omneval-devloop 0.0.2__tar.gz → 0.0.4__tar.gz

{omneval_devloop-0.0.2 → omneval_devloop-0.0.4}/.github/workflows/build-image.yml

@@ -62,24 +62,43 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Wait for the pinned SDK to appear on PyPI
+      - name: Wait for the pinned SDK to be downloadable from PyPI
         if: inputs.wait_for_pypi != ''
         run: |
           pkg_ver='${{ inputs.wait_for_pypi }}'
           name="${pkg_ver%%==*}"
           ver="${pkg_ver##*==}"
           url="https://pypi.org/pypi/${name}/${ver}/json"
-          echo "Waiting for ${pkg_ver} at ${url}"
+          echo "Waiting for ${pkg_ver} files to be downloadable (metadata at ${url})"
+          # The JSON metadata endpoint flips to 200 the instant the release is
+          # registered, but the wheel/sdist files on files.pythonhosted.org lag a
+          # few seconds behind. Polling the metadata alone let the build start in
+          # that window, where uv saw the version, failed to download the file,
+          # and exited 1 (see v0.0.3). So wait until every published file actually
+          # HEADs 200 — the same CDN uv pulls from — not just until metadata exists.
           for i in $(seq 1 40); do
-            code=$(curl -s -o /dev/null -w '%{http_code}' "$url")
-            if [ "$code" = "200" ]; then
-              echo "Found ${pkg_ver} on PyPI (attempt $i)"
-              exit 0
+            file_urls=$(curl -s "$url" | jq -r '.urls[].url')
+            if [ -n "$file_urls" ]; then
+              all_ok=1
+              for fu in $file_urls; do
+                code=$(curl -s -o /dev/null -w '%{http_code}' --head "$fu")
+                if [ "$code" != "200" ]; then
+                  all_ok=0
+                  echo "Attempt $i/40: ${fu##*/} not downloadable yet (HTTP $code)"
+                  break
+                fi
+              done
+              if [ "$all_ok" = "1" ]; then
+                echo "Found all ${pkg_ver} files downloadable (attempt $i)"
+                exit 0
+              fi
+            else
+              echo "Attempt $i/40: ${pkg_ver} metadata not on PyPI yet"
             fi
-            echo "Attempt $i/40: ${pkg_ver} not on PyPI yet (HTTP $code); retrying in 15s"
+            echo "Retrying in 15s"
             sleep 15
           done
-          echo "ERROR: ${pkg_ver} did not appear on PyPI within ~10 minutes"
+          echo "ERROR: ${pkg_ver} files did not become downloadable within ~10 minutes"
           exit 1
 
       - name: Compute sha-<short>-<epoch> tag

omneval_devloop-0.0.4/.github/workflows/publish-devloop-chart.yml

@@ -0,0 +1,50 @@
+name: Test & Lint Devloop Helm Chart
+
+# Validates the devloop Helm chart on pull requests: unit tests (helm-unittest)
+# plus packaging + lint. Packaging and publishing the chart as an OCI artifact to
+# ghcr.io/omneval/charts/devloop happens in release.yml on a v* tag.
+
+on:
+  pull_request:
+
+jobs:
+  unittest:
+    name: Unit test chart
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out the repo
+        uses: actions/checkout@v4
+
+      - name: Set up Helm
+        uses: azure/setup-helm@v4
+        with:
+          # helm-unittest's plugin.yaml uses platformHooks, which requires Helm
+          # >= 3.15; this tracks the Helm 4 line used for local development.
+          version: v4.2.0
+
+      - name: Install helm-unittest plugin
+        run: helm plugin install https://github.com/helm-unittest/helm-unittest --verify=false
+
+      - name: Run chart unit tests
+        run: helm unittest charts/devloop
+
+  lint:
+    name: Package and lint chart
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out the repo
+        uses: actions/checkout@v4
+
+      - name: Set up Helm
+        uses: azure/setup-helm@v4
+        with:
+          version: v4.2.0
+
+      - name: Package chart
+        id: package
+        run: |
+          helm package charts/devloop/ -u -d .cr-release-packages
+          echo "chart=$(ls .cr-release-packages/devloop-*.tgz)" >> "$GITHUB_OUTPUT"
+
+      - name: Lint chart
+        run: helm lint ${{ steps.package.outputs.chart }}

