alissa-tools-github-devloop 0.8.37__py3-none-any.whl → 0.8.39__py3-none-any.whl

alissa/tools/github/devloop/fleet_vitals.py

@@ -45,19 +45,34 @@ answers (`FleetVitalsPusher.push_now`). Until Studio's schema carries the
 block (the design's lane L3), a strict 400 naming `idle` makes the pusher
 resend without it and leave it out for IDLE_REPROBE_S: the vitals the Factory
 already renders never go dark over a field nobody reads yet.
+
+The managed fleet's smoke (issue #155, studio.alissa.app provisioner design
+§2.7, lane L9) adds the `config` block -- what this seat DERIVED, in its own
+words: the feed owner actor id, the effective repository allowlist, the
+reviewer login(s) it requests and its own GitHub login. SM2-SM4 compare it to
+what Studio provisioned. Four fields, every one of them an identity or a
+name, never a credential: the block is built from typed config fields, not
+from the environment, and any value that carries a secret the process holds
+(`SECRET_ENV`) is blanked before it can leave. The daemon's own pass sends
+it; the console's out-of-pass push leaves it out (that process never
+resolves the feed authority nor refreshes the allowlist, so its answer would
+be a different one). A Studio whose strict schema predates the block gets
+the `idle` treatment: resent without it, offered again after BLOCK_REPROBE_S.
 """
 
 from __future__ import annotations
 
 import json
 import logging
+import os
+import re
 import time
 from datetime import datetime, timezone
 from typing import Callable, Mapping, Sequence
 
 from . import parking
 from .alissa_client import AlissaAuthError, AlissaClient, AlissaError
-from .config import Config
+from .config import REPOS_BOWS, Config
 from .version import version as running_version
 from .webui import sources as sources_mod
 from .webui import sysinfo
@@ -84,11 +99,30 @@ PUSHED = "pushed"
 SKIPPED = "skipped"
 FAILED = "failed"
 
-# How long a snapshot leaves the `idle` block out after Studio refused it as
-# an unknown key (a schema that predates seat parking), before it offers the
-# block again. An hour: one extra POST an hour against an old Studio, and a
-# newly deployed one starts receiving the block within the hour.
-IDLE_REPROBE_S = 3600.0
+# The blocks Studio's schema gained after the base contract, each in its own
+# lane: `idle` (seat parking L3) and `config` (provisioner L5). A strict 400
+# naming one of them is an old Studio, not a bad snapshot.
+OPTIONAL_BLOCKS = ("idle", "config")
+
+# How long a snapshot leaves an optional block out after Studio refused it as
+# an unknown key, before it offers the block again. An hour: one extra POST
+# an hour against an old Studio, and a newly deployed one starts receiving
+# the block within the hour.
+BLOCK_REPROBE_S = 3600.0
+IDLE_REPROBE_S = BLOCK_REPROBE_S
+
+# The `config` block's keys (provisioner design §2.7 / lane L9), in order.
+CONFIG_KEYS = ("feedOwnerActorId", "repos", "reviewersRequested", "ghLogin")
+
+# The credentials a devloop container holds (the provisioner's variable
+# collection, design §2.6, plus gh's own fallback name). No `config` value
+# may carry one; a shorter value than SECRET_MIN is not a credential and is
+# not matched (a passcode of "1" must not blank every login holding a 1).
+SECRET_ENV = (
+    "GH_TOKEN", "GITHUB_TOKEN", "ALISSA_API_TOKEN", "ALISSA_UI_PASSCODE",
+    "ANTHROPIC_API_KEY", "ANTHROPIC_AUTH_TOKEN", "CLAUDE_CODE_OAUTH_TOKEN",
+)
+SECRET_MIN = 8
 
 
 def _session_grammar() -> "Callable[[str], object]":
@@ -207,6 +241,7 @@ def build_snapshot(
     parse_session: "Callable[[str], object] | None" = None,
     queued: "int | None" = None,
     drain: "Mapping | None" = None,
+    config: "Mapping | None" = None,
 ) -> "dict":
     """The contract body for one pass, from the console's builders.
 
