@catladder/pipeline 3.13.1 → 3.14.0

package/dist/bash/bashEscape.d.ts

@@ -15,6 +15,8 @@ export declare const escapeString: (value: string | null | undefined, {
 export declare const escapeBashExpression: (value: BashExpression, options: EscapeOptions) => BashExpression;
 export declare const escapeDoubleQuotes: (value: string | null | undefined) => string | undefined;
 export declare const escapeSingleQuotes: (value: string | null | undefined) => string | undefined;
+export declare const escapeBackTicks: (value: string | null | undefined) => string | undefined;
+export declare const escapeNewlines: (value: string | null | undefined) => string | undefined;
 export type EscapeForDotEnvOptions = {
   quoteMode: "auto" | "always";
 };

package/dist/bash/bashEscape.js

@@ -3,7 +3,7 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.escapeForDotEnv = exports.escapeSingleQuotes = exports.escapeDoubleQuotes = exports.escapeBashExpression = exports.escapeString = exports.bashEscape = void 0;
+exports.escapeForDotEnv = exports.escapeNewlines = exports.escapeBackTicks = exports.escapeSingleQuotes = exports.escapeDoubleQuotes = exports.escapeBashExpression = exports.escapeString = exports.bashEscape = void 0;
 var globalScriptFunctions_1 = require("../globalScriptFunctions");
 var VariableValueContainingReferences_1 = require("../variables/VariableValueContainingReferences");
 var BashExpression_1 = require("./BashExpression");
@@ -49,6 +49,14 @@ var escapeSingleQuotes = function (value) {
   return value === null || value === void 0 ? void 0 : value.toString().replace(/'/g, "\\'");
 };
 exports.escapeSingleQuotes = escapeSingleQuotes;
+var escapeBackTicks = function (value) {
+  return value === null || value === void 0 ? void 0 : value.toString().replace(/`/g, "\\`");
+};
+exports.escapeBackTicks = escapeBackTicks;
+var escapeNewlines = function (value) {
+  return value === null || value === void 0 ? void 0 : value.toString().replace(/\n/g, "\\n");
+};
+exports.escapeNewlines = escapeNewlines;
 /**
  *
  * escape env vars for .env files.

package/dist/constants.js

@@ -4,5 +4,5 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.DOCKER_REGISTRY = exports.PIPELINE_IMAGE_TAG = void 0;
-exports.PIPELINE_IMAGE_TAG = "v3-13-1-90f03516" || "latest";
+exports.PIPELINE_IMAGE_TAG = "v3-14-0-fd3c74b3" || "latest";
 exports.DOCKER_REGISTRY = "git.panter.ch:5001/catladder/catladder" || "git.panter.ch:5001/catladder/catladder";

package/dist/pipeline/agent/createAgentContext.d.ts

@@ -0,0 +1,6 @@
+import type { Config } from "../../types";
+import type { AgentContext } from "../../types/context";
+export declare const createAgentContext: (ctx: {
+  agentName: string;
+  config: Config;
+}) => Promise<AgentContext>;

