omneval-devloop 0.0.2__tar.gz → 0.0.3__tar.gz

{omneval_devloop-0.0.2 → omneval_devloop-0.0.3}/.github/workflows/release.yml

@@ -87,7 +87,7 @@ jobs:
 
   chart:
     name: Package and push Helm chart
-    needs: test
+    needs: [test, meta]
     runs-on: ubuntu-latest
     permissions:
       packages: write
@@ -109,8 +109,15 @@ jobs:
 
       - name: Package chart
         id: package
+        # The git tag is the single source of truth (see header): override the
+        # placeholder version in Chart.yaml so the chart publishes at the same
+        # semver as the SDK and images. Without --version, helm reads Chart.yaml
+        # and a v0.0.2 tag would publish e.g. chart 0.1.0 — out of step with the
+        # 0.0.2 images.
         run: |
-          helm package charts/devloop/ -u -d .cr-release-packages
+          helm package charts/devloop/ -u -d .cr-release-packages \
+            --version "${{ needs.meta.outputs.version }}" \
+            --app-version "${{ needs.meta.outputs.version }}"
           echo "chart=$(ls .cr-release-packages/devloop-*.tgz)" >> "$GITHUB_OUTPUT"
 
       - name: Lint chart

{omneval_devloop-0.0.2 → omneval_devloop-0.0.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: omneval-devloop
-Version: 0.0.2
+Version: 0.0.3
 License-File: LICENSE
 Requires-Python: >=3.12
 Requires-Dist: fastapi>=0.115.6

omneval_devloop-0.0.3/charts/devloop/Chart.yaml

@@ -0,0 +1,10 @@
+apiVersion: v2
+name: devloop
+description: Helm chart for deploying the devloop components (Temporal Orchestration Worker, Discord Bot, GitHub Issue Poller)
+type: application
+# Placeholder only. The release pipeline (release.yml) packages the chart with
+# --version/--app-version set to the git tag, so the PUBLISHED chart semver always
+# matches the SDK and image releases. This static value is used solely by PR lint
+# and local `helm template`; it is never what gets pushed to the OCI registry.
+version: 0.0.0
+appVersion: "0.0.0"

{omneval_devloop-0.0.2 → omneval_devloop-0.0.3}/charts/devloop/templates/discord-bot-deployment.yaml

@@ -19,6 +19,13 @@ spec:
         app.kubernetes.io/component: discord-bot
         app.kubernetes.io/instance: {{ .Release.Name }}
     spec:
+      {{- if .Values.discordBot.serviceAccountName }}
+      serviceAccountName: {{ .Values.discordBot.serviceAccountName }}
+      {{- end }}
+      {{- with .Values.discordBot.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       containers:
         - name: discord-bot
           image: "{{ .Values.discordBot.image.repository }}:{{ .Values.discordBot.image.tag }}"
@@ -31,11 +38,28 @@ spec:
             - name: TEMPORAL_HOST
               value: {{ .Values.temporalHost | quote }}
             - name: DISCORD_TOKEN
+              {{- if .Values.discordBot.tokenSecret }}
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.discordBot.tokenSecret.name }}
+                  key: {{ .Values.discordBot.tokenSecret.key }}
+              {{- else }}
               value: {{ .Values.discordBot.token | quote }}
+              {{- end }}
+            {{- with .Values.discordBot.applicationIdSecret }}
+            - name: DISCORD_APPLICATION_ID
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .name }}
+                  key: {{ .key }}
+            {{- end }}
             - name: TASK_QUEUE
               value: {{ .Values.discordBot.taskQueue | quote }}
             - name: HEALTH_PORT
               value: {{ .Values.discordBot.healthPort | quote }}
+            {{- with .Values.discordBot.extraEnv }}
+            {{- toYaml . | nindent 12 }}
+            {{- end }}
           {{- include "devloop.healthProbes" . | nindent 10 }}
           {{- if .Values.discordBot.resources }}
           resources:

{omneval_devloop-0.0.2 → omneval_devloop-0.0.3}/charts/devloop/templates/poller-deployment.yaml

