@catladder/cli 0.0.0-main-5bdbbbe0 → 0.0.0-main-f29db9e2

package/dist/bundles/cli/index.js

@@ -1984,6 +1984,7 @@ const getProjectConfig_1 = __nccwpck_require__(12145);
 const setupAccessTokens_1 = __nccwpck_require__(84195);
 const setupContext_1 = __nccwpck_require__(44310);
 const setupTopic_1 = __nccwpck_require__(84290);
+const setupAgents_1 = __nccwpck_require__(19287);
 const setupProject = async (instance, onlyComponents) => {
     const allContext = await (0, getProjectConfig_1.getAllPipelineContexts)(onlyComponents);
     instance.log("will setup those contexts:");
@@ -1995,6 +1996,7 @@ const setupProject = async (instance, onlyComponents) => {
     }
     await (0, setupAccessTokens_1.setupAccessTokens)(instance);
     await (0, setupTopic_1.setupTopic)(instance);
+    await (0, setupAgents_1.setupAgents)(instance);
     instance.log("");
     instance.log("gitlab is ready! 🥂");
     instance.log("\n");
@@ -2059,6 +2061,168 @@ exports.setupAccessTokens = setupAccessTokens;
 
 /***/ }),
 
+/***/ 19287:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.setupAgents = void 0;
+const gitlab_1 = __nccwpck_require__(12927);
+const getProjectConfig_1 = __nccwpck_require__(12145);
+const gitProjectInformation_1 = __nccwpck_require__(78329);
+const listTriggerTokens = async (instance, projectId) => {
+    return await (0, gitlab_1.doGitlabRequest)(instance, `projects/${projectId}/triggers`);
+};
+const deleteTriggerToken = async (instance, projectId, triggerId) => {
+    await (0, gitlab_1.doGitlabRequest)(instance, `projects/${projectId}/triggers/${triggerId}`, undefined, "DELETE");
+};
+const createTriggerToken = async (instance, projectId, description) => {
+    return await (0, gitlab_1.doGitlabRequest)(instance, `projects/${projectId}/triggers`, { description }, "POST");
+};
+const listWebhooks = async (instance, projectId) => {
+    return await (0, gitlab_1.doGitlabRequest)(instance, `projects/${projectId}/hooks`);
+};
+const createWebhook = async (instance, projectId, webhookData) => {
+    return await (0, gitlab_1.doGitlabRequest)(instance, `projects/${projectId}/hooks`, webhookData, "POST");
+};
+const updateWebhook = async (instance, projectId, hookId, webhookData) => {
+    return await (0, gitlab_1.doGitlabRequest)(instance, `projects/${projectId}/hooks/${hookId}`, webhookData, "PUT");
+};
+const setupAgentWebhook = async (instance, projectId, agentName, triggerToken) => {
+    const webhookName = `cl_agent_${agentName}_webhook`;
+    const { gitRemoteHost } = await (0, gitProjectInformation_1.getGitRemoteHostAndPath)();
+    const webhookUrl = `https://${gitRemoteHost}/api/v4/projects/${projectId}/ref/main/trigger/pipeline?token=${triggerToken}`;
+    instance.log(`Setting up webhook for agent: ${agentName}`);
+    // List existing webhooks
+    const existingWebhooks = await listWebhooks(instance, projectId);
+    // Find existing webhook by name
+    const existingWebhook = existingWebhooks.find((webhook) => webhook.name === webhookName);
+    // Custom webhook template from the user's specification
+    const customWebhookTemplate = JSON.stringify({
+        variables: {
+            ASSIGNEE_USER_ID: "{{object_attributes.assignee_id}}",
+            OBJECT_DESCRIPTION: "{{object_attributes.description}}",
+        },
+        payload: {
+            object_kind: "{{object_kind}}",
+            event_type: "{{event_type}}",
+            user_id: "{{user.id}}",
+            user_name: "{{user.name}}",
+            user_username: "{{user.username}}",
+            user_avatar_url: "{{user.avatar_url}}",
+            user_email: "{{user.email}}",
+            project_id: "{{project.id}}",
+            project_name: "{{project.name}}",
+            project_web_url: "{{project.web_url}}",
+            project_namespace: "{{project.namespace}}",
+            project_path_with_namespace: "{{project.path_with_namespace}}",
+            object_attributes_id: "{{object_attributes.id}}",
+            object_attributes_iid: "{{object_attributes.iid}}",
+            object_attributes_title: "{{object_attributes.title}}",
+            object_attributes_description: "{{object_attributes.description}}",
+            object_attributes_state: "{{object_attributes.state}}",
+            object_attributes_created_at: "{{object_attributes.created_at}}",
+            object_attributes_updated_at: "{{object_attributes.updated_at}}",
+            object_attributes_url: "{{object_attributes.url}}",
+            object_attributes_action: "{{object_attributes.action}}",
+            object_attributes_noteable_type: "{{object_attributes.noteable_type}}",
+            merge_request_id: "{{merge_request.id}}",
+            merge_request_iid: "{{merge_request.iid}}",
+            merge_request_title: "{{merge_request.title}}",
+            merge_request_source_branch: "{{merge_request.source_branch}}",
+            merge_request_time_estimate: "{{merge_request.time_estimate}}",
+            //merge_request_description: "{{merge_request.description}}",
+            merge_request_merge_status: "{{merge_request.merge_status}}",
+            merge_request_last_commit_title: "{{merge_request.last_commit.title}}",
+            merge_request_last_commit_message: "{{merge_request.last_commit.message}}",
+            merge_request_last_commit_author_name: "{{merge_request.last_commit.author.name}}",
+            merge_request_last_commit_author_email: "{{merge_request.last_commit.author.email}}",
+        },
+    });
+    const webhookData = {
+        url: webhookUrl,
+        name: webhookName,
+        description: `Agent webhook for ${agentName} - triggers pipeline with custom payload`,
+        issues_events: true,
+        confidential_issues_events: false,
+        merge_requests_events: false,
+        note_events: true,
+        confidential_note_events: false,
+        custom_webhook_template: customWebhookTemplate,
+    };
