devops-bot-sdk 1.6.34__tar.gz → 1.6.38__tar.gz

{devops_bot_sdk-1.6.34 → devops_bot_sdk-1.6.38}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devops-bot-sdk
-Version: 1.6.34
+Version: 1.6.38
 Summary: DevOps Bot Desktop SDK — thin client for the AgentOS Electron desktop app
 Author: noumanaziz2128
 License-Expression: LicenseRef-Proprietary

{devops_bot_sdk-1.6.34 → devops_bot_sdk-1.6.38}/devops_bot_sdk.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devops-bot-sdk
-Version: 1.6.34
+Version: 1.6.38
 Summary: DevOps Bot Desktop SDK — thin client for the AgentOS Electron desktop app
 Author: noumanaziz2128
 License-Expression: LicenseRef-Proprietary

{devops_bot_sdk-1.6.34 → devops_bot_sdk-1.6.38}/devops_bot_sdk.egg-info/SOURCES.txt

@@ -16,8 +16,10 @@ sdk/crucial.py
 sdk/departments.py
 sdk/estimator.py
 sdk/exceptions.py
+sdk/firewall.py
 sdk/formats.py
 sdk/git_ops.py
+sdk/github_fetch.py
 sdk/github_ingest.py
 sdk/graph_recon.py
 sdk/graphify.py
@@ -38,6 +40,7 @@ sdk/scheduler.py
 sdk/self_report.py
 sdk/self_report_local.py
 sdk/sse.py
+sdk/swagger.py
 sdk/task_file.py
 sdk/task_types.py
 sdk/test.py
@@ -106,13 +109,13 @@ sdk/ui/server.py
 sdk/ui/service.py
 sdk/ui/session.py
 sdk/ui/setup_manager.py
+sdk/ui/swagger.py
 sdk/ui/static/agents.html
 sdk/ui/static/app.js
 sdk/ui/static/chat.html
 sdk/ui/static/custom-agents.html
 sdk/ui/static/default-agents.html
 sdk/ui/static/index.html
-sdk/ui/static/login.html
 sdk/ui/static/report.html
 sdk/ui/static/runs.html
 sdk/ui/static/schedules.html
@@ -142,17 +145,19 @@ tests/test_epic_decompose_run.py
 tests/test_epic_inherited_agent_id.py
 tests/test_epic_session_isolation.py
 tests/test_estimator.py
+tests/test_firewall_open_on_update.py
 tests/test_formats.py
 tests/test_git_action.py
+tests/test_github_fetch.py
 tests/test_github_ingest.py
 tests/test_graph_recon.py
 tests/test_graphify_build.py
 tests/test_graphify_hook_install.py
 tests/test_health.py
+tests/test_intake_job_outcome.py
 tests/test_intake_plan_review.py
 tests/test_journal.py
 tests/test_local_exec_provider.py
-tests/test_otp_login.py
 tests/test_phase_timer.py
 tests/test_plan_new_command.py
 tests/test_plan_run_activity.py
@@ -168,12 +173,15 @@ tests/test_schedule_api.py
 tests/test_scheduler.py
 tests/test_self_report.py
 tests/test_service_token_warning.py
+tests/test_swagger_command.py
 tests/test_task_file_and_plan_run.py
 tests/test_task_file_format_doc.py
 tests/test_ticket_fields.py
 tests/test_ticket_run_resolve_by_id.py
 tests/test_ticket_speed_fixes.py
 tests/test_tier_flag_parity.py
+tests/test_ui_gate.py
+tests/test_ui_lifespan.py
 tests/test_update_timer.py
 tests/test_updater_extras.py
 tests/test_url_access.py

{devops_bot_sdk-1.6.34 → devops_bot_sdk-1.6.38}/devops_bot_sdk.egg-info/entry_points.txt

@@ -2,4 +2,5 @@
 agentos = sdk.cli:main
 agentos-agentd = sdk.agentd:main
 agentos-auto = sdk.run_auto:main
+agentos-swagger = sdk.swagger:main
 agentos-ui = sdk.ui.server:main

{devops_bot_sdk-1.6.34 → devops_bot_sdk-1.6.38}/pyproject.toml

@@ -54,6 +54,7 @@ agentos = "sdk.cli:main"                    # unified CLI: configure/agent/integ
 agentos-auto = "sdk.run_auto:main"          # run orchestrate-auto LOCALLY (co_ token from config)
 agentos-agentd = "sdk.agentd:main"          # long-running custom-agent daemon
 agentos-ui = "sdk.ui.server:main"           # local web control panel (needs the [ui] extra)
+agentos-swagger = "sdk.swagger:main"        # where /docs is + can you reach it (= `agentos swagger`)
 
 [project.urls]
 Homepage   = "https://agentos.io"

{devops_bot_sdk-1.6.34 → devops_bot_sdk-1.6.38}/sdk/__init__.py

@@ -1,6 +1,6 @@
 """AgentOS Desktop SDK — thin HTTPS/SSE client for the Electron app.
 
