feat(autopilot): PR Dependency Graph Resolver with tier labelling by Copilot · Pull Request #185 · labgadget015-dotcom/autonomous-github-agent

Copilot · 2026-07-04T06:35:47Z

DRC agent recommended building a dependency chain resolver to surface PR blocking relationships across the three active repos. This adds autopilot/dependency_graph.py implementing the full pipeline.

Changes

`.github/PULL_REQUEST_TEMPLATE.md`

Added a "Dependencies" section with Depends on #X / Depends on owner/repo#X syntax — the structured input the resolver reads

`autopilot/dependency_graph.py`

Regex pre-pass — extracts Depends on #X patterns (case-insensitive, hyphen/underscore variants) at zero API cost; LLM only called when regex finds nothing
LLM extraction — claude-3-5-haiku-20241022 with enforced JSON schema: {pr_id, repo, depends_on[], confidence_score}; skipped if confidence_score < 0.5
NetworkX DAG — edge A → B = "A depends on B"; two-pass build (nodes first, then edges); cycle detection + breaking
Tier assignment via in/out degree:
- tier-0-blocker — has in-edges (others depend on it)
- tier-1-dependent — has out-edges only (depends on others)
- tier-2-leaf — isolated (no edges)
Label management — creates labels if absent, removes stale tier labels before applying new one
Dry-run by default; ENABLE_LIVE_MODE=true to write; max_llm_calls budget cap
Scoped to 3 active repos: autonomous-github-agent, ai-automation-engine, github-multi-agent-system
CLI: python autopilot/dependency_graph.py [--live] [--max-llm-calls N] [--no-llm]

`requirements.txt`

Added networkx>=3.0

`tests/unit/test_dependency_graph.py`

46 unit tests covering regex extraction, LLM extraction (including fallback/fence-stripping), DAG construction, tier assignment, label application (dry-run + live), cycle breaking, and run() orchestration

# Example: regex picks up the dependency, no LLM call needed
body = "Depends on #42\nDepends on owner/repo#7"
extract_deps_regex(body)  # → [42, 7]

# Tier result for A → B → C:
#   A: tier-1-dependent  (depends on B, nobody depends on A)
#   B: tier-0-blocker    (A depends on it)
#   C: tier-0-blocker    (B depends on it)

labgadget015-dotcom · 2026-07-04T06:39:19Z

🤖 DRC Agent Analysis

Recommendation: 🟠 P1 IMPORTANT

Summary: Hybrid Regex-LLM DAG Engine with Tier Labelling (Dreamer ID 3, Realist recommended)

Next steps:

Step 1: Pin dependencies - add networkx>=3.0,<4.0 and anthropic>=0.25,<1.0 to requirements.txt with exact version bounds to prevent drift
Step 2: Implement Phase 1 MVP - regex-only DependencyGraphBuilder in autopilot/dependency_graph.py with cycle detection and tier labelling via nx.topological_generations(); ship and validate against real issue corpus before adding LLM layer
Step 3: Add llm_cache.py with SHA256 content-hash keying and TTL-based invalidation before wiring up Claude-haiku escalation to prevent runaway API costs
Step 4: Implement LLM escalation with conservative keyword trigger list and confidence >= 0.7 filter; log escalation rate to a local counter for first-week cost monitoring
Step 5: Write tests/unit/test_dependency_graph.py covering all 6 cases specified in Realist Step 11 before merging to main; use pytest-mock to stub Anthropic API calls

Strategic fit: Consulting: high · Product: high · Tech debt: reduces

Analysed by GadgetLab DRC Agent (Dreamer → Realist → Critic) · Run run_1783147066901

…yser - Update PR template with mandatory 'Depends on' field - Add networkx>=3.0 to requirements.txt - Add autopilot/dependency_graph.py with: - Regex pre-pass for 'Depends on #X' patterns - LLM (claude-haiku) extraction with structured JSON schema - NetworkX DAG + topological sort - Tier labels: tier-0-blocker, tier-1-dependent, tier-2-leaf - Targets 3 active repos (autonomous-github-agent, ai-automation-engine, github-multi-agent-system) - Dry-run by default; live mode via ENABLE_LIVE_MODE=true - CLI entry point - Add tests/unit/test_dependency_graph.py (46 tests, all passing) Closes #183