+    let webhook;
+    if (existingWebhook) {
+        instance.log(`Updating existing webhook: ${webhookName} (ID: ${existingWebhook.id})`);
+        webhook = await updateWebhook(instance, projectId, existingWebhook.id, webhookData);
+        instance.log(`✅ Updated webhook: ${webhook.name}`);
+    }
+    else {
+        instance.log(`Creating new webhook: ${webhookName}`);
+        webhook = await createWebhook(instance, projectId, webhookData);
+        instance.log(`✅ Created webhook: ${webhook.name}`);
+    }
+    instance.log(`   Webhook ID: ${webhook.id}`);
+    instance.log(`   Webhook URL: ${webhook.url}`);
+    return webhook;
+};
+const setupAgentTriggerToken = async (instance, projectId, agentName) => {
+    const tokenName = `cl_agent_${agentName}`;
+    instance.log(`Setting up trigger token for agent: ${agentName}`);
+    // List existing trigger tokens
+    const existingTokens = await listTriggerTokens(instance, projectId);
+    // Find and delete existing cl_agent_<agentName> tokens
+    const existingAgentTokens = existingTokens.filter((token) => token.description.startsWith(`cl_agent_${agentName}`));
+    for (const token of existingAgentTokens) {
+        instance.log(`Deleting existing trigger token: ${token.description} (ID: ${token.id})`);
+        await deleteTriggerToken(instance, projectId, token.id);
+    }
+    // Create new trigger token
+    const description = `${tokenName} - Agent trigger token for ${agentName}`;
+    const newToken = await createTriggerToken(instance, projectId, description);
+    instance.log(`✅ Created new trigger token: ${newToken.description}`);
+    instance.log(`   Token ID: ${newToken.id}`);
+    instance.log(`   Token: ${newToken.token}`);
+    return newToken;
+};
+const setupAgent = async (instance, agentName, agentConfig) => {
+    const { id: projectId } = await (0, gitlab_1.getProjectInfo)(instance);
+    instance.log(`🤖 Setting up agent: ${agentName}`);
+    // Setup trigger token for this agent
+    const triggerToken = await setupAgentTriggerToken(instance, projectId, agentName);
+    // Setup webhook for this agent
+    await setupAgentWebhook(instance, projectId, agentName, triggerToken.token);
+    instance.log(`✅ Agent ${agentName} setup complete!`);
+};
+const setupAgents = async (instance) => {
+    var _a;
+    const config = await (0, getProjectConfig_1.getProjectConfig)();
+    instance.log("");
+    instance.log("🤖 Setting up agents...");
+    const agents = (_a = config.agents) !== null && _a !== void 0 ? _a : {};
+    const agentEntries = Object.entries(agents);
+    if (agentEntries.length === 0) {
+        instance.log("No agents configured in project config");
+        return;
+    }
+    for (const [agentName, agentConfig] of agentEntries) {
+        if (agentConfig.type === "claude" && agentConfig) {
+            await setupAgent(instance, agentName, agentConfig);
+        }
+    }
+    instance.log("✅ All agents setup complete!");
+    instance.log("");
+    instance.log("🔧 Manual setup required:");
+    instance.log("Please configure these environment variables in GitLab CI/CD:");
+    instance.log("   Go to Settings > CI/CD > Variables and add:");
+    instance.log("   - ANTHROPIC_API_KEY (your Anthropic API key, mark as Protected & Masked)");
+    instance.log("   - AGENT_GITLAB_PERSONAL_ACCESS_TOKEN (token from agent.claude user, mark as Protected & Masked)");
+};
+exports.setupAgents = setupAgents;
+//# sourceMappingURL=setupAgents.js.map
+
+/***/ }),
+
 /***/ 1082:
 /***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
 
@@ -2608,7 +2772,7 @@ const getAllComponentsWithAllEnvsFlat = async () => {
     if (!config) {
         return [];
     }
-    return Object.keys(config.components).flatMap((componentName) => (0, pipeline_1.getAllEnvs)(config, componentName).map((env) => ({ env, componentName })));
+    return getAllComponentsWithAllEnvsFlatFromConfig(config);
 };
 exports.getAllComponentsWithAllEnvsFlat = getAllComponentsWithAllEnvsFlat;
 const getAllComponentsWithAllEnvsHierarchical = async () => {
@@ -2685,6 +2849,9 @@ const getJobOnlyEnvVarsResolved = async (vorpal, env, componentName) => {
     ]);
 };
 exports.getJobOnlyEnvVarsResolved = getJobOnlyEnvVarsResolved;
+function getAllComponentsWithAllEnvsFlatFromConfig(config) {
+    return Object.keys(config.components).flatMap((componentName) => (0, pipeline_1.getAllEnvs)(config, componentName).map((env) => ({ env, componentName })));
+}
 //# sourceMappingURL=getProjectConfig.js.map
 
 /***/ }),
@@ -3932,7 +4099,7 @@ exports.joinBashExpressions = joinBashExpressions;
 "use strict";
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.escapeForDotEnv = exports.escapeSingleQuotes = exports.escapeDoubleQuotes = exports.escapeBashExpression = exports.escapeString = exports.bashEscape = void 0;
+exports.escapeForDotEnv = exports.escapeNewlines = exports.escapeBackTicks = exports.escapeSingleQuotes = exports.escapeDoubleQuotes = exports.escapeBashExpression = exports.escapeString = exports.bashEscape = void 0;
 const globalScriptFunctions_1 = __nccwpck_require__(12912);
 const VariableValueContainingReferences_1 = __nccwpck_require__(84474);
 const BashExpression_1 = __nccwpck_require__(42376);
@@ -3973,6 +4140,10 @@ const escapeDoubleQuotes = (value) => value === null || value === void 0 ? void
 exports.escapeDoubleQuotes = escapeDoubleQuotes;
 const escapeSingleQuotes = (value) => value === null || value === void 0 ? void 0 : value.toString().replace(/'/g, "\\'");
 exports.escapeSingleQuotes = escapeSingleQuotes;
+const escapeBackTicks = (value) => value === null || value === void 0 ? void 0 : value.toString().replace(/`/g, "\\`");
+exports.escapeBackTicks = escapeBackTicks;
+const escapeNewlines = (value) => value === null || value === void 0 ? void 0 : value.toString().replace(/\n/g, "\\n");
+exports.escapeNewlines = escapeNewlines;
 /**
  *
  * escape env vars for .env files.
