Aggiunto workflow OpenCode Gitea Integration

2026-08-17 09:26:17 +00:00
parent 8919ab979f
commit 5dad90c713
1 changed files with 353 additions and 0 deletions
@@ -0,0 +1,353 @@
+name: OpenCode Gitea Integration
+
+on:
+  issues:
+    types: [opened]
+  issue_comment:
+    types: [created]
+  pull_request_review_comment:
+    types: [created]
+  workflow_dispatch:
+    inputs:
+      prompt:
+        description: "Istruzione manuale per OpenCode"
+        required: true
+
+jobs:
+  opencode-gitea:
+    if: |
+      github.event_name == 'workflow_dispatch' ||
+      (github.event_name == 'issues' &&
+        (contains(github.event.issue.body, '/oc') || contains(github.event.issue.body, '/opencode'))) ||
+      (github.event_name != 'issues' &&
+        github.event.comment.user.login != 'opencode-bot' &&
+        (contains(github.event.comment.body, '/oc') || contains(github.event.comment.body, '/opencode')))
+    runs-on: ubuntu-latest
+    timeout-minutes: 40
+
+    env:
+      GITEA_API_URL: "https://gitea.maribit.it"
+      GITEA_TOKEN: ${{ secrets.BOT_GITEA_TOKEN }}
+      REPO_FULL_NAME: ${{ github.repository }}
+      COMMENT_BODY: ${{ github.event.comment.body || github.event.issue.body || github.event.inputs.prompt }}
+      COMMENT_AUTHOR: ${{ github.event.comment.user.login || github.event.issue.user.login || github.actor }}
+      COMMENT_ID: ${{ github.event.comment.id }}
+      IS_PR_EVENT: ${{ github.event_name == 'pull_request_review_comment' }}
+      IS_MANUAL: ${{ github.event_name == 'workflow_dispatch' }}
+      PR_NUMBER_FROM_EVENT: ${{ github.event.pull_request.number }}
+      PR_HEAD_REF_FROM_EVENT: ${{ github.event.pull_request.head.ref }}
+      ISSUE_NUMBER: ${{ github.event.issue.number }}
+      ISSUE_TITLE: ${{ github.event.issue.title }}
+      ISSUE_BODY: ${{ github.event.issue.body }}
+      RUN_NUMBER: ${{ github.run_number }}
+      # --- OpenCode ---
+      OPENCODE_ZEN_API_KEY: ${{ secrets.OPENCODE_ZEN_API_KEY }}
+      OPENCODE_API_BASE: https://opencode.ai
+      OPENCODE_MODEL: opencode/big-pickle
+      MAX_ITERATIONS: "4"
+
+    steps:
+      - name: Verifica autorizzazione utente
+        run: |
+          ALLOWED_USERS="maria nicola"
+          if [ "$IS_MANUAL" = "true" ]; then
+            exit 0
+          fi
+          if ! echo " $ALLOWED_USERS " | grep -q " $COMMENT_AUTHOR "; then
+            echo "Utente '$COMMENT_AUTHOR' non autorizzato a invocare OpenCode. Interrompo."
+            exit 1
+          fi
+
+      - name: Reagisci al comando (👀)
+        id: react
+        run: |
+          API="$GITEA_API_URL/api/v1/repos/$REPO_FULL_NAME"
+          if [ -n "$COMMENT_ID" ]; then
+            RPATH="issues/comments/$COMMENT_ID/reactions"
+          elif [ -n "$ISSUE_NUMBER" ]; then
+            RPATH="issues/$ISSUE_NUMBER/reactions"
+          else
+            RPATH=""
+          fi
+          echo "path=$RPATH" >> "$GITHUB_OUTPUT"
+          if [ -n "$RPATH" ]; then
+            curl -s -X POST "$API/$RPATH" \
+              -H "Authorization: token $GITEA_TOKEN" \
+              -H "Content-Type: application/json" \
+              -d '{"content":"eyes"}' >/dev/null || true
+          fi
+
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Install OpenCode CLI
+        run: |
+          curl -fsSL https://opencode.ai/install | bash
+          echo "$HOME/.opencode/bin" >> "$GITHUB_PATH"
+
+      - name: Configura agent reviewer (read-only)
+        run: |
+          mkdir -p .opencode/agents
+          cat > .opencode/agents/reviewer.md <<'EOF'
+          ---
+          description: Revisore read-only che verifica gli acceptance criteria eseguendo i test, senza modificare il codice.