{omneval_devloop-0.0.2 → omneval_devloop-0.0.4}/.github/workflows/release.yml

@@ -87,7 +87,7 @@ jobs:
 
   chart:
     name: Package and push Helm chart
-    needs: test
+    needs: [test, meta]
     runs-on: ubuntu-latest
     permissions:
       packages: write
@@ -109,8 +109,15 @@ jobs:
 
       - name: Package chart
         id: package
+        # The git tag is the single source of truth (see header): override the
+        # placeholder version in Chart.yaml so the chart publishes at the same
+        # semver as the SDK and images. Without --version, helm reads Chart.yaml
+        # and a v0.0.2 tag would publish e.g. chart 0.1.0 — out of step with the
+        # 0.0.2 images.
         run: |
-          helm package charts/devloop/ -u -d .cr-release-packages
+          helm package charts/devloop/ -u -d .cr-release-packages \
+            --version "${{ needs.meta.outputs.version }}" \
+            --app-version "${{ needs.meta.outputs.version }}"
           echo "chart=$(ls .cr-release-packages/devloop-*.tgz)" >> "$GITHUB_OUTPUT"
 
       - name: Lint chart

{omneval_devloop-0.0.2 → omneval_devloop-0.0.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: omneval-devloop
-Version: 0.0.2
+Version: 0.0.4
 License-File: LICENSE
 Requires-Python: >=3.12
 Requires-Dist: fastapi>=0.115.6

omneval_devloop-0.0.4/charts/devloop/Chart.yaml

@@ -0,0 +1,10 @@
+apiVersion: v2
+name: devloop
+description: Helm chart for deploying the devloop components (Temporal Orchestration Worker, Discord Bot, GitHub Issue Poller)
+type: application
+# Placeholder only. The release pipeline (release.yml) packages the chart with
+# --version/--app-version set to the git tag, so the PUBLISHED chart semver always
+# matches the SDK and image releases. This static value is used solely by PR lint
+# and local `helm template`; it is never what gets pushed to the OCI registry.
+version: 0.0.0
+appVersion: "0.0.0"

{omneval_devloop-0.0.2 → omneval_devloop-0.0.4}/charts/devloop/templates/discord-bot-deployment.yaml

@@ -19,6 +19,13 @@ spec:
         app.kubernetes.io/component: discord-bot
         app.kubernetes.io/instance: {{ .Release.Name }}
     spec:
+      {{- if .Values.discordBot.serviceAccountName }}
+      serviceAccountName: {{ .Values.discordBot.serviceAccountName }}
+      {{- end }}
+      {{- with .Values.discordBot.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       containers:
         - name: discord-bot
           image: "{{ .Values.discordBot.image.repository }}:{{ .Values.discordBot.image.tag }}"
@@ -31,11 +38,28 @@ spec:
             - name: TEMPORAL_HOST
               value: {{ .Values.temporalHost | quote }}
             - name: DISCORD_TOKEN
+              {{- if .Values.discordBot.tokenSecret }}
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.discordBot.tokenSecret.name }}
+                  key: {{ .Values.discordBot.tokenSecret.key }}
+              {{- else }}
               value: {{ .Values.discordBot.token | quote }}
+              {{- end }}
+            {{- with .Values.discordBot.applicationIdSecret }}
+            - name: DISCORD_APPLICATION_ID
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .name }}
+                  key: {{ .key }}
+            {{- end }}
             - name: TASK_QUEUE
               value: {{ .Values.discordBot.taskQueue | quote }}
             - name: HEALTH_PORT
               value: {{ .Values.discordBot.healthPort | quote }}
+            {{- with .Values.discordBot.extraEnv }}
+            {{- toYaml . | nindent 12 }}
+            {{- end }}
           {{- include "devloop.healthProbes" . | nindent 10 }}
           {{- if .Values.discordBot.resources }}
           resources:

omneval_devloop-0.0.4/charts/devloop/templates/poller-deployment.yaml

@@ -0,0 +1,103 @@
+{{- include "devloop.validate.temporalHost" . }}
+{{- if and .Values.poller.enabled .Values.poller.projects }}
+{{- range $idx, $project := .Values.poller.projects }}
+{{- $sanitizedRepoName := regexReplaceAll "[^a-zA-Z0-9]" .repo "" | lower | trunc 52 -}}
+{{- /* A Kubernetes label value cannot contain "/" (as in owner/name), so derive a valid value. */ -}}
+{{- $projectLabel := .repo | replace "/" "." | trunc 63 | trimSuffix "." -}}
+{{- if $.Values.poller.persistence.enabled }}
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: {{ $.Release.Name }}-poller-{{ $sanitizedRepoName }}-state
+  labels:
+    {{- include "devloop.labels" $ | nindent 4 }}
+    app.kubernetes.io/component: poller
+    app.kubernetes.io/project: {{ $projectLabel | quote }}
+spec:
+  accessModes:
+    - {{ $.Values.poller.persistence.accessMode }}
+  {{- if $.Values.poller.persistence.storageClassName }}
+  storageClassName: {{ $.Values.poller.persistence.storageClassName }}
+  {{- end }}
+  resources:
+    requests:
+      storage: {{ $.Values.poller.persistence.size }}
+{{- end }}
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ $.Release.Name }}-poller-{{ $sanitizedRepoName }}
+  labels:
+    {{- include "devloop.labels" $ | nindent 4 }}
+    app.kubernetes.io/component: poller
+    app.kubernetes.io/project: {{ $projectLabel | quote }}
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: poller
+      app.kubernetes.io/instance: {{ $.Release.Name }}
+      app.kubernetes.io/project: {{ $projectLabel | quote }}
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/component: poller
+        app.kubernetes.io/instance: {{ $.Release.Name }}
+        app.kubernetes.io/project: {{ $projectLabel | quote }}
+    spec:
+      {{- with $.Values.poller.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      containers:
+        - name: poller
+          image: "{{ $.Values.poller.image.repository }}:{{ $.Values.poller.image.tag }}"
+          imagePullPolicy: {{ $.Values.poller.image.pullPolicy }}
+          ports:
+            - name: health
+              containerPort: {{ $.Values.poller.healthPort }}
+              protocol: TCP
+          env:
+            - name: GITHUB_TOKEN
+              {{- if $.Values.poller.githubTokenSecret }}
+              valueFrom:
+                secretKeyRef:
+                  name: {{ $.Values.poller.githubTokenSecret.name }}
+                  key: {{ $.Values.poller.githubTokenSecret.key }}
+              {{- else }}
+              value: {{ $.Values.poller.githubToken | quote }}
+              {{- end }}
+            - name: GITHUB_REPO
+              value: {{ .repo | quote }}
+            - name: AGENT_LABEL
+              value: {{ default "agent-ready" .label | quote }}
+            - name: WEBHOOK_URL
+              value: {{ .webhookUrl | quote }}
+            - name: POLL_INTERVAL_SECONDS
+              value: {{ $.Values.poller.pollIntervalSeconds | quote }}
+            - name: HEALTH_PORT
+              value: {{ $.Values.poller.healthPort | quote }}
+            {{- if $.Values.poller.persistence.enabled }}
+            - name: STATE_FILE
+              value: {{ printf "%s/state.json" $.Values.poller.persistence.mountPath | quote }}
+            {{- end }}
+          {{- if $.Values.poller.persistence.enabled }}
+          volumeMounts:
+            - name: state
+              mountPath: {{ $.Values.poller.persistence.mountPath }}
+          {{- end }}
+          {{- include "devloop.healthProbes" $ | nindent 10 }}
+          {{- if $.Values.poller.resources }}
+          resources:
+            {{- toYaml $.Values.poller.resources | nindent 12 }}
+          {{- end }}
+      {{- if $.Values.poller.persistence.enabled }}
+      volumes:
+        - name: state
+          persistentVolumeClaim:
+            claimName: {{ $.Release.Name }}-poller-{{ $sanitizedRepoName }}-state
+      {{- end }}
+{{- end }}
+{{- end }}

{omneval_devloop-0.0.2 → omneval_devloop-0.0.4}/charts/devloop/templates/temporal-worker-deployment.yaml

