From bdcdaeeac0f6e21c62dbac9fd2065c52b928c1fb Mon Sep 17 00:00:00 2001
From: latte <latte@hiddenden.cafe>
Date: Sun, 11 Jan 2026 20:29:59 +0100
Subject: [PATCH] adding workflow

---
 .gitea/workflows/ai-chat.yml            | 61 +++++++++++++++
 .gitea/workflows/ai-codebase-review.yml | 58 +++++++++++++++
 .gitea/workflows/ai-comment-reply.yml   | 98 +++++++++++++++++++++++++
 .gitea/workflows/ai-issue-triage.yml    | 44 +++++++++++
 .gitea/workflows/ai-review.yml          | 53 +++++++++++++
 5 files changed, 314 insertions(+)
 create mode 100644 .gitea/workflows/ai-chat.yml
 create mode 100644 .gitea/workflows/ai-codebase-review.yml
 create mode 100644 .gitea/workflows/ai-comment-reply.yml
 create mode 100644 .gitea/workflows/ai-issue-triage.yml
 create mode 100644 .gitea/workflows/ai-review.yml

diff --git a/.gitea/workflows/ai-chat.yml b/.gitea/workflows/ai-chat.yml
new file mode 100644
index 0000000..19b7918
--- /dev/null
+++ b/.gitea/workflows/ai-chat.yml
@@ -0,0 +1,61 @@
+name: AI Chat (Bartender)
+
+# WORKFLOW ROUTING:
+# This workflow handles FREE-FORM questions/chat (no specific command)
+# Other workflows: ai-issue-triage.yml (@codebot triage), ai-comment-reply.yml (specific commands)
+# This is the FALLBACK for any @codebot mention that isn't a known command
+
+on:
+    issue_comment:
+        types: [created]
+
+# CUSTOMIZE YOUR BOT NAME:
+# Change '@codebot' in all conditions below to match your config.yml mention_prefix
+# Examples: '@bartender', '@uni', '@joey', '@codebot'
+
+jobs:
+    ai-chat:
+        # Only run if comment mentions the bot but NOT a specific command
+        # This prevents duplicate runs with ai-comment-reply.yml and ai-issue-triage.yml
+        # CRITICAL: Ignore bot's own comments to prevent infinite loops (bot username: Bartender)
+        if: |
+            github.event.comment.user.login != 'Bartender' &&
+            contains(github.event.comment.body, '@codebot') &&
+            !contains(github.event.comment.body, '@codebot triage') &&
+            !contains(github.event.comment.body, '@codebot help') &&
+            !contains(github.event.comment.body, '@codebot explain') &&
+            !contains(github.event.comment.body, '@codebot suggest') &&
+            !contains(github.event.comment.body, '@codebot security') &&
+            !contains(github.event.comment.body, '@codebot summarize') &&
+            !contains(github.event.comment.body, '@codebot changelog') &&
+            !contains(github.event.comment.body, '@codebot explain-diff') &&
+            !contains(github.event.comment.body, '@codebot review-again') &&
+            !contains(github.event.comment.body, '@codebot setup-labels')
+        runs-on: ubuntu-latest
+        steps:
+            - uses: actions/checkout@v4
+
+            - uses: actions/checkout@v4
+              with:
+                  repository: Hiddenden/openrabbit
+                  path: .ai-review
+                  token: ${{ secrets.AI_REVIEW_TOKEN }}
+
+            - uses: actions/setup-python@v5
+              with:
+                  python-version: "3.11"
+
+            - run: pip install requests pyyaml
+
+            - name: Run AI Chat
+              env:
+                  AI_REVIEW_TOKEN: ${{ secrets.AI_REVIEW_TOKEN }}
+                  AI_REVIEW_REPO: ${{ gitea.repository }}
+                  AI_REVIEW_API_URL: https://git.hiddenden.cafe/api/v1
+                  OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+                  OPENROUTER_API_KEY: ${{ secrets.OPENROUTER_API_KEY }}
+                  OLLAMA_HOST: ${{ secrets.OLLAMA_HOST }}
+                  SEARXNG_URL: ${{ secrets.SEARXNG_URL }}
+              run: |
+                  cd .ai-review/tools/ai-review
+                  python main.py comment ${{ gitea.repository }} ${{ gitea.event.issue.number }} "${{ gitea.event.comment.body }}"
diff --git a/.gitea/workflows/ai-codebase-review.yml b/.gitea/workflows/ai-codebase-review.yml
new file mode 100644
index 0000000..2269688
--- /dev/null
+++ b/.gitea/workflows/ai-codebase-review.yml
@@ -0,0 +1,58 @@
+name: AI Codebase Quality Review
+
+on:
+  # Weekly scheduled run
+  # schedule:
+  #   - cron: "0 0 * * 0" # Every Sunday at midnight
+
+  # Manual trigger
+  workflow_dispatch:
+    inputs:
+      report_type:
+        description: "Type of report to generate"
+        required: false
+        default: "full"
+        type: choice
+        options:
+          - full
+          - security
+          - quick
+
+jobs:
+  ai-codebase-review:
+    runs-on: ubuntu-latest
+
+    steps:
+      # Checkout the repository
