update low and add jenkins api

backend/jenkins_client.py

@@ -0,0 +1,109 @@
+from __future__ import annotations
+
+import os
+from typing import Any
+from urllib.parse import quote
+
+import requests
+
+
+def _env(name: str, default: str) -> str:
+    value = os.getenv(name)
+    return value if value else default
+
+
+def _normalize_base(url: str) -> str:
+    u = (url or "").strip().rstrip("/")
+    if not u:
+        return ""
+    if not u.startswith(("http://", "https://")):
+        u = f"https://{u}"
+    return u
+
+
+def _job_url(base: str, job_path: str) -> str:
+    """https://jenkins/job/a/job/b/job/c"""
+    parts = [p for p in (job_path or "").strip("/").split("/") if p]
+    if not parts:
+        raise ValueError("job path is empty")
+    segs = "/".join(f"job/{quote(p, safe='')}" for p in parts)
+    return f"{_normalize_base(base)}/{segs}"
+
+
+def trigger_jenkins_job(
+    *,
+    server_url: str,
+    job_path: str,
+    parameters: dict[str, str],
+    username: str | None,
+    token: str | None,
+    verify_ssl: bool = True,
+) -> tuple[bool, int, str, dict[str, Any]]:
+    """
+    Запускает сборку через Jenkins REST API: /build или /buildWithParameters.
+    При включённом CSRF получает crumb с /crumbIssuer/api/json.
+    """
+    base = _normalize_base(server_url)
+    if not base:
+        return False, 0, "server_url is empty", {}
+
+    job_url = _job_url(base, job_path)
+    auth = (username, token) if username and token else None
+
+    headers: dict[str, str] = {}
+    if auth:
+        try:
+            cr = requests.get(
+                f"{base}/crumbIssuer/api/json",
+                auth=auth,
+                timeout=30,
+                verify=verify_ssl,
+            )
+            if cr.ok:
+                cj = cr.json()
+                field = cj.get("crumbRequestField", "Jenkins-Crumb")
+                headers[field] = cj["crumb"]
+        except Exception:
+            pass
+
+    if parameters:
+        target = f"{job_url}/buildWithParameters"
+        resp = requests.post(
+            target,
+            auth=auth,
+            headers=headers,
+            data=parameters,
+            timeout=120,
+            verify=verify_ssl,
+        )
+    else:
+        target = f"{job_url}/build"
+        resp = requests.post(
+            target,
+            auth=auth,
+            headers=headers,
+            timeout=120,
+            verify=verify_ssl,
+        )
+
+    detail: dict[str, Any] = {
+        "http_status": resp.status_code,
+        "location": resp.headers.get("Location"),
+        "jenkins_body_preview": (resp.text or "")[:500],
+    }
+    ok = 200 <= resp.status_code < 300
+    if resp.status_code == 403 and "crumb" in (resp.text or "").lower():
+        return False, resp.status_code, "Jenkins вернул 403 — проверьте crumb/права или отключите CSRF для API.", detail
+    if not ok:
+        return False, resp.status_code, f"Jenkins HTTP {resp.status_code}", detail
+    return True, resp.status_code, "queued", detail
+
+
+def default_jenkins_credentials() -> tuple[str, str, str, bool]:
+    """default_url, user, token, verify_ssl"""
+    return (
+        _env("JENKINS_DEFAULT_URL", ""),
+        _env("JENKINS_USER", ""),
+        _env("JENKINS_TOKEN", ""),
+        _env("JENKINS_VERIFY_SSL", "true").lower() in ("1", "true", "yes", "on"),
+    )

backend/main.py

@@ -76,6 +76,12 @@ class AutonomousPipelineSave(BaseModel):
     phases: list[LowCodePhaseIn] = Field(default_factory=list)
 
 
+class JenkinsTriggerRequest(BaseModel):
+    server_url: str = ""
+    job: str
+    parameters: dict[str, str] = Field(default_factory=dict)
+
+
 def validate_config(config_text: str):
     try:
         yaml.safe_load(config_text)
@@ -239,6 +245,44 @@ def put_autonomous_pipeline(
         raise HTTPException(status_code=500, detail=f"Database error: {str(e)}")
 
 
+@app.post("/jenkins/trigger")
+def jenkins_trigger(
+    req: JenkinsTriggerRequest,
+    user: User | None = Depends(get_current_user) if REQUIRE_AUTH_FOR_GENERATE else None,
+):
+    if user is None:
+        raise HTTPException(status_code=401, detail="Authentication required")
+    from backend.jenkins_client import default_jenkins_credentials, trigger_jenkins_job
+
+    default_url, ju, jt, verify_ssl = default_jenkins_credentials()
+    base = (req.server_url or "").strip() or default_url
+    if not base:
+        raise HTTPException(
+            status_code=400,
+            detail="Укажите Jenkins URL в фазе или задайте JENKINS_DEFAULT_URL в окружении backend.",
+        )
+    if not ju or not jt:
+        raise HTTPException(
+            status_code=503,
+            detail="Задайте JENKINS_USER и JENKINS_TOKEN (API token) в окружении backend.",
+        )
+    job = (req.job or "").strip()
+    if not job:
+        raise HTTPException(status_code=400, detail="Поле job обязательно.")
+
+    ok, _code, msg, detail = trigger_jenkins_job(
+        server_url=base,
+        job_path=job,
+        parameters=req.parameters,
+        username=ju,
+        token=jt,
+        verify_ssl=verify_ssl,
+    )
+    if not ok:
+        raise HTTPException(status_code=502, detail={"message": msg, **detail})
+    return {"ok": True, "message": msg, **detail}
+
+
 @app.get("/chat/history")
 def chat_history(
     limit: int = 500,