gitpadi 2.0.7 → 2.1.1

package/src/gitlab-agents/mr-review-agent.ts

@@ -0,0 +1,231 @@
+#!/usr/bin/env node
+// gitlab-agents/mr-review-agent.ts
+//
+// GitLab Duo External Agent — AI-powered Merge Request Review
+//
+// Triggered when assigned as reviewer on a GitLab MR, or when someone
+// comments "@gitpadi review" on an MR.
+//
+// Uses Claude to provide a detailed, constructive code review covering:
+//   - Code quality and maintainability
+//   - Security concerns
+//   - Test coverage
+//   - Alignment with issue description
+//   - Specific line-level suggestions
+
+import Anthropic from '@anthropic-ai/sdk';
+
+const GITLAB_TOKEN = process.env.GITLAB_TOKEN || '';
+const GITLAB_HOST = (process.env.GITLAB_HOST || 'https://gitlab.com').replace(/\/$/, '');
+const GATEWAY_TOKEN = process.env.AI_FLOW_AI_GATEWAY_TOKEN || '';
+
+const anthropic = GATEWAY_TOKEN
+    ? new Anthropic({ apiKey: GATEWAY_TOKEN, baseURL: `${GITLAB_HOST}/api/v4/ai/llm/v1` })
+    : new Anthropic({ apiKey: process.env.ANTHROPIC_API_KEY });
+
+const MR_REVIEW_MARKER = '<!-- gitpadi-mr-review -->';
+
+async function glFetch<T>(method: string, path: string, body?: unknown): Promise<T> {
+    const res = await fetch(`${GITLAB_HOST}/api/v4${path}`, {
+        method,
+        headers: { 'PRIVATE-TOKEN': GITLAB_TOKEN, 'Content-Type': 'application/json' },
+        body: body ? JSON.stringify(body) : undefined,
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`GitLab ${method} ${path} → ${res.status}: ${text}`);
+    }
+    return res.json() as Promise<T>;
+}
+
+async function postOrUpdateMRNote(projectId: number, mrIid: number, body: string): Promise<void> {
+    // Check for existing review note to update
+    const notes = await glFetch<Array<{ id: number; body: string; author: { username: string } }>>(
+        'GET', `/projects/${projectId}/merge_requests/${mrIid}/notes?per_page=100`
+    );
+    const existing = notes.find(n => n.body?.includes(MR_REVIEW_MARKER));
+
+    if (existing) {
+        await glFetch('PUT', `/projects/${projectId}/merge_requests/${mrIid}/notes/${existing.id}`, { body });
+        console.log('✅ Updated existing review note');
+    } else {
+        await glFetch('POST', `/projects/${projectId}/merge_requests/${mrIid}/notes`, { body });
+        console.log('✅ Posted new review note');
+    }
+}
+
+async function main(): Promise<void> {
+    console.log('\n🤖 GitPadi MR Review Agent\n');
+
+    const contextRaw = process.env.AI_FLOW_CONTEXT || '{}';
+    let context: any;
+    try { context = JSON.parse(contextRaw); } catch { context = {}; }
+
+    const {
+        project_id,
+        project_path = '',
+        mr_iid,
+        title = '',
+        description = '',
+        source_branch = '',
+        target_branch = 'main',
+        author = '',
+        changes = [],
+        notes = [],
+    } = context;
+
+    if (!mr_iid) { console.log('⏭️ No MR context — skipping.'); return; }
+
+    console.log(`  Project: ${project_path}`);
+    console.log(`  MR:      !${mr_iid} — ${title}`);
+    console.log(`  Author:  @${author}`);
+    console.log(`  Files:   ${changes.length} changed\n`);
+
+    // Build a diff summary for Claude (cap at ~4000 chars to stay within context)
+    const diffSummary = changes
+        .slice(0, 20)
+        .map((c: any) => {
+            const diffLines = (c.diff || '').split('\n').slice(0, 40).join('\n');
+            return `File: ${c.new_path}\n${diffLines}`;
+        })
+        .join('\n\n---\n\n')
+        .substring(0, 4000);
+
+    const sensitivePatterns = ['.env', 'secret', 'password', 'credential', '.key', '.pem'];
+    const sensitiveFiles = changes
+        .filter((c: any) => sensitivePatterns.some(p => c.new_path?.toLowerCase().includes(p)))
+        .map((c: any) => c.new_path);
+
+    const testFiles = changes.filter((c: any) =>
+        c.new_path?.includes('test') || c.new_path?.includes('spec')
+    );
+    const srcFiles = changes.filter((c: any) =>
+        !c.new_path?.includes('test') && !c.new_path?.includes('spec') &&
+        /\.(ts|js|py|rs|go|java|rb|php)$/.test(c.new_path || '')
+    );
+
+    const linkedIssues = description?.match(/(fix(es|ed)?|clos(e[sd]?)|resolv(e[sd]?))\s+#\d+/gi) || [];
+    const totalLines = changes.reduce((sum: number, c: any) => {
+        const adds = (c.diff?.match(/^\+/gm) || []).length;
+        const dels = (c.diff?.match(/^-/gm) || []).length;
+        return sum + adds + dels;
+    }, 0);
+
+    // Get Claude's analysis
+    const prompt = `You are GitPadi, an expert AI code reviewer integrated with GitLab.
