ci: add auto-fix workflow for issues labeled auto-fix

Author: bohutang

.github/scripts/auto-fix.sh

@@ -0,0 +1,90 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+MAIN=$(git rev-parse --abbrev-ref HEAD)
+NUM=$(echo "$ISSUE_JSON" | jq -r '.number')
+TITLE=$(echo "$ISSUE_JSON" | jq -r '.title')
+BODY=$(echo "$ISSUE_JSON" | jq -r '.body')
+BRANCH="auto-fix/issue-${NUM}"
+
+echo "=== #${NUM}: ${TITLE} ==="
+
+# Rollback label on failure
+cleanup_on_failure() {
+  gh issue edit "$NUM" --repo "$REPO" --add-label auto-fix --remove-label auto-fix-in-progress 2>/dev/null || true
+}
+trap cleanup_on_failure ERR
+
+# Skip if PR exists
+if [ "$(gh pr list --repo "$REPO" --head "$BRANCH" --json number --jq 'length')" -gt 0 ]; then
+  echo "PR exists, skip"
+  gh issue edit "$NUM" --repo "$REPO" --add-label auto-fix-done --remove-label auto-fix-in-progress
+  exit 0
+fi
+
+git checkout -b "$BRANCH"
+
+# Step 1: Generate fix
+evot -p "Fix this issue in databend-docs by modifying files under docs/en/.
+Follow existing doc style. Read related files first.
+
+The Databend source code is available at _databend/src/ for reference.
+Use it to check actual implementation details (settings, functions, SQL syntax, etc.)
+when writing documentation.
+
+Issue #${NUM}: ${TITLE}
+${BODY}" \
+  --model "$GENERATOR_MODEL" --env-file "$EVOT_ENV_FILE" \
+  --max-turns 30 --max-duration 600 || true
+
+if git diff --quiet; then
+  echo "No changes"
+  cleanup_on_failure
+  exit 0
+fi
+
+# Step 2: Review loop (max 2 rounds)
+APPROVED=false
+for round in 1 2; do
+  DIFF=$(git diff)
+  [ -z "$DIFF" ] && { APPROVED=true; break; }
+
+  REVIEW=$(evot -p "Review this diff for issue #${NUM}: ${TITLE}
+${BODY}
+
+Respond ONLY with JSON: {\"approved\": bool, \"comments\": \"...\"}
+
+${DIFF}" \
+    --model "$REVIEWER_MODEL" --env-file "$EVOT_ENV_FILE" \
+    --max-turns 1 --max-duration 60 2>&1 || true)
+
+  if echo "$REVIEW" | grep -q '"approved"[[:space:]]*:[[:space:]]*true'; then
+    APPROVED=true; break
+  fi
+
+  COMMENTS=$(echo "$REVIEW" | python3 -c "
+import sys,json,re
+t=sys.stdin.read(); m=re.search(r'\{[^}]*\}',t,re.DOTALL)
+try: print(json.loads(m.group())['comments']) if m else print(t[:500])
+except: print(t[:500])" 2>/dev/null || echo "$REVIEW" | head -10)
+
+  evot -p "Address this review for issue #${NUM}:
+${COMMENTS}" \
+    --model "$GENERATOR_MODEL" --env-file "$EVOT_ENV_FILE" \
+    --max-turns 20 --max-duration 300 || true
+done
+
+# Step 3: PR
+git add -A
+git commit -m "docs: auto-fix #${NUM}" || { cleanup_on_failure; exit 0; }
+git push origin "$BRANCH" --force
+
+STATUS=$( [ "$APPROVED" = true ] && echo "✅ Approved" || echo "⚠️ Needs human review" )
+gh pr create --repo "$REPO" --base "$MAIN" --head "$BRANCH" \
+  --title "docs: auto-fix #${NUM}" \
+  --body "Fixes #${NUM}. ${STATUS}
+Generated by \`${GENERATOR_MODEL}\`, reviewed by \`${REVIEWER_MODEL}\`." \
+  --label auto-fix || true
+
+# Mark done
+gh issue edit "$NUM" --repo "$REPO" --add-label auto-fix-done --remove-label auto-fix-in-progress

