@catladder/cli 0.0.0-main-b67a4ad4 → 0.0.0-main-db6ec1ef

package/dist/bundles/catenv/index.js

@@ -6060,15 +6060,18 @@ exports.createJobsForAgentContext = createJobsForAgentContext;
 
 "use strict";
 
-// prompts.ts — MCP-only, DRY, review-first-then-push, CI diagnosis (no retries), self-mention guard,
-// conversations-aware: always read the thread first (issues & MRs), reply inline, avoid duplicates.
-// Prevents double-runs: event-triggered work cancels any running "agent-review" job on the MR's own pipeline.
+// prompts.ts — MCP-only, DRY, review-first-then-push, CI diagnosis (no retries),
+// self-mention guard, conversations-aware (issues & MRs), inline replies, de-duplication.
+// Review-on-demand: resolves MR pipeline and triggers manual "agent-review" when present.
+// Single-runner guard: cancels running "agent-review" on the MR pipeline before acting.
+// Stdout summaries included for both event and MR flows.
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.getMergeRequestPrompt = exports.getEventPrompt = void 0;
 /* ---------- Shared blocks ---------- */
 const header = () => `
 Project ID: $CI_PROJECT_ID
 GitLab Host: $CI_SERVER_URL
+Default Branch: $CI_DEFAULT_BRANCH
 `;
 const identity = ({ agentUserName }) => `
 ## Identity
@@ -6085,87 +6088,64 @@ const goldenRules = ({ agentUserName }) => `
 - Keep actions minimal and idempotent. Avoid duplicate comments or duplicate MRs.
 - Use ONE stable \`source_branch\` per run; do not regenerate its name later.
 `;
-/* ---------- NEW: conversation intake + threading rules ---------- */
+/* ---------- Conversations + threading ---------- */
 const conversationsIntake = ({ agentUserName }) => `
 ## Conversations Intake & Threading (MANDATORY before acting)
 Always load and reason about the current conversation to avoid duplicates and to respond in the right place.
 
-### What to fetch
-- **MRs**: Use \`mr_discussions({ projectId: $CI_PROJECT_ID, mergeRequestIid })\` to load all threads and notes.
-- **Issues**: If an issue-discussions/listing tool exists, use it. If not available in \`gitlab-mcp\`, rely on the **event payload** and **your last note ids** if present; otherwise post a single concise note acknowledging the limitation and proceed.
-
-### How to use it
-1) **Detect review/answer context**:
-   - Identify the **latest human note** in the thread (exclude notes authored by "${agentUserName}").
-   - If the latest human note **replies to you** (mentions you or is in a discussion you started), reply **in the same discussion**.
-2) **De-duplication**:
-   - If your most recent message is the **last message overall** and **no one else replied** since, prefer **updating your last note** instead of posting a new one:
-     - Use \`update_merge_request_note\` or \`update_issue_note\` accordingly.
-3) **Reply placement**:
-   - For MR code discussions: reply **inline in the same discussion** (preserve thread context).
-   - For general/MR overview threads: add a single consolidated reply (avoid multiple scattered notes).
-4) **Sanitize before write**:
-   - Apply the Self-mention Guard, then post.
-5) **If conversations list is unavailable**:
-   - Post one short note: that you cannot fetch the full conversation due to missing MCP capability, then proceed minimally (no spam).
+- **MRs**: Use \`mr_discussions({ projectId: $CI_PROJECT_ID, mergeRequestIid })\`.
+- **Issues**: Use issue discussions if available; if not, rely on event payload and note IDs.
+
+Rules:
+1) Detect latest human note (exclude "${agentUserName}"). If it replies to you or is in a discussion you started, reply **in the same thread**.
+2) If your last message is still the latest and no one else replied, prefer **update_note** instead of creating a new one.
+3) For MR code discussions: reply inline in the same discussion.
+4) Always sanitize (see Self-mention Guard) before writing.
 `;
 const selfMentionGuard = ({ agentUserName }) => `
-## Self-mention Guard (mandatory preflight for ALL writes)
-Before ANY call that writes text (comment/create/update MR/issue/commit message), sanitize the text:
-
-- Remove all occurrences of your own handle:
-  - Match case-insensitively: \`/@?${agentUserName}\\b/gi\`
-  - Also strip variants inside parentheses or brackets if present.
-- Do NOT replace with another token; simply remove the self @-mention.
-- If after sanitization the body becomes empty/meaningless, skip the write.
