trae-coding-engine 0.1.0

package/templates/scripts/find-ci-failures.sh

@@ -0,0 +1,133 @@
+#!/usr/bin/env bash
+# Find recent CI failures and file create-only [ci-failure] issues.
+# Also emit a platform-health verdict (meta-circuit-breaker L1 seed).
+set -euo pipefail
+cd "$(dirname "$0")/.."
+
+source scripts/lib/codebase-json.sh
+
+# Built-in transient signatures — never escalated to issues on first sight.
+# Source of truth lives HERE, not in any UI/external config (spec §3.1).
+TRANSIENT_SIGNATURES=(
+  "job context marshal fail"   # Bits control-plane transient (see memory: re-run, not a code fix)
+)
+[[ -n "${CI_TRANSIENT_EXTRA:-}" ]] && TRANSIENT_SIGNATURES+=("$CI_TRANSIENT_EXTRA")
+
+CHECKS_JSON=""
+HEALTH_OUT=""
+DRY_RUN=0
+REPO="${CODEBASE_REPO:-epscp/coding_engine}"
+UNHEALTHY_THRESHOLD="${CI_UNHEALTHY_THRESHOLD:-3}"
+# Which branch's CI to watch. Parameterized so a cron on a cherry-pick/hotfix
+# branch (e.g. release-0.2.0) monitors ITS OWN CI, not the gated-green mainline.
+# The pulse pipeline passes the running branch via CI_WATCH_BRANCH=${{Head.Branch}};
+# --branch overrides. Empty or an unresolved pipeline expression falls back to
+# release (see normalization below) so a misconfigured cron never watches "".
+WATCH_BRANCH="${CI_WATCH_BRANCH:-release}"
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --checks-json) CHECKS_JSON="$2"; shift 2 ;;
+    --health-out) HEALTH_OUT="$2"; shift 2 ;;
+    --branch) WATCH_BRANCH="$2"; shift 2 ;;
+    --dry-run) DRY_RUN=1; shift ;;
+    *) echo "error: unknown argument: $1" >&2; exit 2 ;;
+  esac
+done
+
+# Defensive: a cron that interpolates an undefined pipeline variable yields an
+# empty string or a literal "${{...}}". Never query that — fall back to release.
+if [[ -z "$WATCH_BRANCH" || "$WATCH_BRANCH" == *'{{'* ]]; then
+  echo "[find-ci-failures] WARN: watch branch unresolved ('$WATCH_BRANCH'); falling back to release" >&2
+  WATCH_BRANCH="release"
+fi
+
+codebase_json_require
+
+# Test-injection seam: offline tests point this at a stub so the create-only
+# issue call (and open-issue.sh's live dedup scan) never touches the network.
+# Production default is the real script; a set-but-missing override is an error,
+# not a silent fallback.
+OPEN_ISSUE_CMD="${OPEN_ISSUE_TEST_OVERRIDE:-scripts/open-issue.sh}"
+if [[ -n "${OPEN_ISSUE_TEST_OVERRIDE:-}" && ! -x "$OPEN_ISSUE_TEST_OVERRIDE" ]]; then
+  echo "error: OPEN_ISSUE_TEST_OVERRIDE set but not executable: $OPEN_ISSUE_TEST_OVERRIDE" >&2
+  exit 2
+fi
+
+get_checks() {
+  if [[ -n "$CHECKS_JSON" ]]; then
+    cat "$CHECKS_JSON"
+  else
+    bytedcli --json codebase checks list -R "$REPO" --branch "$WATCH_BRANCH"
+  fi
+}
+
+echo "[find-ci-failures] watching repo=$REPO branch=$WATCH_BRANCH"
+
+is_transient() {
+  local name="$1"
+  for t in "${TRANSIENT_SIGNATURES[@]}"; do
+    [[ "$name" == *"$t"* ]] && return 0
+  done
+  return 1
+}
+
+# Fetch + parse CI checks. Distinguish a genuine "no failures this tick" (verdict
+# follows the count) from an inability to observe (fetch or parse failed) — in the
+# latter case the verdict is `unknown`, NEVER `healthy`: a fail-noisy meta-probe must
+# not report green when it could not look. Do not let `|| true` mask the failure.