@@ -19,6 +19,13 @@ spec:
         app.kubernetes.io/component: temporal-worker
         app.kubernetes.io/instance: {{ .Release.Name }}
     spec:
+      {{- if .Values.temporalWorker.serviceAccountName }}
+      serviceAccountName: {{ .Values.temporalWorker.serviceAccountName }}
+      {{- end }}
+      {{- with .Values.temporalWorker.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       containers:
         - name: temporal-worker
           image: "{{ .Values.temporalWorker.image.repository }}:{{ .Values.temporalWorker.image.tag }}"
@@ -41,6 +48,9 @@ spec:
               value: {{ .Values.temporalWorker.webhookPort | quote }}
             - name: PROJECTS_FILE
               value: {{ .Values.temporalWorker.projectsFile | quote }}
+            {{- with .Values.temporalWorker.extraEnv }}
+            {{- toYaml . | nindent 12 }}
+            {{- end }}
           {{- include "devloop.healthProbes" . | nindent 10 }}
           {{- if .Values.temporalWorker.resources }}
           resources:

omneval_devloop-0.0.4/charts/devloop/tests/discord-bot_test.yaml

@@ -0,0 +1,43 @@
+suite: discord bot deployment
+templates:
+  - templates/discord-bot-deployment.yaml
+tests:
+  - it: renders nothing when the bot is disabled
+    set:
+      temporalHost: "temporal-frontend.agents.svc:7233"
+      discordBot.enabled: false
+    asserts:
+      - hasDocuments:
+          count: 0
+
+  - it: sources the token from a Secret when tokenSecret is set
+    set:
+      temporalHost: "temporal-frontend.agents.svc:7233"
+      discordBot.tokenSecret:
+        name: discord-homelab-agent-bot
+        key: TOKEN
+    asserts:
+      - containsDocument:
+          kind: Deployment
+          apiVersion: apps/v1
+          name: RELEASE-NAME-discord-bot
+      - contains:
+          path: spec.template.spec.containers[0].env
+          content:
+            name: DISCORD_TOKEN
+            valueFrom:
+              secretKeyRef:
+                name: discord-homelab-agent-bot
+                key: TOKEN
+
+  - it: falls back to a plain token value when no secret is given
+    set:
+      temporalHost: "temporal-frontend.agents.svc:7233"
+      discordBot.tokenSecret: {}
+      discordBot.token: "plain-token"
+    asserts:
+      - contains:
+          path: spec.template.spec.containers[0].env
+          content:
+            name: DISCORD_TOKEN
+            value: "plain-token"