package/dist/pipeline/agent/createAgentContext.js

@@ -0,0 +1,141 @@
+"use strict";
+
+var __awaiter = this && this.__awaiter || function (thisArg, _arguments, P, generator) {
+  function adopt(value) {
+    return value instanceof P ? value : new P(function (resolve) {
+      resolve(value);
+    });
+  }
+  return new (P || (P = Promise))(function (resolve, reject) {
+    function fulfilled(value) {
+      try {
+        step(generator.next(value));
+      } catch (e) {
+        reject(e);
+      }
+    }
+    function rejected(value) {
+      try {
+        step(generator["throw"](value));
+      } catch (e) {
+        reject(e);
+      }
+    }
+    function step(result) {
+      result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected);
+    }
+    step((generator = generator.apply(thisArg, _arguments || [])).next());
+  });
+};
+var __generator = this && this.__generator || function (thisArg, body) {
+  var _ = {
+      label: 0,
+      sent: function () {
+        if (t[0] & 1) throw t[1];
+        return t[1];
+      },
+      trys: [],
+      ops: []
+    },
+    f,
+    y,
+    t,
+    g;
+  return g = {
+    next: verb(0),
+    "throw": verb(1),
+    "return": verb(2)
+  }, typeof Symbol === "function" && (g[Symbol.iterator] = function () {
+    return this;
+  }), g;
+  function verb(n) {
+    return function (v) {
+      return step([n, v]);
+    };
+  }
+  function step(op) {
+    if (f) throw new TypeError("Generator is already executing.");
+    while (g && (g = 0, op[0] && (_ = 0)), _) try {
+      if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+      if (y = 0, t) op = [op[0] & 2, t.value];
+      switch (op[0]) {
+        case 0:
+        case 1:
+          t = op;
+          break;
+        case 4:
+          _.label++;
+          return {
+            value: op[1],
+            done: false
+          };
+        case 5:
+          _.label++;
+          y = op[1];
+          op = [0];
+          continue;
+        case 7:
+          op = _.ops.pop();
+          _.trys.pop();
+          continue;
+        default:
+          if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+            _ = 0;
+            continue;
+          }
+          if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+            _.label = op[1];
+            break;
+          }
+          if (op[0] === 6 && _.label < t[1]) {
+            _.label = t[1];
+            t = op;
+            break;
+          }
+          if (t && _.label < t[2]) {
+            _.label = t[2];
+            _.ops.push(op);
+            break;
+          }
+          if (t[2]) _.ops.pop();
+          _.trys.pop();
+          continue;
+      }
+      op = body.call(thisArg, _);
+    } catch (e) {
+      op = [6, e];
+      y = 0;
+    } finally {
+      f = t = 0;
+    }
+    if (op[0] & 5) throw op[1];
+    return {
+      value: op[0] ? op[1] : void 0,
+      done: true
+    };
+  }
+};
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.createAgentContext = void 0;
+var createAgentContext = function (ctx) {
+  return __awaiter(void 0, void 0, void 0, function () {
+    var agentConfig;
+    var _a;
+    return __generator(this, function (_b) {
+      agentConfig = (_a = ctx.config.agents) === null || _a === void 0 ? void 0 : _a[ctx.agentName];
+      if (!agentConfig) {
+        throw new Error("Agent ".concat(ctx.agentName, " not found in config"));
+      }
+      return [2 /*return*/, {
+        type: "agent",
+        name: ctx.agentName,
+        //env: ctx.env,
+        fullConfig: ctx.config,
+        agentConfig: agentConfig
+      }];
+    });
+  });
+};
+exports.createAgentContext = createAgentContext;

package/dist/pipeline/agent/createAgentEventJob.d.ts

@@ -0,0 +1,2 @@
+import type { AgentContext, CatladderJob } from "../../types";
+export declare const createAgentEventJob: (context: AgentContext) => CatladderJob;

package/dist/pipeline/agent/createAgentEventJob.js

@@ -0,0 +1,74 @@
+"use strict";
+
+var __assign = this && this.__assign || function () {
+  __assign = Object.assign || function (t) {
+    for (var s, i = 1, n = arguments.length; i < n; i++) {
+      s = arguments[i];
+      for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
+    }
+    return t;
+  };
+  return __assign.apply(this, arguments);
+};
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+    r,
+    ar = [],
+    e;
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+  return ar;
+};
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.createAgentEventJob = void 0;
+var prompts_1 = require("./prompts");
+var shared_1 = require("./shared");
+var utils_1 = require("./utils");
+var createAgentEventJob = function (context) {
+  var baseJob = (0, shared_1.createBaseAgentJob)(context);
+  // unfortunatly, we need to manage both, because the "@mention"-feature only works with the username
+  var agentUserId = (0, utils_1.getAgentUserId)(context);
+  var agentUserName = (0, utils_1.getAgentUserName)(context);
+  return __assign(__assign({
+    interruptible: false
+  }, baseJob), {
+    variables: __assign({}, baseJob.variables),
+    name: context.name + "-agent-event",
+    rules: [{
+      if: "$CI_PIPELINE_SOURCE  == \"trigger\" && ($ASSIGNEE_USER_ID == ".concat(agentUserId, " || $OBJECT_DESCRIPTION =~ /@").concat(agentUserName, "/)"),
+      when: "always"
+    }, {
+      when: "never"
+    }],
+    script: __spreadArray(__spreadArray([], __read(shared_1.baseSetupScript), false), __read((0, shared_1.callClaude)({
+      prompt: (0, prompts_1.getEventPrompt)({
+        agentUserName: agentUserName
+      })
+    })), false)
+  });
+};
+exports.createAgentEventJob = createAgentEventJob;

package/dist/pipeline/agent/createAgentReviewJob.d.ts

@@ -0,0 +1,2 @@
+import type { AgentContext, CatladderJob } from "../../types";
+export declare const createAgentReviewJob: (context: AgentContext) => CatladderJob;