…tests

labgadget015-dotcom · 2026-07-04T06:44:14Z

🤖 DRC Agent Analysis

Recommendation: 🟠 P1 IMPORTANT

Summary: BugHunterAgent as Self-Validating Claude Tool-Use Loop (Dreamer ID 2) - recommended by REALIST as primary implementation path

Next steps:

Step 1: Implement Solution 1 (GitHub Actions Matrix Parallel Validator) first - 6h investment unblocks PR feat(autopilot): PR Dependency Graph Resolver with tier labelling #185 immediately with zero risk and establishes the CI foundation BugHunterAgent will run within
Step 2: Once Matrix Validator is green on PR feat(autopilot): PR Dependency Graph Resolver with tier labelling #185, begin BugHunterAgent implementation starting with autopilot/bug_hunter_agent.py - pin anthropic SDK version in pyproject.toml before writing any code
Step 3: Implement all 4 subprocess tool wrappers with timeout=600 and structured dict returns before writing the agent loop - test each tool wrapper independently with real subprocess calls
Step 4: Build agent loop with max 5 iterations and COMMENT-only PR review mode (no REQUEST_CHANGES) for initial deployment to prevent false-positive merge blocks
Step 5: Add token cost guard logging to GitHub Actions job summary and set anomaly threshold at 50k tokens per run

Strategic fit: Consulting: high · Product: high · Tech debt: neutral

Analysed by GadgetLab DRC Agent (Dreamer → Realist → Critic) · Run run_1783147356973

github-actions · 2026-07-04T06:44:55Z

📊 Code Complexity Analysis

Summary:

Total Functions Analyzed: 801
Average Complexity: 3.53
High Complexity Functions: 26
Low Maintainability Files: 58

⚠️ High Complexity Functions

These functions exceed the complexity threshold and should be refactored:

File	Function	Complexity	Line
`core/risk_scorer.py`	`score_pull_request`	35	141
`autopilot/autopilot.py`	`generate_summary`	24	195
`autopilot/staleness_engine.py`	`process_stale_prs`	16	281
`autopilot/ai_optimization/performance_monitor.py`	`get_benchmark_stats`	15	184
`.github/scripts/weekly_digest.py`	`build_blocks`	15	38
`.github/scripts/metrics_collector.py`	`parse_workflow_metrics`	14	148
`.github/scripts/setup_branch_protection.py`	`main`	14	240
`.github/scripts/self_healing_system.py`	`analyze_failure_patterns`	14	256
`.github/scripts/ai_code_suggestor.py`	`_check_import_organization`	14	113
`.github/scripts/prometheus_exporter.py`	`collect_metrics`	14	99

... and 16 more

Recommendations:

Break down large functions into smaller, focused units
Extract complex conditional logic into separate functions
Use early returns to reduce nesting

🔧 Low Maintainability Files

These files have low maintainability scores and may need refactoring:

File	Score	Status
`.github/scripts/health_dashboard_generator.py`	28.14	🔴
`.github/scripts/workflow_monitor.py`	33.73	🔴
`.github/scripts/ai_code_suggestor.py`	33.76	🔴
`.github/scripts/ai_workflow_optimizer.py`	35.51	🔴
`.github/scripts/performance_benchmark.py`	39.46	🔴
`.github/scripts/self_healing_system.py`	40.27	🔴
`.github/scripts/threshold_monitor.py`	41.13	🔴
`.github/scripts/parallel_code_analyzer_optimized.py`	41.16	🔴
`autopilot/autopilot.py`	42.45	🔴
`autopilot/ai_optimization/anomaly_detector.py`	42.56	🔴
`agents/triage_agent.py`	42.79	🔴
`.github/scripts/refactoring_assistant.py`	43.03	🔴
`autopilot/ai_optimization/intelligent_cache.py`	43.28	🔴
`autopilot/ai_optimization/commit_summarizer.py`	44.05	🔴
`.github/scripts/async_parallel_analyzer.py`	44.47	🔴
`autopilot/ai_optimization/performance_monitor.py`	44.69	🔴
`.github/scripts/badge_generator.py`	45.28	🔴
`.github/scripts/copilot_integration.py`	45.37	🔴
`.github/scripts/distributed_monitoring.py`	45.53	🔴
`.github/scripts/elite_copilot.py`	45.69	🔴
`autopilot/dependency_graph.py`	45.74	🔴
`agents/dependency_agent.py`	45.76	🔴
`.github/scripts/issue_auto_creator.py`	46.39	🔴
`.github/scripts/cost_calculator.py`	46.4	🔴
`.github/scripts/inline_pr_commenter.py`	46.63	🔴
`.github/scripts/complexity_reporter.py`	46.78	🔴
`.github/scripts/pr_triage.py`	47.13	🔴
`core/risk_scorer.py`	48.15	🔴
`autopilot/ai_optimization/nlp_relevance_filter.py`	48.43	🔴
`.github/scripts/pr_inline_commenter.py`	48.47	🔴
`autopilot/staleness_engine.py`	48.73	🔴
`.github/scripts/metrics_collector.py`	48.91	🔴
`.github/scripts/dependency_updater.py`	48.91	🔴
`autopilot/ai_optimization/ml_priority_scorer.py`	49.53	🔴
`.github/scripts/changelog_generator.py`	49.75	🔴
`.github/scripts/parallel_code_analyzer.py`	49.96	🔴
`autopilot/ai_optimization/api_optimizer.py`	50.46	🟡
`agents/security_scan_agent.py`	51.04	🟡
`.github/scripts/workflow_optimizer.py`	51.67	🟡
`.github/scripts/cot_selector.py`	51.73	🟡
`.github/scripts/release_manager.py`	51.92	🟡
`.github/scripts/llm_router.py`	52.35	🟡
`.github/scripts/auto_pr.py`	52.72	🟡
`.github/scripts/notification_manager.py`	53.58	🟡
`.github/scripts/prometheus_exporter.py`	54.96	🟡
`.github/scripts/weekly_digest.py`	55.02	🟡
`core/audit_logger.py`	55.6	🟡
`.github/scripts/gather_context.py`	56.0	🟡
`core/llm_provider.py`	56.32	🟡
`.github/scripts/streaming_results.py`	56.64	🟡
`.github/scripts/setup_branch_protection.py`	57.0	🟡
`.github/scripts/optimized_github_client.py`	58.27	🟡
`agents/orchestrator_agent.py`	59.02	🟡
`agents/code_review_agent.py`	60.45	🟡
`core/github_client.py`	61.96	🟡
`core/message_queue.py`	63.22	🟡
`core/agent_config.py`	63.86	🟡
`core/idempotency.py`	64.45	🟡

Maintainability Index Guide:

🟢 85-100: Excellent maintainability
🟡 65-84: Good maintainability
🟠 50-64: Moderate maintainability (consider refactoring)
🔴 0-49: Poor maintainability (needs refactoring)

github-actions · 2026-07-04T06:44:58Z

🟡 Risk Assessment: MEDIUM (3.2/10)

Analysed 5 files, 1216+ / 0− lines. Security-sensitive paths detected. Test coverage unchanged or improved.

Scoring breakdown

Factor	Score
Change volume — 1216 lines changed	+1.2
Sensitive paths — 1 security-relevant files	+1.5
Draft PR — marked as draft	+0.5

⚠️ Security-sensitive paths modified

requirements.txt

✅ Eligible for auto-merge (subject to CI passing).

github-actions · 2026-07-04T06:45:03Z

🔍 Pre-commit Checks

🔧 Pre-commit issues were automatically fixed and committed.

Please pull the latest changes before pushing again:

git pull origin copilot/fix-import-errors-bughunteragent-again

Pre-commit hooks help maintain code quality and consistency.

github-actions · 2026-07-04T06:45:12Z

🤖 Elite AI Copilot Analysis

Elite AI Copilot Analysis Report

Generated: 2026-07-04 06:45:11
Session ID: copilot_1783147511
Repository: .

