mastermind-environments

Mastermind Environments

This skill is invoked directly via /mastermind-environments.

Bookkeeping only — not enforced by the Org Runtime. It writes .monomind/orgs/<org>-environments.json, which no runtime code reads: creating an environment or changing the default does not change where agents run.

---

Inputs

• brain_context: BRAIN CONTEXT block (injected by command, or loaded below if standalone)
• org_name: org to manage environments for (required)
• action: list | create | edit | delete | probe | set-default
• env_id: environment id (required for edit/delete/probe/set-default)
• kind: local | ssh | sandbox (required for create)
• name: display name (required for create)
• host: SSH hostname or IP (required for ssh kind)
• port: SSH port (default 22)
• user: SSH username (required for ssh kind)
• secret_ref: secret name holding the SSH private key (see mastermind:secrets — NEVER pass raw key values)
• work_dir: remote working directory (default: /tmp/monomind)
• caller: command | master

---

Security Constraints

• NEVER print SSH private key values
• NEVER store key material in environment JSON files — store only the secret_ref name
• SSH keys must be stored via mastermind:secrets and referenced by name only
• Probe connection is read-only (runs echo ok over SSH)

---

Step 0 — Brain Load (standalone only)

If caller is not "command", load brain context following mastermind-protocol/SKILL.md Brain Load Procedure with namespace: ops.

---

Step 1 — Load Environments File

orgFile=".monomind/orgs/${org_name}.json"
[ ! -f "$orgFile" ] && { echo "ERROR: Org '${org_name}' not found."; exit 1; }

envFile=".monomind/orgs/${org_name}-environments.json"
[ ! -f "$envFile" ] && cat > "$envFile" <<'EOF'
{"environments":[],"default_env":null}
EOF

---

Step 2 — Execute Action

list (default)

echo "ENVIRONMENTS — org: $org_name"
echo "────────────────────────────────────────────────────────"
printf "%-20s %-10s %-28s %-8s %s\n" "ID" "KIND" "HOST / PATH" "DEFAULT" "SECRET REF"
echo "────────────────────────────────────────────────────────"

defaultEnv=$(jq -r '.default_env // "none"' "$envFile")
count=$(jq '.environments | length' "$envFile")

if [ "$count" -eq 0 ]; then
  echo "  No environments. Use --action create to add one."
else
  jq -r --arg def "$defaultEnv" '(.environments // [])[] |
    [
      .id,
      (.kind // "local"),
      (if .kind == "ssh" then ((.user // "?") + "@" + (.host // "?") + ":" + ((.port // 22) | tostring)) else (.work_dir // "(local)") end),
      (if .id == $def then "yes" else "-" end),
      (.secret_ref // "-")
    ] | @tsv' "$envFile" | while IFS=$'\t' read -r id kind loc def sref; do
    printf "%-20s %-10s %-28s %-8s %s\n" "$id" "$kind" "$loc" "$def" "$sref"
  done
fi

echo ""
echo "Total: $count environment(s)  |  Default: $defaultEnv"