package/dist/pipeline/agent/createAgentReviewJob.js

@@ -0,0 +1,69 @@
+"use strict";
+
+var __assign = this && this.__assign || function () {
+  __assign = Object.assign || function (t) {
+    for (var s, i = 1, n = arguments.length; i < n; i++) {
+      s = arguments[i];
+      for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
+    }
+    return t;
+  };
+  return __assign.apply(this, arguments);
+};
+var __read = this && this.__read || function (o, n) {
+  var m = typeof Symbol === "function" && o[Symbol.iterator];
+  if (!m) return o;
+  var i = m.call(o),
+    r,
+    ar = [],
+    e;
+  try {
+    while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+  } catch (error) {
+    e = {
+      error: error
+    };
+  } finally {
+    try {
+      if (r && !r.done && (m = i["return"])) m.call(i);
+    } finally {
+      if (e) throw e.error;
+    }
+  }
+  return ar;
+};
+var __spreadArray = this && this.__spreadArray || function (to, from, pack) {
+  if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+    if (ar || !(i in from)) {
+      if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+      ar[i] = from[i];
+    }
+  }
+  return to.concat(ar || Array.prototype.slice.call(from));
+};
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.createAgentReviewJob = void 0;
+var rules_1 = require("../../rules");
+var prompts_1 = require("./prompts");
+var shared_1 = require("./shared");
+var utils_1 = require("./utils");
+var createAgentReviewJob = function (context) {
+  var baseJob = (0, shared_1.createBaseAgentJob)(context);
+  var agentUserName = (0, utils_1.getAgentUserName)(context);
+  return __assign(__assign({}, baseJob), {
+    name: context.name + "-agent-review",
+    rules: [__assign(__assign({}, rules_1.RULE_IS_MERGE_REQUEST), {
+      when: "always"
+    }), {
+      when: "never"
+    }],
+    script: __spreadArray(__spreadArray([], __read(shared_1.baseSetupScript), false), __read((0, shared_1.callClaude)({
+      prompt: (0, prompts_1.getMergeRequestPrompt)({
+        agentUserName: agentUserName
+      })
+    })), false)
+  });
+};
+exports.createAgentReviewJob = createAgentReviewJob;

package/dist/pipeline/agent/createJobsForAgentContext.d.ts

@@ -0,0 +1,2 @@
+import type { AgentContext } from "../../types";
+export declare const createJobsForAgentContext: (context: AgentContext) => import("../../types").CatladderJob[];

package/dist/pipeline/agent/createJobsForAgentContext.js

@@ -0,0 +1,12 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.createJobsForAgentContext = void 0;
+var createAgentEventJob_1 = require("./createAgentEventJob");
+var createAgentReviewJob_1 = require("./createAgentReviewJob");
+var createJobsForAgentContext = function (context) {
+  return [(0, createAgentEventJob_1.createAgentEventJob)(context), (0, createAgentReviewJob_1.createAgentReviewJob)(context)];
+};
+exports.createJobsForAgentContext = createJobsForAgentContext;

package/dist/pipeline/agent/prompts.d.ts

@@ -0,0 +1,10 @@
+type Ctx = {
+  agentUserName: string;
+};
+export declare const getEventPrompt: ({
+  agentUserName
+}: Ctx) => string;
+export declare const getMergeRequestPrompt: ({
+  agentUserName
+}: Ctx) => string;
+export {};