@@ -222,7 +257,10 @@ def build_snapshot(
     `queued` (the undispatched alissa queue items, None when unread) and
     `drain` (the holding drain row, or None) feed the `idle` block, whose
     owed / timers come from the latest poll snapshot and whose live /
-    managed come from `roster` -- the same reading as `sessions`."""
+    managed come from `roster` -- the same reading as `sessions`.
+
+    `config` is the seat's `config_block`, or None to leave the key out
+    (the console's push, which has no derived answer to give)."""
     parse = parse_session or _session_grammar()
     now_ts = heartbeat_at if now is None else now
 
@@ -276,7 +314,7 @@ def build_snapshot(
     )
 
     drift = sources.drift()
-    return {
+    snapshot = {
         "schemaVersion": SCHEMA_VERSION,
         "seat": SEAT,
         "asOf": iso(now_ts),
@@ -294,6 +332,65 @@ def build_snapshot(
         "inbox": inbox,
         "idle": idle,
     }
+    if config is not None:
+        snapshot["config"] = dict(config)
+    return snapshot
+
+
+def _carries_secret(value: str, secrets: "Sequence[str]") -> bool:
+    return any(secret in value for secret in secrets)
+
+
+def config_block(
+    config: Config,
+    *,
+    gh_login: "str | None",
+    environ: "Mapping[str, str] | None" = None,
+) -> "dict":
+    """The seat's own word on what it derived (issue #155): four fields,
+    each from the config the daemon is RUNNING on, never from the raw env.
+
+    * `feedOwnerActorId` -- the bodies-of-work authority under
+      `repos_source: bows` (the token's own actor unless `bow_owners` names
+      one). Null in static mode (no feed is read) and when several owners
+      are trusted (there is no single answer to quote).
+    * `repos` -- the effective allowlist, sorted: under bows the derived
+      union the last refresh bound, in static mode the configured list.
+    * `reviewersRequested` -- the login(s) the handoff requests
+      (`ALISSA_DEV_REVIEWERS` and its fallbacks).
+    * `ghLogin` -- the account the gh token belongs to; null when unknown.
+
+    `environ` (default: the process env) supplies the secrets to scan for:
+    a value carrying one is blanked -- a list entry dropped, a scalar
+    nulled -- and named in a WARNING by field only."""
+    env = os.environ if environ is None else environ
+    secrets = [
+        v for k in SECRET_ENV if len(v := (env.get(k) or "").strip()) >= SECRET_MIN
+    ]
+    owners = config.bow_owners if config.repos_source == REPOS_BOWS else ()
+    block: "dict" = {
+        "feedOwnerActorId": owners[0] if len(owners) == 1 else None,
+        "repos": sorted(config.repos, key=str.casefold),
+        "reviewersRequested": list(config.reviewers),
+        "ghLogin": gh_login or None,
+    }
+    for key in CONFIG_KEYS:
+        value = block[key]
+        if isinstance(value, list):
+            kept = [v for v in value if not _carries_secret(v, secrets)]
+            blanked = len(kept) != len(value)
+            block[key] = kept
+        else:
+            blanked = value is not None and _carries_secret(value, secrets)
+            if blanked:
+                block[key] = None
+        if blanked:
+            log.warning(
+                "fleet vitals: the config block's %s carried a credential "
+                "this process holds -- blanked before sending; check the "
+                "variable it is derived from", key,
+            )
+    return block
 
