@bluefly/openstandardagents 0.4.2 → 0.4.4

package/examples/gitlab-agents/duo-comment-responder/src/workflow.ts

@@ -0,0 +1,135 @@
+import type { GitLabClient } from './gitlab-client.js';
+import type { LLMClient } from './llm-client.js';
+import type { Logger } from 'pino';
+import type { WebhookEvent, WorkflowContext } from './types.js';
+
+export interface WorkflowExecutorConfig {
+  gitlabClient: GitLabClient;
+  llmClient: LLMClient;
+  logger: Logger;
+}
+
+export class WorkflowExecutor {
+  private gitlabClient: GitLabClient;
+  private llmClient: LLMClient;
+  private logger: Logger;
+
+  constructor(config: WorkflowExecutorConfig) {
+    this.gitlabClient = config.gitlabClient;
+    this.llmClient = config.llmClient;
+    this.logger = config.logger;
+  }
+
+  /**
+   * Execute workflow
+   */
+  async execute(event: WebhookEvent): Promise<any> {
+    const context: WorkflowContext = {
+      event,
+      variables: this.extractVariables(event),
+      outputs: {},
+    };
+
+    this.logger.info({ context }, 'Starting workflow execution');
+
+    try {
+      // Step 1: Parse Duo's Comment
+      this.logger.info('Executing step: Parse Duo's Comment');
+      // TODO: Implement parse
+
+
+      // Step 2: Fetch MR Context
+      this.logger.info('Executing step: Fetch MR Context');
+      context.outputs.fetch-context = await Promise.all([
+        this.gitlabClient.getMRFiles(context.variables.PROJECT_ID, context.variables.MR_IID),
+        this.gitlabClient.getMRDiff(context.variables.PROJECT_ID, context.variables.MR_IID)
+      ]);
+
+
+      // Step 3: Analyze with LLM
+      this.logger.info('Executing step: Analyze with LLM');
+      const prompt = `GitLab Duo commented:
+"${duoSuggestion}"
+
+MR Files Changed:
+${JSON.stringify(mrFiles, null, 2)}
+
+MR Diff:
+${JSON.stringify(mrDiff, null, 2)}
+
+Tasks:
+1. Do you agree with Duo's suggestion? Why or why not?
+2. If valid, what's the fix?
+3. Draft a response comment
+4. If code change needed, generate the updated code
+
+Respond in JSON:
+{
+  "agree": boolean,
+  "reasoning": "string",
+  "response_comment": "string (markdown formatted)",
+  "has_code_fix": boolean,
+  "code_changes": [
+    {
+      "file_path": "string",
+      "action": "update",
+      "content": "string"
+    }
+  ],
+  "commit_message": "string (if has_code_fix)"
+}
+`;
+      context.outputs.analyze-suggestion = await this.llmClient.invokeJSON(prompt);
+
+
+      // Step 4: Post Response Comment
+      this.logger.info('Executing step: Post Response Comment');
+      context.outputs.post-response = await this.gitlabClient.postMRComment(
+        context.variables.PROJECT_ID, context.variables.MR_IID, context.variables.analysis.response_comment, context.variables.DUO_COMMENT_ID
+      );
+
+
+      // Step 5: Apply Code Fix
+      this.logger.info('Executing step: Apply Code Fix');
+      if (analysis.has_code_fix === true) {
+      context.outputs.apply-fix = await this.gitlabClient.createCommit(
+        context.variables.PROJECT_ID, context.variables.CI_COMMIT_REF_NAME, context.variables.analysis.commit_message, context.variables.analysis.code_changes
+      );
+      }
+
+
+      // Step 6: Notify About Fix
+      this.logger.info('Executing step: Notify About Fix');
+      if (commitCreated !== null) {
+      context.outputs.post-fix-notification = await this.gitlabClient.postMRComment(
+        context.variables.PROJECT_ID, context.variables.MR_IID, "✅ Fix applied in commit ${commitCreated.short_id}\n\nSee: [${commitCreated.short_id}](${CI_PROJECT_URL}/-/commit/${commitCreated.id})\n\n@GitLabDuo Please review the changes.\n"
+      );
+      }
+
+
+      this.logger.info({ outputs: context.outputs }, 'Workflow completed');
+      return context.outputs;
+    } catch (error) {
+      this.logger.error({ err: error }, 'Workflow execution failed');
+      throw error;
+    }
+  }
+
+  /**
+   * Extract variables from webhook event
+   */
+  private extractVariables(event: WebhookEvent): Record<string, any> {
+    return {
+      PROJECT_ID: event.project?.id || event.project_id,
+      MR_IID: event.merge_request?.iid || event.object_attributes?.iid,
+      PIPELINE_ID: event.object_attributes?.id,
+      COMMIT_SHA: event.object_attributes?.sha || event.commit?.id,
+      REF: event.object_attributes?.ref || event.ref,
+      SOURCE_BRANCH: event.merge_request?.source_branch,
+      TARGET_BRANCH: event.merge_request?.target_branch,
+      DUO_COMMENT_ID: event.object_attributes?.id,
+      DUO_COMMENT_BODY: event.object_attributes?.note,
+      // Add more as needed
+    };
+  }
+}

