@vfarcic/dot-ai 1.12.0 → 1.13.0

package/dist/core/internal-tools.d.ts

@@ -1,5 +1,5 @@
 /**
- * Internal Agentic-Loop Tools (PRD #407)
+ * Internal Agentic-Loop Tools (PRD #407, PRD #408)
  *
  * Tools that run locally in the MCP server, available to the AI
  * during investigation loops alongside plugin tools. NOT exposed
@@ -9,6 +9,7 @@
  * - git_clone: Clone a Git repo
  * - fs_list: List files at a path
  * - fs_read: Read a file at a path
+ * - git_create_pr: Create a PR with file changes (PRD #408)
  *
  * All filesystem operations are scoped to ./tmp/gitops-clones/
  * to prevent path traversal attacks.
@@ -20,7 +21,39 @@ import type { AITool, ToolExecutor } from './ai-provider.interface.js';
  * Exported for testing.
  */
 export declare function validatePathWithinClones(inputPath: string): string;
+/**
+ * Returns internal tools available to the AI during investigation.
+ * Note: git_create_pr is executor-only and not exposed to investigation.
+ */
 export declare function getInternalTools(): AITool[];
+export interface GitCreatePrInput {
+    repoPath: string;
+    files: Array<{
+        path: string;
+        content: string;
+    }>;
+    title: string;
+    body?: string;
+    branchName: string;
+    baseBranch?: string;
+}
+export type GitCreatePrResult = {
+    success: true;
+    prUrl: string;
+    prNumber: number;
+    branch: string;
+    baseBranch: string;
+    filesChanged: string[];
+} | {
+    success: true;
+    branch: string;
+    baseBranch: string;
+    filesChanged: string[];
+    error: string;
+} | {
+    success: false;
+    error: string;
+};
 /**
  * Create a ToolExecutor that handles internal agentic-loop tools.
  * Designed to be passed as the fallbackExecutor to pluginManager.createToolExecutor().

package/dist/core/internal-tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"internal-tools.d.ts","sourceRoot":"","sources":["../../src/core/internal-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAcvE;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAUlE;AAkBD,wBAAgB,gBAAgB,IAAI,MAAM,EAAE,CAgD3C;AAmHD;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,CAoB1E;AAID;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,GAAE,MAAuB,GAAG,IAAI,CAoBxE"}
+{"version":3,"file":"internal-tools.d.ts","sourceRoot":"","sources":["../../src/core/internal-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAsBvE;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAUlE;AAkBD;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,EAAE,CAkD3C;AAiHD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,GAC9G;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC5F;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAgItC;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,CAqB1E;AAID;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,GAAE,MAAuB,GAAG,IAAI,CAoBxE"}