+observe_ok=1
+checks_raw=$(get_checks) || observe_ok=0
+fail_lines=""
+if [[ "$observe_ok" -eq 1 ]]; then
+  fail_lines=$(printf '%s' "$checks_raw" | codebase_json_ci_failure_signatures) || observe_ok=0
+fi
+fail_count=0
+filed_count=0
+
+while IFS=$'\t' read -r sig name conclusion; do
+  [[ -z "$sig" ]] && continue
+  fail_count=$((fail_count + 1))
+  if is_transient "$name"; then
+    echo "[find-ci-failures] skipping transient: $name"
+    continue
+  fi
+  filed_count=$((filed_count + 1))
+  body_file=$(mktemp)
+  {
+    printf 'CI check `%s` failed (conclusion: %s).\n\n' "$name" "$conclusion"
+    printf '<!-- severity:Minor -->\n'
+    printf '<!-- evidence:ci/%s -->\n' "$sig"
+  } > "$body_file"
+  cmd=("$OPEN_ISSUE_CMD"
+       --title "[ci-failure] ${name}"
+       --status todo
+       --dedup-key "ci-failure:${sig}"
+       --body-file "$body_file")
+  [[ "$DRY_RUN" -eq 1 ]] && cmd+=(--dry-run)
+  echo "[find-ci-failures] ${cmd[*]}"
+  "${cmd[@]}" || echo "[find-ci-failures] open-issue failed for ${name}" >&2
+  rm -f "$body_file"
+done <<< "$fail_lines"
+
+# Platform-health verdict: recomputed every tick, never sticky.
+# L1 health gates on NON-TRANSIENT failures only ($filed_count) — built-in
+# transient signatures are control-plane noise and must never be the vote that
+# flips the verdict to unhealthy. It is a crude fixed-count gate
+# (>= CI_UNHEALTHY_THRESHOLD this tick); a failure-rate denominator refinement is
+# deferred to L2 (do not over-build).
+if [[ "$observe_ok" -eq 0 ]]; then
+  echo "[find-ci-failures] WARN: could not fetch/parse CI checks; reporting health=unknown" >&2
+  verdict="unknown"
+elif [[ "$filed_count" -ge "$UNHEALTHY_THRESHOLD" ]]; then
+  verdict="unhealthy"
+else
+  verdict="healthy"
+fi
+echo "[find-ci-failures] failures=$fail_count filed=$filed_count health=$verdict"
+# Use an if-block, not `[[ ... ]] && printf`: as the final statement the latter
+# would exit 1 whenever --health-out is omitted (the test is false), spuriously
+# tripping the caller's `|| echo "...soft-failed"`. The if-block exits 0.
+if [[ -n "$HEALTH_OUT" ]]; then
+  printf '%s\n' "$verdict" > "$HEALTH_OUT"
+fi

package/templates/scripts/find-stale-mrs.sh

@@ -0,0 +1,72 @@
+#!/usr/bin/env bash
+# Find stale open MRs and file create-only [stale-mr] issues.
+# Read-only discovery (L1+): issues are the only write, via open-issue.sh.
+set -euo pipefail
+cd "$(dirname "$0")/.."
+
+source scripts/lib/codebase-json.sh
+
+MR_JSON=""        # test injection: read MR list JSON from a file instead of CLI
+DRY_RUN=0
+MINOR_DAYS=14
+MAJOR_DAYS=30
+REPO="${CODEBASE_REPO:-epscp/coding_engine}"
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --mr-json) MR_JSON="$2"; shift 2 ;;
+    --dry-run) DRY_RUN=1; shift ;;
+    --minor-days) MINOR_DAYS="$2"; shift 2 ;;
+    --major-days) MAJOR_DAYS="$2"; shift 2 ;;
+    *) echo "error: unknown argument: $1" >&2; exit 2 ;;
+  esac
+done
+
+codebase_json_require
+now="${STALE_MR_NOW_EPOCH:-$(date +%s)}"
+
+# Test-injection seam: offline tests point this at a stub so the create-only
+# issue call (and open-issue.sh's live dedup scan) never touches the network.