package/examples/gitlab-agents/duo-comment-responder/tsconfig.json

@@ -0,0 +1,24 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ES2022",
+    "moduleResolution": "node",
+    "lib": [
+      "ES2022"
+    ],
+    "outDir": "./dist",
+    "rootDir": "./src",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "resolveJsonModule": true
+  },
+  "include": [
+    "src/**/*"
+  ],
+  "exclude": [
+    "node_modules",
+    "dist"
+  ]
+}

package/examples/gitlab-agents/duo-comment-responder/webhook-config.json

@@ -0,0 +1,11 @@
+{
+  "url": "http://api.blueflyagents.com/webhook/duo-comment-responder",
+  "token": "${WEBHOOK_SECRET}",
+  "enable_ssl_verification": false,
+  "push_events": false,
+  "issues_events": false,
+  "merge_requests_events": true,
+  "note_events": true,
+  "pipeline_events": false,
+  "wiki_page_events": false
+}

package/examples/gitlab-agents/k8s/deploy-all.yaml

@@ -0,0 +1,341 @@
+---
+# KAgent CRD Deployment for All 6 GitLab Quality Gate Agents
+# Deploy with: kubectl apply -f deploy-all.yaml
+
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: gitlab-agents
+  labels:
+    app: gitlab-quality-gates
+
+---
+# Secret for GitLab and Anthropic credentials
+apiVersion: v1
+kind: Secret
+metadata:
+  name: gitlab-agents-secrets
+  namespace: gitlab-agents
+type: Opaque
+stringData:
+  GITLAB_API_TOKEN: "glpat-REPLACE-WITH-YOUR-TOKEN"
+  ANTHROPIC_API_KEY: "sk-ant-REPLACE-WITH-YOUR-KEY"
+  WEBHOOK_SECRET: "REPLACE-WITH-RANDOM-SECRET"
+
+---
+# KAgent CRD: duo-comment-responder
+apiVersion: agents.bluefly.io/v1
+kind: KAgent
+metadata:
+  name: duo-comment-responder
+  namespace: gitlab-agents
+  labels:
+    app: gitlab-quality-gates
+    gate: "4"
+    agent-type: webhook
+spec:
+  agentName: duo-comment-responder
+  version: "1.0.0"
+  description: "Responds to GitLab Duo comments on MRs"
+
+  runtime:
+    image: registry.gitlab.com/blueflyio/ossa/openstandardagents/duo-comment-responder:latest
+    replicas: 2
+    resources:
+      requests:
+        cpu: "250m"
+        memory: "512Mi"
+      limits:
+        cpu: "1000m"
+        memory: "1Gi"
+
+  ports:
+    - name: http
+      containerPort: 9090
+      protocol: TCP
+
+  env:
+    - name: GITLAB_API_TOKEN
+      valueFrom:
+        secretKeyRef:
+          name: gitlab-agents-secrets
+          key: GITLAB_API_TOKEN
+    - name: ANTHROPIC_API_KEY
+      valueFrom:
+        secretKeyRef:
+          name: gitlab-agents-secrets
+          key: ANTHROPIC_API_KEY
+    - name: WEBHOOK_SECRET
+      valueFrom:
+        secretKeyRef:
+          name: gitlab-agents-secrets
+          key: WEBHOOK_SECRET
+    - name: PORT
+      value: "9090"
+    - name: LOG_LEVEL
+      value: "info"
+    - name: NODE_ENV
+      value: "production"
+
+  healthCheck:
+    enabled: true
+    path: /health
+    port: 9090
+    initialDelaySeconds: 10
+    periodSeconds: 30
+
+  readinessCheck:
+    enabled: true
+    path: /ready
+    port: 9090
+    initialDelaySeconds: 5
+    periodSeconds: 10
+
+  service:
+    type: ClusterIP
+    port: 80
+    targetPort: 9090
+
+  ingress:
+    enabled: true
+    host: api.blueflyagents.com
+    path: /webhook/duo-comment-responder
+    annotations:
+      cert-manager.io/cluster-issuer: letsencrypt-prod
+      nginx.ingress.kubernetes.io/ssl-redirect: "false"
+
+---
+# KAgent CRD: mr-reviewer
+apiVersion: agents.bluefly.io/v1
+kind: KAgent
+metadata:
+  name: mr-reviewer
+  namespace: gitlab-agents
+  labels:
+    app: gitlab-quality-gates
+    gate: "3"
+    agent-type: webhook
+spec:
+  agentName: mr-reviewer
+  version: "1.0.0"
+  description: "Comprehensive MR review agent"
+
+  runtime:
+    image: registry.gitlab.com/blueflyio/ossa/openstandardagents/mr-reviewer:latest
+    replicas: 3
+    resources:
+      requests:
+        cpu: "500m"
+        memory: "1Gi"
+      limits:
+        cpu: "2000m"
+        memory: "2Gi"
+
+  ports:
+    - name: http
+      containerPort: 9090
+      protocol: TCP
+
+  env:
+    - name: GITLAB_API_TOKEN
+      valueFrom:
+        secretKeyRef:
+          name: gitlab-agents-secrets
+          key: GITLAB_API_TOKEN
+    - name: ANTHROPIC_API_KEY
+      valueFrom:
+        secretKeyRef:
+          name: gitlab-agents-secrets
+          key: ANTHROPIC_API_KEY