package/dist/pipeline/agent/prompts.js

@@ -0,0 +1,66 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.getMergeRequestPrompt = exports.getEventPrompt = void 0;
+var header = function () {
+  return "\nProject ID: $CI_PROJECT_ID\nGitLab Host: $CI_SERVER_URL\n";
+};
+var identity = function (_a) {
+  var agentUserName = _a.agentUserName;
+  return "\n## Identity\n- Your GitLab username is \"".concat(agentUserName, "\".\n");
+};
+var goldenRules = function (_a) {
+  var agentUserName = _a.agentUserName;
+  return "\n## Golden Rules\n- Use the `gitlab-mcp` tool for ALL GitLab actions. If a needed action is missing, use GitLab REST/GraphQL API directly as a fallback.\n- NEVER mention yourself (\"@".concat(agentUserName, "\").\n- NEVER push to main/default or any protected branch. Always create a new branch and open a Merge Request (MR).\n- Do not create an MR for a **closed** issue.\n- Keep actions minimal and idempotent. Avoid duplicate comments or duplicate MRs.\n- Use ONE stable `source_branch` per run; do not regenerate its name later.\n");
+};
+var commentGuidelines = function () {
+  return "\n## Comment Guidelines (flexible, not verbatim)\n- Keep tone professional, friendly, and concise.\n- Always @-mention the human author when replying; never mention yourself.\n- Acknowledgements: confirm you saw the request and you\u2019ll handle it.\n- MR updates: acknowledge feedback and say you\u2019ll apply/have applied the change.\n- Q&A: answer directly first; add context/links only if useful.\n- Avoid repeating identical boilerplate across comments.\n";
+};
+var mcpAndApi = function () {
+  return "\n## Tools & API (MCP-first, REST/GraphQL fallback)\nUse these `gitlab-mcp` capabilities when available (names illustrative\u2014match the actual tool schema):\n\n- **Comments**\n  - `gitlab-mcp.comment.create({ project_id: $CI_PROJECT_ID, target: \"issue\"|\"mr\", iid, body })`\n\n- **Branch**\n  - `gitlab-mcp.branch.create({ project_id: $CI_PROJECT_ID, from: \"<default_branch>\", name: \"<source_branch>\" })`\n\n- **Commits & push**\n  - `gitlab-mcp.commit.push({ project_id: $CI_PROJECT_ID, branch: \"<source_branch>\", message, files: [{ path, content | patch }] })`\n\n- **Merge Requests**\n  - `gitlab-mcp.merge_request.create({ project_id: $CI_PROJECT_ID, source_branch, target_branch: \"<default_branch>\", title, description, assign_to_self: true })`\n  - `gitlab-mcp.merge_request.update({ project_id: $CI_PROJECT_ID, mr_iid, ... })`\n  - `gitlab-mcp.merge_request.rebase({ project_id: $CI_PROJECT_ID, mr_iid, onto: \"<default_branch>\" })`\n\n- **Read/verify**\n  - `gitlab-mcp.project.get({ project_id: $CI_PROJECT_ID })` \u2192 default branch\n  - `gitlab-mcp.repo.compare({ project_id: $CI_PROJECT_ID, from: \"<default_branch>\", to: \"<source_branch>\" })`\n  - `gitlab-mcp.repo.branch.get({ project_id: $CI_PROJECT_ID, name: \"<source_branch>\" })`\n  - `gitlab-mcp.repo.commits.list({ project_id: $CI_PROJECT_ID, ref_name: \"<source_branch>\", per_page: 1 })`\n\n### Fallback: Direct GitLab API\nIf MCP lacks an operation, call GitLab\u2019s REST/GraphQL API directly.\n\n- **Authentication**  \n  Use the environment variable `GITLAB_PERSONAL_ACCESS_TOKEN`.  \n  Send it in the HTTP header:\n  ```\n  Private-Token: $GITLAB_PERSONAL_ACCESS_TOKEN\n  ```\n\n- **Host & project variables**\n  - API base URL: `$CI_SERVER_URL/api/v4`\n  - Project ID: `$CI_PROJECT_ID`\n\n- **Examples**\n  - Get project (default branch):  \n    `GET $CI_SERVER_URL/api/v4/projects/$CI_PROJECT_ID`\n  - Get/create branch:  \n    `GET|POST $CI_SERVER_URL/api/v4/projects/$CI_PROJECT_ID/repository/branches`\n  - Compare refs:  \n    `GET $CI_SERVER_URL/api/v4/projects/$CI_PROJECT_ID/repository/compare?from=<default>&to=<source>`\n  - List commits:  \n    `GET $CI_SERVER_URL/api/v4/projects/$CI_PROJECT_ID/repository/commits?ref_name=<branch>&per_page=1`\n  - Create comment on issue/MR:  \n    `POST $CI_SERVER_URL/api/v4/projects/$CI_PROJECT_ID/issues/:iid/notes`  \n    `POST $CI_SERVER_URL/api/v4/projects/$CI_PROJECT_ID/merge_requests/:iid/notes`\n  - Create MR:  \n    `POST $CI_SERVER_URL/api/v4/projects/$CI_PROJECT_ID/merge_requests`\n  - Get MR changes:  \n    `GET $CI_SERVER_URL/api/v4/projects/$CI_PROJECT_ID/merge_requests/:iid/changes`\n";
+};
+var outputDiscipline = function (_a) {
+  var agentUserName = _a.agentUserName;
+  return "\n## Output Discipline\n- Prefer `gitlab-mcp` tool calls. If unavailable, output direct API requests (endpoint, method, headers, JSON body).\n- Keep comments concise and professional.\n- Never include \"@".concat(agentUserName, "\" in any body.\n");
+};
+// --- Event-specific sections ---
+var eventSelfParse = function () {
+  return "\n## Self-Parse the Raw Payload (no preprocessing available)\nFrom `event_json`, extract:\n- kind: \"issue\" | \"merge_request\" | \"note\"\n- target + iid from URL:\n  - `/-/issues/<n>` \u2192 target=\"issue\", iid=<n>\n  - `/-/merge_requests/<n>` \u2192 target=\"mr\", iid=<n>\n- note_id if present (`#note_<id>`)\n- description/body text, state, author `user_username`, timestamps\n- project id/path; detect default branch via tool/API when needed\n\nIf any key is missing, choose the safest minimal action or briefly explain via a comment.\n";
+};