-
-Additionally:
-- If the last actor/author of the target item is you ("${agentUserName}"), **do not** post an acknowledgement comment (avoid loops on your own events).
-- To assign yourself, use the MCP assignee field(s). Do **not** mention yourself in the body to indicate assignment.
+## Self-mention Guard
+Before ANY write (comment/MR/issue/commit message):
+- Remove all occurrences of "@${agentUserName}" (case-insensitive).
+- If the text becomes empty, skip the write.
+- If the last actor is you, skip acknowledgement comments.
+- To assign yourself, use assignee fields, not mentions.
 `;
 const commentGuidelines = () => `
-## Comment Guidelines (flexible, not verbatim)
+## Comment Guidelines
 - Professional, friendly, concise.
 - Always @-mention the human author when replying; never mention yourself.
-- Acknowledgements: confirm you saw the request and you’ll handle it.
-- MR updates: acknowledge feedback and say you’ll apply/have applied the change.
-- Q&A: answer directly first; add context/links only if useful.
-- Avoid repeating identical boilerplate across comments.
+- Acknowledge requests, answer questions directly, confirm fixes or updates.
+- Avoid repeating boilerplate.
 `;
-/* Exact tool names from @zereight/mcp-gitlab (lean, indicative signatures) */
+/* ---------- gitlab-mcp tool usage ---------- */
 const mcpOnly = () => `
-## gitlab-mcp Operations (exact tool names; indicative params)
+## gitlab-mcp Operations
 
 - **Comments / Notes**
-  - create_note({ projectId, targetType: "issue"|"merge_request", iid, body })
   - create_issue_note({ projectId, issueIid, body })
-  - create_merge_request_note({ projectId, mergeRequestIid, body })
   - update_issue_note({ projectId, issueIid, noteId, body })
+  - create_merge_request_note({ projectId, mergeRequestIid, body })
   - update_merge_request_note({ projectId, mergeRequestIid, noteId, body })
   - mr_discussions({ projectId, mergeRequestIid })
 
 - **Issues**
   - create_issue({ projectId, title, description, assigneeUsernames?: string[] })
-  - list_issues({ projectId, state?: "opened"|"closed", scope?: "all"|... })
 
 - **Branch & Files**
   - create_branch({ projectId, branchName, ref })
   - push_files({ projectId, branch, commitMessage, files: [{ filePath, content }] })
   - create_or_update_file({ projectId, branch, filePath, content, commitMessage })
-  - get_file_contents({ projectId, ref, path })
   - get_branch_diffs({ projectId, from, to })
 
 - **Merge Requests**
   - create_merge_request({ projectId, sourceBranch, targetBranch, title, description, assigneeUsernames?: string[] })
-  - get_merge_request({ projectId, mergeRequestIid? , branchName? })
-  - get_merge_request_diffs({ projectId, mergeRequestIid? , branchName? })
-  - list_merge_request_diffs({ projectId, mergeRequestIid? , branchName?, page?, perPage? })
-  - update_merge_request({ projectId, mergeRequestIid? , branchName?, title?, description?, draft?, assigneeUsernames? })
-  - merge_merge_request(...)  // **Do NOT use** (never merge)
+  - get_merge_request({ projectId, mergeRequestIid })
+  - get_merge_request_diffs({ projectId, mergeRequestIid })
+  - list_merge_request_diffs({ projectId, mergeRequestIid, page?, perPage? })
+  - update_merge_request({ projectId, mergeRequestIid, title?, description?, draft?, assigneeUsernames? })
 
-- **Pipelines / Jobs**  (requires env USE_PIPELINE=true)
+- **Pipelines / Jobs**
   - list_pipelines({ projectId, ref?, sha?, status?, orderBy?, sort? })
-  - get_pipeline({ projectId, pipelineId })
   - list_pipeline_jobs({ projectId, pipelineId })
   - get_pipeline_job_output({ projectId, pipelineId, jobId })
   - play_pipeline_job({ projectId, jobId })
@@ -6177,166 +6157,124 @@ const outputDiscipline = ({ agentUserName }) => `
 - Keep comments concise and professional.
 - Never include "@${agentUserName}" in any body.