 
 def encoded_size(snapshot: "Mapping") -> int:
@@ -342,6 +439,7 @@ class FleetVitalsPusher:
         sources: "Sources | None" = None,
         memory_reader: "Callable[[], Mapping | None]" = sysinfo.memory_usage,
         clock: "Callable[[], float]" = time.time,
+        config_reader: "Callable[[], Mapping | None] | None" = None,
     ):
         self.config = config
         self.client = client
@@ -350,10 +448,13 @@ class FleetVitalsPusher:
         )
         self._memory = memory_reader
         self._clock = clock
+        # The `config` block's source (the daemon's `_vitals_config`), or
+        # None -- the console's pusher -- to leave the block out.
+        self._config_reader = config_reader
         self._not_activated_warned = False
-        # Until when the `idle` block is left out (Studio refused it as an
-        # unknown key); 0 = offer it.
-        self._idle_refused_until = 0.0
+        # Per optional block: until when it is left out (Studio refused it
+        # as an unknown key). Absent = offer it.
+        self._refused_until: "dict[str, float]" = {}
         self.last: "dict | None" = None
 
     def push_pass(self, roster: "Sequence[Mapping] | None") -> str:
@@ -373,6 +474,20 @@ class FleetVitalsPusher:
         heartbeat = snaps[0]["ts"] if snaps else now
         return self._push(roster, heartbeat, now)
 
+    def _config(self) -> "Mapping | None":
+        """The `config` block, or None. A reader that fails costs the block,
+        never the snapshot: the rest of the vitals still go out."""
+        if self._config_reader is None:
+            return None
+        try:
+            return self._config_reader()
+        except Exception as exc:
+            log.warning(
+                "fleet vitals: could not derive the config block (%s) — "
+                "pushing the snapshot without it", exc,
+            )
+            return None
+
     def _push(
         self, roster: "Sequence[Mapping] | None", heartbeat: float, now: float,
     ) -> str:
@@ -381,6 +496,7 @@ class FleetVitalsPusher:
                 self.sources, roster=roster, heartbeat_at=heartbeat,
                 now=now, memory=self._memory(),
                 queued=self.sources.queued(), drain=self.sources.drain(),
+                config=self._config(),
             ))
         except Exception as exc:
             log.warning(
@@ -388,16 +504,25 @@ class FleetVitalsPusher:
                 "pushed this pass; the next pass builds a fresh one", exc,
             )
             return FAILED
-        if now < self._idle_refused_until:
-            snapshot.pop("idle", None)
+        for key, until in self._refused_until.items():
+            if now < until:
+                snapshot.pop(key, None)
         self.last = snapshot
         return self._post(snapshot)
 
     @staticmethod
-    def _refuses_idle(exc: AlissaError) -> bool:
-        """A 400 that names the `idle` key: a Studio whose strict schema
-        predates seat parking (the design's lane L3 adds the field)."""
-        return exc.status == 400 and "idle" in str(exc.detail)
+    def _refused_blocks(exc: AlissaError, snapshot: "Mapping") -> "list[str]":
+        """The optional blocks of `snapshot` a 400 names: a Studio whose
+        strict schema predates them (seat parking's lane L3 adds `idle`, the
+        provisioner's lane L5 adds `config`). A word match, so `config`
+        is not read into an unrelated message that merely contains it."""
+        if exc.status != 400:
+            return []
+        detail = str(exc.detail)
+        return [
+            key for key in OPTIONAL_BLOCKS
+            if key in snapshot and re.search(rf"\b{key}\b", detail)
+        ]
 
     def _post(self, snapshot: "dict") -> str:
         try:
@@ -409,16 +534,19 @@ class FleetVitalsPusher:
             self._warn_failed(exc)
             return FAILED
         except AlissaError as exc:
-            if "idle" in snapshot and self._refuses_idle(exc):
-                self._idle_refused_until = self._clock() + IDLE_REPROBE_S
+            refused = self._refused_blocks(exc, snapshot)
+            if refused:
+                until = self._clock() + BLOCK_REPROBE_S
+                for key in refused:
+                    self._refused_until[key] = until
                 log.warning(
-                    "fleet vitals: Studio refused the seat-parking `idle` "
-                    "block (status %s: %s) — its schema predates it; "
-                    "resending without it, and leaving it out for %d min",
-                    exc.status, exc.detail, int(IDLE_REPROBE_S // 60),
+                    "fleet vitals: Studio refused the %s block(s) (status "
+                    "%s: %s) — its schema predates them; resending without "
+                    "them, and leaving them out for %d min",
+                    ", ".join(f"`{k}`" for k in refused), exc.status,
+                    exc.detail, int(BLOCK_REPROBE_S // 60),
                 )
-                trimmed = dict(snapshot)
-                trimmed.pop("idle")
+                trimmed = {k: v for k, v in snapshot.items() if k not in refused}
                 self.last = trimmed
                 return self._post(trimmed)
             self._warn_failed(exc)