omneval_devloop-0.0.4/charts/devloop/tests/poller_test.yaml

@@ -0,0 +1,120 @@
+suite: poller deployment and PVC
+templates:
+  - templates/poller-deployment.yaml
+tests:
+  - it: renders nothing when the poller is disabled
+    set:
+      temporalHost: "temporal-frontend.agents.svc:7233"
+      poller.enabled: false
+      poller.projects:
+        - repo: "omneval/omneval"
+          webhookUrl: "http://x"
+    asserts:
+      - hasDocuments:
+          count: 0
+
+  - it: renders nothing when no projects are configured
+    set:
+      temporalHost: "temporal-frontend.agents.svc:7233"
+      poller.enabled: true
+      poller.projects: []
+    asserts:
+      - hasDocuments:
+          count: 0
+
+  - it: creates one Deployment per project (no PVC when persistence is off)
+    set:
+      temporalHost: "temporal-frontend.agents.svc:7233"
+      poller.enabled: true
+      poller.persistence.enabled: false
+      poller.projects:
+        - repo: "omneval/omneval"
+          webhookUrl: "http://x"
+        - repo: "omneval/devloop"
+          webhookUrl: "http://x"
+    asserts:
+      - hasDocuments:
+          count: 2
+      - containsDocument:
+          kind: Deployment
+          apiVersion: apps/v1
+          name: RELEASE-NAME-poller-omnevalomneval
+        documentIndex: 0
+      - containsDocument:
+          kind: Deployment
+          apiVersion: apps/v1
+          name: RELEASE-NAME-poller-omnevaldevloop
+        documentIndex: 1
+
+  # --- Regression guard for the bug that blocked install: an owner/name repo
+  # was used verbatim as a label value, which Kubernetes rejects (no "/"). ---
+  - it: derives a label-safe project value (never contains a slash)
+    set:
+      temporalHost: "temporal-frontend.agents.svc:7233"
+      poller.enabled: true
+      poller.persistence.enabled: true
+      poller.projects:
+        - repo: "omneval/omneval"
+          webhookUrl: "http://x"
+    documentIndex: 0
+    asserts:
+      - isKind:
+          of: PersistentVolumeClaim
+      - equal:
+          path: metadata.labels["app.kubernetes.io/project"]
+          value: omneval.omneval
+      - notMatchRegex:
+          path: metadata.labels["app.kubernetes.io/project"]
+          pattern: "/"
+      # Must satisfy the Kubernetes label-value grammar.
+      - matchRegex:
+          path: metadata.labels["app.kubernetes.io/project"]
+          pattern: "^[A-Za-z0-9]([-A-Za-z0-9_.]*[A-Za-z0-9])?$"
+
+  - it: keeps the PVC and its claimName name in sync with the Deployment
+    set:
+      temporalHost: "temporal-frontend.agents.svc:7233"
+      poller.enabled: true
+      poller.persistence.enabled: true
+      poller.persistence.storageClassName: longhorn
+      poller.persistence.size: 100Mi
+      poller.projects:
+        - repo: "omneval/omneval"
+          webhookUrl: "http://x"
+    asserts:
+      - hasDocuments:
+          count: 2
+      - containsDocument:
+          kind: PersistentVolumeClaim
+          apiVersion: v1
+          name: RELEASE-NAME-poller-omnevalomneval-state
+        documentIndex: 0
+      - equal:
+          path: spec.storageClassName
+          value: longhorn
+        documentIndex: 0
+      - equal:
+          path: spec.template.spec.volumes[0].persistentVolumeClaim.claimName
+          value: RELEASE-NAME-poller-omnevalomneval-state
+        documentIndex: 1
+
+  - it: passes the full repo to GITHUB_REPO and defaults the agent label
+    set:
+      temporalHost: "temporal-frontend.agents.svc:7233"
+      poller.enabled: true
+      poller.persistence.enabled: false
+      poller.projects:
+        - repo: "omneval/omneval"
+          webhookUrl: "http://hook"
+    documentIndex: 0
+    asserts:
+      - contains:
+          path: spec.template.spec.containers[0].env
+          content:
+            name: GITHUB_REPO
+            value: "omneval/omneval"
+      - contains:
+          path: spec.template.spec.containers[0].env
+          content:
+            name: AGENT_LABEL
+            value: "agent-ready"

omneval_devloop-0.0.4/charts/devloop/tests/temporal-worker_test.yaml

@@ -0,0 +1,74 @@
+suite: temporal worker deployment and service
+templates:
+  - templates/temporal-worker-deployment.yaml
+  - templates/temporal-worker-service.yaml
+tests:
+  - it: fails when temporalHost is not provided
+    # The validation helper is included in every template; helm aborts the whole
+    # render at the first fail() call, which it attributes to this template.
+    template: templates/temporal-worker-service.yaml
+    set:
+      temporalHost: ""
+    asserts:
+      - failedTemplate:
+          errorMessage: "temporalHost is required but was not set. Provide a value like 'temporal-frontend.agents.svc:7233'"
+
+  - it: renders nothing when the worker is disabled
+    set:
+      temporalHost: "temporal-frontend.agents.svc:7233"
+      temporalWorker.enabled: false
+    asserts:
+      - hasDocuments:
+          count: 0
+
+  - it: names the workload and wires the temporal host
+    template: templates/temporal-worker-deployment.yaml
+    set:
+      temporalHost: "temporal-frontend.agents.svc:7233"
+    asserts:
+      - containsDocument:
+          kind: Deployment
+          apiVersion: apps/v1
+          name: RELEASE-NAME-temporal-worker
+      - contains:
+          path: spec.template.spec.containers[0].env
+          content:
+            name: TEMPORAL_HOST
+            value: "temporal-frontend.agents.svc:7233"
+
+  - it: appends extraEnv verbatim and sets the service account
+    template: templates/temporal-worker-deployment.yaml
+    set:
+      temporalHost: "temporal-frontend.agents.svc:7233"
+      temporalWorker.serviceAccountName: orchestration-worker
+      temporalWorker.extraEnv:
+        - name: ORCHESTRATION_QUEUE
+          value: homelab-orchestration
+    asserts:
+      - equal:
+          path: spec.template.spec.serviceAccountName
+          value: orchestration-worker
+      - contains:
+          path: spec.template.spec.containers[0].env
+          content:
+            name: ORCHESTRATION_QUEUE
+            value: homelab-orchestration
+
+  - it: exposes webhook and health ports on the service
+    template: templates/temporal-worker-service.yaml
+    set:
+      temporalHost: "temporal-frontend.agents.svc:7233"
+      temporalWorker.webhookPort: 8088
+      temporalWorker.healthPort: 8080
+    asserts:
+      - containsDocument:
+          kind: Service
+          apiVersion: v1
+          name: RELEASE-NAME-temporal-worker
+      - contains:
+          path: spec.ports
+          content:
+            name: webhook
+            port: 8088
+            targetPort: webhook
+            protocol: TCP