 `;
-/* ---------- Event (webhook) specific ---------- */
+/* ---------- Event-specific helpers ---------- */
 const eventSelfParse = () => `
-## Self-Parse the Raw Payload (no preprocessing available)
+## Self-Parse Raw Payload
 From \`event_json\`, extract:
 - kind: "issue" | "merge_request" | "note"
-- target + iid from URL:
-  - \`/-/issues/<n>\` → target="issue", iid=<n>
-  - \`/-/merge_requests/<n>\` → target="mr", iid=<n>
-- note_id if present (\`#note_<id>\`)
-- description/body text, state, author \`user_username\`, timestamps
-- project id/path; detect default branch via \`get_merge_request\`/context as needed
-- If available: the discussion id / thread context of the note to enable inline replies.
+- iid from URL (/issues/<n>, /merge_requests/<n>)
+- note_id if present (#note_<id>)
+- description/body, state, author, timestamps
+- project id/path
+- discussion id if available for inline replies
 `;
-/* Helper used by Single-Runner Guard and Review-on-Demand to find the MR’s own pipeline */
+/* Resolve MR pipeline from MR IID */
 const resolveMrPipeline = () => `
-## Resolve MR Pipeline (for MR IID resolved from the event)
-Given \`mr_iid\`:
-1) Call \`get_merge_request({ projectId: $CI_PROJECT_ID, mergeRequestIid: mr_iid })\` to obtain:
-   - \`sourceBranch\` (required)
-   - \`sha\` or head SHA (if available)
-2) Prefer **SHA-based** lookup:
-   - \`list_pipelines({ projectId: $CI_PROJECT_ID, sha })\` ordered by most recent; pick the newest.
-3) Fallback to **ref-based** lookup if SHA not available:
-   - \`list_pipelines({ projectId: $CI_PROJECT_ID, ref: sourceBranch, orderBy: "updated_at", sort: "desc" })\`; pick the newest.
-4) The chosen pipeline becomes \`mr_pipeline_id\`. Use it for all job queries/plays/cancels related to this MR.
-- If no pipeline is found, post a short MR note explaining that no pipeline was located for the current MR head and proceed with review actions without CI job control.
+## Resolve MR Pipeline
+1) get_merge_request({ projectId, mergeRequestIid }) → sourceBranch, sha
+2) Prefer: list_pipelines({ projectId, sha })
+3) Else: list_pipelines({ projectId, ref: sourceBranch, orderBy: "updated_at", sort: "desc" })
+4) Pick newest → mr_pipeline_id
 `;
+/* Guard against double agent-review jobs */
 const singleRunnerGuard = () => `
-## Single-Runner Guard (event-triggered work on an existing MR)
-Before entering MR Review Mode from an event:
-
-- **Goal:** Avoid two agents working the same MR. If a **running or pending** CI job whose name **ends with "agent-review"** is active for this MR's pipeline, **cancel** it first.
-
-**Procedure (MCP-only):**
-1) Resolve the MR IID from the event (target URL or text) and run **Resolve MR Pipeline** to get \`mr_pipeline_id\`.
-2) If \`mr_pipeline_id\` is available:
-   - \`list_pipeline_jobs({ projectId: $CI_PROJECT_ID, pipelineId: mr_pipeline_id })\`.
-   - For any job with \`status\` in \`["running","pending"]\` and \`name\` ending with \`"agent-review"\`, call:
-     - \`cancel_pipeline_job({ projectId: $CI_PROJECT_ID, jobId })\`.
-   - Proceed immediately after issuing cancellations (do not wait).
-3) If the pipeline cannot be resolved:
-   - Post a short MR note stating you are proceeding but **cannot verify/cancel** a running \`agent-review\` job due to missing pipeline context.
-   - Proceed with review.
-
-**Notes:**
-- Keep this guard **idempotent** (safe to run multiple times).
-- Only applies to **event-triggered** flows that act on an **existing MR**.
+## Single-Runner Guard
+- If mr_pipeline_id available:
+  - list_pipeline_jobs({ projectId, pipelineId: mr_pipeline_id })
+  - cancel_pipeline_job on any running/pending job ending with "agent-review"
+- If not available, note limitation and proceed
 `;
+/* If user asks for review from an event, try manual agent-review job first on the MR's pipeline */
 const reviewOnDemandFromEvents = () => `
-## Review-on-Demand (from events)
-If the issue/note text **asks for a review** (case-insensitive tokens like: "review", "please review", "PTAL", "needs review", "can you look at", "LGTM?"), then:
-
-1) **Resolve which MR to review**:
-   - If the event target is an MR → use its \`iid\`.
