codna 0.2.30__tar.gz → 0.2.32__tar.gz

{codna-0.2.30 → codna-0.2.32}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codna
-Version: 0.2.30
+Version: 0.2.32
 Summary: Local-first repo intelligence and agent fixing for Codna.
 Author: Thyn
 Maintainer: Thyn

{codna-0.2.30 → codna-0.2.32}/codna/__init__.py

@@ -5,4 +5,4 @@ This package is the `codna` CLI. Users never touch "algenta" directly — the en
 is an internal dependency reached over HTTP.
 """
 
-__version__ = "0.2.30"
+__version__ = "0.2.32"

{codna-0.2.30 → codna-0.2.32}/codna/webhook.py

@@ -86,6 +86,18 @@ _FIX_WRITE_ASSOCIATIONS = frozenset({"OWNER", "MEMBER", "COLLABORATOR"})
 # Codna pushes its own fix branches as `codna/<plan-id>` (see packaged_git._validated_branch and
 # fix_run). Recognising that prefix is what stops a CI-failure fix from fixing its own fix PR.
 _CODNA_BRANCH_PREFIX = "codna/"
+# The App's own slug on github.com. A self-hosted install runs under a different slug, so the id in
+# GITHUB_APP_ID is checked too (see _is_own_check_suite).
+_OWN_APP_SLUG = "codna-ai"
+
+
+def _is_own_check_suite(suite: Mapping[str, Any]) -> bool:
+    """True when a check_suite belongs to this App itself (its review / fix Check Runs)."""
+    app = suite.get("app") or {}
+    if str(app.get("slug") or "") == _OWN_APP_SLUG:
+        return True
+    own_id = os.environ.get("GITHUB_APP_ID")
+    return bool(own_id) and str(app.get("id") or "") == str(own_id)
 
 
 def _parse_codna_command(body: Any) -> str | None:
@@ -315,6 +327,16 @@ def classify_event(event: str, payload: Mapping[str, Any]) -> WebhookJob | None:
             # anything but `failure` as fixable would spend a metered run on infrastructure noise —
             # precisely the objection in this function's docstring.
             return None
+        if _is_own_check_suite(suite):
+            # Codna's OWN check suite (the review / fix Check Runs) going red says something about a
+            # Codna job, never about the pull request's code. Without this the App fixed itself: a
+            # failed `codna fix` re-fired a fix (deduped only by the 24 h rule), and on 2026-09-18
+            # GitHub completed the App's suite as `failure` with ZERO check runs two seconds before
+            # the review's first run existed (thyn-ai/telys#123), spending a metered run on nothing.
+            return None
+        if suite.get("latest_check_runs_count") == 0:
+            # A suite that "failed" without a single check run has nothing to fix.
+            return None
         for pr in suite.get("pull_requests") or []:
             number = pr.get("number")
             if not isinstance(number, int):

{codna-0.2.30 → codna-0.2.32}/codna/webhook_procs.py

@@ -176,9 +176,10 @@ def prepare_scratch_root() -> Path | None:
     """Make ``TMPDIR`` this process's default temp dir and clear stale codna scratch from it.
 
     On the hosted webhook ``TMPDIR`` points at the mounted volume (``/data/tmp`` in
-    ``infra/fly/codna-webhook.fly.toml``). The machine's root filesystem is 7.8 GB with ~6.5 GB
-    taken by the image, and one review of a large repository needs ~1.1 GB of scratch (its clone,
-    the checkout, the agent's worktree) -- reviews died there with ENOSPC (thyn-ai/algenta#1023).
+    ``infra/fly/codna-webhook.fly.toml``). The machine's 7.8 GB root filesystem was found 6.5 GB
+    full of ephemeral data no ``du`` could see (a restart cleared it; the image itself is small),
+    and one review of a large repository needs ~1.1 GB of scratch (its clone, the checkout, the
+    agent's worktree) -- reviews died there with ENOSPC (thyn-ai/algenta#1023).
     Everything a job creates lands under this root: the worker's per-job directory is made here
     and the job's own TMPDIR points inside it. Every ``codna-*`` directory still present when the
     process starts belongs to a job that no longer exists (a previous process killed mid-job, or an

{codna-0.2.30 → codna-0.2.32}/codna.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codna
-Version: 0.2.30
+Version: 0.2.32
 Summary: Local-first repo intelligence and agent fixing for Codna.
 Author: Thyn
 Maintainer: Thyn

{codna-0.2.30 → codna-0.2.32}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "codna"
-version = "0.2.30"
+version = "0.2.32"
 description = "Local-first repo intelligence and agent fixing for Codna."
 readme = "README.md"
 requires-python = ">=3.10"

{codna-0.2.30 → codna-0.2.32}/tests/test_webhook.py

@@ -43,7 +43,7 @@ def test_verify_signature_rejects_missing_or_malformed_header():
     assert verify_signature("", body, _sign("", body)) is False       # no secret configured
 
 
-def _check_suite_payload(conclusion="failure", pull_requests=None):
+def _check_suite_payload(conclusion="failure", pull_requests=None, app=None, check_runs=3):
     return {
         "action": "completed",
         "repository": {"full_name": "acme/app"},
@@ -52,6 +52,8 @@ def _check_suite_payload(conclusion="failure", pull_requests=None):
             "conclusion": conclusion,
             "head_sha": "abc123",
             "pull_requests": pull_requests if pull_requests is not None else [],
+            "app": app if app is not None else {"slug": "github-actions", "id": 15368},
+            "latest_check_runs_count": check_runs,
         },
     }
 
@@ -91,6 +93,30 @@ def test_classify_check_suite_failure_on_a_pull_request_is_a_fix_job():
     assert (job.context or {}).get("head_ref") == "feature/login"
 
 
+def test_classify_check_suite_ignores_codnas_own_check_suite():
+    """REGRESSION (2026-09-18, thyn-ai/telys#123): GitHub completed the App's OWN check suite as
+    `failure` with zero check runs, two seconds before the review's first run existed, and the App
+    enqueued a fix for it -- a metered run to fix a Codna job, not the PR's code. A failed
+    `codna fix` run had the same effect on other PRs. Our own suite is never a CI failure."""
+    payload = _check_suite_payload("failure", [_pr()], app={"slug": "codna-ai", "id": 4061960})
+    assert classify_event("check_suite", payload) is None
+
+
+def test_classify_check_suite_ignores_a_self_hosted_installs_own_app_by_id(monkeypatch):
+    """A self-hosted App runs under another slug; GITHUB_APP_ID identifies it instead."""
+    monkeypatch.setenv("GITHUB_APP_ID", "777")
+    own = _check_suite_payload("failure", [_pr()], app={"slug": "acme-codna", "id": 777})
+    other = _check_suite_payload("failure", [_pr()], app={"slug": "acme-ci", "id": 778})
+    assert classify_event("check_suite", own) is None
+    assert classify_event("check_suite", other) is not None
+
+
+def test_classify_check_suite_with_no_check_runs_is_not_fixable():
+    """A suite that 'failed' without a single check run has nothing to fix."""
+    payload = _check_suite_payload("failure", [_pr()], check_runs=0)
+    assert classify_event("check_suite", payload) is None
+
+
 def test_classify_check_suite_ignores_codnas_own_fix_prs():
     """Codna pushes fix branches as `codna/<plan>`. Their CI runs like any other, so without this
     a red fix PR triggers a fix OF THE FIX, and so on -- an unbounded loop that spends a metered