.github/workflows/auto-fix-issues.yml

@@ -0,0 +1,90 @@
+name: Auto Fix Issues
+on:
+  schedule:
+    - cron: '*/10 * * * *'
+  workflow_dispatch:
+    inputs:
+      issue_number:
+        description: 'Issue number (empty = pick oldest)'
+        required: false
+
+permissions:
+  contents: write
+  pull-requests: write
+  issues: write
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    outputs:
+      issue: ${{ steps.pick.outputs.issue }}
+    steps:
+      - id: pick
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT }}
+          ISSUE_NUMBER: ${{ inputs.issue_number || '' }}
+        run: |
+          REPO="${{ github.repository }}"
+          if [ -n "$ISSUE_NUMBER" ]; then
+            ISSUE=$(gh issue view "$ISSUE_NUMBER" --repo "$REPO" --json number,title,body -q '.')
+          else
+            ISSUE=$(gh issue list --repo "$REPO" --label auto-fix --state open --limit 1 --json number,title,body -q '.[0] // empty')
+          fi
+          if [ -z "$ISSUE" ]; then
+            echo "No auto-fix issues"
+            echo "issue=" >> "$GITHUB_OUTPUT"
+          else
+            NUM=$(echo "$ISSUE" | jq -r '.number')
+            gh issue edit "$NUM" --repo "$REPO" --add-label auto-fix-in-progress --remove-label auto-fix
+            echo "issue=$(echo "$ISSUE" | jq -c .)" >> "$GITHUB_OUTPUT"
+          fi
+
+  fix:
+    needs: check
+    if: needs.check.outputs.issue != ''
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Checkout databend source
+        uses: actions/checkout@v4
+        with:
+          repository: databendlabs/databend
+          path: _databend
+          sparse-checkout: src
+          fetch-depth: 1
+
+      - name: Install evot
+        env:
+          GH_TOKEN: ${{ secrets.GH_PAT }}
+        run: |
+          TAG=$(gh release list --repo evotai/evot --limit 1 --json tagName --jq '.[0].tagName')
+          gh release download "$TAG" --repo evotai/evot --pattern "evot-*-x86_64-unknown-linux-gnu.tar.gz"
+          tar -xzf evot-*.tar.gz && chmod +x bin/evot
+          echo "$PWD/bin" >> "$GITHUB_PATH"
+
+      - name: Write evot.env
+        run: |
+          cat > /tmp/evot.env << EOF
+          EVOT_LLM_PROVIDER=${{ secrets.EVOT_LLM_PROVIDER }}
+          EVOT_LLM_ANTHROPIC_BASE_URL=${{ secrets.EVOT_LLM_ANTHROPIC_BASE_URL }}
+          EVOT_LLM_ANTHROPIC_API_KEY=${{ secrets.EVOT_LLM_ANTHROPIC_API_KEY }}
+          EVOT_LLM_ANTHROPIC_MODEL=${{ secrets.EVOT_LLM_ANTHROPIC_MODEL }}
+          EVOT_LLM_OPENAI_BASE_URL=${{ secrets.EVOT_LLM_OPENAI_BASE_URL }}
+          EVOT_LLM_OPENAI_API_KEY=${{ secrets.EVOT_LLM_OPENAI_API_KEY }}
+          EVOT_LLM_OPENAI_MODEL=${{ secrets.EVOT_LLM_OPENAI_MODEL }}
+          EOF
+
+      - name: Run
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          bash .github/scripts/auto-fix.sh
+        env:
+          REPO: ${{ github.repository }}
+          ISSUE_JSON: ${{ needs.check.outputs.issue }}
+          GENERATOR_MODEL: anthropic
+          REVIEWER_MODEL: openai
+          EVOT_ENV_FILE: /tmp/evot.env
+          EVOT_ID: auto-fix-ci
+          GH_TOKEN: ${{ secrets.GH_PAT }}