+    - name: WEBHOOK_SECRET
+      valueFrom:
+        secretKeyRef:
+          name: gitlab-agents-secrets
+          key: WEBHOOK_SECRET
+    - name: PORT
+      value: "9090"
+
+  healthCheck:
+    enabled: true
+    path: /health
+    port: 9090
+
+  service:
+    type: ClusterIP
+    port: 80
+    targetPort: 9090
+
+  ingress:
+    enabled: true
+    host: api.blueflyagents.com
+    path: /webhook/mr-reviewer
+
+---
+# KAgent CRD: pipeline-auto-fix
+apiVersion: agents.bluefly.io/v1
+kind: KAgent
+metadata:
+  name: pipeline-auto-fix
+  namespace: gitlab-agents
+  labels:
+    app: gitlab-quality-gates
+    gate: "5"
+    agent-type: webhook
+spec:
+  agentName: pipeline-auto-fix
+  version: "1.0.0"
+  description: "Automatically fixes failed pipelines"
+
+  runtime:
+    image: registry.gitlab.com/blueflyio/ossa/openstandardagents/pipeline-auto-fix:latest
+    replicas: 2
+    resources:
+      requests:
+        cpu: "500m"
+        memory: "1Gi"
+      limits:
+        cpu: "2000m"
+        memory: "2Gi"
+
+  ports:
+    - name: http
+      containerPort: 9090
+
+  env:
+    - name: GITLAB_API_TOKEN
+      valueFrom:
+        secretKeyRef:
+          name: gitlab-agents-secrets
+          key: GITLAB_API_TOKEN
+    - name: ANTHROPIC_API_KEY
+      valueFrom:
+        secretKeyRef:
+          name: gitlab-agents-secrets
+          key: ANTHROPIC_API_KEY
+    - name: WEBHOOK_SECRET
+      valueFrom:
+        secretKeyRef:
+          name: gitlab-agents-secrets
+          key: WEBHOOK_SECRET
+    - name: PORT
+      value: "9090"
+
+  healthCheck:
+    enabled: true
+    path: /health
+    port: 9090
+
+  service:
+    type: ClusterIP
+    port: 80
+    targetPort: 9090
+
+  ingress:
+    enabled: true
+    host: api.blueflyagents.com
+    path: /webhook/pipeline-auto-fix
+
+---
+# KAgent CRD: daily-code-scan
+apiVersion: agents.bluefly.io/v1
+kind: KAgent
+metadata:
+  name: daily-code-scan
+  namespace: gitlab-agents
+  labels:
+    app: gitlab-quality-gates
+    gate: "6"
+    agent-type: scheduled
+spec:
+  agentName: daily-code-scan
+  version: "1.0.0"
+  description: "Daily comprehensive code quality scan"
+
+  runtime:
+    image: registry.gitlab.com/blueflyio/ossa/openstandardagents/daily-code-scan:latest
+    replicas: 1
+    resources:
+      requests:
+        cpu: "1000m"
+        memory: "2Gi"
+      limits:
+        cpu: "2000m"
+        memory: "4Gi"
+
+  schedule:
+    cron: "0 2 * * *"  # Daily at 2am UTC
+    timezone: "UTC"
+
+  env:
+    - name: GITLAB_API_TOKEN
+      valueFrom:
+        secretKeyRef:
+          name: gitlab-agents-secrets
+          key: GITLAB_API_TOKEN
+    - name: CI_PROJECT_ID
+      value: "YOUR_PROJECT_ID"
+
+  healthCheck:
+    enabled: false  # Scheduled job
+
+---
+# Service for external access
+apiVersion: v1
+kind: Service
+metadata:
+  name: gitlab-agents
+  namespace: gitlab-agents
+  labels:
+    app: gitlab-quality-gates
+spec:
+  selector:
+    app: gitlab-quality-gates
+  ports:
+    - name: http
+      port: 80
+      targetPort: 9090
+      protocol: TCP
+  type: ClusterIP
+
+---
+# Ingress for all agents
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: gitlab-agents
+  namespace: gitlab-agents
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    nginx.ingress.kubernetes.io/ssl-redirect: "false"
+    nginx.ingress.kubernetes.io/rewrite-target: /$2
+spec:
+  ingressClassName: nginx
+  tls:
+    - hosts:
+        - api.blueflyagents.com
+      secretName: gitlab-agents-tls
+  rules:
+    - host: api.blueflyagents.com
+      http:
+        paths:
+          - path: /webhook/duo-comment-responder(/|$)(.*)
+            pathType: ImplementationSpecific
+            backend:
+              service:
+                name: duo-comment-responder
+                port:
+                  number: 80
+          - path: /webhook/mr-reviewer(/|$)(.*)
+            pathType: ImplementationSpecific
+            backend:
+              service:
+                name: mr-reviewer
+                port:
+                  number: 80
+          - path: /webhook/pipeline-auto-fix(/|$)(.*)
+            pathType: ImplementationSpecific
+            backend:
+              service:
+                name: pipeline-auto-fix
+                port:
+                  number: 80