-   - Else, parse the text for MR references in order:
-     - \`!<iid>\` (e.g., \`!123\`)
-     - \`/-/merge_requests/<iid>\` in a path or URL
-     - full GitLab MR URL
-   - If no MR can be resolved, reply with a brief comment asking the user to reference an MR (sanitize) and **stop**.
-
-2) **Find the MR's pipeline** (do **not** use \`$CI_PIPELINE_ID\` from the event):
-   - Execute **Resolve MR Pipeline** to obtain \`mr_pipeline_id\`.
-
-3) **If a manual "agent-review" job exists on the MR pipeline, trigger it**
-   - If \`mr_pipeline_id\` is available:
-     - \`list_pipeline_jobs({ projectId: $CI_PROJECT_ID, pipelineId: mr_pipeline_id })\`.
-     - If any job has \`status = "manual"\` **and** its \`name\` ends with "agent-review":
-       - Trigger via \`play_pipeline_job({ projectId: $CI_PROJECT_ID, jobId })\`.
-       - **Conversations Intake**: run the section above to determine **where** to post the confirmation (prefer replying in the same thread that requested review).
-       - Post a short comment confirming you triggered the review job (sanitize).
-       - **Stop** further review actions.
-
-4) **Single-Runner Guard**
-   - If no manual job was triggered, execute the **Single-Runner Guard** (it will cancel any running/pending \`agent-review\` jobs on the MR pipeline) before MR Review Mode.
-
-5) **Enter MR Review Mode**: execute the **MR Review Bundle** below with the resolved \`mr_iid\`.
+## Review-on-Demand
+If the text asks for a review ("review", "please review", "PTAL", "needs review", "can you look at", "LGTM?"):
+1) Resolve MR IID (from target or text).
+2) Resolve MR pipeline (do NOT use the event pipeline).
+3) If a manual "agent-review" job exists, play it → confirm in-thread → STOP.
+4) Else run Single-Runner Guard, then enter MR Review Mode.
 `;
-/** Regular event workflow for non-review work */
+/* ---------- Event workflow ---------- */
 const eventWorkflow = ({ agentUserName }) => `
-## High-Reliability Workflow (sequence + postconditions)
-Follow this order for any change work:
-
-0) **Conversations Intake (MANDATORY)**:
-   - For MR targets: call \`mr_discussions\` and apply the rules in **Conversations Intake & Threading**.
-   - For issue targets: attempt to load notes if supported; otherwise rely on event context and post one concise note acknowledging the limitation.
-
-1) **Acknowledge** with a short comment on the issue/MR thread (\`create_note\`), **unless the last actor is you**.
-2) **Discover default branch** (e.g., "main") — infer from repo/MR context if needed.
-3) **Create a working branch** from default (stable name, e.g., \`fix/issue-<iid>-<slug>\` or \`feat/issue-<iid>-<slug>\`) via \`create_branch\`.
-4) **Write changes → commit → push to remote branch** via \`push_files\` (or \`create_or_update_file\`).
-5) **Verify push landed**:
-   - Fetch latest state and ensure diffs via \`get_branch_diffs({ from: "<default>", to: "<source>" })\`.
-6) **Create or update MR** ONLY if there is a non-empty diff via \`create_merge_request\`.
-   - Include \`Closes #<issue_iid>\` in MR description when applicable.
-   - **Assign the MR to yourself**: \`assigneeUsernames: ["${agentUserName}"]\`.
-7) **Follow-up comment** with branch name, any commit short SHA you can obtain, files changed count (approx by diffs), and MR link via \`create_note\`, **unless the last actor is you**. Place this **in the relevant conversation thread** (see Intake rules).
-8) **If verification fails**:
-   - Do NOT create the MR.
-   - Comment the exact failure and retry once with a fresh branch name. If still failing, comment and stop.
-
-For Q&A-only (no code changes), run **Conversations Intake** first, then post a single concise, helpful answer **in the correct thread** (sanitize).