+# Production default is the real script; a set-but-missing override is an error,
+# not a silent fallback.
+OPEN_ISSUE_CMD="${OPEN_ISSUE_TEST_OVERRIDE:-scripts/open-issue.sh}"
+if [[ -n "${OPEN_ISSUE_TEST_OVERRIDE:-}" && ! -x "$OPEN_ISSUE_TEST_OVERRIDE" ]]; then
+  echo "error: OPEN_ISSUE_TEST_OVERRIDE set but not executable: $OPEN_ISSUE_TEST_OVERRIDE" >&2
+  exit 2
+fi
+
+get_mr_list() {
+  if [[ -n "$MR_JSON" ]]; then
+    cat "$MR_JSON"
+  else
+    bytedcli --json codebase mr list -R "$REPO" --state open --limit 100
+  fi
+}
+
+mr_lines=$(get_mr_list | codebase_json_mr_stale_lines "$now" "$MINOR_DAYS" "$MAJOR_DAYS")
+
+if [[ -z "$mr_lines" ]]; then
+  echo "[find-stale-mrs] no stale MRs"
+  exit 0
+fi
+
+while IFS=$'\t' read -r number days severity; do
+  [[ -z "$number" ]] && continue
+  body_file=$(mktemp)
+  {
+    printf 'MR #%s has had no activity for %s days.\n\n' "$number" "$days"
+    printf 'Review, rebase, or close it.\n\n'
+    printf '<!-- severity:%s -->\n' "$severity"
+    printf '<!-- evidence:mr/%s -->\n' "$number"
+  } > "$body_file"
+
+  cmd=("$OPEN_ISSUE_CMD"
+       --title "[stale-mr] MR #${number} idle ${days}d"
+       --status todo
+       --dedup-key "stale-mr:${number}"
+       --body-file "$body_file")
+  [[ "$DRY_RUN" -eq 1 ]] && cmd+=(--dry-run)
+  echo "[find-stale-mrs] ${cmd[*]}"
+  "${cmd[@]}" || echo "[find-stale-mrs] open-issue failed for MR #${number}" >&2
+  rm -f "$body_file"
+done <<< "$mr_lines"

package/templates/scripts/gen-adr-index.sh

@@ -0,0 +1,122 @@
+#!/usr/bin/env bash
+# Generate docs/adr/INDEX.md from each ADR's **Topic**/**Status**/**Date**
+# metafields. The whole file is derived — never hand-edited. Mirrors the
+# regen-agent-md pattern, but whole-file (not marker-block) because there is no
+# hand-written content to preserve.
+#
+# Usage:
+#   gen-adr-index.sh            rewrite $INDEX_OUT (default docs/adr/INDEX.md)
+#   gen-adr-index.sh --check    print nothing on sync; diff + exit 1 if stale
+set -euo pipefail
+cd "$(dirname "$0")/.."
+
+# shellcheck source=scripts/lib/adr-meta.sh
+. scripts/lib/adr-meta.sh
+
+INDEX_OUT="${INDEX_OUT:-docs/adr/INDEX.md}"
+
+mode="write"
+case "${1:-}" in
+  "")        ;;
+  --check)   mode="check" ;;
+  -h|--help) echo "Usage: $0 [--check]"; exit 0 ;;
+  *)         echo "error: unknown flag: $1" >&2; exit 2 ;;
+esac
+
+# Section order is the $ADR_TOPICS order (defined once in scripts/lib/adr-meta.sh,
+# sourced above); unknown topics sort last. Sharing the list with check-adr.sh
+# guarantees the validated set and the rendered set never drift.
