1.8.1 rc

.github/workflows/coverage.yml

@@ -0,0 +1,71 @@
+name: Repository Coverage
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, ready_for_review]
+  workflow_dispatch:
+
+concurrency:
+  group: repository-coverage-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  coverage:
+    name: Test coverage policy
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          submodules: recursive
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: "17"
+          cache: maven
+
+      - name: Set up Python 3.11
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+          cache: pip
+          cache-dependency-path: |
+            python-ecosystem/rag-pipeline/requirements.txt
+            python-ecosystem/inference-orchestrator/src/requirements.txt
+            python-ecosystem/inference-orchestrator/src/requirements.test.txt
+
+      - name: Run repository coverage gate
+        run: bash tools/coverage/check-repository-coverage.sh
+
+      - name: Publish coverage summary
+        if: always()
+        shell: bash
+        run: |
+          if [ -f build/coverage/summary.md ]; then
+            cat build/coverage/summary.md >> "$GITHUB_STEP_SUMMARY"
+          else
+            echo "# Repository coverage gate" >> "$GITHUB_STEP_SUMMARY"
+            echo "" >> "$GITHUB_STEP_SUMMARY"
+            echo "The coverage runner stopped before it could create a summary." >> "$GITHUB_STEP_SUMMARY"
+          fi
+
+      - name: Upload coverage and test reports
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: repository-coverage-${{ github.run_id }}
+          if-no-files-found: warn
+          retention-days: 14
+          path: |
+            build/coverage/
+            java-ecosystem/**/target/site/jacoco/
+            analysis-plugins/**/target/site/jacoco/
+            java-ecosystem/**/target/surefire-reports/
+            java-ecosystem/**/target/failsafe-reports/

.gitignore

@@ -21,6 +21,8 @@ Thumbs.db
 coverage.xml
 htmlcov/
 .ci-test-results/
+build/coverage/
+.coverage-venvs/
 
 # Python environments and packaging output
 .venv/

README.md

@@ -86,7 +86,8 @@ These features are platform-independent and available through the CodeCrow web U
 
 | Method                   | Bitbucket Cloud |               GitHub                |                  GitLab                   |
 | :----------------------- | :-------------: | :---------------------------------: | :---------------------------------------: |
-| OAuth / App Installation |   ✅ (OAuth)    | ✅ (GitHub App with OAuth fallback) | ✅ (OAuth, including self-managed GitLab) |
+| OAuth / App Installation |   ✅ (OAuth)    | ✅ (GitHub App with OAuth fallback) |           ✅ (GitLab.com only)            |
+| Self-managed VCS         |        —          |                  —                  |    ✅ (personal or project access token)   |
 | Manual Webhook           |       ✅        |                 ✅                  |                    ✅                     |
 | CI Pipeline Action       |       ✅        |                  —                  |                     —                     |
 
@@ -234,12 +235,12 @@ for the detailed invariants and failure behavior.
 ## Self-Hosting and Build Verification
 
