Files
gastown/internal/cmd/molecule_attach.go
Steve Yegge 9fa4a42030 feat: add audit trail for detach operations (gt-h6eq.8)
Add DetachMoleculeWithAudit() function that logs detach operations
to .beads/audit.log in JSONL format. Each entry captures:
- timestamp
- operation type (detach, burn, squash)
- pinned_bead_id
- detached_molecule
- detached_by (agent identity)
- reason (optional)
- previous_state

Updated callers:
- runMoleculeDetach: logs "detach" operation
- runMoleculeBurn: logs "burn" operation with reason
- runMoleculeSquash: logs "squash" operation with digest ID

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-23 11:40:06 -08:00

150 lines
3.7 KiB
Go
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
package cmd
import (
"encoding/json"
"fmt"
"os"
"github.com/spf13/cobra"
"github.com/steveyegge/gastown/internal/beads"
"github.com/steveyegge/gastown/internal/style"
"github.com/steveyegge/gastown/internal/workspace"
)
func runMoleculeAttach(cmd *cobra.Command, args []string) error {
pinnedBeadID := args[0]
moleculeID := args[1]
workDir, err := findLocalBeadsDir()
if err != nil {
return fmt.Errorf("not in a beads workspace: %w", err)
}
b := beads.New(workDir)
// Attach the molecule
issue, err := b.AttachMolecule(pinnedBeadID, moleculeID)
if err != nil {
return fmt.Errorf("attaching molecule: %w", err)
}
attachment := beads.ParseAttachmentFields(issue)
fmt.Printf("%s Attached %s to %s\n", style.Bold.Render("✓"), moleculeID, pinnedBeadID)
if attachment != nil && attachment.AttachedAt != "" {
fmt.Printf(" attached_at: %s\n", attachment.AttachedAt)
}
return nil
}
func runMoleculeDetach(cmd *cobra.Command, args []string) error {
pinnedBeadID := args[0]
workDir, err := findLocalBeadsDir()
if err != nil {
return fmt.Errorf("not in a beads workspace: %w", err)
}
b := beads.New(workDir)
// Check current attachment first
attachment, err := b.GetAttachment(pinnedBeadID)
if err != nil {
return fmt.Errorf("checking attachment: %w", err)
}
if attachment == nil {
fmt.Printf("%s No molecule attached to %s\n", style.Dim.Render(""), pinnedBeadID)
return nil
}
previousMolecule := attachment.AttachedMolecule
// Detach the molecule with audit logging
_, err = b.DetachMoleculeWithAudit(pinnedBeadID, beads.DetachOptions{
Operation: "detach",
Agent: detectCurrentAgent(),
})
if err != nil {
return fmt.Errorf("detaching molecule: %w", err)
}
fmt.Printf("%s Detached %s from %s\n", style.Bold.Render("✓"), previousMolecule, pinnedBeadID)
return nil
}
func runMoleculeAttachment(cmd *cobra.Command, args []string) error {
pinnedBeadID := args[0]
workDir, err := findLocalBeadsDir()
if err != nil {
return fmt.Errorf("not in a beads workspace: %w", err)
}
b := beads.New(workDir)
// Get the issue
issue, err := b.Show(pinnedBeadID)
if err != nil {
return fmt.Errorf("getting issue: %w", err)
}
attachment := beads.ParseAttachmentFields(issue)
if moleculeJSON {
type attachmentOutput struct {
IssueID string `json:"issue_id"`
IssueTitle string `json:"issue_title"`
Status string `json:"status"`
AttachedMolecule string `json:"attached_molecule,omitempty"`
AttachedAt string `json:"attached_at,omitempty"`
}
out := attachmentOutput{
IssueID: issue.ID,
IssueTitle: issue.Title,
Status: issue.Status,
}
if attachment != nil {
out.AttachedMolecule = attachment.AttachedMolecule
out.AttachedAt = attachment.AttachedAt
}
enc := json.NewEncoder(os.Stdout)
enc.SetIndent("", " ")
return enc.Encode(out)
}
// Human-readable output
fmt.Printf("\n%s: %s\n", style.Bold.Render(issue.ID), issue.Title)
fmt.Printf("Status: %s\n", issue.Status)
if attachment == nil || attachment.AttachedMolecule == "" {
fmt.Printf("\n%s\n", style.Dim.Render("No molecule attached"))
} else {
fmt.Printf("\n%s\n", style.Bold.Render("Attached Molecule:"))
fmt.Printf(" ID: %s\n", attachment.AttachedMolecule)
if attachment.AttachedAt != "" {
fmt.Printf(" Attached at: %s\n", attachment.AttachedAt)
}
}
return nil
}
// detectCurrentAgent returns the current agent identity based on working directory.
// Returns empty string if identity cannot be determined.
func detectCurrentAgent() string {
cwd, err := os.Getwd()
if err != nil {
return ""
}
townRoot, err := workspace.FindFromCwd()
if err != nil || townRoot == "" {
return ""
}
ctx := detectRole(cwd, townRoot)
return buildAgentIdentity(ctx)
}