package/dist/core/internal-tools.js

@@ -1,6 +1,6 @@
 "use strict";
 /**
- * Internal Agentic-Loop Tools (PRD #407)
+ * Internal Agentic-Loop Tools (PRD #407, PRD #408)
  *
  * Tools that run locally in the MCP server, available to the AI
  * during investigation loops alongside plugin tools. NOT exposed
@@ -10,6 +10,7 @@
  * - git_clone: Clone a Git repo
  * - fs_list: List files at a path
  * - fs_read: Read a file at a path
+ * - git_create_pr: Create a PR with file changes (PRD #408)
  *
  * All filesystem operations are scoped to ./tmp/gitops-clones/
  * to prevent path traversal attacks.
@@ -47,6 +48,9 @@ var __importStar = (this && this.__importStar) || (function () {
         return result;
     };
 })();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.validatePathWithinClones = validatePathWithinClones;
 exports.getInternalTools = getInternalTools;
@@ -56,6 +60,7 @@ const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const git_utils_js_1 = require("./git-utils.js");
 const solution_utils_js_1 = require("./solution-utils.js");
+const simple_git_1 = __importDefault(require("simple-git"));
 const CLONES_SUBDIR = 'gitops-clones';
 const MAX_FILE_SIZE = 100 * 1024; // 100KB
 const DEFAULT_TTL_MS = 60 * 60 * 1000; // 1 hour
@@ -94,6 +99,10 @@ function repoUrlToDirectoryName(repoUrl) {
     }
 }
 // ─── Tool definitions ───
+/**
+ * Returns internal tools available to the AI during investigation.
+ * Note: git_create_pr is executor-only and not exposed to investigation.
+ */
 function getInternalTools() {
     return [
         {
@@ -138,6 +147,8 @@ function getInternalTools() {
                 required: ['path'],
             },
         },
+        // git_create_pr is executor-only - not exposed during investigation
+        // It's only available via createInternalToolExecutor() during execution
     ];
 }
 // ─── Handlers ───
@@ -235,6 +246,109 @@ function handleFsRead(args) {
     }
     return fs.readFileSync(resolved, 'utf-8');
 }
+async function handleGitCreatePr(args) {
+    const repoPath = args.repoPath;
+    const files = args.files;
+    const title = args.title;
+    const body = args.body || '';
+    const branchName = args.branchName;
+    const baseBranch = args.baseBranch || 'main';
+    if (!repoPath) {
+        return { success: false, error: 'repoPath is required' };
+    }
+    if (!files || !Array.isArray(files) || files.length === 0) {
+        return { success: false, error: 'files array is required and must not be empty' };
+    }
+    if (!title) {
+        return { success: false, error: 'title is required' };
+    }
+    if (!branchName) {
+        return { success: false, error: 'branchName is required' };
+    }
+    let resolvedRepoPath;
+    try {
+        resolvedRepoPath = validatePathWithinClones(repoPath);
+    }
+    catch (err) {
+        return {
+            success: false,
+            error: `Invalid repo path: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+    if (!fs.existsSync(resolvedRepoPath)) {
+        return {
+            success: false,
+            error: `Repository not found at path: ${repoPath}. It may have been cleaned up.`,
+        };
+    }
+    const stat = fs.statSync(resolvedRepoPath);
+    if (!stat.isDirectory()) {
+        return { success: false, error: `Path is not a directory: ${repoPath}` };
+    }
+    try {
+        const git = (0, simple_git_1.default)(resolvedRepoPath);
+        await git.checkout(baseBranch);
+        const pushResult = await (0, git_utils_js_1.pushRepo)(resolvedRepoPath, files, title, {
+            branch: branchName,
+        });
+        const authConfig = (0, git_utils_js_1.getGitAuthConfigFromEnv)();
+        const token = await (0, git_utils_js_1.getAuthToken)(authConfig);
+        const remotes = await git.getRemotes(true);
+        const origin = remotes.find(r => r.name === 'origin');
+        if (!origin?.refs?.fetch) {
+            return { success: false, error: 'Could not find origin remote URL' };
+        }
+        const remoteUrl = (0, git_utils_js_1.scrubCredentials)(origin.refs.fetch);
+        const repoMatch = remoteUrl.match(/github\.com[/:]([^/]+\/[^/]+?)(?:\.git)?$/);
+        if (!repoMatch) {
+            return {
+                success: true,
+                branch: branchName,
+                baseBranch,
+                filesChanged: pushResult.filesAdded,
+                error: 'Automatic PR creation is only supported for GitHub repositories. Changes were pushed to the branch — create a PR/MR manually.',
+            };
+        }
+        const ownerRepo = repoMatch[1];
+        const [owner, repo] = ownerRepo.split('/');
+        const prResponse = await fetch(`https://api.github.com/repos/${owner}/${repo}/pulls`, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${token}`,
+                'Content-Type': 'application/json',
+                Accept: 'application/vnd.github+json',
+                'User-Agent': 'dot-ai-remediate',
+            },
+            body: JSON.stringify({
+                title,
+                body,
+                head: branchName,
+                base: baseBranch,
+            }),
+            signal: AbortSignal.timeout(30000),
+        });
+        if (!prResponse.ok) {
+            const errorBody = await prResponse.text();
+            return {
+                success: false,
+                error: `GitHub API error (${prResponse.status}): ${errorBody}`,
+            };
+        }
+        const prData = (await prResponse.json());
+        return {
+            success: true,
+            prUrl: prData.html_url,
+            prNumber: prData.number,
+            branch: branchName,
+            baseBranch,
+            filesChanged: pushResult.filesAdded,
+        };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { success: false, error: (0, git_utils_js_1.scrubCredentials)(message) };
+    }
+}
 // ─── Combined executor ───
 /**
  * Create a ToolExecutor that handles internal agentic-loop tools.
@@ -245,6 +359,7 @@ function createInternalToolExecutor(sessionId) {
         git_clone: (args) => handleGitClone(args, sessionId),
         fs_list: handleFsList,
         fs_read: handleFsRead,
+        git_create_pr: handleGitCreatePr,
     };
     return async (toolName, input) => {
         const handler = handlers[toolName];