{omneval_devloop-0.0.2 → omneval_devloop-0.0.4}/charts/devloop/values.yaml

@@ -12,6 +12,20 @@ temporalWorker:
     repository: ghcr.io/omneval/devloop-temporal-worker
     tag: "latest"
     pullPolicy: IfNotPresent
+  # Name of a pre-existing ServiceAccount to run the pod as (e.g. one bound to a
+  # Role that can create Agent Execution Jobs). Empty uses the namespace default.
+  serviceAccountName: ""
+  # Image pull secrets (e.g. when the worker image lives in a private registry).
+  imagePullSecrets: []
+  #   - name: regcred
+  # Extra environment variables appended verbatim to the container. Use this for
+  # consumer-specific config (alternate task queues, custom workflow settings,
+  # agent LLM endpoints, etc.). Entries are standard core/v1 EnvVar objects.
+  extraEnv: []
+  #   - name: ORCHESTRATION_QUEUE
+  #     value: "homelab-orchestration"
+  #   - name: AGENT_MODEL
+  #     value: "openai/my-model"
   # Resource limits for the worker container
   resources: {}
   #   requests:
@@ -40,8 +54,24 @@ discordBot:
     repository: ghcr.io/omneval/devloop-discord-bot
     tag: "latest"
     pullPolicy: IfNotPresent
-  # Discord bot token (use a Kubernetes Secret in production)
+  # Discord bot token. Prefer `tokenSecret` (a Kubernetes Secret reference) over
+  # the plain `token` value, which is only suitable for local/dev use.
   token: ""
+  # tokenSecret: { name: "discord-bot", key: "TOKEN" }
+  tokenSecret: {}
+  # Optional Discord application ID, sourced from a Secret the same way.
+  # applicationIdSecret: { name: "discord-bot", key: "APPLICATION_ID" }
+  applicationIdSecret: {}
+  # Name of a pre-existing ServiceAccount (e.g. one allowed to read/write the
+  # thread-map ConfigMap). Empty uses the namespace default.
+  serviceAccountName: ""
+  # Image pull secrets for a private bot image.
+  imagePullSecrets: []
+  # Extra environment variables appended verbatim (e.g. channel IDs,
+  # K8S_NAMESPACE, CONFIGMAP_NAME). Standard core/v1 EnvVar objects.
+  extraEnv: []
+  #   - name: DISCORD_CHANNEL_APPROVALS
+  #     value: "123456789"
   # Resource limits
   resources: {}
   #   requests:
@@ -64,12 +94,27 @@ discordBot:
 # GITHUB_TOKEN is shared across all pollers; repo-specific fields are per-entry.
 poller:
   enabled: true
-  # Shared GitHub token for all poller instances (use a Kubernetes Secret)
+  # Shared GitHub token for all poller instances. Prefer `githubTokenSecret`
+  # (a Kubernetes Secret reference) over the plain `githubToken` value.
   githubToken: ""
+  # githubTokenSecret: { name: "agent-github-token", key: "GITHUB_TOKEN" }
+  githubTokenSecret: {}
   image:
     repository: ghcr.io/omneval/devloop-poller
     tag: "latest"
     pullPolicy: IfNotPresent
+  # Image pull secrets for a private poller image.
+  imagePullSecrets: []
+  # Persist poll state across restarts. Without this the poller re-notifies
+  # every issue on each restart (the state file lives on an emptyDir otherwise).
+  # When enabled, a PVC per poller deployment is created and mounted at
+  # `mountPath`, and STATE_FILE points inside it.
+  persistence:
+    enabled: false
+    storageClassName: ""
+    accessMode: ReadWriteOnce
+    size: 100Mi
+    mountPath: /data
   # Resource limits (applied to all poller instances)
   resources: {}
   #   requests:

