forge-workflow 0.0.4 → 0.0.5

package/scripts/beads-context.sh

@@ -0,0 +1,291 @@
+#!/usr/bin/env bash
+# beads-context.sh — Helper script to manage Beads issue context
+# for the Forge 7-stage workflow.
+#
+# Subcommands:
+#   set-design       <issue-id> <task-count> <task-file-path>
+#   set-acceptance   <issue-id> "<criteria-text>"
+#   update-progress  <issue-id> <task-num> <total> "<title>" <commit-sha> <test-count> <gate-count>
+#   parse-progress   <issue-id>
+#   stage-transition <issue-id> <completed-stage> <next-stage>
+#
+# Cross-platform: works on Windows (Git Bash), macOS, and Linux.
+# OWASP A03: All variables properly quoted to prevent shell injection.
+
+set -euo pipefail
+
+# ── Helpers ──────────────────────────────────────────────────────────────
+
+usage() {
+  cat >&2 <<'EOF'
+Usage: beads-context.sh <subcommand> [args...]
+
+Subcommands:
+  set-design       <issue-id> <task-count> <task-file-path>
+  set-acceptance   <issue-id> "<criteria-text>"
+  update-progress  <issue-id> <task-num> <total> "<title>" <commit-sha> <test-count> <gate-count>
+  parse-progress   <issue-id>
+  stage-transition <issue-id> <completed-stage> <next-stage>
+EOF
+  exit 1
+}
+
+die() {
+  echo "Error: $1" >&2
+  exit 1
+}
+
+# Sanitize a string: strip shell-injection patterns (OWASP A03)
+# Removes: double quotes, $(...), backticks, semicolons, and newlines
+sanitize() {
+  local val="$1"
+  # Remove double quotes
+  val="${val//\"/}"
+  # Remove $(...) command substitution patterns (loop handles nested)
+  # Use newline-separated commands for BSD sed compatibility (macOS)
+  val="$(printf '%s' "$val" | sed -e ':loop' -e 's/\$([^()]*)//g' -e 't loop')"
+  # Remove backtick command substitution
+  val="${val//\`/}"
+  # Remove semicolons (command chaining)
+  val="${val//;/}"
+  # Replace newlines with spaces
+  val="$(printf '%s' "$val" | tr '\n' ' ')"
+  printf '%s' "$val"
+}
+
+# Run bd update and check for errors in both exit code and output.
+# bd update exits 0 even for non-existent issues, so we check stdout too.
+bd_update() {
+  local output
+  output="$(bd update "$@" 2>&1)"
+  local rc=$?
+
+  if [[ $rc -ne 0 ]]; then
+    echo "$output" >&2
+    return 1
+  fi
+
+  # bd prints "Error resolving/updating ..." to stdout for non-existent issues
+  # Use specific patterns to avoid false positives from data containing "error"
+  if printf '%s' "$output" | grep -Eqi '^Error|Error resolving|Error updating'; then
+    echo "$output" >&2
+    return 1
+  fi
+
+  echo "$output"
+  return 0
+}
+
+# Run bd comments add and check for errors similarly.
+bd_comment() {
+  local output
+  output="$(bd comments add "$@" 2>&1)"
+  local rc=$?
+
+  if [[ $rc -ne 0 ]]; then
+    echo "$output" >&2
+    return 1
+  fi
+
+  # Use specific error patterns to avoid false positives from data containing "error"
+  if printf '%s' "$output" | grep -Eqi '^Error|Error resolving|Error adding'; then
+    echo "$output" >&2
+    return 1
+  fi
+
+  echo "$output"
+  return 0
+}
+
+# ── Subcommands ──────────────────────────────────────────────────────────
+
+cmd_set_design() {
+  if [[ $# -lt 3 ]]; then
+    echo "Usage: beads-context.sh set-design <issue-id> <task-count> <task-file-path>" >&2
+    exit 1
+  fi
+
+  local issue_id="$1"
+  local task_count
+  task_count="$(sanitize "$2")"
+  local task_file
+  task_file="$(sanitize "$3")"
+
+  local design_text="${task_count} tasks | ${task_file}"
+
+  if ! bd_update "$issue_id" --design "$design_text" > /dev/null; then
+    die "Failed to set design on issue ${issue_id}"
+  fi
+
+  echo "Design set on ${issue_id}: ${design_text}"
+}
+
+cmd_set_acceptance() {
+  if [[ $# -lt 2 ]]; then
+    echo "Usage: beads-context.sh set-acceptance <issue-id> \"<criteria-text>\"" >&2
+    exit 1
+  fi
+
+  local issue_id="$1"
+  local criteria
+  criteria="$(sanitize "$2")"
+
+  if ! bd_update "$issue_id" --acceptance "$criteria" > /dev/null; then
+    die "Failed to set acceptance on issue ${issue_id}"
+  fi
+
+  echo "Acceptance criteria set on ${issue_id}"
+}
+
+cmd_update_progress() {
+  if [[ $# -lt 7 ]]; then
+    echo "Usage: beads-context.sh update-progress <issue-id> <task-num> <total> \"<title>\" <commit-sha> <test-count> <gate-count>" >&2
+    exit 1
+  fi
+
+  local issue_id="$1"
+  local task_num
+  task_num="$(sanitize "$2")"
+  local total
+  total="$(sanitize "$3")"
+  local title
+  title="$(sanitize "$4")"
+  local commit_sha
+  commit_sha="$(sanitize "$5")"
+  local test_count
+  test_count="$(sanitize "$6")"
+  local gate_count
+  gate_count="$(sanitize "$7")"
+
+  # Strip backslashes from progress fields only — these are read back via
+  # printf '%b' in parse-progress, where \n/\t would expand into real escapes.