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0 # Full history for analysis
+
+      # Checkout central AI tooling
+      - uses: actions/checkout@v4
+        with:
+          repository: Hiddenden/openrabbit
+          path: .ai-review
+          token: ${{ secrets.AI_REVIEW_TOKEN }}
+
+      # Setup Python
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      # Install dependencies
+      - run: pip install requests pyyaml
+
+      # Run AI codebase analysis
+      - name: Run AI Codebase Analysis
+        env:
+          AI_REVIEW_TOKEN: ${{ secrets.AI_REVIEW_TOKEN }}
+          AI_REVIEW_REPO: ${{ gitea.repository }}
+          AI_REVIEW_API_URL: https://git.hiddenden.cafe/api/v1
+
+          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+          OPENROUTER_API_KEY: ${{ secrets.OPENROUTER_API_KEY }}
+          OLLAMA_HOST: ${{ secrets.OLLAMA_HOST }}
+        run: |
+          cd .ai-review/tools/ai-review
+          python main.py codebase ${{ gitea.repository }}
diff --git a/.gitea/workflows/ai-comment-reply.yml b/.gitea/workflows/ai-comment-reply.yml
new file mode 100644
index 0000000..11f70c3
--- /dev/null
+++ b/.gitea/workflows/ai-comment-reply.yml
@@ -0,0 +1,98 @@
+name: AI Comment Reply
+
+# WORKFLOW ROUTING:
+# This workflow handles SPECIFIC commands: help, explain, suggest, security, summarize, changelog, explain-diff, review-again, setup-labels
+# Other workflows: ai-issue-triage.yml (@codebot triage), ai-chat.yml (free-form questions)
+
+on:
+  issue_comment:
+    types: [created]
+
+# CUSTOMIZE YOUR BOT NAME:
+# Change '@codebot' in the 'if' condition below to match your config.yml mention_prefix
+# Examples: '@bartender', '@uni', '@joey', '@codebot'
+
+jobs:
+  ai-reply:
+    runs-on: ubuntu-latest
+    # Only run for specific commands (not free-form chat or triage)
+    # This prevents duplicate runs with ai-chat.yml and ai-issue-triage.yml
+    # CRITICAL: Ignore bot's own comments to prevent infinite loops (bot username: Bartender)
+    if: |
+      github.event.comment.user.login != 'Bartender' &&
+      (contains(github.event.comment.body, '@codebot help') ||
+       contains(github.event.comment.body, '@codebot explain') ||
+       contains(github.event.comment.body, '@codebot suggest') ||
+       contains(github.event.comment.body, '@codebot security') ||
+       contains(github.event.comment.body, '@codebot summarize') ||
+       contains(github.event.comment.body, '@codebot changelog') ||
+       contains(github.event.comment.body, '@codebot explain-diff') ||
+       contains(github.event.comment.body, '@codebot review-again') ||
+       contains(github.event.comment.body, '@codebot setup-labels'))
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/checkout@v4
+        with:
+          repository: Hiddenden/openrabbit
+          path: .ai-review
+          token: ${{ secrets.AI_REVIEW_TOKEN }}
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - run: pip install requests pyyaml
+
+      - name: Run AI Comment Response
+        env:
+          AI_REVIEW_TOKEN: ${{ secrets.AI_REVIEW_TOKEN }}
+          AI_REVIEW_API_URL: https://git.hiddenden.cafe/api/v1
+          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+          OPENROUTER_API_KEY: ${{ secrets.OPENROUTER_API_KEY }}
+          OLLAMA_HOST: ${{ secrets.OLLAMA_HOST }}
+        run: |
+          cd .ai-review/tools/ai-review
+
+          # Determine if this is a PR or issue comment
+          IS_PR="${{ gitea.event.issue.pull_request != null }}"
+          REPO="${{ gitea.repository }}"
+          ISSUE_NUMBER="${{ gitea.event.issue.number }}"
+
+          # Validate inputs
+          if [ -z "$REPO" ] || [ -z "$ISSUE_NUMBER" ]; then
+              echo "Error: Missing required parameters"
+              exit 1
+          fi
+
+          # Validate repository format (owner/repo)
+          if ! echo "$REPO" | grep -qE '^[a-zA-Z0-9_-]+/[a-zA-Z0-9_-]+$'; then
+              echo "Error: Invalid repository format: $REPO"
+              exit 1
+          fi
+
+          if [ "$IS_PR" = "true" ]; then
+              # This is a PR comment - use safe dispatch with minimal event data
+              # Build minimal event payload (does not include sensitive user data)
+              EVENT_DATA=$(cat <<EOF
+          {
+              "action": "created",
+              "issue": {
+                  "number": ${{ gitea.event.issue.number }},
+                  "pull_request": {}
+              },
+              "comment": {
+                  "id": ${{ gitea.event.comment.id }},
+                  "body": $(echo '${{ gitea.event.comment.body }}' | jq -Rs .)
