/setup

/fedramp-ssp:setup

Prepares the SSP DOCX→OSCAL pipeline. Clones ethanolivertroy/frdocx-to-froscal-ssp, installs its Python requirements into a dedicated virtualenv, and records the install path.

How to run

bash plugins/fedramp-ssp/scripts/setup.sh [--python=<python3-executable>]

What it does

1. Detect Python ≥ 3.10. --python=/opt/homebrew/bin/python3.12 overrides.

2. Clone/update ethanolivertroy/frdocx-to-froscal-ssp into ~/.local/share/claude-grc/tools/frdocx-to-froscal-ssp.

3. Create a virtualenv at <tool-dir>/.venv and pip install -r requirements.txt (primarily python-docx).

4. Verify that the entry-point script runs (python cli.py --help or equivalent).

5. Warn (not fail) if Java 17 isn't available — it's only needed for optional oscal-cli validation inside the pipeline; the /oscal:validate command from this toolkit can fill that role.

6. Write config:

   version: 1
   source: fedramp-ssp
   source_version: "0.1.0"
   python: "/opt/homebrew/bin/python3.12"
   venv: "~/.local/share/claude-grc/tools/frdocx-to-froscal-ssp/.venv"
   tool_dir: "~/.local/share/claude-grc/tools/frdocx-to-froscal-ssp"
   oscal_version: "1.2.0"
   

Typical output

fedramp-ssp:setup ✓
  python:      /opt/homebrew/bin/python3.12 (3.12.5)
  tool dir:    ~/.local/share/claude-grc/tools/frdocx-to-froscal-ssp
  venv:        ready (python-docx installed)
  java:        OpenJDK 17.0.11 (optional, available)
  config:      ~/.config/claude-grc/connectors/fedramp-ssp.yaml

Next:
  /fedramp-ssp:convert --ssp-docx=<path> --appendix-a-docx=<path>

Failure modes

• Python < 3.10: exit 2. Install a newer Python or pass --python=<path>.
• Network unreachable for git clone / pip: exit 2.
• Java missing: warn only; the pipeline still produces OSCAL. Use /oscal:validate downstream instead of the tool's bundled validation step.