package/dist/tools/remediate.d.ts

@@ -54,6 +54,7 @@ export interface RemediationAction {
     rationale: string;
     gitSource?: {
         repoURL: string;
+        repoPath?: string;
         branch: string;
         files: Array<{
             path: string;
@@ -102,6 +103,13 @@ export interface RemediateOutput {
     results?: ExecutionResult[];
     fallbackReason?: string;
     mode?: 'manual' | 'automatic';
+    pullRequest?: {
+        url: string;
+        number: number;
+        branch: string;
+        baseBranch: string;
+        filesChanged: string[];
+    };
 }
 /**
  * Remediate tool response type

package/dist/tools/remediate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remediate.d.ts","sourceRoot":"","sources":["../../src/tools/remediate.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB,OAAO,EAEL,qBAAqB,EACtB,MAAM,uBAAuB,CAAC;AA2B/B,eAAO,MAAM,mBAAmB,cAAc,CAAC;AAC/C,eAAO,MAAM,0BAA0B,yfACgd,CAAC;AAGxf,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;CAsDvC,CAAC;AAGF,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,YAAY,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAID,MAAM,WAAW,oBAAqB,SAAQ,qBAAqB;IACjE,QAAQ,EAAE,WAAW,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC,MAAM,EACF,eAAe,GACf,mBAAmB,GACnB,QAAQ,GACR,uBAAuB,GACvB,sBAAsB,GACtB,WAAW,CAAC;IAChB,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;CACtC;AAGD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,oBAAoB,CAAC;CAC5B,CAAC;AAEF,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,KAAK,CAAC;YACX,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,MAAM,CAAC;YAChB,WAAW,EAAE,MAAM,CAAC;SACrB,CAAC,CAAC;KACJ,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,wBAAwB,GAAG,oBAAoB,CAAC;IAC/E,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IACF,QAAQ,EAAE;QACR,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB,CAAC;IACF,WAAW,EAAE;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC7B,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;KACjC,CAAC;IAEF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;IACrC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;CAC/B;AAID;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChD;AA6OD;;GAEG;AACH,UAAU,uBAAuB;IAC/B,WAAW,EAAE,QAAQ,GAAG,UAAU,GAAG,cAAc,CAAC;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC7B,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;KACjC,CAAC;IACF,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,GACjB,uBAAuB,CAyHzB;AA0dD;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,qBAAqB,CAAC,CA8QhC"}
+{"version":3,"file":"remediate.d.ts","sourceRoot":"","sources":["../../src/tools/remediate.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB,OAAO,EAEL,qBAAqB,EACtB,MAAM,uBAAuB,CAAC;AA6B/B,eAAO,MAAM,mBAAmB,cAAc,CAAC;AAC/C,eAAO,MAAM,0BAA0B,yfACgd,CAAC;AAGxf,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;CAsDvC,CAAC;AAGF,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,YAAY,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAID,MAAM,WAAW,oBAAqB,SAAQ,qBAAqB;IACjE,QAAQ,EAAE,WAAW,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC,MAAM,EACF,eAAe,GACf,mBAAmB,GACnB,QAAQ,GACR,uBAAuB,GACvB,sBAAsB,GACtB,WAAW,CAAC;IAChB,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;CACtC;AAGD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,oBAAoB,CAAC;CAC5B,CAAC;AAEF,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,KAAK,CAAC;YACX,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,MAAM,CAAC;YAChB,WAAW,EAAE,MAAM,CAAC;SACrB,CAAC,CAAC;KACJ,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,wBAAwB,GAAG,oBAAoB,CAAC;IAC/E,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IACF,QAAQ,EAAE;QACR,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB,CAAC;IACF,WAAW,EAAE;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC7B,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;KACjC,CAAC;IAEF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;IACrC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC9B,WAAW,CAAC,EAAE;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;CACH;AAID;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChD;AA6OD;;GAEG;AACH,UAAU,uBAAuB;IAC/B,WAAW,EAAE,QAAQ,GAAG,UAAU,GAAG,cAAc,CAAC;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC7B,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;KACjC,CAAC;IACF,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,GACjB,uBAAuB,CAyHzB;AA0lBD;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,qBAAqB,CAAC,CA8QhC"}

