opencode-magi 0.1.0

package/dist/orchestrator/safety.js

@@ -0,0 +1,44 @@
+import picomatch from "picomatch";
+import { fetchPullRequestSafetyMeta } from "../github/commands";
+export function evaluateSafetyGate(repository, meta) {
+    const reasons = [];
+    const labels = new Set(meta.labels);
+    const missingLabels = repository.safety.requiredLabels.filter((label) => !labels.has(label));
+    if (missingLabels.length) {
+        reasons.push(`Missing required labels: ${missingLabels.join(", ")}`);
+    }
+    if (repository.safety.allowAuthors.length &&
+        !repository.safety.allowAuthors.includes(meta.author)) {
+        reasons.push(`PR author is not allowed: ${meta.author || "unknown"}`);
+    }
+    if (repository.safety.maxChangedFiles != null &&
+        meta.changedFiles > repository.safety.maxChangedFiles) {
+        reasons.push(`Changed files exceed safety limit: ${meta.changedFiles} > ${repository.safety.maxChangedFiles}`);
+    }
+    if (repository.safety.blockedPaths.length) {
+        const isBlocked = picomatch(repository.safety.blockedPaths, { dot: true });
+        const blocked = meta.files.filter((file) => isBlocked(file));
+        if (blocked.length) {
+            reasons.push(`Blocked paths changed: ${blocked.slice(0, 10).join(", ")}`);
+        }
+    }
+    return { meta, ok: reasons.length === 0, reasons };
+}
+export function hasSafetyGate(repository) {
+    return Boolean(repository.safety.requiredLabels.length ||
+        repository.safety.blockedPaths.length ||
+        repository.safety.allowAuthors.length ||
+        repository.safety.maxChangedFiles != null);
+}
+export async function checkSafetyGate(input) {
+    const meta = await fetchPullRequestSafetyMeta(input.exec, input.repository, input.pr);
+    return evaluateSafetyGate(input.repository, meta);
+}
+export function formatSafetyGateReport(result) {
+    if (result.ok)
+        return "- **Safety**: Passed";
+    return [
+        "- **Safety**: Blocked",
+        ...result.reasons.map((reason) => `  - ${reason}`),
+    ].join("\n");
+}

package/dist/permissions/common.json

@@ -0,0 +1,24 @@
+{
+    "bash": {
+        "*": "deny",
+        "git status*": "allow",
+        "git diff*": "allow",
+        "git show*": "allow",
+        "git grep*": "allow",
+        "git log*": "allow",
+        "git blame*": "allow",
+        "git ls-files*": "allow",
+        "git rev-parse*": "allow",
+        "git merge-base*": "allow",
+        "rg *": "allow"
+    },
+    "edit": "deny",
+    "glob": "allow",
+    "grep": "allow",
+    "list": "allow",
+    "question": "deny",
+    "read": "allow",
+    "task": "deny",
+    "webfetch": "deny",
+    "websearch": "deny"
+}

package/dist/permissions/editor.json

@@ -0,0 +1,7 @@
+{
+    "bash": {
+        "git add*": "allow",
+        "git commit*": "allow"
+    },
+    "edit": "allow"
+}