omneval_devloop-0.0.2/.github/workflows/publish-devloop-chart.yml

@@ -1,30 +0,0 @@
-name: Lint Devloop Helm Chart
-
-# Validates the devloop Helm chart on pull requests. Packaging and publishing the
-# chart as an OCI artifact to ghcr.io/omneval/charts/devloop happens in
-# release.yml on a v* tag.
-
-on:
-  pull_request:
-
-jobs:
-  lint:
-    name: Package and lint chart
-    runs-on: ubuntu-latest
-    steps:
-      - name: Check out the repo
-        uses: actions/checkout@v4
-
-      - name: Set up Helm
-        uses: azure/setup-helm@v4
-        with:
-          version: v3.14.0
-
-      - name: Package chart
-        id: package
-        run: |
-          helm package charts/devloop/ -u -d .cr-release-packages
-          echo "chart=$(ls .cr-release-packages/devloop-*.tgz)" >> "$GITHUB_OUTPUT"
-
-      - name: Lint chart
-        run: helm lint ${{ steps.package.outputs.chart }}

omneval_devloop-0.0.2/charts/devloop/Chart.yaml

@@ -1,6 +0,0 @@
-apiVersion: v2
-name: devloop
-description: Helm chart for deploying the devloop components (Temporal Orchestration Worker, Discord Bot, GitHub Issue Poller)
-type: application
-version: 0.1.0
-appVersion: "0.1.0"

omneval_devloop-0.0.2/charts/devloop/templates/poller-deployment.yaml

@@ -1,55 +0,0 @@
-{{- include "devloop.validate.temporalHost" . }}
-{{- if and .Values.poller.enabled .Values.poller.projects }}
-{{- range $idx, $project := .Values.poller.projects }}
-{{- $sanitizedRepoName := regexReplaceAll "[^a-zA-Z0-9]" .repo "" | lower | trunc 52 -}}
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: {{ $.Release.Name }}-poller-{{ $sanitizedRepoName }}
-  labels:
-    {{- include "devloop.labels" $ | nindent 4 }}
-    app.kubernetes.io/component: poller
-    app.kubernetes.io/project: {{ .repo | quote }}
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/component: poller
-      app.kubernetes.io/instance: {{ $.Release.Name }}
-      app.kubernetes.io/project: {{ .repo | quote }}
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/component: poller
-        app.kubernetes.io/instance: {{ $.Release.Name }}
-        app.kubernetes.io/project: {{ .repo | quote }}
-    spec:
-      containers:
-        - name: poller
-          image: "{{ $.Values.poller.image.repository }}:{{ $.Values.poller.image.tag }}"
-          imagePullPolicy: {{ $.Values.poller.image.pullPolicy }}
-          ports:
-            - name: health
-              containerPort: {{ $.Values.poller.healthPort }}
-              protocol: TCP
-          env:
-            - name: GITHUB_TOKEN
-              value: {{ $.Values.poller.githubToken | quote }}
-            - name: GITHUB_REPO
-              value: {{ .repo | quote }}
-            - name: AGENT_LABEL
-              value: {{ default "agent-ready" .label | quote }}
-            - name: WEBHOOK_URL
-              value: {{ .webhookUrl | quote }}
-            - name: POLL_INTERVAL_SECONDS
-              value: {{ $.Values.poller.pollIntervalSeconds | quote }}
-            - name: HEALTH_PORT
-              value: {{ $.Values.poller.healthPort | quote }}
-          {{- include "devloop.healthProbes" $ | nindent 10 }}
-          {{- if $.Values.poller.resources }}
-          resources:
-            {{- toYaml $.Values.poller.resources | nindent 12 }}
-          {{- end }}
-{{- end }}
-{{- end }}