alissa/tools/github/devloop/loop.py

@@ -3432,7 +3432,8 @@ class DevWatcher:
         # injectable so a test never opens a socket.
         self.fleet_vitals = fleet_vitals or (
             fleet_vitals_mod.FleetVitalsPusher(
-                config, AlissaClient(base=config.alissa_endpoint)
+                config, AlissaClient(base=config.alissa_endpoint),
+                config_reader=self._vitals_config,
             )
             if config.fleet_vitals_enabled
             else None
@@ -11296,6 +11297,17 @@ class DevWatcher:
             return fleet_vitals_mod.SKIPPED
         return self.fleet_vitals.push_pass(roster.entries)
 
+    def _vitals_config(self) -> dict:
+        """The snapshot's `config` block (issue #155), read off what this
+        watcher RUNS on: `self.config` is re-bound by every allowlist
+        refresh and carries the feed authority `resolve_feed_authority`
+        settled at boot, so the block reports the derived answer, not the
+        configured one. The login is the gh token's (memoised after the
+        first read; a failed read fails the block, never the push)."""
+        return fleet_vitals_mod.config_block(
+            self.config, gh_login=self.github.login
+        )
+
     def _emit_loop_events(
         self,
         issue_results: "list[tuple[str, Decision]]",

alissa/tools/github/devloop/version

@@ -1 +1 @@
-0.8.37
+0.8.39

alissa/tools/github/devloop/webui/__main__.py

@@ -134,9 +134,11 @@ def main(argv: "list[str] | None" = None) -> int:
     )
     server = make_server(app, args.host, args.port)
 
+    # An IPv6 literal is bracketed in a URL (`http://[::]:8080`).
+    shown = f"[{args.host}]" if ":" in args.host else args.host
     print(
         f"alissa-devloop-ui {version.value} -- serving on "
-        f"http://{args.host}:{args.port} (passcode required); "
+        f"http://{shown}:{args.port} (passcode required); "
         f"watching {config.workspace_root}",
         flush=True,
     )

alissa/tools/github/devloop/webui/server.py

@@ -34,6 +34,7 @@ from __future__ import annotations
 
 import json
 import re
+import socket
 import sqlite3
 import sys
 import time
@@ -546,8 +547,30 @@ _REDIRECT_HOME = (
 )
 
 
+class _DualStackServer(ThreadingHTTPServer):
+    """An AF_INET6 listener that also takes IPv4 (as IPv4-mapped addresses).
+
+    Railway's private network resolves `*.railway.internal` to IPv6 only, so
+    a console bound to `0.0.0.0` refuses every in-project caller (issue #159).
+    IPV6_V6ONLY is cleared explicitly rather than trusting the host's
+    net.ipv6.bindv6only default, so `::` is dual-stack wherever it binds."""
+
+    address_family = socket.AF_INET6
+
+    def server_bind(self) -> None:
+        try:
+            self.socket.setsockopt(socket.IPPROTO_IPV6, socket.IPV6_V6ONLY, 0)
+        except (AttributeError, OSError):
+            pass  # a v6-only stack: still serve IPv6 rather than refuse to boot
+        super().server_bind()
+
+
 def make_server(app: App, host: str, port: int) -> ThreadingHTTPServer:
-    server = ThreadingHTTPServer((host, port), Handler)
+    """Bind `host:port`. A host containing ':' is an IPv6 literal (`::` is
+    the dual-stack wildcard); anything else -- `0.0.0.0`, `127.0.0.1` -- keeps
+    the IPv4-only AF_INET listener it always had."""
+    cls = _DualStackServer if ":" in host else ThreadingHTTPServer
+    server = cls((host, port), Handler)
     server.daemon_threads = True
     server.app = app  # type: ignore[attr-defined]
     return server