package/examples/gitlab-agents/mr-reviewer/.env.example

@@ -0,0 +1,14 @@
+# GitLab Agent Environment Variables
+
+# GitLab Configuration
+GITLAB_API_TOKEN=glpat-your-token-here
+GITLAB_API_URL=https://gitlab.com/api/v4
+WEBHOOK_SECRET=your-webhook-secret
+
+# LLM Configuration
+ANTHROPIC_API_KEY=sk-ant-your-key-here
+
+# Server Configuration
+PORT=9090
+NODE_ENV=production
+LOG_LEVEL=info

package/examples/gitlab-agents/mr-reviewer/.gitlab-ci.yml

@@ -0,0 +1,34 @@
+# GitLab CI/CD for mr-reviewer
+# Auto-generated from OSSA manifest
+
+stages:
+  - build
+  - deploy
+
+build:
+  stage: build
+  image: node:20-alpine
+  script:
+    - npm ci
+    - npm run build
+    - npm test
+  artifacts:
+    paths:
+      - dist/
+      - node_modules/
+    expire_in: 1 hour
+
+deploy:mr-reviewer:
+  stage: deploy
+  image: docker:24
+  services:
+    - docker:24-dind
+  before_script:
+    - docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
+  script:
+    - docker build -t registry.gitlab.com/$CI_PROJECT_PATH/mr-reviewer:latest .
+    - docker push registry.gitlab.com/$CI_PROJECT_PATH/mr-reviewer:latest
+    # Deploy to Kubernetes
+    - kubectl set image deployment/mr-reviewer mr-reviewer=registry.gitlab.com/$CI_PROJECT_PATH/mr-reviewer:latest -n agents
+  only:
+    - main

package/examples/gitlab-agents/mr-reviewer/Dockerfile

@@ -0,0 +1,18 @@
+FROM node:20-alpine
+
+WORKDIR /app
+
+COPY package*.json ./
+RUN npm ci --only=production
+
+COPY dist/ ./dist/
+
+ENV NODE_ENV=production
+ENV PORT=9090
+
+EXPOSE 9090
+
+HEALTHCHECK --interval=30s --timeout=3s --start-period=10s --retries=3 \
+  CMD wget --no-verbose --tries=1 --spider http://localhost:9090/health || exit 1
+
+CMD ["node", "dist/index.js"]

package/examples/gitlab-agents/mr-reviewer/README.md

@@ -0,0 +1,98 @@
+# mr-reviewer
+
+Comprehensive MR review agent that analyzes code quality, architecture, security, and performance. Posts detailed review comments and auto-approves if all checks pass.
+
+
+## Generated from OSSA Manifest
+
+This agent was auto-generated from an OSSA v0.4.1 manifest using:
+
+```bash
+ossa export agents/gitlab/mr-reviewer.ossa.yaml --platform gitlab-agent --output ./mr-reviewer
+```
+
+## Installation
+
+1. Install dependencies:
+
+```bash
+npm install
+```
+
+2. Copy `.env.example` to `.env` and fill in your credentials:
+
+```bash
+cp .env.example .env
+```
+
+3. Build the agent:
+
+```bash
+npm run build
+```
+
+4. Run the agent:
+
+```bash
+npm start
+```
+
+## Development
+
+Run in development mode with hot reload:
+
+```bash
+npm run dev
+```
+
+## Deployment
+
+### Docker
+
+Build and run with Docker:
+
+```bash
+docker build -t mr-reviewer .
+docker run -p 9090:9090 --env-file .env mr-reviewer
+```
+
+### Kubernetes
+
+Deploy to Kubernetes:
+
+```bash
+kubectl apply -f k8s/deployment.yaml
+```
+
+## GitLab Webhook Configuration
+
+Configure the webhook in your GitLab project:
+
+1. Go to **Settings** → **Webhooks**
+2. Add webhook URL: `http://api.blueflyagents.com/webhook/mr-reviewer`
+3. Set secret token (from .env WEBHOOK_SECRET)
+4. Select events: Merge requests
+5. Save webhook
+
+Test the webhook:
+
+```bash
+curl -X POST http://localhost:9090/webhook/mr-reviewer \
+  -H "Content-Type: application/json" \
+  -H "X-Gitlab-Token: your-secret" \
+  -d @test-event.json
+```
+
+
+## Health Checks
+
+- Health: `GET /health`
+- Ready: `GET /ready`
+
+## Monitoring
+
+The agent exposes Prometheus metrics and OpenTelemetry traces.
+
+## License
+
+MIT

package/examples/gitlab-agents/mr-reviewer/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "@bluefly/mr-reviewer",
+  "version": "1.0.0",
+  "description": "Comprehensive MR review agent that analyzes code quality, architecture, security, and performance. Posts detailed review comments and auto-approves if all checks pass.\n",
+  "type": "module",
+  "main": "dist/index.js",
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "dev": "tsx watch src/index.ts",
+    "test": "echo \"No tests yet\""
+  },
+  "dependencies": {
+    "express": "^4.18.2",
+    "@gitbeaker/rest": "^40.0.0",
+    "@anthropic-ai/sdk": "^0.32.1",
+    "pino": "^8.19.0",
+    "pino-pretty": "^11.0.0"
+  },
+  "devDependencies": {
+    "@types/express": "^4.17.21",
+    "@types/node": "^20.11.19",
+    "typescript": "^5.3.3",
+    "tsx": "^4.7.1"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  }
+}