+var eventWorkflow = function () {
+  return "\n## High-Reliability Workflow (sequence + postconditions)\nFollow this order for any change work:\n\n1) **Acknowledge** with a short comment on the issue/MR thread.\n2) **Discover default branch** (e.g., \"main\") via MCP or API.\n3) **Create a working branch** from default (stable name, e.g., `fix/issue-<iid>-<slug>` or `feat/issue-<iid>-<slug>`).\n4) **Write changes \u2192 commit \u2192 push to remote branch.**\n5) **Verify push landed**:\n   - Fetch latest commit on `source_branch`; record its short SHA.\n   - Compare default vs `source_branch` and ensure `diffs.length > 0`.\n6) **Create or update MR** ONLY if there is a non-empty diff.\n   - Include `Closes #<issue_iid>` in MR description when applicable.\n   - Assign yourself to the MR.\n7) **Follow-up comment** with branch name, commit short SHA, files changed count, and MR link.\n8) **If verification fails**:\n   - Do NOT create the MR.\n   - Comment the exact failure and retry once with a fresh branch name. If still failing, comment and stop.\n\nFor Q&A-only (no code changes), just post a concise, helpful answer on the same issue/MR.\n";
+};
+// --- MR-specific sections ---
+var mrScope = function (_a) {
+  var agentUserName = _a.agentUserName;
+  return "\n## Identity & Scope\n- Your GitLab username is \"".concat(agentUserName, "\".\n- This prompt runs in the context of ONE MR (no webhook).\n- You may review, comment, rebase, and push updates **to the MR's source branch**.\n- You must **never merge** the MR yourself.\n");
+};
+var mrWorkflow = function () {
+  return "\n## High-Reliability Review Workflow\nFollow this sequence with verification at each step:\n\n1) **Collect context**\n   - Get MR metadata (source_branch, target_branch, state, draft/WIP).\n   - Fetch the full changeset/diffs and open discussions (notes, threads, unresolved discussions).\n   - Read existing reviews/comments to avoid duplication.\n   - (Optional) Fetch recent CI pipeline(s) for this MR SHA/branch).\n\n2) **Code review**\n   - Identify required changes (bugs, tests, style, security, perf, docs).\n   - If no meaningful changes are needed:\n     - Post a concise review comment summarizing findings.\n     - Ask for review by a **recent active human contributor** (not you).\n\n3) **If changes are needed**\n   - Post a short acknowledgment comment on the MR.\n   - **Rebase** the MR onto the target/default branch (resolve trivial conflicts).\n   - Implement minimal, safe changes; keep commits small and clear.\n   - **Push** to the MR's **source_branch**.\n   - **Verify push landed** (latest commit short SHA; compare target vs source shows diffs > 0).\n   - Comment summarizing what changed and why.\n\n4) **CI pipeline**\n   - Check pipeline status for the new commit on the MR branch.\n   - Retry/re-run if allowed on flaky failures; fix minimal issues; push again if needed.\n   - If still failing, comment with failure summary and next steps.\n\n5) **Assign human reviewer if ready**\n   - If discussions are resolved and CI is passing (or running), request review from a recent active human contributor (not you).\n\n6) **Stdout summary**\n   - Print concise summary: commits pushed (short SHAs), files changed count, discussions resolved/left, CI status, and requested reviewers.\n";
+};
+var fallbackApiAuth = function () {
+  return "\n## Fallback API Auth (if MCP lacks a method)\n- Base URL: `$CI_SERVER_URL/api/v4`\n- Project: `$CI_PROJECT_ID`\n- Header: `Private-Token: $GITLAB_PERSONAL_ACCESS_TOKEN`\n";
+};
+// ---------- Public builders ----------
+var getEventPrompt = function (_a) {
+  var agentUserName = _a.agentUserName;
+  return "\nYou are a GitLab assistant bot. You receive ONE raw GitLab webhook JSON payload.\n\n".concat(header(), "\n---\nevent_json:\n$(cat $TRIGGER_PAYLOAD)\n---\n\n").concat(identity({
+    agentUserName: agentUserName
+  }), "\n").concat(goldenRules({
+    agentUserName: agentUserName
+  }), "\n").concat(eventSelfParse(), "\n").concat(eventWorkflow(), "\n").concat(commentGuidelines(), "\n").concat(mcpAndApi(), "\n").concat(outputDiscipline({
+    agentUserName: agentUserName
+  }), "\n");
+};
+exports.getEventPrompt = getEventPrompt;
+var getMergeRequestPrompt = function (_a) {
+  var agentUserName = _a.agentUserName;
+  return "\nYou are a GitLab assistant bot reviewing and updating a single Merge Request (MR).\n\n".concat(header(), "\n---\nmerge_request_iid: $CI_MERGE_REQUEST_IID\ntitle: $CI_MERGE_REQUEST_TITLE\ndescription: $CI_MERGE_REQUEST_DESCRIPTION\n---\n\n").concat(mrScope({
+    agentUserName: agentUserName
+  }), "\n").concat(goldenRules({
+    agentUserName: agentUserName
+  }), "\n").concat(mrWorkflow(), "\n").concat(commentGuidelines(), "\n").concat(mcpAndApi(), "\n").concat(fallbackApiAuth(), "\n## Output Discipline (MR)\n- Prefer `gitlab-mcp` tool calls; if unavailable, provide explicit REST calls (method, url, headers, body).\n- At the end, print a **plain-text** summary to STDOUT including:\n  - `source_branch` and `target_branch`\n  - commits pushed (short SHAs)\n  - number of files changed\n  - CI status/result\n  - reviewers requested (if any)\n- Do **not** merge the MR yourself under any circumstance.\n");
+};
+exports.getMergeRequestPrompt = getMergeRequestPrompt;

