Autonomous fix pipeline · live

Ship the fix while the agent does the work.

Cockpit turns a plain-language request into a reviewable pull request. A zero-idle serverless control plane dispatches a coding agent that reads the repo, writes the patch, and opens a PR — you just review and merge.

request → control plane → build → agent → pull request → human-gated merge

How it works

Six steps from request to merged PR

Nothing runs at rest. Each request spins the pipeline up on demand and tears it back down — the only always-on thing is your review.

Trigger Cockpit control plane · serverless Worker plane · CodeBuild Notify & deliver GitHub Fix requestapp · MCP · cron API GatewayHTTP API FastAPI λcockpit-app · Mangum CodeBuildchecks out repo Bedrock agentStrands · zai.glm-5 GitHub PRautofix/<fp> Actions CIcheck-runs Merge gatelabel + all green notify λDynamoDB stream Your phoneFCM push Cognito auth DynamoDB · cockpit
01 A fix is requested — from the app, a Claude MCP call, or the 30-minute sweeper.
01

Request

File a ticket from the board — or straight from a Claude chat over the OAuth-native MCP connector.

02

Control plane

A serverless API — API Gateway plus a Lambda — triages the request and dispatches the fix. It costs nothing when idle.

03

Build

A CodeBuild worker starts on demand — a fresh, isolated checkout for every fix, gone the moment it finishes.

04

Agent

A Strands loop drives a Bedrock coding model (zai.glm-5) to read the codebase, reason about the change, and write the patch.

05

Pull request

It opens a PR and streams every check-run back to your board live — green, pending, or failing — as CI reports in.

06

Human-gated merge

You have the last word. The guardrail refuses to merge anything without the autofix label and every check green.

Why it's built this way

A control plane, not a daemon

The engine lives entirely apart from your production runtime — and only wakes when there's work to do.

Zero-idle serverless

Lambda plus CodeBuild. You pay per fix and nothing at rest — no servers to keep warm, patch, or scale.

OAuth-native MCP

Wire Cockpit into Claude as a custom connector. Full OAuth 2.1 + PKCE — dispatch and merge fixes from a chat.

Decoupled from prod

The fixer runs in its own control plane — it never shares a runtime with the application it's patching.

Multi-repo

One pipeline, every repository you own. Dispatch a fix at any repo; the worker checks out the right one.

Push notifications

Native push the moment a PR turns green or a build fails — so you review at the right time, not on a poll.

Passkey sign-in

WebAuthn from the first tap — no passwords to leak, phish, or reset. The same identity backs the MCP connector.

Ready when you are

Point it at a repo and file your first request.

Sign in with a passkey, open the board, and watch a fix land as a pull request.