{alissa_tools_github_devloop-0.8.37.dist-info → alissa_tools_github_devloop-0.8.39.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: alissa-tools-github-devloop
-Version: 0.8.37
+Version: 0.8.39
 Summary: ALISSA-TOOLS-GITHUB-DEVLOOP
 Home-page: https://alissa.app
 Author: Fahera

{alissa_tools_github_devloop-0.8.37.dist-info → alissa_tools_github_devloop-0.8.39.dist-info}/RECORD

@@ -4,29 +4,29 @@ alissa/tools/github/devloop/alissa.py,sha256=TJU4eSZc2MvP35HewCwBKvhPAel32vKjtt3
 alissa/tools/github/devloop/alissa_client.py,sha256=wmpXYWf9ThcLeYnz6gGeDz7gj5BpYjduuVASMc-QOOY,14873
 alissa/tools/github/devloop/bows.py,sha256=pzDNMRk_S78FX7vMNYMlXHxW6VPHPo1Xd2EzFMgVCUM,17325
 alissa/tools/github/devloop/config.py,sha256=VKeyTsXfoRSDltuU1h9UqjrHGE6YvgCQDvimDt3BH58,73330
-alissa/tools/github/devloop/fleet_vitals.py,sha256=1hflMvlpgoNScNkpbnk1__dCOVst50k4MpK5du3TRTs,19157
+alissa/tools/github/devloop/fleet_vitals.py,sha256=Hl2xshweh7A9R0N7fyYRg2WzHN4aNefVlt0TiXCv8zk,24979
 alissa/tools/github/devloop/ghclient.py,sha256=tYUHwmoy9CBBt-jSOz9nuAl8lpMvm1LH4A-wHx25bss,71842
 alissa/tools/github/devloop/hubs.py,sha256=yjnsnSHLG7GNNP8X2hILeAMV6P5n4JGc_IaAxpSP_YQ,18974
 alissa/tools/github/devloop/janitor.py,sha256=R8REoHBeY2cfW7fYJVhKr-F5z9Mjlc-vmv-z4KtvBZc,27360
-alissa/tools/github/devloop/loop.py,sha256=RouSgk3H12qQLD3dOQjY1ZBPA7UkFHOY_Z8NpFaoBvo,590040
+alissa/tools/github/devloop/loop.py,sha256=Md5uX1Euo1T1SZ8x8um-TfirPjeTQsbb8ndQJ36nREs,590672
 alissa/tools/github/devloop/loop_events.py,sha256=tmso0OALqY2yAPW2Fo6ae0sYetQIdIeIYooJ2Sc2cc4,37921
 alissa/tools/github/devloop/parking.py,sha256=2Sys1bh_hG8qbq7cO9RxW1F1kAu3dCWHnvwg_iAFVvY,7987
 alissa/tools/github/devloop/proc.py,sha256=_dDr3g76WEf2DRyLUz1Dzl4KvLVptJant_UZOrRixNk,1649
 alissa/tools/github/devloop/prompts.py,sha256=VzN6ec5eF2wwg7QSCRg52WLcxo-tGbGRgQbc4HSahUc,55169
 alissa/tools/github/devloop/state.py,sha256=uVwhbkogUTjWXXFq-COKzUeYrpuGbHzi05CjfEzAtPA,88668
-alissa/tools/github/devloop/version,sha256=7W_4yIF5Iw00-yOmjC1seGO7Sl01QXfdI21x57lPQcM,7
+alissa/tools/github/devloop/version,sha256=G7Ocfbe12QLl5nILgm4wm9MiFgTZ-m2G2Eqgqg_CJWc,7
 alissa/tools/github/devloop/version.py,sha256=znuuOaitXGrBpbskNy78_rlVpFdtmKmk_3k1ACxZrl0,1418
 alissa/tools/github/devloop/webui/__init__.py,sha256=vdXYoyGYzD7BrJ5lV6XdH8Bpw_pej8-RK0hjfxop7-8,1513