package/dist/pipeline/agent/shared.d.ts

@@ -0,0 +1,8 @@
+import type { AgentContext, CatladderJob } from "../../types";
+export declare const createBaseAgentJob: (context: AgentContext) => Omit<CatladderJob, "name" | "rules" | "script">;
+export declare const baseSetupScript: string[];
+export declare const callClaude: ({
+  prompt
+}: {
+  prompt: string;
+}) => string[];

package/dist/pipeline/agent/shared.js

@@ -0,0 +1,29 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.callClaude = exports.baseSetupScript = exports.createBaseAgentJob = void 0;
+var bashEscape_1 = require("../../bash/bashEscape");
+var createBaseAgentJob = function (context) {
+  return {
+    stage: "agents",
+    envMode: "none",
+    image: "node:24-alpine3.21",
+    variables: {
+      MAX_MCP_OUTPUT_TOKENS: "75000",
+      GITLAB_PERSONAL_ACCESS_TOKEN: "$AGENT_GITLAB_PERSONAL_ACCESS_TOKEN",
+      // TODO: we don't have global secret keys to configure yet
+      GITLAB_API_URL: "$CI_API_V4_URL"
+    }
+  };
+};
+exports.createBaseAgentJob = createBaseAgentJob;
+exports.baseSetupScript = ["apk update", "apk add --no-cache git curl bash", "npm install -g @anthropic-ai/claude-code", "claude mcp add gitlab --env GITLAB_PERSONAL_ACCESS_TOKEN=$GITLAB_PERSONAL_ACCESS_TOKEN --env GITLAB_API_URL=$GITLAB_API_URL -- npx -y @zereight/mcp-gitlab"];
+var callClaude = function (_a) {
+  var prompt = _a.prompt;
+  return ["export PROMPT=\"".concat((0, bashEscape_1.escapeNewlines)((0, bashEscape_1.escapeDoubleQuotes)((0, bashEscape_1.escapeBackTicks)(prompt))), "\""),
+  //'echo "$PROMPT"',
+  "claude -p \"$PROMPT\" --permission-mode acceptEdits --allowedTools \"Bash(*) Read(*) Edit(*) Write(*) mcp__gitlab\" --verbose --debug"];
+};
+exports.callClaude = callClaude;

