@cxi-lmai/ci-agent-platform 3.2.0 → 3.2.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cxi-lmai/ci-agent-platform",
-  "version": "3.2.0",
+  "version": "3.2.2",
   "description": "Autonomous dev pipeline on plain GitLab CI or GitHub Actions, driven by Claude Code. A labeled issue goes in, an open merge request comes out.",
   "keywords": [
     "claude",

package/payload/ci-templates/claude-pipeline.gitlab-ci.yml

@@ -86,9 +86,12 @@ variables:
   # GitLab's own CI_JOB_TIMEOUT minus the time already spent minus the reserve
   # below, which leaves room for the post-agent steps. An overrun then takes
   # the normal degraded path (failure-notice comment + metrics) instead of
-  # dying silently. Set PIPE_AGENT_MAX_TIME (e.g. "20m") to override the
-  # derivation for every job; GitHub Actions exposes no job-timeout variable,
-  # so there the flag is omitted and timeout-minutes stays the only bound.
+  # dying silently. This parent deadline bounds the complete omp session.
+  # Each invocation also supplies a CI-only omp config overlay: task execution
+  # is blocking (no parent polling), each child is capped at 15 minutes and 60
+  # requests, and no interactive project setting is changed. Set
+  # PIPE_AGENT_MAX_TIME (e.g. "20m") to override the parent derivation for
+  # every job.
   PIPE_AGENT_TIME_RESERVE: "180"        # seconds of the job budget kept for the post-agent steps
 
   # --- Build / verify --------------------------------------------------------

package/payload/ci-templates/scripts/lib/pipeline-common.sh

@@ -441,6 +441,24 @@ pipe_agent_max_time() {
   printf '%s' "$left"
 }
 
+pipe_omp_ci_config() {
+  # Omp's interactive defaults run tasks asynchronously and leave their
+  # runtime unbounded. CI skills consume task results synchronously, so an
+  # async reviewer makes the parent poll through repeated model turns and an
+  # unbounded child can consume the whole parent/job deadline. Keep these
+  # semantics scoped to this invocation: --config overlays the user's normal
+  # project/profile settings without modifying either.
+  local config="$PIPE_CONTEXT_DIR/omp-ci-config.yml"
+  cat > "$config" <<'YAML'
+async:
+  enabled: false
+task:
+  maxRuntimeMs: 900000
+  softRequestBudget: 60
+YAML
+  printf '%s' "$config"
+}
+
 pipe_run_omp() {
   # $1 = agent label for metrics, $2 = skill invocation (e.g. "/review-mr"),
   # $3 = allowed tools in Claude Code naming (optional, translated
@@ -452,6 +470,7 @@ pipe_run_omp() {
   # real exit code in PIPE_AGENT_RC, which pipe_require_agent_ran checks.
   local label="$1" skill="$2" tools="${3:-Agent,Read,Write,Edit,Glob,Grep,Bash}" model="${4:-}"
   local omp_tools; omp_tools=$(pipe_translate_tools_to_omp "$tools")
+  local omp_config; omp_config=$(pipe_omp_ci_config)
   # Bound the run below the job's own hard kill (see pipe_agent_max_time).
   local max_time; max_time=$(pipe_agent_max_time)
   local -a max_time_args=()
@@ -486,14 +505,15 @@ pipe_run_omp() {
       printf 'cd %q\n' "$PWD"
       printf 'source %q\n' "$SCRIPT_LIB_DIR/usage-capture-omp.sh"
       printf 'export PIPE_CAPTURE_MODEL=%q\n' "$model"
-      # The %s after `--` is the optional " --max-time <d>" fragment, already
-      # shell-quoted; it collapses to nothing when no deadline was derived.
+      # The %s after the config is the optional " --max-time <d>" fragment,
+      # already shell-quoted; it collapses to nothing when no parent deadline
+      # was derived.
       if [ -n "$model" ]; then
-        printf 'capture_omp %q --%s --yolo --no-session --no-title --model %q --tools %q -p %q < %q\n' \
-          "$label" "$max_time_txt" "$model" "$omp_tools" "$skill" "$stdin_file"
+        printf 'capture_omp %q -- --config %q%s --yolo --no-session --no-title --model %q --tools %q -p %q < %q\n' \
+          "$label" "$omp_config" "$max_time_txt" "$model" "$omp_tools" "$skill" "$stdin_file"
       else
-        printf 'capture_omp %q --%s --yolo --no-session --no-title --tools %q -p %q < %q\n' \
-          "$label" "$max_time_txt" "$omp_tools" "$skill" "$stdin_file"
+        printf 'capture_omp %q -- --config %q%s --yolo --no-session --no-title --tools %q -p %q < %q\n' \
+          "$label" "$omp_config" "$max_time_txt" "$omp_tools" "$skill" "$stdin_file"
       fi
     } > "$runner"
     chmod +x "$runner"
@@ -506,9 +526,9 @@ pipe_run_omp() {
       pipe_scrub_agent_secrets
       export PIPE_CAPTURE_MODEL="$model"
       if [ -n "$model" ]; then
-        capture_omp "$label" -- "${max_time_args[@]}" --yolo --no-session --no-title --model "$model" --tools "$omp_tools" -p "$skill" < "$stdin_file"
+        capture_omp "$label" -- --config "$omp_config" "${max_time_args[@]}" --yolo --no-session --no-title --model "$model" --tools "$omp_tools" -p "$skill" < "$stdin_file"
       else
-        capture_omp "$label" -- "${max_time_args[@]}" --yolo --no-session --no-title --tools "$omp_tools" -p "$skill" < "$stdin_file"
+        capture_omp "$label" -- --config "$omp_config" "${max_time_args[@]}" --yolo --no-session --no-title --tools "$omp_tools" -p "$skill" < "$stdin_file"
       fi
     ) || PIPE_AGENT_RC=$?
   fi

