omneval-devloop 0.0.1__tar.gz → 0.0.3__tar.gz

{omneval_devloop-0.0.1 → omneval_devloop-0.0.3}/.github/workflows/build-agent-base-image.yml

@@ -31,11 +31,13 @@ jobs:
       - name: Install uv
         uses: astral-sh/setup-uv@v5
         with:
-          version: "0.9.11"
+          version: "0.11.18"
 
+      # Run from the repo root so uv uses the root project (local omneval-devloop),
+      # which provides devloop.shared that entrypoint.py imports — rather than the
+      # image's own pyproject.toml (whose heavy deps the mocked tests don't need).
       - name: Run entrypoint tests
-        working-directory: images/agent-base
-        run: uv run --with pytest --with pytest-asyncio pytest -q
+        run: uv run --with pytest --with pytest-asyncio pytest images/agent-base -q
 
   build_and_push:
     name: Build and push agent-base to GHCR

{omneval_devloop-0.0.1 → omneval_devloop-0.0.3}/.github/workflows/ci.yml

@@ -18,7 +18,7 @@ jobs:
       - name: Install uv
         uses: astral-sh/setup-uv@v5
         with:
-          version: "0.9.11"
+          version: "0.11.18"
 
       - name: Install dependencies
         run: uv sync --all-groups

{omneval_devloop-0.0.1 → omneval_devloop-0.0.3}/.github/workflows/publish-discord-bot-image.yml

@@ -33,7 +33,7 @@ jobs:
       - name: Install uv
         uses: astral-sh/setup-uv@v5
         with:
-          version: "0.9.11"
+          version: "0.11.18"
 
       - name: Run tests
         working-directory: images/discord-bot

{omneval_devloop-0.0.1 → omneval_devloop-0.0.3}/.github/workflows/publish-poller-image.yml

@@ -34,7 +34,7 @@ jobs:
       - name: Install uv
         uses: astral-sh/setup-uv@v5
         with:
-          version: "0.9.11"
+          version: "0.11.18"
 
       - name: Run tests
         working-directory: images/poller

{omneval_devloop-0.0.1 → omneval_devloop-0.0.3}/.github/workflows/release.yml

@@ -50,7 +50,7 @@ jobs:
       - name: Install uv
         uses: astral-sh/setup-uv@v5
         with:
-          version: "0.9.11"
+          version: "0.11.18"
 
       - name: Install dependencies
         run: uv sync --all-groups
@@ -87,7 +87,7 @@ jobs:
 
   chart:
     name: Package and push Helm chart
-    needs: test
+    needs: [test, meta]
     runs-on: ubuntu-latest
     permissions:
       packages: write
@@ -109,8 +109,15 @@ jobs:
 
       - name: Package chart
         id: package
+        # The git tag is the single source of truth (see header): override the
+        # placeholder version in Chart.yaml so the chart publishes at the same
+        # semver as the SDK and images. Without --version, helm reads Chart.yaml
+        # and a v0.0.2 tag would publish e.g. chart 0.1.0 — out of step with the
+        # 0.0.2 images.
         run: |
-          helm package charts/devloop/ -u -d .cr-release-packages
+          helm package charts/devloop/ -u -d .cr-release-packages \
+            --version "${{ needs.meta.outputs.version }}" \
+            --app-version "${{ needs.meta.outputs.version }}"
           echo "chart=$(ls .cr-release-packages/devloop-*.tgz)" >> "$GITHUB_OUTPUT"
 
       - name: Lint chart

omneval_devloop-0.0.3/PKG-INFO

@@ -0,0 +1,11 @@
+Metadata-Version: 2.4
+Name: omneval-devloop
+Version: 0.0.3
+License-File: LICENSE
+Requires-Python: >=3.12
+Requires-Dist: fastapi>=0.115.6
+Requires-Dist: httpx>=0.28.1
+Requires-Dist: kubernetes>=33.1
+Requires-Dist: pyyaml>=6.0.2
+Requires-Dist: temporalio>=1.27.2
+Requires-Dist: uvicorn>=0.34.0

omneval_devloop-0.0.3/charts/devloop/Chart.yaml

@@ -0,0 +1,10 @@
+apiVersion: v2
+name: devloop
+description: Helm chart for deploying the devloop components (Temporal Orchestration Worker, Discord Bot, GitHub Issue Poller)
+type: application
+# Placeholder only. The release pipeline (release.yml) packages the chart with
+# --version/--app-version set to the git tag, so the PUBLISHED chart semver always
+# matches the SDK and image releases. This static value is used solely by PR lint
+# and local `helm template`; it is never what gets pushed to the OCI registry.
+version: 0.0.0
+appVersion: "0.0.0"

{omneval_devloop-0.0.1 → omneval_devloop-0.0.3}/charts/devloop/templates/discord-bot-deployment.yaml

@@ -19,6 +19,13 @@ spec:
         app.kubernetes.io/component: discord-bot
         app.kubernetes.io/instance: {{ .Release.Name }}
     spec:
+      {{- if .Values.discordBot.serviceAccountName }}
+      serviceAccountName: {{ .Values.discordBot.serviceAccountName }}
+      {{- end }}
+      {{- with .Values.discordBot.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       containers:
         - name: discord-bot
           image: "{{ .Values.discordBot.image.repository }}:{{ .Values.discordBot.image.tag }}"
@@ -31,11 +38,28 @@ spec:
             - name: TEMPORAL_HOST
               value: {{ .Values.temporalHost | quote }}
             - name: DISCORD_TOKEN
+              {{- if .Values.discordBot.tokenSecret }}
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.discordBot.tokenSecret.name }}
+                  key: {{ .Values.discordBot.tokenSecret.key }}
+              {{- else }}
               value: {{ .Values.discordBot.token | quote }}
+              {{- end }}
+            {{- with .Values.discordBot.applicationIdSecret }}
+            - name: DISCORD_APPLICATION_ID
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .name }}
+                  key: {{ .key }}
+            {{- end }}
             - name: TASK_QUEUE
               value: {{ .Values.discordBot.taskQueue | quote }}
             - name: HEALTH_PORT
               value: {{ .Values.discordBot.healthPort | quote }}
+            {{- with .Values.discordBot.extraEnv }}
+            {{- toYaml . | nindent 12 }}
+            {{- end }}
           {{- include "devloop.healthProbes" . | nindent 10 }}
           {{- if .Values.discordBot.resources }}
           resources:

{omneval_devloop-0.0.1 → omneval_devloop-0.0.3}/charts/devloop/templates/poller-deployment.yaml

@@ -2,6 +2,26 @@
 {{- if and .Values.poller.enabled .Values.poller.projects }}
 {{- range $idx, $project := .Values.poller.projects }}
 {{- $sanitizedRepoName := regexReplaceAll "[^a-zA-Z0-9]" .repo "" | lower | trunc 52 -}}
+{{- if $.Values.poller.persistence.enabled }}
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: {{ $.Release.Name }}-poller-{{ $sanitizedRepoName }}-state
+  labels:
+    {{- include "devloop.labels" $ | nindent 4 }}
+    app.kubernetes.io/component: poller
+    app.kubernetes.io/project: {{ .repo | quote }}
+spec:
+  accessModes:
+    - {{ $.Values.poller.persistence.accessMode }}
+  {{- if $.Values.poller.persistence.storageClassName }}
+  storageClassName: {{ $.Values.poller.persistence.storageClassName }}
+  {{- end }}
+  resources:
+    requests:
+      storage: {{ $.Values.poller.persistence.size }}
+{{- end }}
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -25,6 +45,10 @@ spec:
         app.kubernetes.io/instance: {{ $.Release.Name }}
         app.kubernetes.io/project: {{ .repo | quote }}
     spec:
+      {{- with $.Values.poller.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       containers:
         - name: poller
           image: "{{ $.Values.poller.image.repository }}:{{ $.Values.poller.image.tag }}"
@@ -35,7 +59,14 @@ spec:
               protocol: TCP
           env:
             - name: GITHUB_TOKEN
+              {{- if $.Values.poller.githubTokenSecret }}
+              valueFrom:
+                secretKeyRef:
+                  name: {{ $.Values.poller.githubTokenSecret.name }}
+                  key: {{ $.Values.poller.githubTokenSecret.key }}
+              {{- else }}
               value: {{ $.Values.poller.githubToken | quote }}
+              {{- end }}
             - name: GITHUB_REPO
               value: {{ .repo | quote }}
             - name: AGENT_LABEL
@@ -46,10 +77,25 @@ spec:
               value: {{ $.Values.poller.pollIntervalSeconds | quote }}
             - name: HEALTH_PORT
               value: {{ $.Values.poller.healthPort | quote }}
+            {{- if $.Values.poller.persistence.enabled }}
+            - name: STATE_FILE
+              value: {{ printf "%s/state.json" $.Values.poller.persistence.mountPath | quote }}
+            {{- end }}
+          {{- if $.Values.poller.persistence.enabled }}
+          volumeMounts:
+            - name: state
+              mountPath: {{ $.Values.poller.persistence.mountPath }}
+          {{- end }}
           {{- include "devloop.healthProbes" $ | nindent 10 }}
           {{- if $.Values.poller.resources }}
           resources:
             {{- toYaml $.Values.poller.resources | nindent 12 }}
           {{- end }}
+      {{- if $.Values.poller.persistence.enabled }}
+      volumes:
+        - name: state
+          persistentVolumeClaim:
+            claimName: {{ $.Release.Name }}-poller-{{ $sanitizedRepoName }}-state
+      {{- end }}
 {{- end }}
 {{- end }}

{omneval_devloop-0.0.1 → omneval_devloop-0.0.3}/charts/devloop/templates/temporal-worker-deployment.yaml

@@ -19,6 +19,13 @@ spec:
         app.kubernetes.io/component: temporal-worker
         app.kubernetes.io/instance: {{ .Release.Name }}
     spec:
+      {{- if .Values.temporalWorker.serviceAccountName }}
+      serviceAccountName: {{ .Values.temporalWorker.serviceAccountName }}
+      {{- end }}
+      {{- with .Values.temporalWorker.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       containers:
         - name: temporal-worker
           image: "{{ .Values.temporalWorker.image.repository }}:{{ .Values.temporalWorker.image.tag }}"
@@ -41,6 +48,9 @@ spec:
               value: {{ .Values.temporalWorker.webhookPort | quote }}
             - name: PROJECTS_FILE
               value: {{ .Values.temporalWorker.projectsFile | quote }}
+            {{- with .Values.temporalWorker.extraEnv }}
+            {{- toYaml . | nindent 12 }}
+            {{- end }}
           {{- include "devloop.healthProbes" . | nindent 10 }}
           {{- if .Values.temporalWorker.resources }}
           resources:

{omneval_devloop-0.0.1 → omneval_devloop-0.0.3}/charts/devloop/values.yaml

@@ -12,6 +12,20 @@ temporalWorker:
     repository: ghcr.io/omneval/devloop-temporal-worker
     tag: "latest"
     pullPolicy: IfNotPresent
+  # Name of a pre-existing ServiceAccount to run the pod as (e.g. one bound to a
+  # Role that can create Agent Execution Jobs). Empty uses the namespace default.
+  serviceAccountName: ""
+  # Image pull secrets (e.g. when the worker image lives in a private registry).
+  imagePullSecrets: []
+  #   - name: regcred
+  # Extra environment variables appended verbatim to the container. Use this for
+  # consumer-specific config (alternate task queues, custom workflow settings,
+  # agent LLM endpoints, etc.). Entries are standard core/v1 EnvVar objects.
+  extraEnv: []
+  #   - name: ORCHESTRATION_QUEUE
+  #     value: "homelab-orchestration"
+  #   - name: AGENT_MODEL
+  #     value: "openai/my-model"
   # Resource limits for the worker container
   resources: {}
   #   requests:
@@ -40,8 +54,24 @@ discordBot:
     repository: ghcr.io/omneval/devloop-discord-bot
     tag: "latest"
     pullPolicy: IfNotPresent
-  # Discord bot token (use a Kubernetes Secret in production)
+  # Discord bot token. Prefer `tokenSecret` (a Kubernetes Secret reference) over
+  # the plain `token` value, which is only suitable for local/dev use.
   token: ""
+  # tokenSecret: { name: "discord-bot", key: "TOKEN" }
+  tokenSecret: {}
+  # Optional Discord application ID, sourced from a Secret the same way.
+  # applicationIdSecret: { name: "discord-bot", key: "APPLICATION_ID" }
+  applicationIdSecret: {}
+  # Name of a pre-existing ServiceAccount (e.g. one allowed to read/write the
+  # thread-map ConfigMap). Empty uses the namespace default.
+  serviceAccountName: ""
+  # Image pull secrets for a private bot image.
+  imagePullSecrets: []
+  # Extra environment variables appended verbatim (e.g. channel IDs,
+  # K8S_NAMESPACE, CONFIGMAP_NAME). Standard core/v1 EnvVar objects.
+  extraEnv: []
+  #   - name: DISCORD_CHANNEL_APPROVALS
+  #     value: "123456789"
   # Resource limits
   resources: {}
   #   requests:
@@ -64,12 +94,27 @@ discordBot:
 # GITHUB_TOKEN is shared across all pollers; repo-specific fields are per-entry.
 poller:
   enabled: true
-  # Shared GitHub token for all poller instances (use a Kubernetes Secret)
+  # Shared GitHub token for all poller instances. Prefer `githubTokenSecret`
+  # (a Kubernetes Secret reference) over the plain `githubToken` value.
   githubToken: ""
+  # githubTokenSecret: { name: "agent-github-token", key: "GITHUB_TOKEN" }
+  githubTokenSecret: {}
   image:
     repository: ghcr.io/omneval/devloop-poller
     tag: "latest"
     pullPolicy: IfNotPresent
+  # Image pull secrets for a private poller image.
+  imagePullSecrets: []
+  # Persist poll state across restarts. Without this the poller re-notifies
+  # every issue on each restart (the state file lives on an emptyDir otherwise).
+  # When enabled, a PVC per poller deployment is created and mounted at
+  # `mountPath`, and STATE_FILE points inside it.
+  persistence:
+    enabled: false
+    storageClassName: ""
+    accessMode: ReadWriteOnce
+    size: 100Mi
+    mountPath: /data
   # Resource limits (applied to all poller instances)
   resources: {}
   #   requests:

{omneval_devloop-0.0.1 → omneval_devloop-0.0.3}/images/agent-base/Dockerfile

@@ -4,7 +4,7 @@
 
 FROM python:3.12-slim
 
-COPY --from=ghcr.io/astral-sh/uv:0.11.17 /uv /uvx /bin/
+COPY --from=ghcr.io/astral-sh/uv:0.11.18 /uv /uvx /bin/
 
 ARG GH_VERSION=2.93.0
 ARG KUBECTL_VERSION=1.34.1
@@ -45,21 +45,23 @@ RUN curl -fsSL --retry 5 --retry-delay 5 --max-time 300 \
     "https://github.com/argoproj/argo-cd/releases/download/v${ARGOCD_VERSION}/argocd-linux-amd64" \
     && chmod +x /usr/local/bin/argocd
 
-# Python SDKs: OpenHands agent runtime + OTLP exporter (omneval tracing).
-# omneval-devloop brings the shared Agent Job protocol (devloop.shared) plus its
-# pinned Temporal + kubernetes clients, so both the worker and this image use one
-# definition of the protocol.
+# Runtime Python dependencies are declared in pyproject.toml (OpenHands agent
+# runtime, OTLP tracing exporter, and omneval-devloop — the shared Agent Job
+# protocol, devloop.shared). Installed --system; no first-party package is built.
 #
 # SDK_VERSION pins omneval-devloop to the exact release on PyPI. The release
 # pipeline (release.yml) passes the tag version and only builds this image after
 # the PyPI publish has landed, so the baked SDK always matches the image's semver
-# tag. Left empty on continuous (main) builds, where the latest release is fine.
+# tag. Left empty on continuous (main) builds, where the latest release is used.
 ARG SDK_VERSION=
-RUN UV_HTTP_TIMEOUT=300 uv pip install --system --no-cache \
-    "openhands-ai==1.7.0" \
-    "opentelemetry-sdk>=1.33.1" \
-    "opentelemetry-exporter-otlp-proto-http>=1.33.1" \
-    "omneval-devloop${SDK_VERSION:+==$SDK_VERSION}"
+COPY pyproject.toml /tmp/agent-base/pyproject.toml
+RUN if [ -n "$SDK_VERSION" ]; then \
+        echo "omneval-devloop==$SDK_VERSION" > /tmp/sdk-constraint.txt; \
+    fi; \
+    UV_HTTP_TIMEOUT=300 uv pip install --system --no-cache \
+        ${SDK_VERSION:+--constraint /tmp/sdk-constraint.txt} \
+        /tmp/agent-base \
+    && rm -rf /tmp/agent-base /tmp/sdk-constraint.txt
 
 # Agent Execution Job entrypoint (issues #18/#19). Project repos are cloned at
 # runtime; this is the only application code baked into the image.

omneval_devloop-0.0.3/images/agent-base/pyproject.toml

@@ -0,0 +1,29 @@
+[project]
+name = "devloop-agent-base"
+version = "0.1.0"
+requires-python = ">=3.12"
+# Runtime dependencies for the Agent Execution Job toolchain image:
+#   - openhands-ai: the agent runtime
+#   - opentelemetry-*: OTLP tracing export (omneval tracing)
+#   - omneval-devloop: the shared Agent Job protocol (devloop.shared); pinned to
+#     the released SDK at build time via the SDK_VERSION build arg (see Dockerfile)
+dependencies = [
+    "openhands-ai==1.7.0",
+    "opentelemetry-sdk>=1.33.1",
+    "opentelemetry-exporter-otlp-proto-http>=1.33.1",
+    "omneval-devloop",
+]
+
+# The only first-party code (entrypoint.py, prompts/) is COPYed into the image
+# separately, so the build must not auto-discover/package modules — an empty
+# py-modules list makes `uv pip install .` resolve dependencies only.
+[build-system]
+requires = ["setuptools>=61"]
+build-backend = "setuptools.build_meta"
+
+[tool.setuptools]
+py-modules = []
+
+# uv project commands (uv run) install dependencies but do not build this app.
+[tool.uv]
+package = false

{omneval_devloop-0.0.1 → omneval_devloop-0.0.3}/images/discord-bot/Dockerfile

@@ -1,7 +1,7 @@
 # syntax=docker/dockerfile:1
 FROM python:3.12-slim
 
-COPY --from=ghcr.io/astral-sh/uv:0.11.17 /uv /uvx /bin/
+COPY --from=ghcr.io/astral-sh/uv:0.11.18 /uv /uvx /bin/
 
 WORKDIR /app
 

{omneval_devloop-0.0.1 → omneval_devloop-0.0.3}/images/poller/Dockerfile

@@ -2,7 +2,7 @@
 
 FROM python:3.12-slim
 
-COPY --from=ghcr.io/astral-sh/uv:0.11.17 /uv /uvx /bin/
+COPY --from=ghcr.io/astral-sh/uv:0.11.18 /uv /uvx /bin/
 
 WORKDIR /app
 

{omneval_devloop-0.0.1 → omneval_devloop-0.0.3}/images/temporal-worker/Dockerfile

@@ -15,13 +15,21 @@
 
 FROM python:3.12-slim
 
-COPY --from=ghcr.io/astral-sh/uv:0.11.17 /uv /uvx /bin/
+COPY --from=ghcr.io/astral-sh/uv:0.11.18 /uv /uvx /bin/
 
 WORKDIR /app
 
+# Runtime dependencies (just omneval-devloop) are declared in pyproject.toml.
+# SDK_VERSION pins omneval-devloop to the exact release when set (release builds);
+# empty on continuous builds, which take the latest release.
 ARG SDK_VERSION=
-RUN UV_HTTP_TIMEOUT=300 uv pip install --system --no-cache \
-    "omneval-devloop${SDK_VERSION:+==$SDK_VERSION}"
+COPY pyproject.toml ./
+RUN if [ -n "$SDK_VERSION" ]; then \
+        echo "omneval-devloop==$SDK_VERSION" > /tmp/sdk-constraint.txt; \
+    fi; \
+    UV_HTTP_TIMEOUT=300 uv pip install --system --no-cache \
+        ${SDK_VERSION:+--constraint /tmp/sdk-constraint.txt} . \
+    && rm -f /tmp/sdk-constraint.txt
 
 # /healthz (Kubernetes probes) and the webhook receiver port.
 EXPOSE 8080 8088

omneval_devloop-0.0.3/images/temporal-worker/pyproject.toml

@@ -0,0 +1,23 @@
+[project]
+name = "devloop-temporal-worker"
+version = "0.1.0"
+requires-python = ">=3.12"
+# The reference Temporal Orchestration Worker installs only omneval-devloop, which
+# brings the Dev Loop + Summarization workflows and their pinned clients. Pinned to
+# the released SDK at build time via the SDK_VERSION build arg (see Dockerfile).
+dependencies = [
+    "omneval-devloop",
+]
+
+# No first-party package in this image — it runs `python -m devloop.worker` from
+# the installed SDK — so the build resolves dependencies only.
+[build-system]
+requires = ["setuptools>=61"]
+build-backend = "setuptools.build_meta"
+
+[tool.setuptools]
+py-modules = []
+
+# uv project commands (uv run) install dependencies but do not build this app.
+[tool.uv]
+package = false

{omneval_devloop-0.0.1 → omneval_devloop-0.0.3}/pyproject.toml

@@ -2,13 +2,19 @@
 name = "omneval-devloop"
 dynamic = ["version"]
 requires-python = ">=3.12"
+# Floors, not exact pins: omneval-devloop is a library installed alongside other
+# packages (e.g. openhands-ai in the agent-base image), so hard == pins cause
+# resolution conflicts. kubernetes in particular must be >=33.1 to co-install with
+# openhands-ai; the SDK only uses stable client surface
+# (CoreV1Api/BatchV1Api/V1DeleteOptions). Applications that need reproducible
+# builds pin exact versions via their own uv.lock.
 dependencies = [
-    "temporalio==1.27.2",
-    "pyyaml==6.0.2",
-    "kubernetes==32.0.1",
-    "httpx==0.28.1",
-    "fastapi==0.115.6",
-    "uvicorn==0.34.0",
+    "temporalio>=1.27.2",
+    "pyyaml>=6.0.2",
+    "kubernetes>=33.1",
+    "httpx>=0.28.1",
+    "fastapi>=0.115.6",
+    "uvicorn>=0.34.0",
 ]
 
 [dependency-groups]