package/dist/tools/remediate.js

@@ -401,7 +401,31 @@ async function executeUserChoice(sessionManager, sessionId, choice, logger, requ
                 return await executeRemediationCommands(session, sessionManager, logger, requestId, currentInteractionId);
             case 2: {
                 // Execute via agent
-                // Use validation intent directly from final analysis
+                const actions = session.data.finalAnalysis.remediation.actions;
+                const gitSourceActions = actions.filter(a => a.gitSource && !a.command);
+                const kubectlActions = actions.filter(a => a.command && !a.gitSource);
+                if (gitSourceActions.length > 0 && kubectlActions.length === 0) {
+                    return {
+                        content: [
+                            {
+                                type: 'text',
+                                text: JSON.stringify({
+                                    status: 'success',
+                                    sessionId: sessionId,
+                                    message: 'GitOps remediation detected - use automatic execution (choice 1) for PR creation',
+                                    remediation: session.data.finalAnalysis.remediation,
+                                    instructions: {
+                                        nextSteps: [
+                                            'This remediation requires GitOps PR creation which is handled automatically.',
+                                            'Please use choice 1 (Execute automatically) to create the PR.',
+                                            'Alternatively, manually apply the file changes from gitSource.files to your repository.',
+                                        ],
+                                    },
+                                }, null, 2),
+                            },
+                        ],
+                    };
+                }
                 const validationIntent = session.data.finalAnalysis.validationIntent ||
                     'Check the status of the affected resources to verify the issue has been resolved';
                 return {
@@ -453,6 +477,7 @@ async function executeRemediationCommands(session, sessionManager, logger, reque
     const finalAnalysis = session.data.finalAnalysis;
     let overallSuccess = true;
     let executedCommandCount = 0;
+    let pullRequestInfo;
     logger.info('Starting remediation command execution', {
         requestId,
         sessionId: session.sessionId,
@@ -463,21 +488,76 @@ async function executeRemediationCommands(session, sessionManager, logger, reque
         const action = finalAnalysis.remediation.actions[i];
         const actionId = `action_${i + 1}`;
         try {
-            // PRD #407: Skip gitSource actions — these are Git-based remediation
-            // instructions for GitOps-managed resources, not executable commands
+            // PRD #408: Handle gitSource actions — create PR instead of kubectl
             if (action.gitSource && !action.command) {
-                logger.info('Skipping gitSource remediation action (not executable)', {
+                logger.info('Processing gitSource remediation action', {
                     requestId,
                     sessionId: session.sessionId,
                     actionId,
                     repoURL: action.gitSource.repoURL,
+                    repoPath: action.gitSource.repoPath,
                 });
-                results.push({
-                    action: `${actionId}: ${action.description} (skipped: Git-based)`,
-                    success: false,
-                    output: 'Git-based remediation — apply changes in the source repository',
-                    timestamp: new Date(),
-                });
+                if (!action.gitSource.repoPath) {
+                    results.push({
+                        action: `${actionId}: ${action.description} (failed: missing repoPath)`,
+                        success: false,
+                        output: 'Git-based remediation requires repoPath from investigation phase',
+                        timestamp: new Date(),
+                    });
+                    overallSuccess = false;
+                    continue;
+                }
+                const prInput = {
+                    repoPath: action.gitSource.repoPath,
+                    files: action.gitSource.files.map((f) => ({
+                        path: f.path,
+                        content: f.content,
+                    })),
+                    title: `fix: ${action.description}`,
+                    body: `## Remediation\n\n${action.rationale}\n\n**Risk Level:** ${action.risk}`,
+                    branchName: `remediate/${session.sessionId.slice(0, 12)}-${Date.now()}`,
+                    baseBranch: action.gitSource.branch || 'main',
+                };
+                const prExecutor = (0, internal_tools_1.createInternalToolExecutor)(session.sessionId);
+                const prResult = (await prExecutor('git_create_pr', prInput));
+                if (prResult.success && 'prUrl' in prResult) {
+                    const filesList = prResult.filesChanged && prResult.filesChanged.length > 0
+                        ? prResult.filesChanged.join(', ')
+                        : 'none';
+                    results.push({
+                        action: `${actionId}: ${action.description} (PR created)`,
+                        success: true,
+                        output: `PR #${prResult.prNumber}: ${prResult.prUrl}\nBranch: ${prResult.branch}\nFiles changed: ${filesList}`,
+                        timestamp: new Date(),
+                    });
+                    pullRequestInfo = {
+                        url: prResult.prUrl,
+                        number: prResult.prNumber,
+                        branch: prResult.branch,
+                        baseBranch: prResult.baseBranch,
+                        filesChanged: prResult.filesChanged,
+                    };
+                }
+                else if (prResult.success && 'error' in prResult) {
+                    const filesList = prResult.filesChanged && prResult.filesChanged.length > 0
+                        ? prResult.filesChanged.join(', ')
+                        : 'none';
+                    results.push({
+                        action: `${actionId}: ${action.description} (branch pushed, manual PR needed)`,
+                        success: true,
+                        output: `Branch: ${prResult.branch}\nFiles changed: ${filesList}\nNote: ${prResult.error}`,
+                        timestamp: new Date(),
+                    });
+                }
+                else {
+                    overallSuccess = false;
+                    results.push({
+                        action: `${actionId}: ${action.description} (failed)`,
+                        success: false,
+                        output: prResult.error,
+                        timestamp: new Date(),
+                    });
+                }
                 continue;
             }
             logger.info('Executing remediation action', {
@@ -620,6 +700,7 @@ IMPORTANT: You MUST respond with the final JSON analysis format as specified in
                         success: false,