+
+Review this Merge Request:
+- Title: "${title}"
+- Author: @${author}
+- Branch: ${source_branch} → ${target_branch}
+- Description: ${description?.substring(0, 500) || 'None provided'}
+- Files changed: ${changes.length} (${totalLines} lines)
+- Test files: ${testFiles.length}
+- Source files: ${srcFiles.length}
+- Linked issues: ${linkedIssues.join(', ') || 'None'}
+${sensitiveFiles.length ? `- ⚠️ SENSITIVE FILES DETECTED: ${sensitiveFiles.join(', ')}` : ''}
+
+Code changes (truncated):
+\`\`\`diff
+${diffSummary || 'No diff available'}
+\`\`\`
+
+Provide a thorough, constructive code review. Be specific, actionable, and encouraging.
+Format your response as JSON:
+{
+  "verdict": "APPROVE|REQUEST_CHANGES|COMMENT",
+  "summary": "2-3 sentence overall assessment",
+  "strengths": ["specific strength 1", "specific strength 2"],
+  "concerns": [
+    { "severity": "critical|warning|suggestion", "file": "filename or null", "issue": "description", "suggestion": "how to fix" }
+  ],
+  "security": { "clean": true/false, "issues": ["issue1"] },
+  "testCoverage": { "adequate": true/false, "comment": "observation" },
+  "overallScore": 0-100
+}`;
+
+    let review: any;
+    try {
+        const response = await anthropic.messages.create({
+            model: 'claude-sonnet-4-20250514',
+            max_tokens: 2048,
+            messages: [{ role: 'user', content: prompt }],
+        });
+
+        const text = response.content[0].type === 'text' ? response.content[0].text : '';
+        const jsonMatch = text.match(/\{[\s\S]*\}/);
+        if (!jsonMatch) throw new Error('No JSON in Claude response');
+        review = JSON.parse(jsonMatch[0]);
+    } catch (e: any) {
+        console.error(`❌ Claude review failed: ${e.message}`);
+        process.exit(1);
+    }
+
+    // Build the GitLab comment
+    const verdictIcon = review.verdict === 'APPROVE' ? '✅' : review.verdict === 'REQUEST_CHANGES' ? '❌' : '💬';
+    const scoreEmoji = review.overallScore >= 80 ? '🟢' : review.overallScore >= 60 ? '🟡' : '🔴';
+
+    let comment = `## 🤖 GitPadi AI Code Review\n\n`;
+    comment += `**MR:** !${mr_iid} — ${title}\n`;
+    comment += `**Verdict:** ${verdictIcon} ${review.verdict?.replace('_', ' ')} | **Score:** ${scoreEmoji} ${review.overallScore}/100\n\n`;
+
+    comment += `### Summary\n\n${review.summary}\n\n`;
+
+    if (review.strengths?.length) {
+        comment += `### Strengths\n\n`;
+        review.strengths.forEach((s: string) => { comment += `- ✅ ${s}\n`; });
+        comment += '\n';
+    }
+
+    if (review.concerns?.length) {
+        comment += `### Concerns\n\n`;
+        const critical = review.concerns.filter((c: any) => c.severity === 'critical');