 The interactive setup configures secrets and chooses OpenRouter or Ollama for
-embeddings. The local production build synchronizes the pinned frontend
-submodule, rejects local frontend drift, recreates the two isolated Python 3.11
-CI environments, and runs the same Python, plugin-boundary, Maven `verify`, and
-observable-image Buildx gates as CI/CD. Only after every gate passes does it
-replace the local Compose services with those validated images and wait for
-health checks.
+embeddings. The local production build fetches and checks out the latest commit
+from the frontend submodule's configured `main` branch, rejects local frontend
+drift, recreates the two isolated Python 3.11 CI environments, and runs the same
+Python, plugin-boundary, Maven `verify`, and observable-image Buildx gates as
+CI/CD. Only after every gate passes does it replace the local Compose services
+with those validated images and wait for health checks.
 
 ```bash
 cd deployment

deployment/config/rag-pipeline/.env.sample

@@ -33,20 +33,35 @@ SERVICE_SECRET=change-me-to-a-random-secret
 # OLLAMA_MAX_CHARS=24000
 # OLLAMA_MAX_RETRIES=3
 # OLLAMA_RETRY_BASE_DELAY=1.0
-# OPENROUTER_BATCH_SIZE=100
+# OPENROUTER_BATCH_SIZE=50
 # OPENROUTER_TIMEOUT=300
 # OPENROUTER_MAX_CHARS=24000
+# Maximum parallel batches for one index. Set to 1 for serial rollback behavior.
+# OPENROUTER_INDEX_CONCURRENCY=8
+# Cross-worker capacity cap. Redis coordinates the normal path; a Redis outage
+# degrades this performance-only limiter to the process-local cap.
+# OPENROUTER_MAX_IN_FLIGHT=16
+# Use "price" to retain OpenRouter's default price-oriented routing.
+# OPENROUTER_INDEX_PROVIDER_SORT=throughput
+# OPENROUTER_QUERY_PROVIDER_SORT=latency
 
 # === Qdrant Storage ===
 # QDRANT_URL=http://qdrant:6333
 # QDRANT_API_KEY=
 # QDRANT_COLLECTION_PREFIX=codecrow
 # QDRANT_VECTORS_ON_DISK=true
+# QDRANT_UPSERT_BATCH_SIZE=128
 
 # === Queue and Server Runtime ===
 # REDIS_URL=redis://redis:6379/1
 # MAX_CONCURRENT_RAG_JOBS=2
 # UVICORN_WORKERS=4
+# Project mutation coordination is correctness-critical in multi-worker setups.
+# RAG_MUTATION_LEASE_SECONDS=300
+# RAG_MUTATION_ACQUIRE_TIMEOUT_SECONDS=5
+# Expired pending collections are retained for six hours by default.
+# RAG_PENDING_COLLECTION_MAX_AGE_SECONDS=21600
+# RAG_PENDING_JANITOR_INTERVAL_SECONDS=3600
 
 # === Repository and API Safety Limits ===
 # Root directory that repo_path arguments may resolve under.

java-ecosystem/libs/analysis-engine/src/main/java/org/rostilos/codecrow/analysisengine/aiclient/AiAnalysisClient.java

@@ -332,6 +332,7 @@ private Map<String, Object> buildSerializableRequestPayload(AiAnalysisRequest re
         payload.put("ragEnabled", request.getRagEnabled());
         payload.put("analysisType", request.getAnalysisType());
         payload.put("vcsProvider", request.getVcsProvider());
+        payload.put("vcsBaseUrl", request.getVcsBaseUrl());
         payload.put("prTitle", request.getPrTitle());
         payload.put("prDescription", request.getPrDescription());
         payload.put("taskContext", request.getTaskContext());

java-ecosystem/libs/analysis-engine/src/main/java/org/rostilos/codecrow/analysisengine/aiclient/AiCommandClient.java

@@ -179,7 +179,8 @@ public record SummarizeRequest(
             String accessToken,
             boolean supportsMermaid,
             Integer maxAllowedTokens,
-            String vcsProvider) {
+            String vcsProvider,
+            String vcsBaseUrl) {
     }
 
     /**
@@ -203,6 +204,7 @@ public record AskRequest(
             String accessToken,
             Integer maxAllowedTokens,
             String vcsProvider,
+            String vcsBaseUrl,
             String analysisContext,
             java.util.List<String> issueReferences) {
     }
@@ -244,7 +246,8 @@ public record ReviewRequest(
             String oAuthSecret,
             String accessToken,
             Integer maxAllowedTokens,
-            String vcsProvider) {
+            String vcsProvider,
+            String vcsBaseUrl) {
     }
 
     /**

java-ecosystem/libs/analysis-engine/src/main/java/org/rostilos/codecrow/analysisengine/dto/request/ai/AiAnalysisRequest.java

@@ -56,6 +56,8 @@ public interface AiAnalysisRequest {
 
     String getVcsProvider();
 
+    default String getVcsBaseUrl() { return null; }
+
     String getPrTitle();
 
     String getPrDescription();

java-ecosystem/libs/analysis-engine/src/main/java/org/rostilos/codecrow/analysisengine/dto/request/ai/AiAnalysisRequestImpl.java

@@ -48,6 +48,7 @@ public class AiAnalysisRequestImpl implements AiAnalysisRequest {
     protected final String targetBranchName;
     protected final String sourceBranchName;
     protected final String vcsProvider;
+    protected final String vcsBaseUrl;
     protected final String rawDiff;
 
     // Incremental analysis fields
@@ -98,6 +99,7 @@ protected AiAnalysisRequestImpl(Builder<?> builder) {
         this.targetBranchName = builder.targetBranchName;
         this.sourceBranchName = builder.sourceBranchName;
         this.vcsProvider = builder.vcsProvider;
+        this.vcsBaseUrl = builder.vcsBaseUrl;
         this.rawDiff = builder.rawDiff;
         // Incremental analysis fields
         this.analysisMode = builder.analysisMode != null ? builder.analysisMode : AnalysisMode.FULL;
@@ -231,6 +233,11 @@ public String getVcsProvider() {
         return vcsProvider;
     }
 
+    @Override
+    public String getVcsBaseUrl() {
+        return vcsBaseUrl;
+    }
+
     public String getRawDiff() {
         return rawDiff;
     }
@@ -311,6 +318,7 @@ public static class Builder<T extends Builder<T>> {
         private String targetBranchName;
         private String sourceBranchName;
         private String vcsProvider;
+        private String vcsBaseUrl;
         private String rawDiff;
         // Incremental analysis fields
         private AnalysisMode analysisMode;
@@ -606,6 +614,11 @@ public T withVcsProvider(String vcsProvider) {
             return self();
         }
 
+        public T withVcsBaseUrl(String vcsBaseUrl) {
+            this.vcsBaseUrl = vcsBaseUrl;
+            return self();
+        }
+
         public T withRawDiff(String rawDiff) {
             this.rawDiff = rawDiff;
             return self();

java-ecosystem/libs/analysis-engine/src/main/java/org/rostilos/codecrow/analysisengine/processor/analysis/BranchAnalysisProcessor.java

@@ -1,6 +1,5 @@
 package org.rostilos.codecrow.analysisengine.processor.analysis;
 
-import okhttp3.OkHttpClient;
 import org.rostilos.codecrow.analysisengine.aiclient.AiAnalysisClient;
 import org.rostilos.codecrow.commitgraph.dag.CommitRangeContext;
 import org.rostilos.codecrow.analysisengine.processor.VcsRepoInfoImpl;
@@ -21,7 +20,6 @@
 import org.rostilos.codecrow.analysisengine.service.PullRequestStatusSyncService;
 import org.rostilos.codecrow.commitgraph.service.CommitCoverageService;
 import org.rostilos.codecrow.analysisengine.service.vcs.VcsAiClientService;
-import org.rostilos.codecrow.analysisengine.service.vcs.VcsOperationsService;
 import org.rostilos.codecrow.analysisengine.service.vcs.VcsServiceFactory;
 import org.rostilos.codecrow.analysisapi.rag.RagOperationsService;
 import org.rostilos.codecrow.analysisengine.util.ProjectVcsInfoRetriever;
@@ -195,9 +193,8 @@ && matchCache(request, existingBranchOpt, project, consumer)) {
 					"Branch analysis started for branch: " + request.getTargetBranchName());
 
 			VcsRepoInfoImpl vcsRepoInfoImpl = ProjectVcsInfoRetriever.getVcsInfo(project);
-			OkHttpClient client = vcsClientProvider.getHttpClient(vcsRepoInfoImpl.vcsConnection());
+			VcsClient client = vcsClientProvider.getClient(vcsRepoInfoImpl.vcsConnection());
 			EVcsProvider provider = ProjectVcsInfoRetriever.getVcsProvider(project);
-			VcsOperationsService operationsService = vcsServiceFactory.getOperationsService(provider);
 
 			// ── Commit range resolution ───────────────────────────────────
 			CommitRangeContext rangeCtx = branchCommitService.resolveCommitRange(project,
@@ -209,7 +206,7 @@ && matchCache(request, existingBranchOpt, project, consumer)) {
 			EventNotificationEmitter.emitStatus(consumer, "fetching_diff", "Fetching diff for analysis");
 
 			// ── PR number resolution ─────────────────────────────────────────
-			Long prNumber = resolvePrNumber(request, operationsService, client, vcsRepoInfoImpl);
+			Long prNumber = resolvePrNumber(request, client, vcsRepoInfoImpl);
 			List<String> prLookupCommitCandidates = new ArrayList<>();
 			if (request.getCommitHash() != null && !request.getCommitHash().isBlank()) {
 				prLookupCommitCandidates.add(request.getCommitHash());
@@ -242,8 +239,8 @@ && matchCache(request, existingBranchOpt, project, consumer)) {
 						String sourceParent = headCommits.get(0).parentHashes().get(1);
 						prLookupCommitCandidates.add(sourceParent);
 						try {
-							prNumber = operationsService.findPullRequestForCommit(
-									client, vcsRepoInfoImpl.workspace(),
+							prNumber = client.findPullRequestForCommit(
+									vcsRepoInfoImpl.workspace(),
 									vcsRepoInfoImpl.repoSlug(), sourceParent);
 							if (isValidPrNumber(prNumber)) {
 								log.info("Found PR #{} from merge commit's second parent {}",
@@ -309,7 +306,7 @@ && matchCache(request, existingBranchOpt, project, consumer)) {
 			// ── Multi-tier diff strategy ─────────────────────────────────────
 			Long diffPrNumber = mergedPrNumbers.size() > 1 ? null : prNumber;
 			String repositoryDiff = branchDiffFetcher.fetchDiff(request, existingBranchOpt.orElse(null), rangeCtx,
-					operationsService, client, vcsRepoInfoImpl, diffPrNumber, unanalyzedCommits);
+					client, vcsRepoInfoImpl, diffPrNumber, unanalyzedCommits);
 			String rawDiff = AnalysisScopeFilter.filterDiff(repositoryDiff, project);
 
 			Set<String> changedFiles = DiffParsingUtils.parseFilePathsFromDiff(rawDiff);
@@ -518,16 +515,15 @@ private boolean matchCache(BranchProcessRequest request, Optional<Branch> existi
 	 * This handles cases where branch analysis is triggered by push events.
 	 */
 	private Long resolvePrNumber(BranchProcessRequest request,
-			VcsOperationsService operationsService,
-			OkHttpClient client, VcsRepoInfoImpl vcsRepoInfoImpl) {
+			VcsClient client, VcsRepoInfoImpl vcsRepoInfoImpl) {
 		Long prNumber = request.getSourcePrNumber();
 		if (!isValidPrNumber(prNumber)) {
 			prNumber = null;
 		}
 		if (prNumber == null && request.getCommitHash() != null) {
 			try {
-				prNumber = operationsService.findPullRequestForCommit(
-						client, vcsRepoInfoImpl.workspace(), vcsRepoInfoImpl.repoSlug(),
+				prNumber = client.findPullRequestForCommit(
+						vcsRepoInfoImpl.workspace(), vcsRepoInfoImpl.repoSlug(),
 						request.getCommitHash());
 				if (isValidPrNumber(prNumber)) {
 					log.info("Found PR #{} for commit {} via API lookup", prNumber,