-Version: 1.6.34
+Version: 1.6.38
 
 Public surface:
   BackendClient.from_config()        — create client from ~/.agentos/config.toml
@@ -34,7 +34,7 @@ Rules:
   - All data egress through submit_webhook only
 """
 
-__version__ = "1.6.34"   # SINGLE SOURCE OF TRUTH — bump on every change; pyproject,
+__version__ = "1.6.38"   # SINGLE SOURCE OF TRUTH — bump on every change; pyproject,
 __author__  = "AgentOS"   # sdk.client.SDK_VERSION and the UI server version all read this.
 
 from sdk.client import BackendClient

{devops_bot_sdk-1.6.34 → devops_bot_sdk-1.6.38}/sdk/cli.py

@@ -58,6 +58,30 @@ Command surface:
     agentos integration rm <name>
         Remove a registered integration.
 
+    agentos firewall [--apply] [--any] [--revoke IP] [--port N]
+        Print the host-firewall rules that open the agentos-ui port to every IP in
+        the application allowlist (`sdk.config.get_allowed_ips`), for THIS OS — ufw
+        on Linux, `netsh advfirewall` on Windows, a pf note on macOS. Prints by
+        default; `--apply` executes them and needs root / Administrator. The host
+        firewall is a separate layer the allowlist cannot reach, and the two drifting
+        apart is what silently blinded every VPS when the backend's egress IP moved.
+        `--any` opens the port to every source instead, leaving
+        IPAllowlistMiddleware as the gate — the more robust choice when the
+        backend's egress IP can move, since a stale per-IP kernel rule drops the
+        SYN before the allowlist is ever consulted. This is what runs
+        automatically after a self-update. See sdk.firewall.
+
+    agentos swagger [--open] [--json [PATH]] [--port N]
+        Where the panel's Swagger UI is and whether it can actually be reached:
+        the URL derived from the bind address the service was installed with,
+        whether a co_ token is configured (masked), how many operations the spec
+        has, and a ufw/netsh diff against sdk.config.get_allowed_ips when the HOST
+        firewall would drop the port — a layer the SDK's own allowlist cannot see.
+        `--open` launches a browser; `--json` writes openapi.json from
+        create_app().openapi() with no server running (`--json -` pipes it).
+        Also flags routes registered twice, since the second copy is dead code.
+        Needs the [ui] extra for the route count and --json. See sdk.swagger.
+
     agentos report submit [--date YYYY-MM-DD] (--text "…" | --file PATH)
                           [--project NAME] [--proof PATH|URL]… [--no-wait]
         Report work that never reached Jira or GitHub, attach proofs (local
@@ -139,6 +163,14 @@ def main() -> None:
         _github_command(rest)
         return
 
+    if noun == "firewall":
+        from sdk import firewall
+        sys.exit(firewall.cli(rest))
+
+    if noun == "swagger":
+        from sdk import swagger
+        sys.exit(swagger.cli(rest))
+
     if noun == "report":
         _report_command(rest)
         return
@@ -152,7 +184,7 @@ def main() -> None:
 
 
 def _print_usage() -> None:
-    print("usage: agentos <configure|chat|agent|integration|default-agents|agentd|github|report|browser> ...")
+    print("usage: agentos <configure|chat|agent|integration|default-agents|agentd|github|report|browser|firewall|swagger> ...")
     print()
     print("  agentos configure [--rotate]")
     print("  agentos chat [--product-id ID] [--pv-id ID] [--no-autorun]   # requirements → ticket")
@@ -164,6 +196,9 @@ def _print_usage() -> None:
     print("  agentos github <ingest [--days N]|status>            # PR ingestion; --days N backfills N days")
     print("  agentos report <submit|list|show ID>                 # report work Jira/GitHub never saw")
     print("  agentos browser <login URL|status|logout>            # sign in once; private links become readable")
+    print("  agentos firewall [--apply] [--revoke IP] [--port N]  # open the UI port to the allowlisted IPs")
+    print("  agentos firewall --any [--apply]                     # open the UI port to any source (allowlist is the gate)")
+    print("  agentos swagger [--open] [--json [PATH]]             # where /docs is, and can you reach it")
 
 
 # ── agent ────────────────────────────────────────────────────────────────

{devops_bot_sdk-1.6.34 → devops_bot_sdk-1.6.38}/sdk/client.py

@@ -45,6 +45,13 @@ logger = logging.getLogger(__name__)
 # agents without a lookup on every run.
 _AGENT_ID_CACHE: dict[str, str] = {}
 