+        const warnings = review.concerns.filter((c: any) => c.severity === 'warning');
+        const suggestions = review.concerns.filter((c: any) => c.severity === 'suggestion');
+
+        const renderConcerns = (items: any[], icon: string) =>
+            items.forEach((c: any) => {
+                comment += `${icon} **${c.file ? `\`${c.file}\`` : 'General'}:** ${c.issue}\n`;
+                if (c.suggestion) comment += `   > 💡 ${c.suggestion}\n`;
+                comment += '\n';
+            });
+
+        if (critical.length) { comment += `**Critical:**\n`; renderConcerns(critical, '🔴'); }
+        if (warnings.length) { comment += `**Warnings:**\n`; renderConcerns(warnings, '⚠️'); }
+        if (suggestions.length) { comment += `**Suggestions:**\n`; renderConcerns(suggestions, '💡'); }
+    }
+
+    if (sensitiveFiles.length) {
+        comment += `### ⚠️ Security Alert\n\n`;
+        comment += `The following files may contain sensitive data:\n`;
+        sensitiveFiles.forEach((f: string) => { comment += `- \`${f}\`\n`; });
+        comment += `\nPlease ensure no secrets are committed.\n\n`;
+    }
+
+    if (review.testCoverage) {
+        comment += `### Test Coverage\n\n`;
+        comment += `${review.testCoverage.adequate ? '✅' : '⚠️'} ${review.testCoverage.comment}\n\n`;
+    }
+
+    comment += `### Quick Stats\n\n`;
+    comment += `| Metric | Value |\n|--------|-------|\n`;
+    comment += `| Files changed | ${changes.length} |\n`;
+    comment += `| Lines changed | ~${totalLines} |\n`;
+    comment += `| Test files | ${testFiles.length} |\n`;
+    comment += `| Linked issues | ${linkedIssues.length} |\n`;
+
+    comment += `\n---\n_🤖 Reviewed by [GitPadi](https://github.com/Netwalls/contributor-agent) using Claude ${review.verdict === 'APPROVE' ? '✅' : ''}_\n\n${MR_REVIEW_MARKER}`;
+
+    await postOrUpdateMRNote(project_id, mr_iid, comment);
+
+    // Exit with error code if CI-blocking issues found
+    if (review.verdict === 'REQUEST_CHANGES' && review.concerns?.some((c: any) => c.severity === 'critical')) {
+        console.log('❌ Critical issues found — blocking merge.');
+        process.exit(1);
+    }
+
+    console.log(`\n  Verdict: ${review.verdict}`);
+    console.log(`  Score:   ${review.overallScore}/100\n`);
+}
+
+main().catch(e => { console.error('Fatal:', e.message); process.exit(1); });

package/src/gitlab-agents/reminder-agent.ts

@@ -0,0 +1,203 @@
+#!/usr/bin/env node
+// gitlab-agents/reminder-agent.ts
+//
+// GitLab Duo External Agent — Escalating Contributor Reminders
+//
+// Runs on a schedule (e.g. daily cron). Finds stale open MRs, determines
+// escalation tier, and posts a progressively urgent reminder. Auto-unassigns
+// at 72h if no activity.