package/dist/pipeline/agent/utils.d.ts

@@ -0,0 +1,3 @@
+import type { AgentContext } from "../../types";
+export declare const getAgentUserName: (context: AgentContext) => string;
+export declare const getAgentUserId: (context: AgentContext) => string;

package/dist/pipeline/agent/utils.js

@@ -0,0 +1,16 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.getAgentUserId = exports.getAgentUserName = void 0;
+var getAgentUserName = function (context) {
+  var _a, _b;
+  return (_b = (_a = context.agentConfig.agentUser) === null || _a === void 0 ? void 0 : _a.username) !== null && _b !== void 0 ? _b : "agent.claude";
+};
+exports.getAgentUserName = getAgentUserName;
+var getAgentUserId = function (context) {
+  var _a, _b;
+  return (_b = (_a = context.agentConfig.agentUser) === null || _a === void 0 ? void 0 : _a.userId) !== null && _b !== void 0 ? _b : "$DEFAULT_AGENT_USER_ID";
+};
+exports.getAgentUserId = getAgentUserId;

package/dist/pipeline/createAllJobs.d.ts

@@ -1,5 +1,5 @@
 import type { CreateAllComponentsContextProps } from "../context/createAllComponentsContext";
-import type { ComponentContext, WorkspaceContext } from "../types";
+import type { AgentContext, ComponentContext, WorkspaceContext } from "../types";
 import type { CatladderJob } from "../types/jobs";
 export type AllCatladderJobs = {
   workspaces: Array<{
@@ -10,6 +10,10 @@ export type AllCatladderJobs = {
     context: ComponentContext;
     jobs: Array<CatladderJob>;
   }>;
+  agents: Array<{
+    context: AgentContext;
+    jobs: Array<CatladderJob>;
+  }>;
 };
 export declare const createAllJobs: ({
   config,

package/dist/pipeline/createAllJobs.js

@@ -155,16 +155,18 @@ var createWorkspaceContext_1 = require("../context/createWorkspaceContext");
 var types_1 = require("../types");
 var createJobsForComponent_1 = require("./createJobsForComponent");
 var createJobsForWorkspace_1 = require("./createJobsForWorkspace");
+var createJobsForAgentContext_1 = require("./agent/createJobsForAgentContext");
+var createAgentContext_1 = require("./agent/createAgentContext");
 var createAllJobs = function (_a) {
   return __awaiter(void 0, [_a], void 0, function (_b) {
     var allComponentsContext;
     var _c;
-    var _d;
+    var _d, _e;
     var config = _b.config,
       trigger = _b.trigger,
       pipelineType = _b.pipelineType;
-    return __generator(this, function (_e) {
-      switch (_e.label) {
+    return __generator(this, function (_f) {
+      switch (_f.label) {
         case 0:
           return [4 /*yield*/, (0, createAllComponentsContext_1.createAllComponentsContext)({
             config: config,
@@ -172,7 +174,7 @@ var createAllJobs = function (_a) {
             pipelineType: pipelineType
           })];
         case 1:
-          allComponentsContext = _e.sent();
+          allComponentsContext = _f.sent();
           _c = {};
           return [4 /*yield*/, Promise.all(Object.keys((_d = config.builds) !== null && _d !== void 0 ? _d : {}).map(function (workspaceName) {
             return __awaiter(void 0, void 0, void 0, function () {
@@ -223,12 +225,36 @@ var createAllJobs = function (_a) {
             return f.flat();
           })];
         case 2:
-          return [2 /*return*/, (_c.workspaces = _e.sent(), _c.components = allComponentsContext.map(function (context) {
+          _c.workspaces = _f.sent(), _c.components = allComponentsContext.map(function (context) {
             return {
               context: context,
               jobs: (0, createJobsForComponent_1.createJobsForComponentContext)(context)
             };
-          }), _c)];
+          });
+          return [4 /*yield*/, Promise.all(Object.keys((_e = config.agents) !== null && _e !== void 0 ? _e : {}).map(function (agentName) {
+            return __awaiter(void 0, void 0, void 0, function () {
+              var context;
+              return __generator(this, function (_a) {
+                switch (_a.label) {
+                  case 0:
+                    return [4 /*yield*/, (0, createAgentContext_1.createAgentContext)({
+                      agentName: agentName,
+                      config: config
+                    })];
+                  case 1:
+                    context = _a.sent();
+                    return [2 /*return*/, {
+                      context: context,
+                      jobs: (0, createJobsForAgentContext_1.createJobsForAgentContext)(context)
+                    }];
+                }
+              });
+            });
+          })).then(function (f) {
+            return f.flat();
+          })];
+        case 3:
+          return [2 /*return*/, (_c.agents = _f.sent(), _c)];
       }
     });
   });