                         summary: 'Validation found remaining issues after remediation',
                     },
+                    pullRequest: pullRequestInfo,
                 };
                 return {
                     content: [
@@ -657,6 +738,7 @@ IMPORTANT: You MUST respond with the final JSON analysis format as specified in
                     success: true,
                     summary: 'Validation confirmed issue resolution',
                 },
+                pullRequest: pullRequestInfo,
             };
             const content = [
                 {
@@ -684,6 +766,66 @@ IMPORTANT: You MUST respond with the final JSON analysis format as specified in
         status: overallSuccess ? 'executed_successfully' : 'executed_with_errors',
         executionResults: results,
     });
+    const hasOnlyGitOps = executedCommandCount === 0 && pullRequestInfo !== undefined;
+    const prInfo = pullRequestInfo;
+    let nextSteps;
+    if (hasOnlyGitOps && prInfo) {
+        nextSteps = [
+            'Changes have been pushed to a Git branch for GitOps reconciliation:',
+            `  PR: ${prInfo.url}`,
+            `  Branch: ${prInfo.branch} → ${prInfo.baseBranch}`,
+            `  Files changed: ${prInfo.filesChanged.join(', ')}`,
+            '',
+            'Next steps:',
+            '  1. Review and merge the PR in your Git repository',
+            '  2. Wait for Argo CD/Flux to sync the changes',
+            '  3. Verify the issue is resolved after reconciliation',
+            '',
+            `You can verify the fix by running: remediate("Verify that ${finalAnalysis.analysis.rootCause.toLowerCase()} has been resolved")`,
+        ];
+    }
+    else if (overallSuccess) {
+        if (validationResult) {
+            nextSteps = [
+                'The following kubectl commands were executed to remediate the issue:',
+                ...finalAnalysis.remediation.actions
+                    .filter(a => a.command)
+                    .map((action, index) => {
+                    const resultIndex = finalAnalysis.remediation.actions.indexOf(action);
+                    return `  ${index + 1}. ${action.command} ${results[resultIndex]?.success ? '✓' : '✗'}`;
+                }),
+                'Automatic validation has been completed - see validation results above',
+                'Monitor your cluster to ensure the issue remains resolved',
+            ];
+        }
+        else {
+            nextSteps = [
+                'The following kubectl commands were executed to remediate the issue:',
+                ...finalAnalysis.remediation.actions
+                    .filter(a => a.command)
+                    .map((action, index) => {
+                    const resultIndex = finalAnalysis.remediation.actions.indexOf(action);
+                    return `  ${index + 1}. ${action.command} ${results[resultIndex]?.success ? '✓' : '✗'}`;
+                }),
+                `You can verify the fix by running: remediate("Verify that ${finalAnalysis.analysis.rootCause.toLowerCase()} has been resolved")`,
+                'Monitor your cluster to ensure the issue is fully resolved',
+            ];
+        }
+    }
+    else {
+        nextSteps = [
+            'The following kubectl commands were attempted:',
+            ...finalAnalysis.remediation.actions
+                .filter(a => a.command)
+                .map((action, index) => {
+                const resultIndex = finalAnalysis.remediation.actions.indexOf(action);
+                return `  ${index + 1}. ${action.command} ${results[resultIndex]?.success ? '✓' : '✗'}`;
+            }),
+            'Some remediation commands failed - check the results above',
+            'Review the error messages and address any underlying issues',
+            'You may need to run additional commands or investigate further',
+        ];
+    }
     const response = {
         status: overallSuccess ? 'success' : 'failed',
         sessionId: session.sessionId,
@@ -691,37 +833,20 @@ IMPORTANT: You MUST respond with the final JSON analysis format as specified in
         results: results,
         executedCommands: results.map(r => r.action),
         message: overallSuccess
-            ? `Successfully executed ${results.length} remediation actions`
+            ? hasOnlyGitOps
+                ? `Successfully created PR for ${results.length} GitOps remediation action(s)`
+                : `Successfully executed ${results.length} remediation actions`
             : `Executed ${results.length} actions with ${results.filter(r => !r.success).length} failures`,
         validation: validationResult,
         instructions: {
-            showExecutedCommands: true,
-            showActualKubectlCommands: true,
-            nextSteps: overallSuccess
-                ? validationResult
-                    ? [
-                        'The following kubectl commands were executed to remediate the issue:',
-                        ...finalAnalysis.remediation.actions.map((action, index) => `  ${index + 1}. ${action.command} ${results[index]?.success ? '✓' : '✗'}`),
-                        'Automatic validation has been completed - see validation results above',
-                        'Monitor your cluster to ensure the issue remains resolved',
-                    ]
-                    : [
-                        'The following kubectl commands were executed to remediate the issue:',
-                        ...finalAnalysis.remediation.actions.map((action, index) => `  ${index + 1}. ${action.command} ${results[index]?.success ? '✓' : '✗'}`),
-                        `You can verify the fix by running: remediate("Verify that ${finalAnalysis.analysis.rootCause.toLowerCase()} has been resolved")`,
-                        'Monitor your cluster to ensure the issue is fully resolved',
-                    ]
-                : [
-                    'The following kubectl commands were attempted:',
-                    ...finalAnalysis.remediation.actions.map((action, index) => `  ${index + 1}. ${action.command} ${results[index]?.success ? '✓' : '✗'}`),
-                    'Some remediation commands failed - check the results above',
-                    'Review the error messages and address any underlying issues',
-                    'You may need to run additional commands or investigate further',
-                ],
+            showExecutedCommands: !hasOnlyGitOps,
+            showActualKubectlCommands: !hasOnlyGitOps,
+            nextSteps,
         },
         investigation: finalAnalysis.investigation,
         analysis: finalAnalysis.analysis,
         remediation: finalAnalysis.remediation,
+        pullRequest: pullRequestInfo,
     };
     logger.info('Remediation execution completed', {
         requestId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vfarcic/dot-ai",
-  "version": "1.12.0",
+  "version": "1.13.0",
   "description": "AI-powered development productivity platform that enhances software development workflows through intelligent automation and AI-driven assistance",
   "mcpName": "io.github.vfarcic/dot-ai",
   "main": "dist/index.js",
@@ -107,7 +107,7 @@
     "vitest": "^3.2.4"
   },
   "dependencies": {
-    "@ai-sdk/alibaba": "^1.0.10",
+    "@ai-sdk/alibaba": "^1.0.13",
     "@ai-sdk/amazon-bedrock": "^4.0.77",
     "@ai-sdk/anthropic": "^3.0.58",
     "@ai-sdk/google": "^3.0.43",