+//
+// Escalation:
+//   24h — gentle reminder
+//   48h — warning with context
+//   72h — final notice + auto-unassigns from issue
+
+import Anthropic from '@anthropic-ai/sdk';
+
+const GITLAB_TOKEN = process.env.GITLAB_TOKEN || '';
+const GITLAB_HOST = (process.env.GITLAB_HOST || 'https://gitlab.com').replace(/\/$/, '');
+const GATEWAY_TOKEN = process.env.AI_FLOW_AI_GATEWAY_TOKEN || '';
+const PROJECT_PATH = process.env.GITLAB_PROJECT_PATH || '';
+
+const anthropic = GATEWAY_TOKEN
+    ? new Anthropic({ apiKey: GATEWAY_TOKEN, baseURL: `${GITLAB_HOST}/api/v4/ai/llm/v1` })
+    : new Anthropic({ apiKey: process.env.ANTHROPIC_API_KEY });
+
+const REMINDER_MARKERS = {
+    h24: '<!-- gitpadi-reminder-24h -->',
+    h48: '<!-- gitpadi-reminder-48h -->',
+    h72: '<!-- gitpadi-reminder-72h -->',
+};
+
+async function glFetch<T>(method: string, path: string, body?: unknown): Promise<T> {
+    const res = await fetch(`${GITLAB_HOST}/api/v4${path}`, {
+        method,
+        headers: { 'PRIVATE-TOKEN': GITLAB_TOKEN, 'Content-Type': 'application/json' },
+        body: body ? JSON.stringify(body) : undefined,
+    });
+    if (!res.ok) throw new Error(`GitLab ${method} ${path} → ${res.status}`);
+    return res.json() as Promise<T>;
+}
+
+function hoursAgo(dateStr: string): number {
+    return (Date.now() - new Date(dateStr).getTime()) / (1000 * 60 * 60);
+}
+
+async function generateReminderMessage(tier: '24h' | '48h' | '72h', context: {
+    mrTitle: string;
+    author: string;
+    hoursStale: number;
+    branchName: string;
+    linkedIssue?: string;
+}): Promise<string> {
+    const tierDescriptions = {
+        '24h': 'gentle first reminder — friendly and encouraging',
+        '48h': 'second reminder — more urgent but still supportive, mention help is available',
+        '72h': 'final notice — professional but firm, this will be unassigned',
+    };
+
+    const prompt = `You are GitPadi, a friendly contributor management bot on GitLab.
+
+Write a ${tierDescriptions[tier]} for a stale Merge Request:
+- MR Title: "${context.mrTitle}"
+- Author: @${context.author}
+- Hours since last activity: ${Math.round(context.hoursStale)}
+- Branch: ${context.branchName}
+${context.linkedIssue ? `- Linked issue: ${context.linkedIssue}` : ''}
+
+Requirements:
+- Keep it under 100 words
+- Be human, warm, and specific to the situation
+- ${tier === '72h' ? 'Mention this is the final notice and the issue will be unassigned' : 'Do NOT mention unassignment'}
+- Start with a relevant emoji
+- Do NOT use generic corporate language
+
+Return just the message text, no JSON, no explanation.`;
+
+    try {
+        const response = await anthropic.messages.create({
+            model: 'claude-haiku-4-5-20251001',
+            max_tokens: 256,
+            messages: [{ role: 'user', content: prompt }],
+        });
+        return response.content[0].type === 'text' ? response.content[0].text.trim() : getFallbackMessage(tier, context.author);
+    } catch {
+        return getFallbackMessage(tier, context.author);
+    }
+}
+
+function getFallbackMessage(tier: '24h' | '48h' | '72h', author: string): string {
+    const messages = {
+        '24h': `👋 @${author} — just a friendly nudge! Your MR has been open for about 24 hours. Any updates or blockers we can help with?`,
+        '48h': `⚠️ @${author} — your MR has been idle for 48 hours. If you're blocked or need help, please comment so the team can assist. Otherwise, please push an update!`,
+        '72h': `🚨 @${author} — final notice. This MR has been inactive for 72 hours. We'll need to unassign the linked issue to allow other contributors to pick it up. Please comment if you're still working on this.`,
+    };
+    return messages[tier];
+}
+
+interface MR {
+    iid: number;
+    title: string;
+    author: { username: string };
+    source_branch: string;
+    updated_at: string;
+    draft: boolean;