+          mode: primary
+          permission:
+            edit: deny
+            webfetch: deny
+            bash: allow
+          tools:
+            write: false
+            edit: false
+            bash: true
+          ---
+          Sei un revisore di codice rigoroso in SOLA LETTURA.
+          Non modificare mai i file: puoi solo leggere il codice ed eseguire comandi
+          di verifica (build, lint, test). Stabilisci se ogni Acceptance Criterion
+          del piano è oggettivamente soddisfatto sul codice attuale.
+          EOF
+          grep -qxF '.opencode/' .git/info/exclude 2>/dev/null || echo '.opencode/' >> .git/info/exclude
+
+      - name: Determina contesto (issue / PR / manuale) e branch di lavoro
+        id: ctx
+        run: |
+          set -e
+          git config --global user.name "OpenCode Bot"
+          git config --global user.email "opencode-bot@maribit.it"
+
+          API="$GITEA_API_URL/api/v1/repos/$REPO_FULL_NAME"
+
+          if [ "$IS_MANUAL" = "true" ]; then
+            IS_PR=false
+            PR_NUMBER=""
+            BRANCH_NAME="opencode-manual-$RUN_NUMBER"
+          elif [ "$IS_PR_EVENT" = "true" ]; then
+            IS_PR=true
+            PR_NUMBER="$PR_NUMBER_FROM_EVENT"
+            BRANCH_NAME="$PR_HEAD_REF_FROM_EVENT"
+          else
+            ISSUE_JSON=$(curl -s -H "Authorization: token $GITEA_TOKEN" "$API/issues/$ISSUE_NUMBER")
+            if [ "$(echo "$ISSUE_JSON" | jq -r '.pull_request // empty')" != "" ]; then
+              IS_PR=true
+              PR_NUMBER="$ISSUE_NUMBER"
+              PR_JSON=$(curl -s -H "Authorization: token $GITEA_TOKEN" "$API/pulls/$PR_NUMBER")
+              BRANCH_NAME=$(echo "$PR_JSON" | jq -r '.head.ref')
+            else
+              IS_PR=false
+              PR_NUMBER=""
+              BRANCH_NAME="opencode-issue-$ISSUE_NUMBER"
+            fi
+          fi
+
+          if [ -z "$BRANCH_NAME" ] || [ "$BRANCH_NAME" = "null" ]; then
+            echo "BRANCH_NAME non valido ('$BRANCH_NAME'). Interrompo."
+            exit 1
+          fi
+
+          PLAN_KEY=$(printf '%s' "$BRANCH_NAME" | tr '/' '-')
+
+          echo "is_pr=$IS_PR" >> "$GITHUB_OUTPUT"
+          echo "pr_number=$PR_NUMBER" >> "$GITHUB_OUTPUT"
+          echo "branch_name=$BRANCH_NAME" >> "$GITHUB_OUTPUT"
+          echo "plan_key=$PLAN_KEY" >> "$GITHUB_OUTPUT"
+
+          if [ "$IS_PR" = "true" ]; then
+            git fetch origin "$BRANCH_NAME"
+            git checkout -B "$BRANCH_NAME" "origin/$BRANCH_NAME"
+          elif git ls-remote --exit-code --heads origin "$BRANCH_NAME" >/dev/null 2>&1; then
+            git fetch origin "$BRANCH_NAME"
+            git checkout -B "$BRANCH_NAME" "origin/$BRANCH_NAME"
+          else
+            git checkout -b "$BRANCH_NAME"
+          fi
+
+      - name: Raccogli contesto aggiuntivo (diff + commenti, se PR)
+        run: |
+          API="$GITEA_API_URL/api/v1/repos/$REPO_FULL_NAME"
+          : > /tmp/context.txt
+          if [ "${{ steps.ctx.outputs.is_pr }}" = "true" ]; then
+            PR_NUMBER="${{ steps.ctx.outputs.pr_number }}"
+            echo "== Diff della PR ==" >> /tmp/context.txt
+            curl -s -H "Authorization: token $GITEA_TOKEN" "$API/pulls/$PR_NUMBER.diff" >> /tmp/context.txt
+            echo "== Commenti recenti ==" >> /tmp/context.txt
+            curl -s -H "Authorization: token $GITEA_TOKEN" "$API/issues/$PR_NUMBER/comments" \
+              | jq -r '.[] | "- (\(.user.login)): \(.body)"' >> /tmp/context.txt || true
+          fi
+
+      - name: Pulisci il comando dal trigger
+        run: |
+          CLEAN_PROMPT=$(printf '%s' "$COMMENT_BODY" | sed -e 's|/opencode||g' -e 's|/oc||g')
+          printf '%s' "$CLEAN_PROMPT" > /tmp/clean_prompt.txt
+
+      - name: "Fase 1 — Plan (analisi read-only)"
+        if: steps.ctx.outputs.is_pr != 'true'
+        run: |
+          CLEAN_PROMPT=$(cat /tmp/clean_prompt.txt)
+          CONTEXT=$(cat /tmp/context.txt 2>/dev/null || true)
+          mkdir -p issue_plans
+          PLAN_FILE="issue_plans/${{ steps.ctx.outputs.plan_key }}.md"
+
+          opencode run --agent plan --model "$OPENCODE_MODEL" \
+            "Sei in modalità PLAN (SOLA LETTURA): NON modificare alcun file.