@@ -8897,6 +9068,420 @@ __exportStar(__nccwpck_require__(22990), exports);
 
 /***/ }),
 
+/***/ 32636:
+/***/ ((__unused_webpack_module, exports) => {
+
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.createAgentContext = void 0;
+const createAgentContext = async (ctx) => {
+    var _a;
+    const agentConfig = (_a = ctx.config.agents) === null || _a === void 0 ? void 0 : _a[ctx.agentName];
+    if (!agentConfig) {
+        throw new Error(`Agent ${ctx.agentName} not found in config`);
+    }
+    return {
+        type: "agent",
+        name: ctx.agentName,
+        //env: ctx.env,
+        fullConfig: ctx.config,
+        agentConfig: agentConfig,
+    };
+};
+exports.createAgentContext = createAgentContext;
+//# sourceMappingURL=createAgentContext.js.map
+
+/***/ }),
+
+/***/ 99404:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.createAgentEventJob = void 0;
+const prompts_1 = __nccwpck_require__(88698);
+const shared_1 = __nccwpck_require__(10732);
+const utils_1 = __nccwpck_require__(89133);
+const createAgentEventJob = (context) => {
+    const baseJob = (0, shared_1.createBaseAgentJob)(context);
+    // unfortunatly, we need to manage both, because the "@mention"-feature only works with the username
+    const agentUserId = (0, utils_1.getAgentUserId)(context);
+    const agentUserName = (0, utils_1.getAgentUserName)(context);
+    return {
+        interruptible: false, // do not cancel this job if it is running. Otherwise a commit to main will cancel it
+        ...baseJob,
+        variables: {
+            ...baseJob.variables,
+        },
+        name: context.name + "-agent-event",
+        rules: [
+            {
+                if: `$CI_PIPELINE_SOURCE  == "trigger" && ($ASSIGNEE_USER_ID == ${agentUserId} || $OBJECT_DESCRIPTION =~ /@${agentUserName}/)`,
+                when: "always",
+            },
+            {
+                when: "never",
+            },
+        ],
+        script: [
+            ...shared_1.baseSetupScript,
+            ...(0, shared_1.callClaude)({
+                prompt: (0, prompts_1.getEventPrompt)({ agentUserName: agentUserName }),
+            }),
+        ],
+    };
+};
+exports.createAgentEventJob = createAgentEventJob;
+//# sourceMappingURL=createAgentEventJob.js.map
+
+/***/ }),
+
+/***/ 28672:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.createAgentReviewJob = void 0;
+const rules_1 = __nccwpck_require__(47551);
+const prompts_1 = __nccwpck_require__(88698);
+const shared_1 = __nccwpck_require__(10732);
+const utils_1 = __nccwpck_require__(89133);
+const createAgentReviewJob = (context) => {
+    const baseJob = (0, shared_1.createBaseAgentJob)(context);
+    const agentUserName = (0, utils_1.getAgentUserName)(context);
+    return {
+        ...baseJob,
+        name: context.name + "-agent-review",
+        rules: [
+            {
+                ...rules_1.RULE_IS_MERGE_REQUEST,
+                when: "always",
+            },
+            {
+                when: "never",
+            },
+        ],
+        script: [
+            ...shared_1.baseSetupScript,
+            ...(0, shared_1.callClaude)({
+                prompt: (0, prompts_1.getMergeRequestPrompt)({
+                    agentUserName: agentUserName,
+                }),
+            }),
+        ],
+    };
+};
+exports.createAgentReviewJob = createAgentReviewJob;
+//# sourceMappingURL=createAgentReviewJob.js.map
+
+/***/ }),
+
+/***/ 71455:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.createJobsForAgentContext = void 0;
+const createAgentEventJob_1 = __nccwpck_require__(99404);
+const createAgentReviewJob_1 = __nccwpck_require__(28672);
+const createJobsForAgentContext = (context) => {
+    return [(0, createAgentEventJob_1.createAgentEventJob)(context), (0, createAgentReviewJob_1.createAgentReviewJob)(context)];
+};
+exports.createJobsForAgentContext = createJobsForAgentContext;
+//# sourceMappingURL=createJobsForAgentContext.js.map
+
+/***/ }),
+
+/***/ 88698:
+/***/ ((__unused_webpack_module, exports) => {
+
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.getMergeRequestPrompt = exports.getEventPrompt = void 0;
+const header = () => `
+Project ID: $CI_PROJECT_ID
+GitLab Host: $CI_SERVER_URL
+`;
+const identity = ({ agentUserName }) => `
+## Identity
+- Your GitLab username is "${agentUserName}".