+# GitHub access token, keyed by the co_ token that fetched it → (token, expires_at
+# monotonic). Keyed per credential so two clients on one box never share a token.
+# Without this the token is re-fetched on EVERY call, which is what
+# tests/test_ticket_speed_fixes.py::TestGithubTokenCache guards against.
+_GITHUB_TOKEN_CACHE: dict[str, tuple[str, float]] = {}
+_GITHUB_TOKEN_TTL_S = float(os.getenv("AGENTOS_GITHUB_TOKEN_TTL_S", "") or 1800.0)
+
 # GitHub access token, keyed by the co_ token that fetched it → (token, expires_at
 # monotonic). Keyed per credential so two clients on one box never share a token.
 _GITHUB_TOKEN_CACHE: dict[str, tuple[str, float]] = {}
@@ -952,51 +959,113 @@ class BackendClient:
         co_ token. Best-effort: returns None on any failure so a run without a
         connected GitHub account still proceeds (clone/PR steps just won't auth).
         """
+        import time as _time
+
+        now = _time.monotonic()
+        cached = _GITHUB_TOKEN_CACHE.get(self._token)
+        if cached and now < cached[1]:
+            return cached[0]
         record = await self.github_token_record()
-        return (record or {}).get("accessToken") or None
+        token = (record or {}).get("accessToken") or None
+        if token:
+            _GITHUB_TOKEN_CACHE[self._token] = (token, now + _GITHUB_TOKEN_TTL_S)
+        return token
 
-    async def ingest_github_prs(self, since: str | None = None) -> dict:
+    async def ingest_github_prs(self, since: str | None = None) -> dict | None:
         """POST {AI}/api/v1/github/prs — trigger this user's daily PR ingestion.
 
-        The backend resolves the caller's GitHub link server-side from the co_
-        token in ``Authorization`` (see ``docs/GITHUB_SCHEDULING_SDK_MIGRATION.md``);
-        ``githubUsername``/``githubAccessToken`` below are placeholders kept only
-        for backends that predate that resolution and are otherwise ignored.
-        ``since`` (ISO-8601 date) scopes the fetch — omit for "today".
-
-        Returns the backend's ``{status, job_id, status_url, ...}`` envelope.
-        Raises BackendUnreachable / HTTP errors — the github_ingest cron catches
-        and logs these itself rather than treating them as success.
+        The daily trigger. The work runs on the AI backend (LLM summarise, the
+        downstream daily-summary forward, the Qdrant upsert); the SDK only decides
+        WHEN, because only this machine knows its own catch-up watermark.
+
+        The backend resolves the caller's GitHub link server-side from the co_ token
+        in ``Authorization`` and OVERWRITES whatever the body sends
+        (``docs/GITHUB_SCHEDULING_SDK_MIGRATION.md`` §7/§9 — that endpoint used to
+        take a GitHub access token in an unauthenticated body). So this deliberately
+        sends NO credentials: a client that still supplied them would be shipping a
+        secret the server ignores.
+
+        ``since`` is an ISO date (``YYYY-MM-DD``) → the backend's ``date_from``.
+        Omitted means "today", which is what a never-missed run wants; the cron sends
+        the watermark instead so a machine that was off does not lose days.
+
+        Returns the response JSON (``{status, job_id, status_url, ...}``) or **None**
+        on any failure — never raises into the cron. WHY it failed lands in
+        ``self.last_ingest_error`` (``{status, body, retryable}``), which the
+        scheduler needs to tell a busy backend (retry in 30 min) from a rejected
+        request (wait for the next slot).
         """
-        body = [{
+        payload = [{
             "userId": self._user_id_from_token(),
-            "githubUsername": "",
-            "githubAccessToken": "",
-            "apiTokenHash": self._token,
-            "date_from": since,
+            "apiTokenHash": self._token,   # downstream daily-summary Authorization
         }]
-        async with httpx.AsyncClient(timeout=30.0) as client:
-            resp = await client.post(
-                self._url("/api/v1/github/prs"), json=body, headers=self._headers,
-            )
-        _check_status(resp.status_code, self._url("/api/v1/github/prs"))
-        return resp.json()
+        if since:
+            payload[0]["date_from"] = since
+        self.last_ingest_error = {}
+        try:
+            async with httpx.AsyncClient(timeout=60.0) as client:
+                resp = await client.post(
+                    self._url("/api/v1/github/prs"), json=payload, headers=self._headers,
+                )
+            if resp.status_code >= 400:
+                body = resp.text[:500]
+                logger.warning("client.ingest_github_prs failed status=%s body=%s",
+                               resp.status_code, body[:200])
+                self.last_ingest_error = {
+                    "status": resp.status_code,
+                    "body": body,
+                    "retryable": is_retryable_backend_error(resp.status_code, body),
+                }
+                return None
+            return resp.json()
+        except Exception as exc:  # noqa: BLE001 — a cron must not die on a blip
+            logger.warning("client.ingest_github_prs error err=%s", exc)
+            # A transport failure (timeout, reset, DNS blip) is as retryable as an
+            # exhausted pool — the backend may simply be busy.
+            self.last_ingest_error = {"status": 0, "body": str(exc)[:500], "retryable": True}
+            return None
+
+    async def ingest_github_prs_raw(self, prs: list[dict],
+                                    since: str | None = None) -> dict | None:
+        """POST {AI}/api/v1/github/prs/raw — PRs THIS machine already fetched.
 