+## Event Workflow
+0) Conversations Intake first
+1) Acknowledge with note (unless last actor is you)
+2) Default branch: use \`$CI_DEFAULT_BRANCH\`
+3) Create branch from \`$CI_DEFAULT_BRANCH\`:
+   create_branch({ projectId: $CI_PROJECT_ID, branchName: "<source_branch>", ref: $CI_DEFAULT_BRANCH })
+4) Write changes → commit → push:
+   push_files({ projectId: $CI_PROJECT_ID, branch: "<source_branch>", commitMessage, files })
+5) Verify:
+   get_branch_diffs({ projectId: $CI_PROJECT_ID, from: $CI_DEFAULT_BRANCH, to: "<source_branch>" })
+   - Require non-empty diffs
+6) Create MR (if diffs exist):
+   create_merge_request({
+     projectId: $CI_PROJECT_ID,
+     sourceBranch: "<source_branch>",
+     targetBranch: $CI_DEFAULT_BRANCH,
+     title,
+     description,  // include "Closes #<issue_iid>" when applicable
+     assigneeUsernames: ["${agentUserName}"]
+   })
+7) Follow-up note (in correct thread) with branch, short SHA if available, files-changed count, and MR link (unless last actor is you)
+8) If verification fails: comment error and STOP
+
+## Stdout Summary (Event)
+Print a plain-text summary with:
+- action: "event"
+- source_branch
+- target_branch: $CI_DEFAULT_BRANCH
+- diff_count (from get_branch_diffs)
+- mr_iid and/or mr_url if created
+- any note ids created/updated
+- any limitations encountered (e.g., missing discussions tool)
 `;
-/* ---------- MR-review specific (shared with both prompts) ---------- */
+/* ---------- MR-specific ---------- */
 const mrScope = ({ agentUserName }) => `
-## Identity & Scope
-- Your GitLab username is "${agentUserName}".
-- This prompt runs in the context of ONE MR.
-- You may review, comment, and push updates **to the MR's source branch**.
-- You must **never merge** the MR yourself.
+## MR Scope
+- You are reviewing a single MR
+- Never merge the MR yourself
+- Work only on the MR's source branch
 `;
 const mrWorkflow = () => `
-## High-Reliability Review Workflow
-Follow this sequence with verification at each step:
-
-1) **Collect context**
-   - Get MR metadata via \`get_merge_request({ projectId: $CI_PROJECT_ID, mergeRequestIid })\`.
-   - Fetch the full changeset/diffs via \`get_merge_request_diffs\` (or \`list_merge_request_diffs\`) and open discussions via \`mr_discussions\`.
-   - **Conversations Intake**: analyze discussions to find latest human notes, detect replies to the agent, and decide between inline reply vs updating your prior note.
-
-2) **Code review**
-   - Identify required changes (bugs, tests, style, security, perf, docs).
-   - Always **post your review comments first** using \`create_merge_request_note\` (ack + concrete notes). Sanitize before sending.
-   - Set an internal intent flag:
-     - \`will_push_changes = true\` if you will modify code/config.
-     - \`will_push_changes = false\` if it’s commentary-only.
-
-3) **Implement changes after review is posted (only if \`will_push_changes = true\`)**
-   - If needed, create the working branch from the target/default (or use existing MR source branch).
-   - Apply minimal, safe changes; keep commits small and clear.
-   - **Push** to the MR's **source branch** via \`push_files\` (or \`create_or_update_file\`).
-   - **Verify push landed** using \`get_branch_diffs({ from: "<target_branch>", to: "<source_branch>" })\` and ensure there are diffs.
-   - Post a follow-up MR note summarizing what changed and why, **in the appropriate thread** (sanitize).
+## MR Workflow
+1) get_merge_request + get_merge_request_diffs + mr_discussions
+2) Conversations Intake
+3) Post review comments first via create_merge_request_note (sanitize)
+4) If will_push_changes = true:
+   - push_files to source branch
+   - verify with get_branch_diffs({ from: targetBranch || $CI_DEFAULT_BRANCH, to: sourceBranch })
+   - follow-up note summarizing changes in the right thread (sanitize)
+
+## Stdout Summary (MR)
+Print a plain-text summary with:
+- action: "mr"
+- mr_iid
+- source_branch and target_branch (fallback to $CI_DEFAULT_BRANCH)
+- will_push_changes: true|false
+- diff_count (post-push, if applicable)
+- discussions: number of notes added/updated
+- ci: whether mr_pipeline_id was resolved
+- blocking_failed_jobs (names+stages) if inspected
 `;
+/* ---------- CI Inspection (shared) ---------- */
 const ciInspection = () => `
-4) **CI jobs (diagnose only; no job retries)**
-   - Prefer the **MR pipeline** (not the event pipeline).
-   - If you have \`mr_pipeline_id\` (from **Resolve MR Pipeline**):
-     - \`list_pipeline_jobs({ projectId: $CI_PROJECT_ID, pipelineId: mr_pipeline_id })\`.