+  # Other commands (set-design, set-acceptance, stage-transition) keep backslashes
+  # intact to preserve Windows-style paths like docs\plans\tasks.md.
+  task_num="${task_num//\\/}"
+  total="${total//\\/}"
+  title="${title//\\/}"
+  commit_sha="${commit_sha//\\/}"
+  test_count="${test_count//\\/}"
+  gate_count="${gate_count//\\/}"
+
+  local note="Task ${task_num}/${total} done: ${title} | ${test_count} tests | ${commit_sha} | ${gate_count} gates"
+
+  if ! bd_update "$issue_id" --append-notes "$note" > /dev/null; then
+    die "Failed to update progress on issue ${issue_id}"
+  fi
+
+  echo "Progress updated on ${issue_id}: Task ${task_num}/${total}"
+}
+
+cmd_parse_progress() {
+  if [[ $# -lt 1 ]]; then
+    echo "Usage: beads-context.sh parse-progress <issue-id>" >&2
+    exit 1
+  fi
+
+  local issue_id="$1"
+
+  # Get the issue JSON — detect non-existent issues
+  local json
+  json="$(bd show "$issue_id" --json 2>&1)" || die "Failed to show issue ${issue_id}"
+
+  # bd show may exit 0 but print an error for non-existent issues
+  # Match specific bd error patterns, not the word "error" in data fields
+  if printf '%s' "$json" | grep -Eqi '^Error (fetching|resolving)'; then
+    die "Issue not found: ${issue_id}"
+  fi
+
+  # bd show returns "[]" or empty for non-existent issues
+  if [[ -z "$json" || "$json" == "[]" || "$json" == "null" ]]; then
+    die "Issue not found: ${issue_id}"
+  fi
+
+  # Extract notes field from JSON — prefer jq if available, fall back to grep/sed
+  local notes
+  if command -v jq &>/dev/null; then
+    # Handle both array ([{...}]) and object ({...}) responses from bd show
+    notes="$(printf '%s' "$json" | jq -r 'if type == "array" then .[0].notes else .notes end // empty' 2>/dev/null || true)"
+  else
+    notes="$(printf '%s' "$json" | grep -o '"notes": *"[^"]*"' | head -1 | sed 's/^"notes": *"//;s/"$//' || true)"
+  fi
+
+  if [[ -z "$notes" ]]; then
+    echo "No progress data"
+    return 0
+  fi
+
+  # Split on literal \n (two chars: backslash + n) and count task lines
+  # Use printf to expand the \n into actual newlines for grep (POSIX-compliant)
+  local expanded
+  expanded="$(printf '%b' "$notes")"
+
+  local task_lines
+  task_lines="$(echo "$expanded" | grep -c 'Task [0-9]*/[0-9]* done:' || true)"
+
+  if [[ "$task_lines" -eq 0 ]]; then
+    echo "No progress data"
+    return 0
+  fi
+
+  # Get the last task line
+  local last_line
+  last_line="$(echo "$expanded" | grep 'Task [0-9]*/[0-9]* done:' | tail -1 || true)"
+
+  # Extract total (N/M) from last line
+  local total
+  total="$(echo "$last_line" | grep -o '[0-9]*/[0-9]*' | head -1 | cut -d/ -f2)"
+
+  # Extract last task title (between "done: " and " |")
+  local last_title
+  last_title="$(echo "$last_line" | sed 's/.*done: //;s/ |.*//')"
+
+  # Extract commit sha — 4th pipe-separated field
+  # Format: "Task N/M done: <title> | <test_count> tests | <sha> | <gate_count> gates"
+  local last_sha
+  # Use [|] character class for portable literal pipe matching across gawk and BSD awk
+  last_sha="$(echo "$last_line" | awk -F ' [|] ' '{print $3}' | sed 's/^ *//;s/ *$//')"
+
+  echo "${task_lines}/${total} tasks done | Last: ${last_title} (${last_sha})"
+}
+
+cmd_stage_transition() {
+  if [[ $# -lt 3 ]]; then
+    echo "Usage: beads-context.sh stage-transition <issue-id> <completed-stage> <next-stage>" >&2
+    exit 1
+  fi
+
+  local issue_id="$1"
+  local completed
+  completed="$(sanitize "$2")"
+  local next
+  next="$(sanitize "$3")"
+
+  local comment="Stage: ${completed} complete → ready for ${next}"
+
+  if ! bd_comment "$issue_id" "$comment" > /dev/null; then
+    die "Failed to record stage transition on issue ${issue_id}"
+  fi
+
+  echo "Stage transition recorded on ${issue_id}: ${completed} → ${next}"
+}
+
+# ── Main dispatcher ──────────────────────────────────────────────────────
+
+if [[ $# -lt 1 ]]; then
+  usage
+fi
+
+subcommand="$1"
+shift
+
+case "$subcommand" in
+  set-design)       cmd_set_design "$@" ;;
+  set-acceptance)   cmd_set_acceptance "$@" ;;
+  update-progress)  cmd_update_progress "$@" ;;
+  parse-progress)   cmd_parse_progress "$@" ;;
+  stage-transition) cmd_stage_transition "$@" ;;
+  *)
+    echo "Error: Unknown subcommand '${subcommand}'" >&2
+    usage
+    ;;
+esac