🎯 Health Score: 100.0/100

🚀 Top Recommendations

✅ Repository is in excellent shape - continue current practices

📊 Detailed Insights

Code Quality Baseline Established

Category: code_quality
Severity: info
Description: Repository code quality metrics captured
Suggested Action: Continue monitoring for regressions
Confidence: 90%

Security Scan Initiated

Category: security
Severity: info
Description: No critical vulnerabilities detected in initial scan
Suggested Action: Enable continuous security monitoring
Confidence: 85%

Repository Structure Analyzed

Category: architecture
Severity: info
Description: Well-organized modular structure detected
Suggested Action: Maintain separation of concerns
Confidence: 80%

Performance Baseline Captured

Category: performance
Severity: info
Description: Repository performance metrics recorded
Suggested Action: Monitor for performance regressions
Confidence: 75%

Documentation Structure Good

Category: documentation
Severity: info
Description: Comprehensive documentation files present
Suggested Action: Keep documentation in sync with code changes
Confidence: 90%

Powered by Elite AI Copilot v1.0

github-actions · 2026-07-04T06:45:12Z

Code Quality Analysis ❌ FAILED

Duration: 0.01s
Total Issues: 10

Tool Results

pylint: ❌
flake8: ❌
bandit: ❌
radon_cc: ❌
radon_mi: ❌

View detailed results

{
  "timestamp": "2026-07-04 06:45:11",
  "elapsed_seconds": 0.01,
  "summary": {
    "total_issues": 10,
    "critical": 0,
    "high": 0,
    "medium": 0,
    "low": 0
  },
  "tools": {
    "pylint": {
      "status": "failed",
      "output": "",
      "errors": "Pylint error: [Errno 2] No such file or directory: 'pylint'"
    },
    "flake8": {
      "status": "failed",
      "output": "",
      "errors": "Flake8 error: [Errno 2] No such file or directory: 'flake8'"
    },
    "bandit": {
      "status": "failed",
      "output": "",
      "errors": "Bandit error: [Errno 2] No such file or directory: 'bandit'"
    },
    "radon_cc": {
      "status": "failed",
      "output": "",
      "errors": "Radon error: [Errno 2] No such file or directory: 'radon'"
    },
    "radon_mi": {
      "status": "failed",
      "output": "",
      "errors": "Radon MI error: [Errno 2] No such file or directory: 'radon'"
    }
  },
  "passed": false
}

github-actions · 2026-07-04T06:45:25Z

🔒 Security Scan Results

🛡️ Bandit Security Scan

🔴 HIGH: 0
🟡 MEDIUM: 9
🟢 LOW: 77

📦 Dependency Vulnerabilities

Total vulnerable dependencies: 62

Vulnerable Dependencies:

pygithub 2.9.1
aiohttp 3.14.1
multidict 6.7.1
yarl 1.24.2
pyyaml 6.0.3
... and 57 more

Security scans run automatically on every PR. View detailed reports in the Actions tab.

labgadget015-dotcom · 2026-07-04T06:45:55Z

🤖 DRC Agent Analysis

Recommendation: 🟠 P1 IMPORTANT

Summary: BugHunterAgent as Lightweight Import-Error Sentinel (Dreamer ID 3, Realist Recommended Solution)

Next steps:

Step 1: Before writing any code, run grep -r 'from dependency_graph' autopilot/ and verify dependency_graph.py exports a stable API — if unstable, proceed with Solution 3 independently (it has no dependency_graph.py dependency anyway)
Step 2: Implement autopilot/bug_hunter_agent.py with ImportSentinel class using ast.walk() over autopilot/ — use importlib.metadata.packages_distributions() for package resolution, not raw requirements.txt parsing
Step 3: Implement DFS circular import detection over the extracted import graph, explicitly skipping imports inside if TYPE_CHECKING: blocks and function bodies, flagging them as out-of-scope in the report
Step 4: Generate structured JSON health report with schema: {broken_imports: [{file, import_name, reason}], missing_packages: [str], circular_refs: [[str]], skipped_conditional_imports: [str]}
Step 5: Add GitHub Actions workflow step with ::error file={file},line={line}:: annotation syntax for broken imports — exit code 1 on any finding

Strategic fit: Consulting: medium · Product: high · Tech debt: reduces

Analysed by GadgetLab DRC Agent (Dreamer → Realist → Critic) · Run run_1783147455935

Copilot

Pull request overview

Adds an Autopilot “PR Dependency Graph Resolver” that scans open PR bodies across the three active repos, extracts dependency references (regex with optional LLM fallback), builds a NetworkX DAG, and applies tier labels to PRs (dry-run by default, live mode opt-in).