+          Analizza il codebase e la richiesta, poi produci un piano di lavoro in Markdown
+          con questa struttura ESATTA:
+
+          # Piano
+          ## Obiettivo
+          ## Task
+          (elenco numerato di task atomici; per ciascuno i file coinvolti)
+          ## Acceptance Criteria
+          (checklist '- [ ] ...' di criteri oggettivi e verificabili)
+          ## Verifica
+          (come testare: comandi da lanciare, cosa controllare)
+
+          Richiesta ($COMMENT_AUTHOR): $CLEAN_PROMPT
+          Contesto: $ISSUE_TITLE - $ISSUE_BODY
+          $CONTEXT
+
+          Restituisci SOLO il documento Markdown del piano." | tee "$PLAN_FILE"
+
+          cp "$PLAN_FILE" /tmp/plan.md
+          git add "$PLAN_FILE"
+          git commit -m "OpenCode: piano di lavoro (${{ steps.ctx.outputs.plan_key }})" || echo "Nessun piano da committare."
+
+      - name: "Fase 2 — Build & Review loop"
+        run: |
+          CLEAN_PROMPT=$(cat /tmp/clean_prompt.txt)
+          CONTEXT=$(cat /tmp/context.txt 2>/dev/null || true)
+          PLAN=""; [ -f /tmp/plan.md ] && PLAN="$(cat /tmp/plan.md)"
+          REVIEW_FEEDBACK="(prima iterazione: nessun feedback)"
+
+          for i in $(seq 1 "$MAX_ITERATIONS"); do
+            echo "::group::Iterazione $i — BUILD"
+            opencode run --agent build --auto --model "$OPENCODE_MODEL" \
+              "Sei in modalità BUILD. Implementa il piano completando TUTTI i task e
+          soddisfacendo TUTTI gli Acceptance Criteria. Applica le modifiche ai file.
+
+          === PIANO ===
+          ${PLAN:-Nessun piano formale. Richiesta: $CLEAN_PROMPT}
+
+          === CONTESTO (diff/commenti PR, se presente) ===
+          $CONTEXT
+
+          === FEEDBACK DELLA REVIEW PRECEDENTE (correggi SOLO questi punti) ===
+          $REVIEW_FEEDBACK"
+            echo "::endgroup::"
+
+            echo "::group::Iterazione $i — REVIEW"
+            opencode run --agent reviewer --auto --model "$OPENCODE_MODEL" \
+              "Verifica sul codice ATTUALE se OGNI Acceptance Criterion del piano è
+          soddisfatto. Puoi eseguire build/lint/test ma NON modificare i file.
+
+          === PIANO ===
+          ${PLAN:-Richiesta originale: $CLEAN_PROMPT}
+
+          Scrivi come ULTIMA riga ESATTAMENTE una di queste:
+          - 'VERDICT: PASS'  se tutti i criteri sono soddisfatti
+          - 'VERDICT: FAIL'  altrimenti, seguita da un elenco puntato dei criteri NON
+            soddisfatti e di cosa manca." | tee /tmp/review.txt
+            echo "::endgroup::"
+
+            if grep -q 'VERDICT: PASS' /tmp/review.txt; then
+              echo "✅ Acceptance criteria soddisfatti all'iterazione $i."
+              exit 0
+            fi
+            REVIEW_FEEDBACK="$(cat /tmp/review.txt)"
+            echo "⚠️ Criteri non ancora soddisfatti: procedo con l'iterazione $((i+1))."
+          done
+
+          echo "Raggiunto il tetto di $MAX_ITERATIONS iterazioni senza PASS completo:"
+          echo "le modifiche parziali verranno comunque pushate per revisione umana."
+
+      - name: Pusha modifiche e apri/aggiorna la PR
+        id: push
+        run: |
+          API="$GITEA_API_URL/api/v1/repos/$REPO_FULL_NAME"
+          BRANCH_NAME="${{ steps.ctx.outputs.branch_name }}"
+
+          git add .
+          git commit -m "OpenCode (big-pickle): $BRANCH_NAME" || echo "Niente di nuovo da committare oltre al loop."
+
+          if git diff --quiet origin/main..HEAD 2>/dev/null; then
+            echo "Nessuna modifica rispetto a main: niente da pushare."
+            echo "pr_number=" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+
+          git push origin "$BRANCH_NAME"
+
+          if [ "${{ steps.ctx.outputs.is_pr }}" = "true" ]; then
+            PR_NUMBER="${{ steps.ctx.outputs.pr_number }}"
+          else
+            RESP=$(curl -s -X POST "$API/pulls" \
+              -H "Authorization: token $GITEA_TOKEN" \
+              -H "Content-Type: application/json" \
+              -d "{\"base\":\"main\",\"head\":\"$BRANCH_NAME\",\"title\":\"PR Automatica OpenCode: $BRANCH_NAME\",\"body\":\"Generata da big-pickle su richiesta di @$COMMENT_AUTHOR. Piano: issue_plans/${{ steps.ctx.outputs.plan_key }}.md\"}")
+            PR_NUMBER=$(echo "$RESP" | jq -r '.number // empty')
+            if [ -z "$PR_NUMBER" ]; then
+              PR_NUMBER=$(curl -s -H "Authorization: token $GITEA_TOKEN" "$API/pulls?state=open&limit=50" \
+                | jq -r --arg b "$BRANCH_NAME" '.[] | select(.head.ref==$b) | .number' | head -n1)
+            fi
+          fi
+          echo "pr_number=$PR_NUMBER" >> "$GITHUB_OUTPUT"
+
+      - name: Posta la review sulla PR
+        if: always()
+        continue-on-error: true
+        run: |
+          API="$GITEA_API_URL/api/v1/repos/$REPO_FULL_NAME"
+          PR_NUMBER="${{ steps.push.outputs.pr_number }}"
+          [ -z "$PR_NUMBER" ] && PR_NUMBER="${{ steps.ctx.outputs.pr_number }}"
+          if [ -z "$PR_NUMBER" ] || [ ! -s /tmp/review.txt ]; then
+            echo "Nessuna PR o nessuna review da postare."
+            exit 0
+          fi
+
+          if grep -q 'VERDICT: PASS' /tmp/review.txt; then
+            EVENT="APPROVE"
+          else
+            EVENT="REQUEST_CHANGES"
+          fi
+
+          BODY=$(jq -Rs . < /tmp/review.txt)
+
+          post_review() {
+            curl -s -o /tmp/review_resp.json -w '%{http_code}' \
+              -X POST "$API/pulls/$PR_NUMBER/reviews" \
+              -H "Authorization: token $GITEA_TOKEN" \
+              -H "Content-Type: application/json" \
+              -d "{\"body\":$BODY,\"event\":\"$1\"}"
+          }
+
+          CODE=$(post_review "$EVENT")
+          echo "Review '$EVENT' -> HTTP $CODE"
+
+          if [ "$CODE" -ge 300 ]; then
+            echo "Fallback a event=COMMENT (probabile self-review su PR del bot). Risposta:"
+            cat /tmp/review_resp.json 2>/dev/null || true
+            echo
+            CODE=$(post_review "COMMENT")
+            echo "Review 'COMMENT' -> HTTP $CODE"
+          fi
+
+      - name: Reazione finale 🚀
+        if: success() && steps.react.outputs.path != ''
+        continue-on-error: true
+        run: |
+          API="$GITEA_API_URL/api/v1/repos/$REPO_FULL_NAME"
+          curl -s -X POST "$API/${{ steps.react.outputs.path }}" \
+            -H "Authorization: token $GITEA_TOKEN" \
+            -H "Content-Type: application/json" \
+            -d '{"content":"rocket"}' >/dev/null || true
+
+      - name: Reazione in caso di errore 😕
+        if: failure() && steps.react.outputs.path != ''
+        continue-on-error: true
+        run: |
+          API="$GITEA_API_URL/api/v1/repos/$REPO_FULL_NAME"
+          curl -s -X POST "$API/${{ steps.react.outputs.path }}" \
+            -H "Authorization: token $GITEA_TOKEN" \
+            -H "Content-Type: application/json" \
+            -d '{"content":"confused"}' >/dev/null || true