+              }
+          }
+          EOF
+          )
+
+              # Use safe dispatch utility
+              python utils/safe_dispatch.py issue_comment "$REPO" "$EVENT_DATA"
+          else
+              # This is an issue comment - use the comment command
+              COMMENT_BODY='${{ gitea.event.comment.body }}'
+              python main.py comment "$REPO" "$ISSUE_NUMBER" "$COMMENT_BODY"
+          fi
diff --git a/.gitea/workflows/ai-issue-triage.yml b/.gitea/workflows/ai-issue-triage.yml
new file mode 100644
index 0000000..d4f4b72
--- /dev/null
+++ b/.gitea/workflows/ai-issue-triage.yml
@@ -0,0 +1,44 @@
+name: AI Issue Triage
+
+# WORKFLOW ROUTING:
+# This workflow handles ONLY the 'triage' command
+# Other workflows: ai-comment-reply.yml (specific commands), ai-chat.yml (free-form questions)
+
+on:
+  issue_comment:
+    types: [created]
+
+jobs:
+  ai-triage:
+    runs-on: ubuntu-latest
+    # Only run if comment contains @codebot triage
+    # CRITICAL: Ignore bot's own comments to prevent infinite loops (bot username: Bartender)
+    if: |
+      github.event.comment.user.login != 'Bartender' &&
+      contains(github.event.comment.body, '@codebot triage')
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/checkout@v4
+        with:
+          repository: Hiddenden/openrabbit
+          path: .ai-review
+          token: ${{ secrets.AI_REVIEW_TOKEN }}
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - run: pip install requests pyyaml
+
+      - name: Run AI Issue Triage
+        env:
+          AI_REVIEW_TOKEN: ${{ secrets.AI_REVIEW_TOKEN }}
+          AI_REVIEW_REPO: ${{ gitea.repository }}
+          AI_REVIEW_API_URL: https://git.hiddenden.cafe/api/v1
+          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+          OPENROUTER_API_KEY: ${{ secrets.OPENROUTER_API_KEY }}
+          OLLAMA_HOST: ${{ secrets.OLLAMA_HOST }}
+        run: |
+          cd .ai-review/tools/ai-review
+          python main.py issue ${{ gitea.repository }} ${{ gitea.event.issue.number }}
diff --git a/.gitea/workflows/ai-review.yml b/.gitea/workflows/ai-review.yml
new file mode 100644
index 0000000..7b224ff
--- /dev/null
+++ b/.gitea/workflows/ai-review.yml
@@ -0,0 +1,53 @@
+name: Enterprise AI Code Review
+
+on:
+  pull_request:
+    types: [opened, synchronize]
+
+jobs:
+  ai-review:
+    runs-on: ubuntu-latest
+
+    steps:
+      # Checkout the PR repository
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      # Checkout the CENTRAL AI tooling repo
+      - uses: actions/checkout@v4
+        with:
+          repository: Hiddenden/openrabbit
+          path: .ai-review
+          token: ${{ secrets.AI_REVIEW_TOKEN }}
+
+      # Setup Python
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      # Install dependencies
+      - run: pip install requests pyyaml
+
+      # Run the AI review
+      - name: Run Enterprise AI Review
+        env:
+          AI_REVIEW_TOKEN: ${{ secrets.AI_REVIEW_TOKEN }}
+          AI_REVIEW_REPO: ${{ gitea.repository }}
+          AI_REVIEW_API_URL: https://git.hiddenden.cafe/api/v1
+          AI_REVIEW_PR_NUMBER: ${{ gitea.event.pull_request.number }}
+
+          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+          OPENROUTER_API_KEY: ${{ secrets.OPENROUTER_API_KEY }}
+          OLLAMA_HOST: ${{ secrets.OLLAMA_HOST }}
+        run: |
+          cd .ai-review/tools/ai-review
+          python main.py pr ${{ gitea.repository }} ${{ gitea.event.pull_request.number }} \
+            --title "${{ gitea.event.pull_request.title }}"
+
+      # Fail CI on HIGH severity (optional)
+      - name: Check Review Result
+        if: failure()
+        run: |
+          echo "AI Review found HIGH severity issues. Please address them before merging."
+          exit 1