-     - Consider **only** jobs with \`status = "failed"\` and \`allow_failure = false\`.
-     - For each such job:
-       1. Retrieve details (id, name, stage, status, allow_failure, web_url).
-       2. Fetch job output via \`get_pipeline_job_output({ projectId: $CI_PROJECT_ID, pipelineId: mr_pipeline_id, jobId })\`.
-       3. **Classify the failure**:
-          - **Code-related:** compiler/type/lint/test/build script errors. Provide minimal fix in your review/changes. Do **not** retry.
-          - **Likely transient / infra:** network/timeouts/cache/artifacts/5xx/429/runner issues. Do **not** retry here; note likely cause and suggest CI-level retry/backoff if appropriate.
-       4. **Decision**:
-          - If \`will_push_changes = true\`: do **not** retry; note that the new pipeline from your push will validate fixes.
-          - If \`will_push_changes = false\`: do **not** retry; post diagnosis and next steps (or request human input for infra issues).
-   - If \`mr_pipeline_id\` is not available, you may skip CI analysis or post a short note explaining the missing pipeline context.
+## CI Inspection (diagnose only)
+- Use mr_pipeline_id if available
+- list_pipeline_jobs → for each failed + allow_failure=false:
+  - get_pipeline_job_output
+  - classify: code vs infra
+  - Do not retry; only report diagnosis in a note
+- If no mr_pipeline_id, note limitation
 `;
 const outputDisciplineMR = ({ agentUserName }) => `
 ## Output Discipline (MR)
-- Output only \`gitlab-mcp\` tool calls and the final plain-text summary.
-- Do **not** merge the MR yourself under any circumstance.
-- Never include "@${agentUserName}" in any body.
+- Only gitlab-mcp calls + final summary
+- Never merge MR
+- Never mention "@${agentUserName}"
 `;
-/* ---------- Shared bundle for MR review ---------- */
+/* ---------- MR Review Bundle ---------- */
 const mrReviewBundle = (ctx) => `
-## MR Review Mode (execute ONLY when review intent is detected and an MR IID is resolved)
-Resolved MR IID: <set this to the resolved \`mr_iid\` before executing>
+## MR Review Mode
 ${mrScope(ctx)}
 ${mrWorkflow()}
 ${ciInspection()}
@@ -6354,12 +6292,12 @@ $(cat $TRIGGER_PAYLOAD)
 ${identity(ctx)}
 ${goldenRules(ctx)}
 ${selfMentionGuard(ctx)}
-${conversationsIntake(ctx)}     <!-- NEW: mandatory before acting -->
+${conversationsIntake(ctx)}
 ${eventSelfParse()}
-${resolveMrPipeline()}           <!-- used by review/cancel paths -->
-${singleRunnerGuard()}           <!-- operates on MR pipeline, not event pipeline -->
+${resolveMrPipeline()}
+${singleRunnerGuard()}
 ${reviewOnDemandFromEvents()}
-${mrReviewBundle(ctx)}           <!-- agent can execute when review intent is true -->
+${mrReviewBundle(ctx)}
 ${eventWorkflow(ctx)}
 ${commentGuidelines()}
 ${mcpOnly()}
@@ -6379,7 +6317,7 @@ description: $CI_MERGE_REQUEST_DESCRIPTION
 ${mrScope(ctx)}
 ${goldenRules(ctx)}
 ${selfMentionGuard(ctx)}
-${conversationsIntake(ctx)}     <!-- NEW: always read MR discussions -->
+${conversationsIntake(ctx)}
 ${mrWorkflow()}
 ${ciInspection()}
 ${commentGuidelines()}
@@ -6423,7 +6361,7 @@ const callClaude = ({ prompt }) => {
     return [
         `export PROMPT="${(0, bashEscape_1.escapeNewlines)((0, bashEscape_1.escapeDoubleQuotes)((0, bashEscape_1.escapeBackTicks)(prompt)))}"`,
         //'echo "$PROMPT"',
-        `claude -p "$PROMPT" --permission-mode acceptEdits --allowedTools "Bash(*) Bash(git checkout:*) Read(*) Edit(*) Write(*) mcp__gitlab" --verbose --debug`,
+        `claude -p "$PROMPT" --permission-mode acceptEdits --allowedTools "Bash Read(*) Edit(*) Write(*) mcp__gitlab" --verbose --debug`,
     ];
 };
 exports.callClaude = callClaude;