scripts

Executable scripts live in this directory. This file is the entry index for the remaining repository-maintenance helpers.

Product Contract vs Script Docs

Product/API behavior (transport, protocol contracts, extension semantics):
- ../docs/guide.md
Security boundary and disclosure guidance:
- ../SECURITY.md

doctor.sh: primary local development regression entrypoint with explicit fix/verify/package phases (uv sync + dependency compatibility + lint + mypy + tests + coverage + built-wheel smoke test)
conformance.sh: repository-owned A2A 1.0 black-box compatibility probes; can launch a dummy-backed local SUT and preserves machine-readable artifacts under run/conformance/
live_opencode_smoke.sh: local/manual live integration smoke against a real OpenCode runtime; boots an isolated password-hardened opencode serve plus the opencode-a2a runtime in throwaway directories and verifies upstream auth, JSON-RPC extension reads, and a streaming prompt round-trip
dependency_health.sh: development dependency review entrypoint (sync/pip check + outdated + dev audit), while blocking CI/publish audits focus on runtime dependencies
check_coverage.py: enforces the overall coverage floor and per-file minimums for critical modules
find_thin_wrappers.py: static analysis helper that reports local functions with low caller counts and flags likely thin forwarding wrappers for manual abstraction review
lint.sh: lint helper
smoke_test_built_cli.sh: built-artifact smoke test for the released CLI runtime; defaults to the only local wheel, supports explicit wheel/sdist paths, and rejects ambiguous local artifact selection

doctor.sh and dependency_health.sh intentionally remain separate entrypoints and share common prerequisites through health_common.sh.
doctor.sh covers the default local validation baseline, while dependency_health.sh remains focused on standalone dependency review and audit flow.
doctor.sh stops early when pre-commit rewrites files so you can review the changes and rerun doctor.sh from the updated worktree.
.github/dependabot.yml prefers a single weekly grouped Dependabot PR for uv, while dependency_health.sh remains the explicit review/audit entrypoint.
Repository-owned compatibility probes remain separate from the default regression path. See ../docs/conformance.md.