package/prompts/remediate-system.md

@@ -65,6 +65,7 @@ Once investigation is complete, respond with ONLY this JSON format:
         "gitSource": {
           "repoURL": "source repository URL — only when resource is GitOps-managed",
           "branch": "branch name",
+          "repoPath": "relative path to cloned repo (as returned by git_clone) — required for GitOps remediation",
           "files": [
             {
               "path": "path relative to repo root",
@@ -104,8 +105,9 @@ Once investigation is complete, respond with ONLY this JSON format:
 After identifying the problematic resource, check whether it is managed by a GitOps controller (e.g., Argo CD, Flux).
 
 **When GitOps management is detected**:
-- Clone the source repo, navigate and read the manifests to find the file(s) that need changing
-- Include `gitSource` in your remediation actions with the repo URL, branch, and full corrected file contents for each file that needs modification
+- Clone the source repo and capture the local path for use as `repoPath` in the remediation actions
+- Navigate and read the manifests to find the file(s) that need changing
+- Include `gitSource` in your remediation actions with `repoPath`, `repoURL`, `branch`, and full corrected file contents for each file that needs modification
 
 **When GitOps management is NOT detected**:
 - Proceed with standard kubectl-based remediation
@@ -190,6 +192,7 @@ After identifying the problematic resource, check whether it is managed by a Git
         "gitSource": {
           "repoURL": "https://github.com/org/infra-repo.git",
           "branch": "main",
+          "repoPath": "session-abc123/org-infra-repo",
           "files": [
             {
               "path": "apps/production/deployment.yaml",