Changes:

Introduces autopilot/dependency_graph.py implementing dependency extraction, DAG construction, tier assignment, and GitHub label application.
Adds a “Dependencies” section to the PR template intended to provide structured dependency hints.
Adds networkx>=3.0 and a comprehensive unit test suite for the resolver.

Reviewed changes

Copilot reviewed 3 out of 5 changed files in this pull request and generated 7 comments.

File	Description
`.github/PULL_REQUEST_TEMPLATE.md`	Adds a Dependencies section intended to feed the resolver’s regex extraction.
`autopilot/dependency_graph.py`	New resolver engine: scanning, extraction, DAG build, tiering, and label application.
`requirements.txt`	Adds NetworkX dependency needed for DAG operations.
`tests/unit/test_dependency_graph.py`	Adds unit tests for regex/LLM extraction, DAG logic, tiering, label application, and cycle breaking.

+## Dependencies
+<!-- List any PRs this PR depends on using the syntax below.
+     The dependency graph resolver reads this field automatically. -->
+Depends on: <!-- e.g. Depends on #123, Depends on owner/repo#456 -->


+                # Find the dep's repo (assume same repo if not qualified)
+                dep_node = next((n for n in nodes if n.pr_id == dep_id), None)
+                dep_repo = dep_node.repo if dep_node else node.repo
+                dep_key = f"{dep_repo}#{dep_id}"
+                dag.add_edge(key, dep_key)


+                {
+                    "llm_provider": "anthropic",
+                    "anthropic_api_key": self._anthropic_api_key,
+                    "model": _HAIKU_MODEL,
+                    "llm_max_cost_usd": 5.0,
+                }


+        assert attrs["url"] == "http://x/7"
+
+    def test_llm_called_when_no_regex_match(self):
+        from autopilot.dependency_graph import extract_deps_llm


+
+class TestApplyLabelsDryRun:
+    def test_dry_run_no_api_calls(self):
+        from autopilot.dependency_graph import TIER_LABELS


+        assert "llm_calls_used" in summary
+
+    def test_run_counts_match(self):
+        from autopilot.dependency_graph import ACTIVE_REPOS


+_DEPENDS_ON_LOCAL_RE = re.compile(r"depends[\s_-]+on\s+#(\d+)", re.IGNORECASE)
+_DEPENDS_ON_QUALIFIED_RE = re.compile(
+    r"depends[\s_-]+on\s+[\w.\-]+/[\w.\-]+#(\d+)", re.IGNORECASE
+)


Initial plan

b232a21

Copilot AI assigned Copilot and labgadget015-dotcom Jul 4, 2026

Copilot started work on behalf of labgadget015-dotcom July 4, 2026 06:35 View session

Copilot AI linked an issue Jul 4, 2026 that may be closed by this pull request

📅 Daily Repository Summary - 2026-07-04 #183

Closed

Copilot AI added 2 commits July 4, 2026 06:42

refactor(autopilot): address code review — fix docstring and clarify …

d8fd4ab

…tests

labgadget015-dotcom approved these changes Jul 4, 2026

View reviewed changes

Copilot AI changed the title ~~[WIP] Fix import errors and implement BugHunterAgent~~ feat(autopilot): PR Dependency Graph Resolver with tier labelling Jul 4, 2026

Copilot finished work on behalf of labgadget015-dotcom July 4, 2026 06:44

Copilot AI requested a review from labgadget015-dotcom July 4, 2026 06:44

github-actions Bot added testing ci/cd autopilot Changes to autopilot/ dependencies Dependency updates labels Jul 4, 2026

style: auto-fix pre-commit issues [skip ci]