package/dist/pipeline/createMainPipeline.js

@@ -169,7 +169,7 @@ var createGitlabPipeline_1 = require("./gitlab/createGitlabPipeline");
 var gitlabReleaseJobs_1 = require("./gitlab/gitlabReleaseJobs");
 var createMainPipeline = function (pipelineType, config) {
   return __awaiter(void 0, void 0, void 0, function () {
-    var stages, allJobsPerTrigger, allWorkspaceJobs, allComponentJobs, allJobs;
+    var stages, allJobsPerTrigger, allWorkspaceJobs, allComponentJobs, allGlobalJobs, allJobs;
     return __generator(this, function (_a) {
       switch (_a.label) {
         case 0:
@@ -231,7 +231,11 @@ var createMainPipeline = function (pipelineType, config) {
             });
             return aIndex - bIndex;
           });
-          allJobs = __spreadArray(__spreadArray([], __read(allWorkspaceJobs), false), __read(allComponentJobs), false).reduce(function (acc, _a) {
+          allGlobalJobs = allJobsPerTrigger.filter(function (j) {
+            var _a;
+            return ((_a = j.context) === null || _a === void 0 ? void 0 : _a.type) === "agent";
+          });
+          allJobs = __spreadArray(__spreadArray(__spreadArray([], __read(allWorkspaceJobs), false), __read(allComponentJobs), false), __read(allGlobalJobs), false).reduce(function (acc, _a) {
             var _b, _c;
             var gitlabJob = _a.gitlabJob,
               name = _a.name,
@@ -274,10 +278,11 @@ function getGitlabRulesForTrigger(trigger) {
   // taggedRelease: on tag
   switch (trigger) {
     case "mainBranch":
-      return [rules_1.RULE_IS_MAIN_BRANCH_AND_NOT_RELEASE_COMMIT];
+      return [rules_1.RULE_NEVER_ON_AGENT_TRIGGER, rules_1.RULE_IS_MAIN_BRANCH_AND_NOT_RELEASE_COMMIT];
     case "mr":
-      return [rules_1.RULE_IS_MERGE_REQUEST];
+      return [rules_1.RULE_NEVER_ON_AGENT_TRIGGER, rules_1.RULE_IS_MERGE_REQUEST];
     case "taggedRelease":
-      return [rules_1.RULE_IS_TAGGED_RELEASE];
+      return [rules_1.RULE_NEVER_ON_AGENT_TRIGGER, rules_1.RULE_IS_TAGGED_RELEASE];
   }
+  throw new Error("".concat(trigger, " is not supported"));
 }

package/dist/pipeline/gitlab/createGitlabJobs.d.ts

@@ -1,13 +1,13 @@
-import type { Context, GitlabJobDef, GitlabRule } from "../../types";
+import type { AgentContext, Context, GitlabJobDef, GitlabRule } from "../../types";
 import type { CatladderJob } from "../../types/jobs";
 import type { AllCatladderJobs } from "../createAllJobs";
 export type GitlabJobWithContext = {
   gitlabJob: GitlabJobDef;
-  context: Context | null;
+  context: Context | AgentContext | null;
 };
 export type AllGitlabJobs = (GitlabJobWithContext & {
   name: string;
 })[];
 export declare const GITLAB_ENVIRONMENT_URL_VARIABLE = "CL_GITLAB_ENVIRONMENT_URL";
-export declare const makeGitlabJob: (context: Context, job: CatladderJob<string>, allJobs: AllCatladderJobs, baseRules?: GitlabRule[]) => [fullName: string, job: GitlabJobDef];
+export declare const makeGitlabJob: (context: Context | AgentContext, job: CatladderJob<string>, allJobs: AllCatladderJobs, baseRules?: GitlabRule[]) => [fullName: string, job: GitlabJobDef];
 export declare const createGitlabJobs: (allJobs: AllCatladderJobs, baseRules?: GitlabRule[]) => Promise<AllGitlabJobs>;