-    async def report_vps_health(self, payload: dict) -> dict:
-        """PATCH {AI}/api/v1/vps/health — heartbeat this machine's resource usage.
+        The counterpart to :meth:`ingest_github_prs`. That one asks the backend to
+        fetch with a GitHub token the platform has to hold; this one sends records
+        `sdk.github_fetch` produced with the developer's own `gh`, so no GitHub
+        credential exists on the platform at all, the request runs under that
+        developer's own rate limit, and their private repos resolve.
 
-        Feeds the backend's ``contabo_allocation`` row (VPS health shown in chat /
-        activity reports) — a live GET of the same path answers on-demand checks,
-        this PATCH is what keeps that data from going stale. Raises on failure
-        (BackendUnreachable / HTTP error); the vps_health cron logs and continues
-        rather than crashing the loop.
+        Only PR DATA travels. The backend resolves the GitHub username and user id
+        from the ``co_`` token server-side and files the records under those, so this
+        cannot be used to attribute PRs to anyone else.
+
+        Same contract as `ingest_github_prs`: the response JSON on success,
+        **None** on any failure, with the reason in ``self.last_ingest_error``.
         """
-        async with httpx.AsyncClient(timeout=30.0) as client:
-            resp = await client.request(
-                "PATCH", self._url("/api/v1/vps/health"), json=payload, headers=self._headers,
-            )
-        _check_status(resp.status_code, self._url("/api/v1/vps/health"))
-        return resp.json()
+        self.last_ingest_error = {}
+        body: dict = {"prs": prs}
+        if since:
+            body["date_from"] = since
+        try:
+            async with httpx.AsyncClient(timeout=120.0) as client:
+                resp = await client.post(
+                    self._url("/api/v1/github/prs/raw"), json=body, headers=self._headers,
+                )
+            if resp.status_code >= 400:
+                detail = resp.text[:500]
+                logger.warning("client.ingest_github_prs_raw failed status=%s body=%s",
+                               resp.status_code, detail[:200])
+                self.last_ingest_error = {
+                    "status": resp.status_code,
+                    "body": detail,
+                    "retryable": is_retryable_backend_error(resp.status_code, detail),
+                }
+                return None
+            return resp.json()
+        except Exception as exc:  # noqa: BLE001 — a cron must not die on a blip
+            logger.warning("client.ingest_github_prs_raw error err=%s", exc)
+            self.last_ingest_error = {"status": 0, "body": str(exc)[:500], "retryable": True}
+            return None
 
     async def move_to_backlog(self, task_id: str) -> bool:
         """PUT {BE}/tasks-ml/{id} status=backlog (best-effort).

{devops_bot_sdk-1.6.34 → devops_bot_sdk-1.6.38}/sdk/config.py

@@ -192,7 +192,15 @@ def _dotenv_value(key: str) -> str:
 # backend can reach EVERY VPS's /api/ui/* out of the box (no per-VPS .env needed);
 # always allowed, treated as permanent (not removable via the API). Extend/override
 # with AGENTOS_UI_ALLOWED_IPS in .env or the process env.
-_DEFAULT_ALLOWED_IPS: list[str] = ["20.12.201.148"]
+#
+# A LIST, not one value, because the backend's egress address is not stable: when it
+# moved to 20.127.87.169 every VPS silently stopped answering `GET /api/v1/vps/health`
+# (30s hang, then 502 — the SYNs were dropped at the host firewall, observed
+# 2026-09-03). Both addresses stay listed rather than swapping, so a rollback or a
+# blue/green pair does not re-break it. Note the host firewall is a SEPARATE layer this
+# list cannot reach: `sudo ufw allow from <ip> to any port 8765 proto tcp` is still
+# required per VPS. See docs/VPS_HEALTH_AND_GITHUB_INGEST_DIAGNOSIS.md #5.
+_DEFAULT_ALLOWED_IPS: list[str] = ["20.12.201.148", "20.127.87.169"]
 
 
 def _parse_token_list(raw: str) -> list[str]: