core-opencode-run.yml

name: Core - Reusable OpenCode Run

on:
  workflow_call:
    inputs:
      run-name:
        description: 'Name of the run (e.g., security, safety, performance)'
        required: true
        type: string
      prompt:
        description: 'The prompt content to use for the run (mutually exclusive with prompt-file)'
        required: false
        type: string
      prompt-file:
        description: 'Path to the prompt file (e.g., .github/prompts/security.prompt.md) (mutually exclusive with prompt)'
        required: false
        type: string
      timeout-minutes:
        description: 'Timeout for the run job in minutes'
        required: false
        type: number
        default: 120
      model:
        description: 'OpenCode model to use for the run'
        required: false
        type: string
        default: 'opencode/big-pickle'
      agent:
        description: 'Agent to use for OpenCode run'
        required: false
        type: string
        default: 'build'
      command:
        description: 'Command to use for OpenCode run (alternative to prompt/prompt-file)'
        required: false
        type: string
      runner:
        description: 'Runner to use for the job'
        required: false
        type: string
        default: 'ubuntu-latest'
    outputs:
      results:
        description: 'The output results from OpenCode (truncated if too large)'
        value: ${{ jobs.run.outputs.results }}
      results-truncated:
        description: 'Whether the results were truncated due to size'
        value: ${{ jobs.run.outputs.results-truncated }}
      artifact-name:
        description: 'Name of the uploaded artifact containing full results'
        value: ${{ jobs.run.outputs.artifact-name }}

env:
  OPENCODE_INSTALL_URL: 'https://opencode.ai/install'
  MAX_OUTPUT_LINES: 50

jobs:
  run:
    runs-on: ${{ inputs.runner }}
    timeout-minutes: ${{ inputs.timeout-minutes }}
    outputs:
      results: ${{ steps.process-results.outputs.results }}
      results-truncated: ${{ steps.process-results.outputs.results-truncated }}
      artifact-name: ${{ steps.process-results.outputs.artifact-name }}
    env:
      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    
    steps:
      - name: Checkout
        uses: actions/checkout@v5

      - name: Install uv
        uses: astral-sh/setup-uv@v8.1.0

      - name: Setup and Install OpenCode
        run: |
          # Add OpenCode to PATH first
          echo "$HOME/.opencode/bin" >> $GITHUB_PATH
          
          # Check if OpenCode is already installed and working
          if command -v opencode >/dev/null 2>&1 && opencode --version >/dev/null 2>&1; then
            echo "OpenCode is already installed and working"
            opencode --version
          else
            echo "OpenCode not found or not working, installing..."
            
            # Add debug information
            echo "System information:"
            echo "OS: $(uname -s)"
            echo "Arch: $(uname -m)"
            echo "Install URL: ${{ env.OPENCODE_INSTALL_URL }}"
            
            # Install with better error handling
            if ! curl -fsSL ${{ env.OPENCODE_INSTALL_URL }} | bash; then
              echo "ERROR: OpenCode installation failed"
              echo "Trying alternative installation method..."
              
              # Try installing specific version as fallback
              if ! curl -fsSL ${{ env.OPENCODE_INSTALL_URL }} | bash -s -- --version 1.0.180; then
                echo "ERROR: Alternative installation also failed"
                exit 1
              fi
            fi
            
            echo "OpenCode installation completed"
            
            # Verify installation with better error reporting
            if ! env -i PATH="$HOME/.opencode/bin:$PATH" HOME="$HOME" GH_TOKEN="$GH_TOKEN" opencode --version; then
              echo "ERROR: OpenCode installation verification failed"
              echo "Checking installation directory:"
              ls -la "$HOME/.opencode/bin/" || echo "Installation directory not found"
              exit 1
            fi
          fi

      - name: Run OpenCode ${{ inputs.run-name }}
        run: |
          if [ -n "${{ inputs.command }}" ]; then
            if [ -n "${{ inputs.prompt }}" ]; then
              echo "${{ inputs.prompt }}" | env -i PATH="$HOME/.opencode/bin:$PATH" HOME="$HOME" GH_TOKEN="$GH_TOKEN" opencode run --command "${{ inputs.command }}" --model "${{ inputs.model }}" --agent "${{ inputs.agent }}" > ${{ inputs.run-name }}-results.txt
            elif [ -n "${{ inputs.prompt-file }}" ]; then
              PROMPT=$(cat ${{ inputs.prompt-file }})
              echo "$PROMPT" | env -i PATH="$HOME/.opencode/bin:$PATH" HOME="$HOME" GH_TOKEN="$GH_TOKEN" opencode run --command "${{ inputs.command }}" --model "${{ inputs.model }}" --agent "${{ inputs.agent }}" > ${{ inputs.run-name }}-results.txt
            else
              env -i PATH="$HOME/.opencode/bin:$PATH" HOME="$HOME" GH_TOKEN="$GH_TOKEN" opencode run --command "${{ inputs.command }}" --model "${{ inputs.model }}" --agent "${{ inputs.agent }}" > ${{ inputs.run-name }}-results.txt
            fi
          elif [ -n "${{ inputs.prompt }}" ]; then
            echo "${{ inputs.prompt }}" | env -i PATH="$HOME/.opencode/bin:$PATH" HOME="$HOME" GH_TOKEN="$GH_TOKEN" opencode run --model "${{ inputs.model }}" --agent "${{ inputs.agent }}" > ${{ inputs.run-name }}-results.txt
          elif [ -n "${{ inputs.prompt-file }}" ]; then
            PROMPT=$(cat ${{ inputs.prompt-file }})
            echo "$PROMPT" | env -i PATH="$HOME/.opencode/bin:$PATH" HOME="$HOME" GH_TOKEN="$GH_TOKEN" opencode run --model "${{ inputs.model }}" --agent "${{ inputs.agent }}" > ${{ inputs.run-name }}-results.txt
          else
            echo "Error: At least one of 'command', 'prompt', or 'prompt-file' must be provided" >&2
            exit 1
          fi

      - name: Process results for output
        id: process-results
        if: always()
        run: |
          RESULTS_FILE="${{ inputs.run-name }}-results.txt"
          ARTIFACT_NAME="${{ inputs.run-name }}-results"
          MAX_SIZE=60000  # Leave headroom for workflow-call output encoding overhead.

          append_multiline_output() {
            local name="$1"
            local file="$2"
            local delimiter

            while true; do
              delimiter="opencode_output_$(date +%s%N)_$RANDOM"
              if ! grep -qxF "$delimiter" "$file"; then
                break
              fi
            done

            {
              printf '%s<<%s\n' "$name" "$delimiter"
              cat "$file"
              printf '\n%s\n' "$delimiter"
            } >> "$GITHUB_OUTPUT"
          }
          
          # Check if results file exists
          if [ -f "$RESULTS_FILE" ]; then
            # Get file size in bytes
            FILE_SIZE=$(wc -c < "$RESULTS_FILE")
            echo "artifact-name=$ARTIFACT_NAME" >> $GITHUB_OUTPUT
            
            if [ $FILE_SIZE -gt $MAX_SIZE ]; then
              # File is too large, truncate and indicate truncation
              echo "results-truncated=true" >> $GITHUB_OUTPUT
              
              # Create truncated version with summary
              {
                echo "# OpenCode Results (Truncated)"
                echo ""
                echo "⚠️ **Results were truncated due to size limits. Full results are available in the artifact.**"
                echo ""
                echo "**File size:** $FILE_SIZE bytes (limit: $MAX_SIZE bytes)"
                echo ""
                echo "---"
                echo ""
                head -c $((MAX_SIZE - 1000)) "$RESULTS_FILE"
                echo ""
                echo ""
                echo "..."
                echo ""
                echo "**[Full results available in artifact: $ARTIFACT_NAME]**"
              } > truncated-results.txt
              
              append_multiline_output "results" "truncated-results.txt"
            else
              # File is small enough, use full content
              echo "results-truncated=false" >> $GITHUB_OUTPUT
              append_multiline_output "results" "$RESULTS_FILE"
            fi
          else
            # No results file found
            echo "results-truncated=false" >> $GITHUB_OUTPUT
            echo "results=❌ No results file generated" >> $GITHUB_OUTPUT
            echo "artifact-name=$ARTIFACT_NAME" >> $GITHUB_OUTPUT
          fi

      - name: Upload ${{ inputs.run-name }} Results
        uses: actions/upload-artifact@v7
        if: always()
        with:
          name: ${{ inputs.run-name }}-results
          path: ${{ inputs.run-name }}-results.txt