+`;
+const goldenRules = ({ agentUserName }) => `
+## Golden Rules
+- Use the \`gitlab-mcp\` tool for ALL GitLab actions. If a needed action is missing, use GitLab REST/GraphQL API directly as a fallback.
+- NEVER mention yourself ("@${agentUserName}").
+- NEVER push to main/default or any protected branch. Always create a new branch and open a Merge Request (MR).
+- Do not create an MR for a **closed** issue.
+- Keep actions minimal and idempotent. Avoid duplicate comments or duplicate MRs.
+- Use ONE stable \`source_branch\` per run; do not regenerate its name later.
+`;
+const commentGuidelines = () => `
+## Comment Guidelines (flexible, not verbatim)
+- Keep tone professional, friendly, and concise.
+- Always @-mention the human author when replying; never mention yourself.
+- Acknowledgements: confirm you saw the request and you’ll handle it.
+- MR updates: acknowledge feedback and say you’ll apply/have applied the change.
+- Q&A: answer directly first; add context/links only if useful.
+- Avoid repeating identical boilerplate across comments.
+`;
+const mcpAndApi = () => `
+## Tools & API (MCP-first, REST/GraphQL fallback)
+Use these \`gitlab-mcp\` capabilities when available (names illustrative—match the actual tool schema):
+
+- **Comments**
+  - \`gitlab-mcp.comment.create({ project_id: $CI_PROJECT_ID, target: "issue"|"mr", iid, body })\`
+
+- **Branch**
+  - \`gitlab-mcp.branch.create({ project_id: $CI_PROJECT_ID, from: "<default_branch>", name: "<source_branch>" })\`
+
+- **Commits & push**
+  - \`gitlab-mcp.commit.push({ project_id: $CI_PROJECT_ID, branch: "<source_branch>", message, files: [{ path, content | patch }] })\`
+
+- **Merge Requests**
+  - \`gitlab-mcp.merge_request.create({ project_id: $CI_PROJECT_ID, source_branch, target_branch: "<default_branch>", title, description, assign_to_self: true })\`
+  - \`gitlab-mcp.merge_request.update({ project_id: $CI_PROJECT_ID, mr_iid, ... })\`
+  - \`gitlab-mcp.merge_request.rebase({ project_id: $CI_PROJECT_ID, mr_iid, onto: "<default_branch>" })\`
+
+- **Read/verify**
+  - \`gitlab-mcp.project.get({ project_id: $CI_PROJECT_ID })\` → default branch
+  - \`gitlab-mcp.repo.compare({ project_id: $CI_PROJECT_ID, from: "<default_branch>", to: "<source_branch>" })\`
+  - \`gitlab-mcp.repo.branch.get({ project_id: $CI_PROJECT_ID, name: "<source_branch>" })\`
+  - \`gitlab-mcp.repo.commits.list({ project_id: $CI_PROJECT_ID, ref_name: "<source_branch>", per_page: 1 })\`
+
+### Fallback: Direct GitLab API
+If MCP lacks an operation, call GitLab’s REST/GraphQL API directly.
+
+- **Authentication**  
+  Use the environment variable \`GITLAB_PERSONAL_ACCESS_TOKEN\`.  
+  Send it in the HTTP header:
+  \`\`\`
+  Private-Token: $GITLAB_PERSONAL_ACCESS_TOKEN
+  \`\`\`
+
+- **Host & project variables**
+  - API base URL: \`$CI_SERVER_URL/api/v4\`
+  - Project ID: \`$CI_PROJECT_ID\`
+
+- **Examples**
+  - Get project (default branch):  
+    \`GET $CI_SERVER_URL/api/v4/projects/$CI_PROJECT_ID\`
+  - Get/create branch:  
+    \`GET|POST $CI_SERVER_URL/api/v4/projects/$CI_PROJECT_ID/repository/branches\`
+  - Compare refs:  
+    \`GET $CI_SERVER_URL/api/v4/projects/$CI_PROJECT_ID/repository/compare?from=<default>&to=<source>\`
+  - List commits:  
+    \`GET $CI_SERVER_URL/api/v4/projects/$CI_PROJECT_ID/repository/commits?ref_name=<branch>&per_page=1\`
+  - Create comment on issue/MR:  
+    \`POST $CI_SERVER_URL/api/v4/projects/$CI_PROJECT_ID/issues/:iid/notes\`  
+    \`POST $CI_SERVER_URL/api/v4/projects/$CI_PROJECT_ID/merge_requests/:iid/notes\`
+  - Create MR:  
+    \`POST $CI_SERVER_URL/api/v4/projects/$CI_PROJECT_ID/merge_requests\`
+  - Get MR changes:  
+    \`GET $CI_SERVER_URL/api/v4/projects/$CI_PROJECT_ID/merge_requests/:iid/changes\`
+`;
+const outputDiscipline = ({ agentUserName }) => `
+## Output Discipline
+- Prefer \`gitlab-mcp\` tool calls. If unavailable, output direct API requests (endpoint, method, headers, JSON body).
+- Keep comments concise and professional.