package/payload/ci-templates/scripts/review.sh

@@ -80,20 +80,20 @@ else
 fi
 platform_post_comment_file "$REVIEW_COMMENT_FILE"
 
-# 6. Emit metrics.
-pipe_metric_event code-reviewer review_findings \
-  "$(jq -n --argjson t "${FINDINGS_TOTAL:-0}" --arg s "$REVIEW_STATUS" \
-      --argjson b "$([ "$REVIEW_HAS_BUGS" = "true" ] && echo true || echo false)" \
-      --argjson inc "$([ "${PIPE_IS_INCREMENTAL:-false}" = "true" ] && echo true || echo false)" \
-      '{findings_total: $t, status: $s, has_fixable_bugs: $b, is_incremental: $inc}')"
-
-# 7. Fail the job when no review was produced. The comment above already told
+# 6. Fail the job when no review was produced. The comment above already told
 #    the humans; this tells the pipeline. PIPE_NO_GATE does not apply: it turns
 #    off the verdict gate, and this is a broken run, not a verdict. Without it a
 #    review that never ran (crashed agent, missing ANTHROPIC_API_KEY) reads as a
 #    review that ran and found nothing, and the MR goes green unreviewed.
 pipe_require_agent_ran "$PIPE_RESULT_REVIEW" "The review agent" || exit 1
 
+# 7. Emit metrics.
+pipe_metric_event code-reviewer review_findings \
+  "$(jq -n --argjson t "${FINDINGS_TOTAL:-0}" --arg s "$REVIEW_STATUS" \
+      --argjson b "$([ "$REVIEW_HAS_BUGS" = "true" ] && echo true || echo false)" \
+      --argjson inc "$([ "${PIPE_IS_INCREMENTAL:-false}" = "true" ] && echo true || echo false)" \
+      '{findings_total: $t, status: $s, has_fixable_bugs: $b, is_incremental: $inc}')"
+
 # 8. Gate. review.env is exported so the fix job can read REVIEW_HAS_BUGS at
 #    runtime. On GitLab the job exits non-zero to block the pipeline. On GitHub
 #    the workflow step owns the gate (it reads the output first), so it sets