6cf1905

labgadget015-dotcom approved these changes Jul 4, 2026

View reviewed changes

github-actions Bot mentioned this pull request Jul 5, 2026

📅 Daily Repository Summary - 2026-07-05 #187

Closed

This was referenced Jul 14, 2026

📅 Daily Repository Summary - 2026-07-14 #198

Closed

📅 Daily Repository Summary - 2026-07-15 #199

Closed

This was referenced Jul 16, 2026

📅 Daily Repository Summary - 2026-07-16 #200

Closed

📅 Daily Repository Summary - 2026-07-17 #201

Closed

📅 Daily Repository Summary - 2026-07-18 #205

Closed

📅 Daily Repository Summary - 2026-07-19 #210

Closed

labgadget015-dotcom marked this pull request as ready for review July 19, 2026 22:18

Copilot AI review requested due to automatic review settings July 19, 2026 22:18

labgadget015-dotcom merged commit d520daa into main Jul 19, 2026

labgadget015-dotcom deleted the copilot/fix-import-errors-bughunteragent-again branch July 19, 2026 22:18

This was referenced Jul 19, 2026

fix(184 rebase): quality ratchet — resolve orphaned-test conflicts vs main #215

Merged

fix(186 rebase + SEC): dependabot automerge — resolve orphaned tests + harden pull_request_target #216

Draft

Copilot AI reviewed Jul 19, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(autopilot): PR Dependency Graph Resolver with tier labelling#185

feat(autopilot): PR Dependency Graph Resolver with tier labelling#185
labgadget015-dotcom merged 4 commits into
mainfrom
copilot/fix-import-errors-bughunteragent-again

Copilot AI commented Jul 4, 2026 •

edited

Loading

Uh oh!

labgadget015-dotcom commented Jul 4, 2026

Uh oh!

labgadget015-dotcom commented Jul 4, 2026

Uh oh!

github-actions Bot commented Jul 4, 2026

Uh oh!

github-actions Bot commented Jul 4, 2026

Uh oh!

github-actions Bot commented Jul 4, 2026

Uh oh!

github-actions Bot commented Jul 4, 2026

Uh oh!

github-actions Bot commented Jul 4, 2026

Uh oh!

github-actions Bot commented Jul 4, 2026

Uh oh!

labgadget015-dotcom commented Jul 4, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

Copilot AI commented Jul 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

.github/PULL_REQUEST_TEMPLATE.md

autopilot/dependency_graph.py

requirements.txt

tests/unit/test_dependency_graph.py

Uh oh!

labgadget015-dotcom commented Jul 4, 2026

🤖 DRC Agent Analysis

Uh oh!

labgadget015-dotcom commented Jul 4, 2026

🤖 DRC Agent Analysis

Uh oh!

github-actions Bot commented Jul 4, 2026

📊 Code Complexity Analysis

⚠️ High Complexity Functions

🔧 Low Maintainability Files

Uh oh!

github-actions Bot commented Jul 4, 2026

🟡 Risk Assessment: MEDIUM (3.2/10)

Scoring breakdown

⚠️ Security-sensitive paths modified

Uh oh!

github-actions Bot commented Jul 4, 2026

🔍 Pre-commit Checks

Uh oh!

github-actions Bot commented Jul 4, 2026

🤖 Elite AI Copilot Analysis

Elite AI Copilot Analysis Report

🎯 Health Score: 100.0/100

🚀 Top Recommendations

📊 Detailed Insights

Code Quality Baseline Established

Security Scan Initiated

Repository Structure Analyzed

Performance Baseline Captured

Documentation Structure Good

Uh oh!

github-actions Bot commented Jul 4, 2026

Code Quality Analysis ❌ FAILED

Tool Results

Uh oh!

github-actions Bot commented Jul 4, 2026

🔒 Security Scan Results

🛡️ Bandit Security Scan

📦 Dependency Vulnerabilities

Vulnerable Dependencies:

Uh oh!

labgadget015-dotcom commented Jul 4, 2026

🤖 DRC Agent Analysis

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Jul 4, 2026 •

edited

Loading

`.github/PULL_REQUEST_TEMPLATE.md`

`autopilot/dependency_graph.py`

`requirements.txt`

`tests/unit/test_dependency_graph.py`