Central Grok Bot setup

import json
from pathlib import Path

helper_source = Path("runlayer_hook.py").read_text()
compile(helper_source, "runlayer_hook.py", "exec")
if "YOUR-TENANT" in helper_source:
    raise SystemExit("Set COLLECTOR_URL in runlayer_hook.py before generating.")

setup = "#!/usr/bin/env bash\nset -euo pipefail\numask 077\n"
setup += "python3 - <<'RUNLAYER_SETUP'\n"
setup += f"HELPER_SOURCE = {helper_source!r}\n"
setup += r'''
import json
import os
import shlex
import tempfile
from pathlib import Path

helper_path = Path.home() / ".grokbot" / "runlayer_hook.py"
config_path = Path.home() / ".cursor" / "hooks.json"
original = config_path.read_text() if config_path.exists() else None
config = json.loads(original) if original is not None else {"version": 1, "hooks": {}}
if not isinstance(config, dict) or config.get("version") != 1:
    raise SystemExit("Expected hooks.json version 1; inspect the existing file.")
hooks = config.setdefault("hooks", {})
if not isinstance(hooks, dict) or any(
    not isinstance(entries, list)
    or any(not isinstance(entry, dict) for entry in entries)
    for entries in hooks.values()
):
    raise SystemExit("Unexpected hooks.json shape; inspect the existing file.")

command = shlex.join(["python3", str(helper_path)])
for event in ("preToolUse", "postToolUse", "postToolUseFailure"):
    entries = [entry for entry in hooks.get(event, []) if entry.get("command") != command]
    entries.append({"command": command, "timeout": 3, "failClosed": False})
    hooks[event] = entries

def atomic_write(path, content):
    path.parent.mkdir(parents=True, exist_ok=True)
    with tempfile.NamedTemporaryFile(mode="w", dir=path.parent, delete=False) as output:
        temporary = Path(output.name)
        output.write(content)
    try:
        os.replace(temporary, path)
    finally:
        temporary.unlink(missing_ok=True)

backup_path = config_path.with_name("hooks.json.before-runlayer")
if original is not None and not backup_path.exists():
    atomic_write(backup_path, original)
atomic_write(helper_path, HELPER_SOURCE)
atomic_write(config_path, json.dumps(config, indent=2) + "\n")
print("Runlayer helper installed. Provision the secret and verify native activity.")
'''
setup += "\nRUNLAYER_SETUP\n"

manifest = {
    "manifestId": "runlayer-grok-monitoring",
    "entries": [{"id": "install-runlayer-hooks", "setup": setup}],
}
Path("runlayer-grok-setup.sh").write_text(setup)
Path("runlayer-grok-team-setup.json").write_text(json.dumps(manifest, indent=2) + "\n")