+    description: string | null;
+    project_id: number;
+    assignees?: Array<{ id: number; username: string }>;
+}
+
+async function processMR(mr: MR, projectId: number): Promise<void> {
+    const hoursStale = hoursAgo(mr.updated_at);
+
+    // Skip drafts — they're not ready
+    if (mr.draft) {
+        console.log(`  ⏭️ !${mr.iid} — Draft, skipping`);
+        return;
+    }
+
+    // Determine escalation tier
+    let tier: '24h' | '48h' | '72h' | null = null;
+    if (hoursStale >= 72) tier = '72h';
+    else if (hoursStale >= 48) tier = '48h';
+    else if (hoursStale >= 24) tier = '24h';
+    else return; // Not stale enough
+
+    // Check for existing reminders
+    const notes = await glFetch<Array<{ body: string }>>(
+        'GET', `/projects/${projectId}/merge_requests/${mr.iid}/notes?per_page=100`
+    );
+
+    const hasMarker = (marker: string) => notes.some(n => n.body?.includes(marker));
+
+    // Don't double-post the same tier
+    if (tier === '24h' && hasMarker(REMINDER_MARKERS.h24)) return;
+    if (tier === '48h' && hasMarker(REMINDER_MARKERS.h48)) return;
+    if (tier === '72h' && hasMarker(REMINDER_MARKERS.h72)) return;
+
+    // Detect linked issue from description
+    const issueMatch = mr.description?.match(/(?:fixes|closes|resolves)\s+#(\d+)/i);
+    const linkedIssue = issueMatch ? `#${issueMatch[1]}` : undefined;
+
+    console.log(`  📬 MR !${mr.iid} — Tier ${tier} (${Math.round(hoursStale)}h stale)`);
+
+    const message = await generateReminderMessage(tier, {
+        mrTitle: mr.title,
+        author: mr.author.username,
+        hoursStale,
+        branchName: mr.source_branch,
+        linkedIssue,
+    });
+
+    // Post reminder
+    const body = `${message}\n\n---\n_⏰ GitPadi Reminder — ${tier} | [Dismiss by pushing a commit](https://github.com/Netwalls/contributor-agent)_\n\n${REMINDER_MARKERS[`h${tier.replace('h', '')}` as keyof typeof REMINDER_MARKERS]}`;
+    await glFetch('POST', `/projects/${projectId}/merge_requests/${mr.iid}/notes`, { body });
+
+    // Auto-unassign at 72h
+    if (tier === '72h' && linkedIssue) {
+        const issueNum = parseInt(issueMatch![1]);
+        try {
+            await glFetch('PUT', `/projects/${projectId}/issues/${issueNum}`, { assignee_ids: [] });
+            console.log(`    ✓ Unassigned issue ${linkedIssue}`);
+
+            // Also post on the issue
+            await glFetch('POST', `/projects/${projectId}/issues/${issueNum}/notes`, {
+                body: `⏰ **GitPadi:** @${mr.author.username}'s MR !${mr.iid} has been inactive for 72 hours. The issue has been unassigned and is now open for other contributors.\n\n<!-- gitpadi-unassign -->`,
+            });
+        } catch (e: any) {
+            console.log(`    ⚠️ Could not unassign issue: ${e.message}`);
+        }
+    }
+}
+
+async function main(): Promise<void> {
+    console.log('\n🤖 GitPadi Reminder Agent\n');
+
+    if (!PROJECT_PATH) {
+        console.error('❌ GITLAB_PROJECT_PATH required (e.g. "mygroup/myproject")');
+        process.exit(1);
+    }
+
+    const encodedPath = encodeURIComponent(PROJECT_PATH);
+    const project = await glFetch<{ id: number; path_with_namespace: string }>(`GET`, `/projects/${encodedPath}`);
+
+    console.log(`  Project: ${project.path_with_namespace}\n`);
+
+    // Get all open MRs
+    const mrs = await glFetch<MR[]>('GET', `/projects/${project.id}/merge_requests?state=opened&per_page=100`);
+    console.log(`  Found ${mrs.length} open MR(s)\n`);
+
+    let reminded = 0;
+    for (const mr of mrs) {
+        try {
+            await processMR(mr, project.id);
+            reminded++;
+        } catch (e: any) {
+            console.log(`  ⚠️ Error processing MR !${mr.iid}: ${e.message}`);
+        }
+    }
+
+    console.log(`\n✅ Reminder cycle complete — ${reminded} MR(s) processed`);
+}
+
+main().catch(e => { console.error('Fatal:', e.message); process.exit(1); });