package/dist/prompts/compose.js

@@ -0,0 +1,298 @@
+import { readFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { isAbsolute, join } from "node:path";
+import { ciClassificationAfterEditOutputContract, ciClassificationOutputContract, closeReconsiderationOutputContract, editOutputContract, findingValidationOutputContract, rereviewCloseReconsiderationOutputContract, rereviewOutputContract, reviewOutputContract, } from "./contracts";
+async function readOptionalPrompt(directory, path, values = {}) {
+    if (!path)
+        return "";
+    const fullPath = promptPath(directory, path);
+    return renderTemplate(await readFile(fullPath, "utf8"), values);
+}
+function promptPath(directory, path) {
+    if (path === "~")
+        return homedir();
+    if (path.startsWith("~/"))
+        return join(homedir(), path.slice(2));
+    return isAbsolute(path) ? path : join(directory, path);
+}
+async function readTemplate(name) {
+    return readFile(new URL(`./templates/${name}.md`, import.meta.url), "utf8");
+}
+function renderTemplate(template, values) {
+    return template.replaceAll(/\{([A-Za-z0-9_]+)\}/g, (match, key) => values[key] ?? match);
+}
+async function taskBlock(input) {
+    const body = input.customPath
+        ? await readOptionalPrompt(input.directory, input.customPath, input.values)
+        : renderTemplate(await readTemplate(input.builtin), input.values);
+    return `<task>\n${body.trim()}\n</task>`;
+}
+function repositoryValues(repository) {
+    return {
+        owner: repository.github.owner,
+        repo: repository.github.repo,
+    };
+}
+function reviewValues(input) {
+    const ciFailureContext = input.ciFailureContext?.trim() ?? input.ciFailureLogs?.trim() ?? "";
+    return {
+        ...repositoryValues(input.repository),
+        baseSha: input.baseSha,
+        ciFailureContext,
+        ciFailureContextBlock: ciFailureContext
+            ? `<ci_failure_context>\n${ciFailureContext}\n</ci_failure_context>`
+            : "",
+        ciFailureLogs: ciFailureContext,
+        ciFailureLogsBlock: ciFailureContext
+            ? `<ci_failure_context>\n${ciFailureContext}\n</ci_failure_context>`
+            : "",
+        headSha: input.headSha,
+        jsonEncodedWorktreePath: JSON.stringify(input.worktreePath),
+        pr: String(input.pr),
+        worktreePath: input.worktreePath,
+    };
+}
+function rereviewValues(input) {
+    return {
+        ...reviewValues(input),
+        previousHeadSha: input.previousHeadSha,
+        previousReview: input.previousReview ?? "",
+        previousReviewBlock: previousReviewBlock(input.previousReview),
+        unresolvedThreads: input.unresolvedThreads,
+    };
+}
+function editValues(input) {
+    return {
+        ...repositoryValues(input.repository),
+        pr: String(input.pr),
+        unresolvedThreads: input.unresolvedThreads,
+        worktreePath: input.worktreePath,
+    };
+}
+function personaBlock(persona) {
+    return persona ? `<persona>\n${persona}\n</persona>` : "";
+}
+function languageBlock(language) {
+    return language ? `<language>\n${language}\n</language>` : "";
+}
+function previousReviewBlock(previousReview) {
+    return previousReview?.trim()
+        ? `<previous_review>\n${previousReview.trim()}\n</previous_review>`
+        : "";
+}
+async function reviewGuidelinesBlock(input) {
+    const body = (await readOptionalPrompt(input.directory, input.path, input.values)).trim();
+    return body ? `<review_guidelines>\n${body}\n</review_guidelines>` : "";
+}
+async function editGuidelinesBlock(input) {
+    const body = (await readOptionalPrompt(input.directory, input.path, input.values)).trim();
+    return body ? `<edit_guidelines>\n${body}\n</edit_guidelines>` : "";
+}
+async function sessionContextBlocks(input) {
+    return [
+        input.includeSessionContext ? languageBlock(input.repository.language) : "",
+        input.includeSessionContext ? personaBlock(input.reviewer.persona) : "",
+        input.includeReviewGuidelines
+            ? await reviewGuidelinesBlock({
+                directory: input.directory,
+                path: input.repository.prompts.reviewGuidelines,
+                values: input.values,
+            })
+            : "",
+    ];
+}
+export async function composeReviewPrompt(input) {
+    const values = reviewValues(input);
+    const task = await taskBlock({
+        builtin: "review",
+        customPath: input.repository.prompts.review,
+        directory: input.directory,
+        values,
+    });
+    return [
+        task,
+        languageBlock(input.repository.language),
+        personaBlock(input.reviewer.persona),
+        await reviewGuidelinesBlock({
+            directory: input.directory,
+            path: input.repository.prompts.reviewGuidelines,
+            values,
+        }),
+        reviewOutputContract,
+    ]
+        .filter(Boolean)
+        .join("\n\n");
+}
+export async function composeRereviewPrompt(input) {
+    const values = rereviewValues(input);
+    const task = await taskBlock({
+        builtin: "rereview",
+        customPath: input.repository.prompts.rereview,
+        directory: input.directory,
+        values,
+    });
+    return [
+        task,
+        input.includeSessionContext === false
+            ? ""
+            : languageBlock(input.repository.language),
+        input.includeSessionContext === false
+            ? ""
+            : personaBlock(input.reviewer.persona),
+        input.includeReviewGuidelines === false
+            ? ""
+            : await reviewGuidelinesBlock({
+                directory: input.directory,
+                path: input.repository.prompts.reviewGuidelines,
+                values,
+            }),
+        rereviewOutputContract,
+    ]
+        .filter(Boolean)
+        .join("\n\n");
+}
+export async function composeEditPrompt(input) {
+    const values = editValues(input);
+    const task = await taskBlock({
+        builtin: "edit",
+        customPath: input.repository.prompts.edit,
+        directory: input.directory,
+        values,
+    });
+    const persona = input.repository.agents.editor?.persona;
+    return [
+        task,
+        languageBlock(input.repository.language),
+        personaBlock(persona),
+        await editGuidelinesBlock({
+            directory: input.directory,
+            path: input.repository.prompts.editGuidelines,
+            values,
+        }),
+        editOutputContract,
+    ]
+        .filter(Boolean)
+        .join("\n\n");
+}
+export async function composeFindingValidationPrompt(input) {
+    const values = { ...reviewValues(input), findings: input.findings };
+    const task = await taskBlock({
+        builtin: "finding-validation",
+        customPath: input.repository.prompts.findingValidation,
+        directory: input.directory,
+        values,
+    });
+    return [
+        task,
+        ...(await sessionContextBlocks({
+            directory: input.directory,
+            includeReviewGuidelines: input.includeReviewGuidelines,
+            includeSessionContext: input.includeSessionContext,
+            repository: input.repository,
+            reviewer: input.reviewer,
+            values,
+        })),
+        findingValidationOutputContract,
+    ]
+        .filter(Boolean)
+        .join("\n\n");
+}
+export async function composeCloseReconsiderationPrompt(input) {
+    const values = {
+        ...reviewValues(input),
+        closeReason: input.closeReason ?? "",
+    };
+    const task = await taskBlock({
+        builtin: "close-reconsideration",
+        customPath: input.repository.prompts.closeReconsideration,
+        directory: input.directory,
+        values,
+    });
+    return [
+        task,
+        ...(await sessionContextBlocks({
+            directory: input.directory,
+            includeReviewGuidelines: input.includeReviewGuidelines,
+            includeSessionContext: input.includeSessionContext,
+            repository: input.repository,
+            reviewer: input.reviewer,
+            values,
+        })),
+        closeReconsiderationOutputContract,
+    ]
+        .filter(Boolean)
+        .join("\n\n");
+}
+export async function composeRereviewCloseReconsiderationPrompt(input) {
+    const values = {
+        ...reviewValues(input),
+        closeReason: input.closeReason ?? "",
+        previousHeadSha: input.previousHeadSha,
+    };
+    const task = await taskBlock({
+        builtin: "rereview-close-reconsideration",
+        customPath: input.repository.prompts.rereviewCloseReconsideration,
+        directory: input.directory,
+        values,
+    });
+    return [
+        task,
+        ...(await sessionContextBlocks({
+            directory: input.directory,
+            includeReviewGuidelines: input.includeReviewGuidelines,
+            includeSessionContext: input.includeSessionContext,
+            repository: input.repository,
+            reviewer: input.reviewer,
+            values,
+        })),
+        rereviewCloseReconsiderationOutputContract,
+    ]
+        .filter(Boolean)
+        .join("\n\n");
+}
+export async function composeCiClassificationPrompt(input) {
+    const values = {
+        ...repositoryValues(input.repository),
+        failedChecks: JSON.stringify(input.checks, null, 2),
+        pr: String(input.pr),
+    };
+    const task = await taskBlock({
+        builtin: "ci-classification",
+        customPath: input.repository.prompts.ciClassification,
+        directory: input.directory,
+        values,
+    });
+    return [
+        task,
+        languageBlock(input.repository.language),
+        ciClassificationOutputContract,
+    ]
+        .filter(Boolean)
+        .join("\n\n");
+}
+export async function composeCiClassificationAfterEditPrompt(input) {
+    const values = {
+        ...repositoryValues(input.repository),
+        cycle: String(input.cycle),
+        failedChecks: JSON.stringify(input.checks, null, 2),
+        headSha: input.headSha,
+        jsonEncodedWorktreePath: JSON.stringify(input.worktreePath),
+        previousHeadSha: input.previousHeadSha,
+        pr: String(input.pr),
+        worktreePath: input.worktreePath,
+    };
+    const task = await taskBlock({
+        builtin: "ci-classification-after-edit",
+        customPath: input.repository.prompts.ciClassificationAfterEdit ??
+            input.repository.prompts.ciClassification,
+        directory: input.directory,
+        values,
+    });
+    return [
+        task,
+        languageBlock(input.repository.language),
+        ciClassificationAfterEditOutputContract,
+    ]
+        .filter(Boolean)
+        .join("\n\n");
+}

package/dist/prompts/contracts.js

@@ -0,0 +1,189 @@
+export const reviewOutputContract = `
+<output_contract>
+Return exactly one JSON object and nothing else. Do not wrap it in markdown.
+
+The object must match this shape:
+{
+  "verdict": "MERGE" | "CHANGES_REQUESTED" | "CLOSE",
+  "findings": [
+    {
+      "path": "relative/path.ext",
+      "line": 123,
+      "startLine": 120,
+      "issue": "What is wrong.",
+      "fix": "How to fix it.",
+      "perspective": "Optional review perspective."
+    }
+  ],
+  "reason": "Required only for CLOSE."
+}
+
+Rules:
+- MERGE requires an empty findings array.
+- CHANGES_REQUESTED requires at least one finding.
+- CLOSE requires a reason and an empty findings array.
+- path must be repository-relative.
+- line and startLine must refer to lines inside the PR diff hunk.
+- Omit startLine for single-line findings.
+</output_contract>`.trim();
+export const rereviewOutputContract = `
+<output_contract>
+Return exactly one JSON object and nothing else. Do not wrap it in markdown.
+
+The object must match this shape:
+{
+  "verdict": "MERGE" | "CHANGES_REQUESTED" | "CLOSE",
+  "resolve": [{ "commentId": 123, "threadId": "..." }],
+  "followUps": [{ "commentId": 123, "body": "..." }],
+  "newFindings": [{ "path": "relative/path.ext", "line": 123, "startLine": 120, "body": "..." }],
+  "reason": "Required only for CLOSE."
+}
+
+Rules:
+- MERGE requires empty followUps and newFindings arrays.
+- CHANGES_REQUESTED requires at least one followUp or newFinding.
+- CLOSE requires a reason and empty followUps and newFindings arrays.
+- line and startLine must refer to lines inside the latest PR diff hunk.
+- Omit startLine for single-line findings.
+</output_contract>`.trim();
+export const findingValidationOutputContract = `
+<output_contract>
+Return exactly one JSON object and nothing else. Do not wrap it in markdown.
+
+The object must match this shape:
+{
+  "votes": [
+    {
+      "reviewer": "reviewer-key-that-authored-the-finding",
+      "findingIndex": 0,
+      "vote": "AGREE" | "DISAGREE",
+      "reason": "Optional short rationale."
+    }
+  ]
+}
+
+Rules:
+- Vote on every finding listed in the task.
+- Do not vote on your own findings.
+- AGREE means the finding should remain posted.
+- DISAGREE means the finding should be discarded.
+</output_contract>`.trim();
+export const closeReconsiderationOutputContract = `
+<output_contract>
+Return exactly one JSON object and nothing else. Do not wrap it in markdown.
+
+The object must match this shape:
+{
+  "verdict": "MERGE" | "CHANGES_REQUESTED",
+  "findings": [
+    {
+      "path": "relative/path.ext",
+      "line": 123,
+      "startLine": 120,
+      "issue": "What is wrong.",
+      "fix": "How to fix it."
+    }
+  ]
+}
+
+Rules:
+- MERGE requires an empty findings array.
+- CHANGES_REQUESTED requires at least one finding.
+- CLOSE is not allowed in this reconsideration step.
+- Omit startLine for single-line findings.
+</output_contract>`.trim();
+export const rereviewCloseReconsiderationOutputContract = `
+<output_contract>
+Return exactly one JSON object and nothing else. Do not wrap it in markdown.
+
+The object must match this shape:
+{
+  "verdict": "MERGE" | "CHANGES_REQUESTED",
+  "resolve": [{ "commentId": 123, "threadId": "..." }],
+  "followUps": [{ "commentId": 123, "body": "..." }],
+  "newFindings": [{ "path": "relative/path.ext", "line": 123, "startLine": 120, "body": "..." }]
+}
+
+Rules:
+- MERGE requires empty followUps and newFindings arrays.
+- CHANGES_REQUESTED requires at least one followUp or newFinding.
+- CLOSE is not allowed in this reconsideration step.
+- Omit startLine for single-line findings.
+</output_contract>`.trim();
+export const editOutputContract = `
+<output_contract>
+Return exactly one JSON object and nothing else. Do not wrap it in markdown.
+
+The object must match this shape:
+{
+  "mode": "EDITED" | "REPLIED",
+  "commitSha": "full sha, required only when mode is EDITED; omit when mode is REPLIED",
+  "commitMessage": "fix(scope): short description, required only when mode is EDITED; omit when mode is REPLIED",
+  "filesTouched": ["relative/path.ext"],
+  "responses": [{ "commentId": 123, "action": "FIXED" | "DISAGREE" | "ASK", "body": "Fixed." }]
+}
+
+Rules:
+- Use EDITED only when you edited files, staged changes, and committed.
+- Use REPLIED when you only replied without code changes.
+- FIXED means you agreed with the reviewer and made a code change.
+- DISAGREE means you did not edit because the requested change is incorrect or unnecessary.
+- ASK means you did not edit because you need clarification.
+- Do not make changes just because a reviewer requested them; edit only when you understand and agree.
+- Do not push. The orchestrator pushes after validating this envelope.
+- filesTouched must include every final changed file.
+- responses must include a reply for each thread you addressed.
+- REPLIED requires filesTouched to be empty and at least one DISAGREE or ASK response.
+</output_contract>`.trim();
+export const ciClassificationOutputContract = `
+<output_contract>
+Return exactly one JSON object and nothing else. Do not wrap it in markdown.
+{
+  "checks": [
+    {
+      "name": "exact failed check name",
+      "classification": "SCOPE_IN" | "SCOPE_OUT",
+      "reason": "Short reason."
+    }
+  ]
+}
+Rules:
+- Return one item for every failed check.
+- SCOPE_IN means the failure should be treated as caused by the PR changes and passed to reviewers/editor.
+- SCOPE_OUT means the failure is likely flaky, external, or infrastructure-related and may be rerun.
+- If uncertain, choose SCOPE_IN.
+</output_contract>`.trim();
+export const ciClassificationAfterEditOutputContract = `
+<output_contract>
+Return exactly one JSON object and nothing else. Do not wrap it in markdown.
+{
+  "checks": [
+    {
+      "name": "exact failed check name",
+      "classification": "SCOPE_IN" | "SCOPE_OUT",
+      "reason": "Short reason."
+    }
+  ]
+}
+Rules:
+- Return one item for every failed check.
+- SCOPE_IN means the failure should be treated as caused by the PR changes or the editor changes and passed to reviewers/editor.
+- SCOPE_OUT means the failure is likely flaky, external, or infrastructure-related and may be rerun.
+- If uncertain, choose SCOPE_IN.
+</output_contract>`.trim();
+const outputContractsBySchemaName = {
+    "CI classification": ciClassificationOutputContract,
+    "close reconsideration": closeReconsiderationOutputContract,
+    edit: editOutputContract,
+    "finding validation": findingValidationOutputContract,
+    rereview: rereviewOutputContract,
+    "rereview close reconsideration": rereviewCloseReconsiderationOutputContract,
+    review: reviewOutputContract,
+};
+export function repairPrompt(schemaName) {
+    const outputContract = outputContractsBySchemaName[schemaName];
+    const instructions = `Your previous ${schemaName} output did not match the required schema. Regenerate the ${schemaName} result.\n\nReturn only a JSON object matching the output contract below. Do not include analysis, explanation, apologies, markdown, or any text before or after the JSON object.`;
+    if (!outputContract)
+        return instructions;
+    return `${instructions}\n\n${outputContract}`;
+}