diff --git a/.gitea/workflows/opencode.yml b/.gitea/workflows/opencode.yml new file mode 100644 index 0000000..f5f0985 --- /dev/null +++ b/.gitea/workflows/opencode.yml @@ -0,0 +1,353 @@ +name: OpenCode Gitea Integration + +on: + issues: + types: [opened] + issue_comment: + types: [created] + pull_request_review_comment: + types: [created] + workflow_dispatch: + inputs: + prompt: + description: "Istruzione manuale per OpenCode" + required: true + +jobs: + opencode-gitea: + if: | + github.event_name == 'workflow_dispatch' || + (github.event_name == 'issues' && + (contains(github.event.issue.body, '/oc') || contains(github.event.issue.body, '/opencode'))) || + (github.event_name != 'issues' && + github.event.comment.user.login != 'opencode-bot' && + (contains(github.event.comment.body, '/oc') || contains(github.event.comment.body, '/opencode'))) + runs-on: ubuntu-latest + timeout-minutes: 40 + + env: + GITEA_API_URL: "https://gitea.maribit.it" + GITEA_TOKEN: ${{ secrets.BOT_GITEA_TOKEN }} + REPO_FULL_NAME: ${{ github.repository }} + COMMENT_BODY: ${{ github.event.comment.body || github.event.issue.body || github.event.inputs.prompt }} + COMMENT_AUTHOR: ${{ github.event.comment.user.login || github.event.issue.user.login || github.actor }} + COMMENT_ID: ${{ github.event.comment.id }} + IS_PR_EVENT: ${{ github.event_name == 'pull_request_review_comment' }} + IS_MANUAL: ${{ github.event_name == 'workflow_dispatch' }} + PR_NUMBER_FROM_EVENT: ${{ github.event.pull_request.number }} + PR_HEAD_REF_FROM_EVENT: ${{ github.event.pull_request.head.ref }} + ISSUE_NUMBER: ${{ github.event.issue.number }} + ISSUE_TITLE: ${{ github.event.issue.title }} + ISSUE_BODY: ${{ github.event.issue.body }} + RUN_NUMBER: ${{ github.run_number }} + # --- OpenCode --- + OPENCODE_ZEN_API_KEY: ${{ secrets.OPENCODE_ZEN_API_KEY }} + OPENCODE_API_BASE: https://opencode.ai + OPENCODE_MODEL: opencode/big-pickle + MAX_ITERATIONS: "4" + + steps: + - name: Verifica autorizzazione utente + run: | + ALLOWED_USERS="maria nicola" + if [ "$IS_MANUAL" = "true" ]; then + exit 0 + fi + if ! echo " $ALLOWED_USERS " | grep -q " $COMMENT_AUTHOR "; then + echo "Utente '$COMMENT_AUTHOR' non autorizzato a invocare OpenCode. Interrompo." + exit 1 + fi + + - name: Reagisci al comando (👀) + id: react + run: | + API="$GITEA_API_URL/api/v1/repos/$REPO_FULL_NAME" + if [ -n "$COMMENT_ID" ]; then + RPATH="issues/comments/$COMMENT_ID/reactions" + elif [ -n "$ISSUE_NUMBER" ]; then + RPATH="issues/$ISSUE_NUMBER/reactions" + else + RPATH="" + fi + echo "path=$RPATH" >> "$GITHUB_OUTPUT" + if [ -n "$RPATH" ]; then + curl -s -X POST "$API/$RPATH" \ + -H "Authorization: token $GITEA_TOKEN" \ + -H "Content-Type: application/json" \ + -d '{"content":"eyes"}' >/dev/null || true + fi + + - name: Checkout repository + uses: actions/checkout@v4 + with: + fetch-depth: 0 + + - name: Install OpenCode CLI + run: | + curl -fsSL https://opencode.ai/install | bash + echo "$HOME/.opencode/bin" >> "$GITHUB_PATH" + + - name: Configura agent reviewer (read-only) + run: | + mkdir -p .opencode/agents + cat > .opencode/agents/reviewer.md <<'EOF' + --- + description: Revisore read-only che verifica gli acceptance criteria eseguendo i test, senza modificare il codice. + mode: primary + permission: + edit: deny + webfetch: deny + bash: allow + tools: + write: false + edit: false + bash: true + --- + Sei un revisore di codice rigoroso in SOLA LETTURA. + Non modificare mai i file: puoi solo leggere il codice ed eseguire comandi + di verifica (build, lint, test). Stabilisci se ogni Acceptance Criterion + del piano è oggettivamente soddisfatto sul codice attuale. + EOF + grep -qxF '.opencode/' .git/info/exclude 2>/dev/null || echo '.opencode/' >> .git/info/exclude + + - name: Determina contesto (issue / PR / manuale) e branch di lavoro + id: ctx + run: | + set -e + git config --global user.name "OpenCode Bot" + git config --global user.email "opencode-bot@maribit.it" + + API="$GITEA_API_URL/api/v1/repos/$REPO_FULL_NAME" + + if [ "$IS_MANUAL" = "true" ]; then + IS_PR=false + PR_NUMBER="" + BRANCH_NAME="opencode-manual-$RUN_NUMBER" + elif [ "$IS_PR_EVENT" = "true" ]; then + IS_PR=true + PR_NUMBER="$PR_NUMBER_FROM_EVENT" + BRANCH_NAME="$PR_HEAD_REF_FROM_EVENT" + else + ISSUE_JSON=$(curl -s -H "Authorization: token $GITEA_TOKEN" "$API/issues/$ISSUE_NUMBER") + if [ "$(echo "$ISSUE_JSON" | jq -r '.pull_request // empty')" != "" ]; then + IS_PR=true + PR_NUMBER="$ISSUE_NUMBER" + PR_JSON=$(curl -s -H "Authorization: token $GITEA_TOKEN" "$API/pulls/$PR_NUMBER") + BRANCH_NAME=$(echo "$PR_JSON" | jq -r '.head.ref') + else + IS_PR=false + PR_NUMBER="" + BRANCH_NAME="opencode-issue-$ISSUE_NUMBER" + fi + fi + + if [ -z "$BRANCH_NAME" ] || [ "$BRANCH_NAME" = "null" ]; then + echo "BRANCH_NAME non valido ('$BRANCH_NAME'). Interrompo." + exit 1 + fi + + PLAN_KEY=$(printf '%s' "$BRANCH_NAME" | tr '/' '-') + + echo "is_pr=$IS_PR" >> "$GITHUB_OUTPUT" + echo "pr_number=$PR_NUMBER" >> "$GITHUB_OUTPUT" + echo "branch_name=$BRANCH_NAME" >> "$GITHUB_OUTPUT" + echo "plan_key=$PLAN_KEY" >> "$GITHUB_OUTPUT" + + if [ "$IS_PR" = "true" ]; then + git fetch origin "$BRANCH_NAME" + git checkout -B "$BRANCH_NAME" "origin/$BRANCH_NAME" + elif git ls-remote --exit-code --heads origin "$BRANCH_NAME" >/dev/null 2>&1; then + git fetch origin "$BRANCH_NAME" + git checkout -B "$BRANCH_NAME" "origin/$BRANCH_NAME" + else + git checkout -b "$BRANCH_NAME" + fi + + - name: Raccogli contesto aggiuntivo (diff + commenti, se PR) + run: | + API="$GITEA_API_URL/api/v1/repos/$REPO_FULL_NAME" + : > /tmp/context.txt + if [ "${{ steps.ctx.outputs.is_pr }}" = "true" ]; then + PR_NUMBER="${{ steps.ctx.outputs.pr_number }}" + echo "== Diff della PR ==" >> /tmp/context.txt + curl -s -H "Authorization: token $GITEA_TOKEN" "$API/pulls/$PR_NUMBER.diff" >> /tmp/context.txt + echo "== Commenti recenti ==" >> /tmp/context.txt + curl -s -H "Authorization: token $GITEA_TOKEN" "$API/issues/$PR_NUMBER/comments" \ + | jq -r '.[] | "- (\(.user.login)): \(.body)"' >> /tmp/context.txt || true + fi + + - name: Pulisci il comando dal trigger + run: | + CLEAN_PROMPT=$(printf '%s' "$COMMENT_BODY" | sed -e 's|/opencode||g' -e 's|/oc||g') + printf '%s' "$CLEAN_PROMPT" > /tmp/clean_prompt.txt + + - name: "Fase 1 — Plan (analisi read-only)" + if: steps.ctx.outputs.is_pr != 'true' + run: | + CLEAN_PROMPT=$(cat /tmp/clean_prompt.txt) + CONTEXT=$(cat /tmp/context.txt 2>/dev/null || true) + mkdir -p issue_plans + PLAN_FILE="issue_plans/${{ steps.ctx.outputs.plan_key }}.md" + + opencode run --agent plan --model "$OPENCODE_MODEL" \ + "Sei in modalità PLAN (SOLA LETTURA): NON modificare alcun file. + Analizza il codebase e la richiesta, poi produci un piano di lavoro in Markdown + con questa struttura ESATTA: + + # Piano + ## Obiettivo + ## Task + (elenco numerato di task atomici; per ciascuno i file coinvolti) + ## Acceptance Criteria + (checklist '- [ ] ...' di criteri oggettivi e verificabili) + ## Verifica + (come testare: comandi da lanciare, cosa controllare) + + Richiesta ($COMMENT_AUTHOR): $CLEAN_PROMPT + Contesto: $ISSUE_TITLE - $ISSUE_BODY + $CONTEXT + + Restituisci SOLO il documento Markdown del piano." | tee "$PLAN_FILE" + + cp "$PLAN_FILE" /tmp/plan.md + git add "$PLAN_FILE" + git commit -m "OpenCode: piano di lavoro (${{ steps.ctx.outputs.plan_key }})" || echo "Nessun piano da committare." + + - name: "Fase 2 — Build & Review loop" + run: | + CLEAN_PROMPT=$(cat /tmp/clean_prompt.txt) + CONTEXT=$(cat /tmp/context.txt 2>/dev/null || true) + PLAN=""; [ -f /tmp/plan.md ] && PLAN="$(cat /tmp/plan.md)" + REVIEW_FEEDBACK="(prima iterazione: nessun feedback)" + + for i in $(seq 1 "$MAX_ITERATIONS"); do + echo "::group::Iterazione $i — BUILD" + opencode run --agent build --auto --model "$OPENCODE_MODEL" \ + "Sei in modalità BUILD. Implementa il piano completando TUTTI i task e + soddisfacendo TUTTI gli Acceptance Criteria. Applica le modifiche ai file. + + === PIANO === + ${PLAN:-Nessun piano formale. Richiesta: $CLEAN_PROMPT} + + === CONTESTO (diff/commenti PR, se presente) === + $CONTEXT + + === FEEDBACK DELLA REVIEW PRECEDENTE (correggi SOLO questi punti) === + $REVIEW_FEEDBACK" + echo "::endgroup::" + + echo "::group::Iterazione $i — REVIEW" + opencode run --agent reviewer --auto --model "$OPENCODE_MODEL" \ + "Verifica sul codice ATTUALE se OGNI Acceptance Criterion del piano è + soddisfatto. Puoi eseguire build/lint/test ma NON modificare i file. + + === PIANO === + ${PLAN:-Richiesta originale: $CLEAN_PROMPT} + + Scrivi come ULTIMA riga ESATTAMENTE una di queste: + - 'VERDICT: PASS' se tutti i criteri sono soddisfatti + - 'VERDICT: FAIL' altrimenti, seguita da un elenco puntato dei criteri NON + soddisfatti e di cosa manca." | tee /tmp/review.txt + echo "::endgroup::" + + if grep -q 'VERDICT: PASS' /tmp/review.txt; then + echo "✅ Acceptance criteria soddisfatti all'iterazione $i." + exit 0 + fi + REVIEW_FEEDBACK="$(cat /tmp/review.txt)" + echo "⚠️ Criteri non ancora soddisfatti: procedo con l'iterazione $((i+1))." + done + + echo "Raggiunto il tetto di $MAX_ITERATIONS iterazioni senza PASS completo:" + echo "le modifiche parziali verranno comunque pushate per revisione umana." + + - name: Pusha modifiche e apri/aggiorna la PR + id: push + run: | + API="$GITEA_API_URL/api/v1/repos/$REPO_FULL_NAME" + BRANCH_NAME="${{ steps.ctx.outputs.branch_name }}" + + git add . + git commit -m "OpenCode (big-pickle): $BRANCH_NAME" || echo "Niente di nuovo da committare oltre al loop." + + if git diff --quiet origin/main..HEAD 2>/dev/null; then + echo "Nessuna modifica rispetto a main: niente da pushare." + echo "pr_number=" >> "$GITHUB_OUTPUT" + exit 0 + fi + + git push origin "$BRANCH_NAME" + + if [ "${{ steps.ctx.outputs.is_pr }}" = "true" ]; then + PR_NUMBER="${{ steps.ctx.outputs.pr_number }}" + else + RESP=$(curl -s -X POST "$API/pulls" \ + -H "Authorization: token $GITEA_TOKEN" \ + -H "Content-Type: application/json" \ + -d "{\"base\":\"main\",\"head\":\"$BRANCH_NAME\",\"title\":\"PR Automatica OpenCode: $BRANCH_NAME\",\"body\":\"Generata da big-pickle su richiesta di @$COMMENT_AUTHOR. Piano: issue_plans/${{ steps.ctx.outputs.plan_key }}.md\"}") + PR_NUMBER=$(echo "$RESP" | jq -r '.number // empty') + if [ -z "$PR_NUMBER" ]; then + PR_NUMBER=$(curl -s -H "Authorization: token $GITEA_TOKEN" "$API/pulls?state=open&limit=50" \ + | jq -r --arg b "$BRANCH_NAME" '.[] | select(.head.ref==$b) | .number' | head -n1) + fi + fi + echo "pr_number=$PR_NUMBER" >> "$GITHUB_OUTPUT" + + - name: Posta la review sulla PR + if: always() + continue-on-error: true + run: | + API="$GITEA_API_URL/api/v1/repos/$REPO_FULL_NAME" + PR_NUMBER="${{ steps.push.outputs.pr_number }}" + [ -z "$PR_NUMBER" ] && PR_NUMBER="${{ steps.ctx.outputs.pr_number }}" + if [ -z "$PR_NUMBER" ] || [ ! -s /tmp/review.txt ]; then + echo "Nessuna PR o nessuna review da postare." + exit 0 + fi + + if grep -q 'VERDICT: PASS' /tmp/review.txt; then + EVENT="APPROVE" + else + EVENT="REQUEST_CHANGES" + fi + + BODY=$(jq -Rs . < /tmp/review.txt) + + post_review() { + curl -s -o /tmp/review_resp.json -w '%{http_code}' \ + -X POST "$API/pulls/$PR_NUMBER/reviews" \ + -H "Authorization: token $GITEA_TOKEN" \ + -H "Content-Type: application/json" \ + -d "{\"body\":$BODY,\"event\":\"$1\"}" + } + + CODE=$(post_review "$EVENT") + echo "Review '$EVENT' -> HTTP $CODE" + + if [ "$CODE" -ge 300 ]; then + echo "Fallback a event=COMMENT (probabile self-review su PR del bot). Risposta:" + cat /tmp/review_resp.json 2>/dev/null || true + echo + CODE=$(post_review "COMMENT") + echo "Review 'COMMENT' -> HTTP $CODE" + fi + + - name: Reazione finale 🚀 + if: success() && steps.react.outputs.path != '' + continue-on-error: true + run: | + API="$GITEA_API_URL/api/v1/repos/$REPO_FULL_NAME" + curl -s -X POST "$API/${{ steps.react.outputs.path }}" \ + -H "Authorization: token $GITEA_TOKEN" \ + -H "Content-Type: application/json" \ + -d '{"content":"rocket"}' >/dev/null || true + + - name: Reazione in caso di errore 😕 + if: failure() && steps.react.outputs.path != '' + continue-on-error: true + run: | + API="$GITEA_API_URL/api/v1/repos/$REPO_FULL_NAME" + curl -s -X POST "$API/${{ steps.react.outputs.path }}" \ + -H "Authorization: token $GITEA_TOKEN" \ + -H "Content-Type: application/json" \ + -d '{"content":"confused"}' >/dev/null || true \ No newline at end of file