-alissa/tools/github/devloop/webui/__main__.py,sha256=s-xs5dkD2gbxLPDKbJYJvpHThHSO_AwWruKH5giQPSQ,6011
+alissa/tools/github/devloop/webui/__main__.py,sha256=wORyW5AkgsniK0TZcrOrvm_P7Q4Mr-fH-4S6qj9XcgA,6137
 alissa/tools/github/devloop/webui/auth.py,sha256=g9YEDao9nKt-cBEENp7vFqwJ-T8olN6uLiCzVIN8yhA,7890
 alissa/tools/github/devloop/webui/page.py,sha256=4OD3e01ByvVM4Wo04AZyFuyOYTFEMT2lagktZAvyCKk,30862
-alissa/tools/github/devloop/webui/server.py,sha256=vWS8M0e6YTGATO3aWCfo0VavNCB6Crg2SwTPrWMA-EI,25207
+alissa/tools/github/devloop/webui/server.py,sha256=YuUmcng5qdWqSurcuyxH3FKKkBBfrpDtvtZLidJOGiU,26226
 alissa/tools/github/devloop/webui/sources.py,sha256=Ud8357-Ag4qC39V3mlepqnArui9p1fTJ058bAdN29Jc,36730
 alissa/tools/github/devloop/webui/sysinfo.py,sha256=ptlogH9alFv0vZ-pQfyUaA3w-K7LQS3tQHGv0d8Tdlk,9649
-alissa_tools_github_devloop-0.8.37.dist-info/licenses/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
-alissa_tools_github_devloop-0.8.37.dist-info/licenses/NOTICE,sha256=FKstNs3uw_tQod4_1XcFLD1FUTJQXf4FC0oXJAOA_HE,260
-alissa_tools_github_devloop-0.8.37.dist-info/METADATA,sha256=V8srtQbUqAx8sjM9jd-C4UqCSrnRd8JCctu-ACT6Rbk,8093
-alissa_tools_github_devloop-0.8.37.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
-alissa_tools_github_devloop-0.8.37.dist-info/entry_points.txt,sha256=8aC7Ajzx4bu9ZRR37a40IDfuStacvZP5KsAxY1dbFKU,145
-alissa_tools_github_devloop-0.8.37.dist-info/top_level.txt,sha256=DodjDg-l-TWQnlxG-Vuc3G5sB4O7cWGQwe6XrVx3u-A,7
-alissa_tools_github_devloop-0.8.37.dist-info/RECORD,,
+alissa_tools_github_devloop-0.8.39.dist-info/licenses/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
+alissa_tools_github_devloop-0.8.39.dist-info/licenses/NOTICE,sha256=FKstNs3uw_tQod4_1XcFLD1FUTJQXf4FC0oXJAOA_HE,260
+alissa_tools_github_devloop-0.8.39.dist-info/METADATA,sha256=2AAwmlUxY0R_doi3rOjmqej-3vvHiea0iRF7qoWktiU,8093
+alissa_tools_github_devloop-0.8.39.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
+alissa_tools_github_devloop-0.8.39.dist-info/entry_points.txt,sha256=8aC7Ajzx4bu9ZRR37a40IDfuStacvZP5KsAxY1dbFKU,145
+alissa_tools_github_devloop-0.8.39.dist-info/top_level.txt,sha256=DodjDg-l-TWQnlxG-Vuc3G5sB4O7cWGQwe6XrVx3u-A,7
+alissa_tools_github_devloop-0.8.39.dist-info/RECORD,,