+
+render() {
+  echo '<!-- AUTO-GENERATED by `make regen-adr-index`; DO NOT EDIT. Source of truth: each ADR'\''s **Topic**/**Status** metafields. -->'
+  echo
+  echo '# ADR Index'
+  echo
+  echo 'Generated from `docs/adr/*.md`. Regenerate with `make regen-adr-index`.'
+  echo
+
+  # --- By-topic sections ---
+  echo '## By topic'
+  echo
+  local topic f num title st date
+  for topic in $ADR_TOPICS __unknown__; do
+    local rows=""
+    while IFS= read -r f; do
+      [ -z "$f" ] && continue
+      local t; t="$(adr_field "$f" Topic)"
+      [ -z "$t" ] && t="__unknown__"
+      [ "$t" = "$topic" ] || continue
+      num="$(adr_num "$f")"
+      title="$(awk 'NR==1{sub(/^#[[:space:]]*[0-9]+[[:space:]]*-[[:space:]]*/,"");print;exit}' "$f")"
+      st="$(adr_field "$f" Status)"
+      date="$(adr_field "$f" Date)"
+      rows+="| ${num} | ${title} | ${st} | ${date} |"$'\n'
+    done < <(adr_files)
+    [ -z "$rows" ] && continue
+    [ "$topic" = "__unknown__" ] && echo "## (no topic)" || echo "## ${topic}"
+    echo
+    echo '| ADR | Title | Status | Date |'
+    echo '|---|---|---|---|'
+    printf '%s' "$rows"
+    echo
+  done
+
+  # --- Supersede graph ---
+  echo '## Supersede graph'
+  echo
+  local edges=""
+  while IFS= read -r f; do
+    [ -z "$f" ] && continue
+    local tgt; tgt="$(adr_supersede_target "$f")"
+    [ -z "$tgt" ] && continue
+    edges+="- $(adr_num "$f") → ${tgt}"$'\n'
+  done < <(adr_files)
+  if [ -n "$edges" ]; then printf '%s\n' "$edges"; else echo '_None._'; echo; fi
+
+  # --- Lifecycle rollup ---
+  echo '## Lifecycle rollup'
+  echo
+  local accepted=0 deprecated=0 superseded=0 other=0
+  while IFS= read -r f; do
+    [ -z "$f" ] && continue
+    local s; s="$(adr_field "$f" Status)"
+    case "$s" in
+      Accepted)         accepted=$((accepted+1)) ;;
+      Deprecated)       deprecated=$((deprecated+1)) ;;
+      "Superseded by "*) superseded=$((superseded+1)) ;;
+      *)                other=$((other+1)) ;;
+    esac
+  done < <(adr_files)
+  echo "| Status | Count |"
+  echo "|---|---|"
+  echo "| Accepted | ${accepted} |"
+  echo "| Deprecated | ${deprecated} |"
+  echo "| Superseded | ${superseded} |"
+  [ "$other" -gt 0 ] && echo "| Other | ${other} |"
+  echo
+  echo '### Graveyard (Deprecated / Superseded)'
+  echo
+  while IFS= read -r f; do
+    [ -z "$f" ] && continue
+    local s; s="$(adr_field "$f" Status)"
+    case "$s" in
+      Deprecated|"Superseded by "*)
+        echo "- $(adr_num "$f") — $(awk 'NR==1{sub(/^#[[:space:]]*[0-9]+[[:space:]]*-[[:space:]]*/,"");print;exit}' "$f") (${s})" ;;
+    esac
+  done < <(adr_files)
+}
+
+if [ "$mode" = "check" ]; then
+  diff_tmp="$(mktemp)"
+  if ! diff -u "$INDEX_OUT" <(render) >"$diff_tmp" 2>&1; then
+    echo "  [VIOLATION] $INDEX_OUT is out of sync. Run: make regen-adr-index" >&2
+    cat "$diff_tmp" >&2
+    rm -f "$diff_tmp"
+    exit 1
+  fi
+  rm -f "$diff_tmp"
+  echo "  [OK] $INDEX_OUT in sync"
+else
+  render > "$INDEX_OUT"
+  echo "  [OK] wrote $INDEX_OUT"
+fi