feat(worker): auto-fix a pull request when its CI checks fail (#321)

* feat(worker): let the PR checks failed trigger match every failing check

* feat(worker): coalesce one commit's failing check deliveries

* feat(worker): cap automatic fix runs per pull request and announce exhaustion

Author: outof-place

apps/dashboard/components/cockpit/flow-editor/config-fields.tsx

@@ -3717,6 +3717,16 @@ export function ConfigFields({
               onChange={(value) => onChange("params.checkNames", value ?? [])}
             />
           </ConfigField>
+          <ConfigField label="Ignored check names">
+            <ArrayTextarea
+              key={`${node.id}:ignoreCheckNames`}
+              value={node.params.ignoreCheckNames}
+              disabled={!canEdit}
+              mono
+              placeholder="lint"
+              onChange={(value) => onChange("params.ignoreCheckNames", value ?? [])}
+            />
+          </ConfigField>
           <ConfigField label="Trusted GitHub App slugs">
             <ArrayTextarea
               key={`${node.id}:githubAppSlugs`}
@@ -3737,9 +3747,21 @@ export function ConfigFields({
               onChange={(value) => onChange("params.gitlabPipelineSources", value)}
             />
           </ConfigField>
+          <ConfigField label="Max fix attempts per PR">
+            <NumberField
+              value={node.params.maxFixAttemptsPerPr}
+              min={1}
+              max={10}
+              disabled={!canEdit}
+              onChange={(v) => onChange("params.maxFixAttemptsPerPr", v)}
+            />
+          </ConfigField>
           <ConfigNote>
-            Events fail closed until an exact check name matches. GitHub defaults to the
-            github-actions App; GitLab defaults to merge-request pipelines.
+            Leave the check names empty to react to every failing check, or list names to
+            narrow it to those. GitHub defaults to the github-actions App; GitLab defaults to
+            merge-request pipelines. Ignored check names never start a run even when they
+            fail. Max fix attempts per PR caps how many automatic fix attempts one pull
+            request may receive before the loop stops.
           </ConfigNote>
           <TriggerRateLimitFields
             node={node}

apps/shared/contracts/workflow-graph.ts

@@ -159,8 +159,10 @@ export const BLOCK_PARAM_KEYS: Record<WorkflowBlockType, readonly string[]> = {
     "providers",
     "scope",
     "checkNames",
+    "ignoreCheckNames",
     "githubAppSlugs",
     "gitlabPipelineSources",
+    "maxFixAttemptsPerPr",
     "rateLimitMax",
     "rateLimitWindow",
   ],

apps/worker/drizzle/0053_pr_autofix_attempts.sql

@@ -0,0 +1,10 @@
+CREATE TABLE "pr_autofix_attempts" (
+	"definition_id" text NOT NULL,
+	"node_id" text NOT NULL,
+	"provider" text NOT NULL,
+	"repo_path" text NOT NULL,
+	"pr_number" integer NOT NULL,
+	"attempts" integer DEFAULT 1 NOT NULL,
+	"updated_at" timestamp with time zone NOT NULL,
+	CONSTRAINT "pr_autofix_attempts_pk" PRIMARY KEY("definition_id","node_id","provider","repo_path","pr_number")
+);