@@ -2,6 +2,26 @@
 {{- if and .Values.poller.enabled .Values.poller.projects }}
 {{- range $idx, $project := .Values.poller.projects }}
 {{- $sanitizedRepoName := regexReplaceAll "[^a-zA-Z0-9]" .repo "" | lower | trunc 52 -}}
+{{- if $.Values.poller.persistence.enabled }}
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: {{ $.Release.Name }}-poller-{{ $sanitizedRepoName }}-state
+  labels:
+    {{- include "devloop.labels" $ | nindent 4 }}
+    app.kubernetes.io/component: poller
+    app.kubernetes.io/project: {{ .repo | quote }}
+spec:
+  accessModes:
+    - {{ $.Values.poller.persistence.accessMode }}
+  {{- if $.Values.poller.persistence.storageClassName }}
+  storageClassName: {{ $.Values.poller.persistence.storageClassName }}
+  {{- end }}
+  resources:
+    requests:
+      storage: {{ $.Values.poller.persistence.size }}
+{{- end }}
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -25,6 +45,10 @@ spec:
         app.kubernetes.io/instance: {{ $.Release.Name }}
         app.kubernetes.io/project: {{ .repo | quote }}
     spec:
+      {{- with $.Values.poller.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       containers:
         - name: poller
           image: "{{ $.Values.poller.image.repository }}:{{ $.Values.poller.image.tag }}"
@@ -35,7 +59,14 @@ spec:
               protocol: TCP
           env:
             - name: GITHUB_TOKEN
+              {{- if $.Values.poller.githubTokenSecret }}
+              valueFrom:
+                secretKeyRef:
+                  name: {{ $.Values.poller.githubTokenSecret.name }}
+                  key: {{ $.Values.poller.githubTokenSecret.key }}
+              {{- else }}
               value: {{ $.Values.poller.githubToken | quote }}
+              {{- end }}
             - name: GITHUB_REPO
               value: {{ .repo | quote }}
             - name: AGENT_LABEL
@@ -46,10 +77,25 @@ spec:
               value: {{ $.Values.poller.pollIntervalSeconds | quote }}
             - name: HEALTH_PORT
               value: {{ $.Values.poller.healthPort | quote }}
+            {{- if $.Values.poller.persistence.enabled }}
+            - name: STATE_FILE
+              value: {{ printf "%s/state.json" $.Values.poller.persistence.mountPath | quote }}
+            {{- end }}
+          {{- if $.Values.poller.persistence.enabled }}
+          volumeMounts:
+            - name: state
+              mountPath: {{ $.Values.poller.persistence.mountPath }}
+          {{- end }}
           {{- include "devloop.healthProbes" $ | nindent 10 }}
           {{- if $.Values.poller.resources }}
           resources:
             {{- toYaml $.Values.poller.resources | nindent 12 }}
           {{- end }}
+      {{- if $.Values.poller.persistence.enabled }}
+      volumes:
+        - name: state
+          persistentVolumeClaim:
+            claimName: {{ $.Release.Name }}-poller-{{ $sanitizedRepoName }}-state
+      {{- end }}
 {{- end }}
 {{- end }}

{omneval_devloop-0.0.2 → omneval_devloop-0.0.3}/charts/devloop/templates/temporal-worker-deployment.yaml

@@ -19,6 +19,13 @@ spec:
         app.kubernetes.io/component: temporal-worker
         app.kubernetes.io/instance: {{ .Release.Name }}
     spec:
+      {{- if .Values.temporalWorker.serviceAccountName }}
+      serviceAccountName: {{ .Values.temporalWorker.serviceAccountName }}
+      {{- end }}
+      {{- with .Values.temporalWorker.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       containers:
         - name: temporal-worker
           image: "{{ .Values.temporalWorker.image.repository }}:{{ .Values.temporalWorker.image.tag }}"
@@ -41,6 +48,9 @@ spec:
               value: {{ .Values.temporalWorker.webhookPort | quote }}
             - name: PROJECTS_FILE
               value: {{ .Values.temporalWorker.projectsFile | quote }}
+            {{- with .Values.temporalWorker.extraEnv }}
+            {{- toYaml . | nindent 12 }}
+            {{- end }}
           {{- include "devloop.healthProbes" . | nindent 10 }}
           {{- if .Values.temporalWorker.resources }}
           resources:

{omneval_devloop-0.0.2 → omneval_devloop-0.0.3}/charts/devloop/values.yaml

@@ -12,6 +12,20 @@ temporalWorker:
     repository: ghcr.io/omneval/devloop-temporal-worker
     tag: "latest"
     pullPolicy: IfNotPresent
+  # Name of a pre-existing ServiceAccount to run the pod as (e.g. one bound to a
+  # Role that can create Agent Execution Jobs). Empty uses the namespace default.
+  serviceAccountName: ""
+  # Image pull secrets (e.g. when the worker image lives in a private registry).
+  imagePullSecrets: []
+  #   - name: regcred
+  # Extra environment variables appended verbatim to the container. Use this for
+  # consumer-specific config (alternate task queues, custom workflow settings,
+  # agent LLM endpoints, etc.). Entries are standard core/v1 EnvVar objects.
+  extraEnv: []
+  #   - name: ORCHESTRATION_QUEUE
+  #     value: "homelab-orchestration"
+  #   - name: AGENT_MODEL
+  #     value: "openai/my-model"
   # Resource limits for the worker container
   resources: {}
   #   requests:
@@ -40,8 +54,24 @@ discordBot:
     repository: ghcr.io/omneval/devloop-discord-bot
     tag: "latest"
     pullPolicy: IfNotPresent
-  # Discord bot token (use a Kubernetes Secret in production)
+  # Discord bot token. Prefer `tokenSecret` (a Kubernetes Secret reference) over
+  # the plain `token` value, which is only suitable for local/dev use.
   token: ""
+  # tokenSecret: { name: "discord-bot", key: "TOKEN" }
+  tokenSecret: {}
+  # Optional Discord application ID, sourced from a Secret the same way.
+  # applicationIdSecret: { name: "discord-bot", key: "APPLICATION_ID" }
+  applicationIdSecret: {}
+  # Name of a pre-existing ServiceAccount (e.g. one allowed to read/write the
+  # thread-map ConfigMap). Empty uses the namespace default.
+  serviceAccountName: ""
+  # Image pull secrets for a private bot image.
+  imagePullSecrets: []
+  # Extra environment variables appended verbatim (e.g. channel IDs,
+  # K8S_NAMESPACE, CONFIGMAP_NAME). Standard core/v1 EnvVar objects.
+  extraEnv: []
+  #   - name: DISCORD_CHANNEL_APPROVALS
+  #     value: "123456789"
   # Resource limits
   resources: {}
   #   requests:
@@ -64,12 +94,27 @@ discordBot:
 # GITHUB_TOKEN is shared across all pollers; repo-specific fields are per-entry.
 poller:
   enabled: true
-  # Shared GitHub token for all poller instances (use a Kubernetes Secret)
+  # Shared GitHub token for all poller instances. Prefer `githubTokenSecret`
+  # (a Kubernetes Secret reference) over the plain `githubToken` value.
   githubToken: ""
+  # githubTokenSecret: { name: "agent-github-token", key: "GITHUB_TOKEN" }
+  githubTokenSecret: {}
   image:
     repository: ghcr.io/omneval/devloop-poller
     tag: "latest"
     pullPolicy: IfNotPresent
+  # Image pull secrets for a private poller image.
+  imagePullSecrets: []
+  # Persist poll state across restarts. Without this the poller re-notifies
+  # every issue on each restart (the state file lives on an emptyDir otherwise).
+  # When enabled, a PVC per poller deployment is created and mounted at
+  # `mountPath`, and STATE_FILE points inside it.
+  persistence:
+    enabled: false
+    storageClassName: ""
+    accessMode: ReadWriteOnce
+    size: 100Mi
+    mountPath: /data
   # Resource limits (applied to all poller instances)
   resources: {}
   #   requests:

omneval_devloop-0.0.2/charts/devloop/Chart.yaml

@@ -1,6 +0,0 @@
-apiVersion: v2
-name: devloop
-description: Helm chart for deploying the devloop components (Temporal Orchestration Worker, Discord Bot, GitHub Issue Poller)
-type: application
-version: 0.1.0
-appVersion: "0.1.0"