+- Never include "@${agentUserName}" in any body.
+`;
+// --- Event-specific sections ---
+const eventSelfParse = () => `
+## Self-Parse the Raw Payload (no preprocessing available)
+From \`event_json\`, extract:
+- kind: "issue" | "merge_request" | "note"
+- target + iid from URL:
+  - \`/-/issues/<n>\` → target="issue", iid=<n>
+  - \`/-/merge_requests/<n>\` → target="mr", iid=<n>
+- note_id if present (\`#note_<id>\`)
+- description/body text, state, author \`user_username\`, timestamps
+- project id/path; detect default branch via tool/API when needed
+
+If any key is missing, choose the safest minimal action or briefly explain via a comment.
+`;
+const eventWorkflow = () => `
+## High-Reliability Workflow (sequence + postconditions)
+Follow this order for any change work:
+
+1) **Acknowledge** with a short comment on the issue/MR thread.
+2) **Discover default branch** (e.g., "main") via MCP or API.
+3) **Create a working branch** from default (stable name, e.g., \`fix/issue-<iid>-<slug>\` or \`feat/issue-<iid>-<slug>\`).
+4) **Write changes → commit → push to remote branch.**
+5) **Verify push landed**:
+   - Fetch latest commit on \`source_branch\`; record its short SHA.
+   - Compare default vs \`source_branch\` and ensure \`diffs.length > 0\`.
+6) **Create or update MR** ONLY if there is a non-empty diff.
+   - Include \`Closes #<issue_iid>\` in MR description when applicable.
+   - Assign yourself to the MR.
+7) **Follow-up comment** with branch name, commit short SHA, files changed count, and MR link.
+8) **If verification fails**:
+   - Do NOT create the MR.
+   - Comment the exact failure and retry once with a fresh branch name. If still failing, comment and stop.
+
+For Q&A-only (no code changes), just post a concise, helpful answer on the same issue/MR.
+`;
+// --- MR-specific sections ---
+const mrScope = ({ agentUserName }) => `
+## Identity & Scope
+- Your GitLab username is "${agentUserName}".
+- This prompt runs in the context of ONE MR (no webhook).
+- You may review, comment, rebase, and push updates **to the MR's source branch**.
+- You must **never merge** the MR yourself.
+`;
+const mrWorkflow = () => `
+## High-Reliability Review Workflow
+Follow this sequence with verification at each step:
+
+1) **Collect context**
+   - Get MR metadata (source_branch, target_branch, state, draft/WIP).
+   - Fetch the full changeset/diffs and open discussions (notes, threads, unresolved discussions).
+   - Read existing reviews/comments to avoid duplication.
+   - (Optional) Fetch recent CI pipeline(s) for this MR SHA/branch).
+
+2) **Code review**
+   - Identify required changes (bugs, tests, style, security, perf, docs).
+   - If no meaningful changes are needed:
+     - Post a concise review comment summarizing findings.
+     - Ask for review by a **recent active human contributor** (not you).
+
+3) **If changes are needed**
+   - Post a short acknowledgment comment on the MR.
+   - **Rebase** the MR onto the target/default branch (resolve trivial conflicts).
+   - Implement minimal, safe changes; keep commits small and clear.
+   - **Push** to the MR's **source_branch**.
+   - **Verify push landed** (latest commit short SHA; compare target vs source shows diffs > 0).
+   - Comment summarizing what changed and why.
+
+4) **CI pipeline**
+   - Check pipeline status for the new commit on the MR branch.
+   - Retry/re-run if allowed on flaky failures; fix minimal issues; push again if needed.
+   - If still failing, comment with failure summary and next steps.
+
+5) **Assign human reviewer if ready**
+   - If discussions are resolved and CI is passing (or running), request review from a recent active human contributor (not you).
+
+6) **Stdout summary**
+   - Print concise summary: commits pushed (short SHAs), files changed count, discussions resolved/left, CI status, and requested reviewers.
+`;
+const fallbackApiAuth = () => `
+## Fallback API Auth (if MCP lacks a method)
+- Base URL: \`$CI_SERVER_URL/api/v4\`
+- Project: \`$CI_PROJECT_ID\`
+- Header: \`Private-Token: $GITLAB_PERSONAL_ACCESS_TOKEN\`
+`;
+// ---------- Public builders ----------
+const getEventPrompt = ({ agentUserName }) => `
+You are a GitLab assistant bot. You receive ONE raw GitLab webhook JSON payload.
+
+${header()}
+---
+event_json:
+$(cat $TRIGGER_PAYLOAD)
+---
+
+${identity({ agentUserName })}
+${goldenRules({ agentUserName })}
+${eventSelfParse()}
+${eventWorkflow()}
+${commentGuidelines()}
+${mcpAndApi()}
+${outputDiscipline({ agentUserName })}
+`;
+exports.getEventPrompt = getEventPrompt;
+const getMergeRequestPrompt = ({ agentUserName }) => `
+You are a GitLab assistant bot reviewing and updating a single Merge Request (MR).
+
+${header()}
+---
+merge_request_iid: $CI_MERGE_REQUEST_IID
+title: $CI_MERGE_REQUEST_TITLE
+description: $CI_MERGE_REQUEST_DESCRIPTION
+---
+
+${mrScope({ agentUserName })}
+${goldenRules({ agentUserName })}
+${mrWorkflow()}
+${commentGuidelines()}
+${mcpAndApi()}
+${fallbackApiAuth()}
+## Output Discipline (MR)
+- Prefer \`gitlab-mcp\` tool calls; if unavailable, provide explicit REST calls (method, url, headers, body).
+- At the end, print a **plain-text** summary to STDOUT including:
+  - \`source_branch\` and \`target_branch\`
+  - commits pushed (short SHAs)
+  - number of files changed
+  - CI status/result
+  - reviewers requested (if any)
+- Do **not** merge the MR yourself under any circumstance.
+`;
+exports.getMergeRequestPrompt = getMergeRequestPrompt;
+//# sourceMappingURL=prompts.js.map
+
+/***/ }),
+
+/***/ 10732:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.callClaude = exports.baseSetupScript = exports.createBaseAgentJob = void 0;
+const bashEscape_1 = __nccwpck_require__(12463);
+const createBaseAgentJob = (context) => ({
+    stage: "agents",
+    envMode: "none",
+    image: "node:24-alpine3.21",
+    variables: {
+        MAX_MCP_OUTPUT_TOKENS: "75000",
+        GITLAB_PERSONAL_ACCESS_TOKEN: "$AGENT_GITLAB_PERSONAL_ACCESS_TOKEN", // TODO: we don't have global secret keys to configure yet
+        GITLAB_API_URL: "$CI_API_V4_URL",
+    },
+});
+exports.createBaseAgentJob = createBaseAgentJob;
+exports.baseSetupScript = [
+    "apk update",
+    "apk add --no-cache git curl bash",
+    "npm install -g @anthropic-ai/claude-code",
+    "claude mcp add gitlab --env GITLAB_PERSONAL_ACCESS_TOKEN=$GITLAB_PERSONAL_ACCESS_TOKEN --env GITLAB_API_URL=$GITLAB_API_URL -- npx -y @zereight/mcp-gitlab",
+];
+const callClaude = ({ prompt }) => {
+    return [
+        `export PROMPT="${(0, bashEscape_1.escapeNewlines)((0, bashEscape_1.escapeDoubleQuotes)((0, bashEscape_1.escapeBackTicks)(prompt)))}"`,
+        //'echo "$PROMPT"',
+        `claude -p "$PROMPT" --permission-mode acceptEdits --allowedTools "Bash(*) Read(*) Edit(*) Write(*) mcp__gitlab" --verbose --debug`,
+    ];
+};
+exports.callClaude = callClaude;
+//# sourceMappingURL=shared.js.map
+
+/***/ }),
+
+/***/ 89133:
+/***/ ((__unused_webpack_module, exports) => {
+
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.getAgentUserId = exports.getAgentUserName = void 0;
+const getAgentUserName = (context) => {
+    var _a, _b;
+    return (_b = (_a = context.agentConfig.agentUser) === null || _a === void 0 ? void 0 : _a.username) !== null && _b !== void 0 ? _b : "agent.claude";
+};
+exports.getAgentUserName = getAgentUserName;
+const getAgentUserId = (context) => {
+    var _a, _b;
+    return (_b = (_a = context.agentConfig.agentUser) === null || _a === void 0 ? void 0 : _a.userId) !== null && _b !== void 0 ? _b : "$DEFAULT_AGENT_USER_ID";
+};
+exports.getAgentUserId = getAgentUserId;
+//# sourceMappingURL=utils.js.map
+
+/***/ }),
+
 /***/ 73579:
 /***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
 
@@ -8909,8 +9494,10 @@ const createWorkspaceContext_1 = __nccwpck_require__(76558);
 const types_1 = __nccwpck_require__(11853);
 const createJobsForComponent_1 = __nccwpck_require__(92321);
 const createJobsForWorkspace_1 = __nccwpck_require__(70803);
+const createJobsForAgentContext_1 = __nccwpck_require__(71455);
+const createAgentContext_1 = __nccwpck_require__(32636);
 const createAllJobs = async ({ config, trigger, pipelineType, }) => {
-    var _a;
+    var _a, _b;
     const allComponentsContext = await (0, createAllComponentsContext_1.createAllComponentsContext)({
         config,
         trigger,
@@ -8942,6 +9529,13 @@ const createAllJobs = async ({ config, trigger, pipelineType, }) => {
                 jobs: (0, createJobsForComponent_1.createJobsForComponentContext)(context),
             };
         }),
+        agents: await Promise.all(Object.keys((_b = config.agents) !== null && _b !== void 0 ? _b : {}).map(async (agentName) => {
+            const context = await (0, createAgentContext_1.createAgentContext)({ agentName, config });
+            return {
+                context,
+                jobs: (0, createJobsForAgentContext_1.createJobsForAgentContext)(context),
+            };
+        })).then((f) => f.flat()),
     };
 };
 exports.createAllJobs = createAllJobs;
@@ -9046,7 +9640,12 @@ const createMainPipeline = async (pipelineType, config) => {
             const bIndex = componentNames.findIndex((c) => c === b.context.name);
             return aIndex - bIndex;
         });
-        const allJobs = [...allWorkspaceJobs, ...allComponentJobs].reduce((acc, { gitlabJob, name, context }) => {
+        const allGlobalJobs = allJobsPerTrigger.filter((j) => { var _a; return ((_a = j.context) === null || _a === void 0 ? void 0 : _a.type) === "agent"; });
+        const allJobs = [
+            ...allWorkspaceJobs,
+            ...allComponentJobs,
+            ...allGlobalJobs,
+        ].reduce((acc, { gitlabJob, name, context }) => {
             var _a, _b;
             // merge jobs, if a job is already there, merge the rules
             // this is currently needed because of envMode: "none", which creates the same job for all triggers, so it can appear multiple times
@@ -9085,12 +9684,16 @@ function getGitlabRulesForTrigger(trigger) {
     // taggedRelease: on tag
     switch (trigger) {
         case "mainBranch":
-            return [rules_1.RULE_IS_MAIN_BRANCH_AND_NOT_RELEASE_COMMIT];
+            return [
+                rules_1.RULE_NEVER_ON_AGENT_TRIGGER,
+                rules_1.RULE_IS_MAIN_BRANCH_AND_NOT_RELEASE_COMMIT,
+            ];
         case "mr":
-            return [rules_1.RULE_IS_MERGE_REQUEST];
+            return [rules_1.RULE_NEVER_ON_AGENT_TRIGGER, rules_1.RULE_IS_MERGE_REQUEST];
         case "taggedRelease":
-            return [rules_1.RULE_IS_TAGGED_RELEASE];
+            return [rules_1.RULE_NEVER_ON_AGENT_TRIGGER, rules_1.RULE_IS_TAGGED_RELEASE];
     }
+    throw new Error(`${trigger} is not supported`);
 }
 //# sourceMappingURL=createMainPipeline.js.map
 
@@ -9228,7 +9831,7 @@ const BashExpression_1 = __nccwpck_require__(42376);
 exports.GITLAB_ENVIRONMENT_URL_VARIABLE = "CL_GITLAB_ENVIRONMENT_URL";
 const getFullJobName = ({ type, name, baseName, allJobs, env, }) => {
     const shouldAddIcon = allJobs.workspaces.length > 0;
-    const icon = type === "component" ? "🔹" : "🔸";
+    const icon = type === "component" ? "🔹" : type === "agent" ? "🤖" : "🔸";
     const prefix = shouldAddIcon ? icon + " " : "";
     if (env) {
         return `${prefix}${baseName} ${name} | ${env} `;
@@ -9271,13 +9874,15 @@ const getJobName = (need) => (0, lodash_1.isObject)(need) ? need.job : need;
 const makeGitlabJob = (context, job, allJobs, baseRules) => {
     var _a, _b;
     const { environment, envMode, needsStages, name, needs, jobTags, script, variables, runnerVariables, when, ...rest } = job;
-    const stage = envMode === "stagePerEnv" ? `${job.stage} ${context.env}` : job.stage;
+    const stage = envMode === "stagePerEnv" && context.type !== "agent"
+        ? `${job.stage} ${context.env}`
+        : job.stage;
     const deduplicatedGitlabNeeds = getGitlabNeeds(context, job, allJobs);
     const fullJobName = getFullJobName({
         type: context.type,
         name,
         baseName: context.name,
-        env: envMode !== "none" ? context.env : undefined,
+        env: envMode !== "none" && context.type !== "agent" ? context.env : undefined,
         allJobs,
     });
     // backwards compatibility, some may still use KUBERNETES_CPU_REQUEST, KUBERNETES_MEMORY_REQUEST, etc. in variables.
@@ -9310,6 +9915,8 @@ const makeGitlabJob = (context, job, allJobs, baseRules) => {
                 : []),
     ];
     const gitlabJob = {
+        retry: defaults_1.BASE_RETRY,
+        interruptible: true,
         ...rest,
         rules: rules.length > 0 ? rules : undefined,
         variables: {
@@ -9321,8 +9928,6 @@ const makeGitlabJob = (context, job, allJobs, baseRules) => {
         stage,
         // sort in a predictable manner for snapshot tests
         needs: deduplicatedGitlabNeeds,
-        retry: defaults_1.BASE_RETRY,
-        interruptible: true,
     };
     const modified = addGitlabEnvironment(context, environment, gitlabJob, allJobs);
     return [fullJobName, (0, removeUndefined_1.removeUndefined)(modified)];
@@ -9334,7 +9939,7 @@ const addGitlabEnvironment = (context, catladderJobEnvironment, job, allJobs) =>
         return job;
     }
     if (context.type !== "component") {
-        // don't add enviornment for workspace jobs atm.
+        // don't add enviornment for workspace and agent jobs atm.
         return job;
     }
     const { env, name, environment } = context;
@@ -9376,7 +9981,11 @@ const addGitlabEnvironment = (context, catladderJobEnvironment, job, allJobs) =>
 };
 const createGitlabJobs = async (allJobs, baseRules) => {
     // TODO: add workspace jobs
-    return [...allJobs.workspaces, ...allJobs.components].flatMap(({ context, jobs }) => {
+    return [
+        ...allJobs.workspaces,
+        ...allJobs.components,
+        ...allJobs.agents,
+    ].flatMap(({ context, jobs }) => {
         return jobs.map((job) => {
             const [fullJobName, gitlabJob] = (0, exports.makeGitlabJob)(context, job, allJobs, baseRules);
             return {
@@ -9389,10 +9998,13 @@ const createGitlabJobs = async (allJobs, baseRules) => {
 };
 exports.createGitlabJobs = createGitlabJobs;
 function getGitlabNeeds(context, job, allJobs) {
+    var _a;
     const needs = context.type === "workspace"
         ? getGitlabNeedsForWorkspaceJob(context, job, allJobs)
-        : getGitlabNeedsForComponentJob(context, job, allJobs);
-    return deduplicateNeeds(needs);
+        : context.type === "agent"
+            ? ((_a = job.needs) !== null && _a !== void 0 ? _a : null)
+            : getGitlabNeedsForComponentJob(context, job, allJobs);
+    return needs ? deduplicateNeeds(needs) : undefined;
 }
 function deduplicateNeeds(needs) {
     return needs
@@ -9514,6 +10126,13 @@ const createGitlabPipelineWithDefaults = ({ image, variables, before_script, ...
         workflow: {
             name: "$PIPELINE_ICON $PIPELINE_NAME",
             rules: [
+                {
+                    if: '$CI_PIPELINE_SOURCE  == "trigger"',
+                    variables: {
+                        PIPELINE_ICON: "🤖",
+                        PIPELINE_NAME: "Thinking...",
+                    },
+                },
                 {
                     if: rules_1.RULE_IS_MERGE_REQUEST.if,
                     variables: {
@@ -9532,7 +10151,7 @@ const createGitlabPipelineWithDefaults = ({ image, variables, before_script, ...
                     if: rules_1.RULE_IS_MAIN_BRANCH_AND_NOT_RELEASE_COMMIT.if,
                     variables: {
                         PIPELINE_ICON: "🐱🔨",
-                        PIPELINE_NAME: "Main $CI_COMMIT_REF_NAME",
+                        PIPELINE_NAME: "Main",
                     },
                 },
                 {
@@ -9812,7 +10431,7 @@ exports.getWorkspaceDependencies = getWorkspaceDependencies;
 "use strict";
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.RULES_MANUAL_RELEASE = exports.RULES_RELEASE = exports.RULE_CONDITION_HOTFIX_BRANCH = exports.RULE_IS_TAGGED_RELEASE = exports.RULE_IS_MERGE_REQUEST = exports.RULE_NEVER_ON_SCHEDULE = exports.RULE_NEVER_ON_RELEASE_COMMIT = exports.RULE_IS_MAIN_BRANCH_AND_NOT_RELEASE_COMMIT = exports.RULE_IS_MAIN_BRANCH = exports.RULE_CONDITION_NOT_RELEASE_COMMIT = exports.RULE_CONDITION_RELEASE_COMMIT = exports.RULE_CONDITION_MAIN_BRANCH = void 0;
+exports.RULES_MANUAL_RELEASE = exports.RULES_RELEASE = exports.RULE_CONDITION_HOTFIX_BRANCH = exports.RULE_IS_TAGGED_RELEASE = exports.RULE_IS_MERGE_REQUEST = exports.RULE_NEVER_ON_SCHEDULE = exports.RULE_NEVER_ON_AGENT_TRIGGER = exports.RULE_NEVER_ON_RELEASE_COMMIT = exports.RULE_IS_MAIN_BRANCH_AND_NOT_RELEASE_COMMIT = exports.RULE_IS_MAIN_BRANCH = exports.RULE_CONDITION_NOT_RELEASE_COMMIT = exports.RULE_CONDITION_RELEASE_COMMIT = exports.RULE_CONDITION_MAIN_BRANCH = void 0;
 exports.RULE_CONDITION_MAIN_BRANCH = "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH";
 exports.RULE_CONDITION_RELEASE_COMMIT = "$CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/";
 exports.RULE_CONDITION_NOT_RELEASE_COMMIT = "$CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/";
@@ -9826,6 +10445,11 @@ exports.RULE_NEVER_ON_RELEASE_COMMIT = {
     if: exports.RULE_CONDITION_RELEASE_COMMIT,
     when: "never",
 };
+// currently, we consider all triggered pipelines as agent triggers
+exports.RULE_NEVER_ON_AGENT_TRIGGER = {
+    if: '$CI_PIPELINE_SOURCE  == "trigger"',
+    when: "never",
+};
 exports.RULE_NEVER_ON_SCHEDULE = {
     if: '$CI_PIPELINE_SOURCE  == "schedule"',
     when: "never",
@@ -9839,6 +10463,7 @@ exports.RULE_IS_TAGGED_RELEASE = {
 exports.RULE_CONDITION_HOTFIX_BRANCH = "$CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/";
 exports.RULES_RELEASE = [
     exports.RULE_NEVER_ON_RELEASE_COMMIT,
+    exports.RULE_NEVER_ON_AGENT_TRIGGER,
     exports.RULE_NEVER_ON_SCHEDULE,
     {
         if: exports.RULE_CONDITION_MAIN_BRANCH + ' && $AUTO_RELEASE == "true"',
@@ -9855,6 +10480,7 @@ exports.RULES_RELEASE = [
 ];
 exports.RULES_MANUAL_RELEASE = [
     exports.RULE_NEVER_ON_RELEASE_COMMIT,
+    exports.RULE_NEVER_ON_AGENT_TRIGGER,
     exports.RULE_NEVER_ON_SCHEDULE,
     {
         if: exports.RULE_CONDITION_MAIN_BRANCH,
@@ -9883,6 +10509,16 @@ exports.getRunnerImage = getRunnerImage;
 
 /***/ }),
 
+/***/ 69632:
+/***/ ((__unused_webpack_module, exports) => {
+
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+//# sourceMappingURL=agent.js.map
+
+/***/ }),
+
 /***/ 47770:
 /***/ ((__unused_webpack_module, exports) => {
 
@@ -9990,6 +10626,7 @@ __exportStar(__nccwpck_require__(61724), exports);
 __exportStar(__nccwpck_require__(28207), exports);
 __exportStar(__nccwpck_require__(32074), exports);
 __exportStar(__nccwpck_require__(17432), exports);
+__exportStar(__nccwpck_require__(69632), exports);
 //# sourceMappingURL=index.js.map
 
 /***/ }),
@@ -10017,6 +10654,7 @@ exports.BASE_STAGES = [
     "build",
     "deploy",
     "verify",
+    "agents",
     "rollback",
     "stop",
 ];