq for safety
local payload
payload=$(jq -n \
--arg title "$title" \
--arg content "$content" \
--arg status "$status" \
--arg category "$category" \
--arg tags "$tags" \
'(if $title != "" then {title: $title} else {} end) +
(if $content != "" then {content: $content} else {} end) +
(if $status != "" then {status: $status} else {} end) +
(if $category != "" then {category: $category} else {} end) +
(if $tags != "" then {tags: ($tags | split(",") | map(gsub("^\\s+|\\s+$";"")))} else {} end)'
)
response=$(api_call PATCH "/api/ideas/${idea_id}" "$payload")
echo "$response" | jq -r '.id // empty' > /dev/null || error "Failed to update idea"
success "✓ Idea updated: $idea_id"
echo "$response" | jq '.'
}
cmd_delete() {
local idea_id="$1"
[[ -z "$idea_id" ]] && error "Idea ID required"
response=$(api_call DELETE "/api/ideas/${idea_id}")
success "✓ Idea deleted: $idea_id"
}
cmd_query() {
local query="$*"
[[ -z "$query" ]] && error "Query text required"
local payload
payload=$(jq -n --arg query "$query" '{query: $query}')
response=$(api_call POST "/api/brain/query" "$payload")
echo "$response" | jq '.'
}
cmd_search() {
local search_term=""
local limit="20"
while [[ $# -gt 0 ]]; do
case $1 in
--limit)
limit="$2"
shift 2
;;
*)
search_term="$1"
shift
;;
esac
done
[[ -z "$search_term" ]] && error "Search term required"
local query="?q=$(echo "$search_term" | jq -sRr @uri)&limit=$limit"
response=$(api_call GET "/api/brain/search${query}")
echo "$response" | jq '.'
}
cmd_tags() {
# Get all ideas and extract unique tags
response=$(api_call GET "/api/ideas?limit=1000")
echo "$response" | jq -r '.data[]?.tags[]? // empty' | sort -u
}
# Main
main() {
[[ $# -eq 0 ]] && error "Command required. Use: capture, create, list, get, update, delete, query, search, tags"
check_config
local command="$1"
shift
case "$command" in
capture)
cmd_capture "$@"
;;
create)
cmd_create "$@"
;;
list)
cmd_list "$@"
;;
get)
cmd_get "$@"
;;
update)
cmd_update "$@"
;;
delete)
cmd_delete "$@"
;;
query)
cmd_query "$@"
;;
search)
cmd_search "$@"
;;
tags)
cmd_tags "$@"
;;
*)
error "Unknown command: $command"
;;
esac
}
main "$@"