orbi-cli 0.7.26__tar.gz → 0.7.28__tar.gz

{orbi_cli-0.7.26 → orbi_cli-0.7.28}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: orbi-cli
-Version: 0.7.26
+Version: 0.7.28
 Summary: Orbi — local AI development worker: claims GitHub Issues, runs Pi in isolated worktrees, and delivers PRs (GitHub Issues + labels are the only state store).
 Author: xqliu
 License-Expression: AGPL-3.0-only OR LicenseRef-Sustainable-Use-1.0

{orbi_cli-0.7.26 → orbi_cli-0.7.28}/pyproject.toml

@@ -44,7 +44,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "orbi-cli"
-version = "0.7.26"
+version = "0.7.28"
 description = "Orbi — local AI development worker: claims GitHub Issues, runs Pi in isolated worktrees, and delivers PRs (GitHub Issues + labels are the only state store)."
 readme = "README.md"
 requires-python = ">=3.14"

{orbi_cli-0.7.26 → orbi_cli-0.7.28}/src/orbi/__init__.py

@@ -18,4 +18,4 @@ the package would shadow the installed package for every process with
 the checkout root on sys.path. The direct-execution compatibility entry
 is `python3 -m orbi.cli` (development path only).
 """
-__version__ = "0.7.26"
+__version__ = "0.7.28"

{orbi_cli-0.7.26 → orbi_cli-0.7.28}/src/orbi/config.py

@@ -401,9 +401,16 @@ def load_config(path: Path, *, check_provider_api_keys: bool = True,
     # Runner-self health alert routing: the orbi repo that
     # receives the watchdog's crash_loop / stale_pickup Issues. Absent ->
     # None (the Runner derives the orbi repo from the deploy home's git
-    # origin); present -> must be a non-empty `owner/repo` string, used
-    # verbatim for fork/private deployments.
-    health_alert_repo = _optional_pi_string(data, "health_alert_repo")
+    # origin when it detects something); a string is kept verbatim — an
+    # explicit empty string turns alert FILING off while the detection and
+    # its `health_degraded` journal event stay (Issue #1985), any other
+    # value is the `owner/repo` the alert is filed in (fork/private
+    # deployments). A non-string fails the load fast.
+    health_alert_repo = data.get("health_alert_repo")
+    if health_alert_repo is not None and not isinstance(
+        health_alert_repo, str,
+    ):
+        raise ValueError("health_alert_repo must be a string")
     repo_dir = _config_path(data.get("repo_dir", "."), base)
     # Deployment home: the orbi source checkout — the editable
     # CLI install source, the systemd/ unit templates, labels.toml and the

{orbi_cli-0.7.26 → orbi_cli-0.7.28}/src/orbi/example_config.toml

@@ -213,7 +213,8 @@ max_concurrency = 1
 # by `orbi doctor` under unmanaged_units.
 # unit_name = "core"
 # Runner health alerts (crash_loop/stale_pickup) go here when set; absent
-# derives the Orbi repository from the deploy-home origin.
+# derives the Orbi repository from the deploy-home origin; "" turns alert
+# Issues OFF while the detection and its health_degraded journal event stay.
 # health_alert_repo = "OWNER/ORBI-REPO"
 # Repository policy may override the ready label for this delivery source.
 # dispatch_label = "ai-ready"

{orbi_cli-0.7.26 → orbi_cli-0.7.28}/src/orbi/runner_health.py

@@ -627,9 +627,13 @@ def _run_health_check_locked(config: RunnerConfig, *, run_command) -> list[str]:
         # `health_alert_repo` override wins (fork/private deployments);
         # otherwise the orbi repo is derived from the deploy home's git
         # origin. Undeterminable -> log and skip (bypass: never guess a
-        # repo, never file the alert in the delivery repo).
+        # repo, never file the alert in the delivery repo). An explicit
+        # empty string (Issue #1985) turns alert FILING off: no
+        # alert-repository lookup at all, while the detection and its
+        # `health_degraded` event stay.
         alert_repo = config.health_alert_repo
-        if not alert_repo:
+        alerts_off = alert_repo == ""
+        if alert_repo is None:
             alert_repo = orbi_repo_from_deploy_home(
                 config.deploy_home, run_command,
             )
@@ -653,13 +657,7 @@ def _run_health_check_locked(config: RunnerConfig, *, run_command) -> list[str]:
                 "health_degraded", check="crash_loop", crashes=crashes,
                 window_minutes=CRASH_WINDOW_MINUTES, kind=kind,
             )
-            if not alert_repo:
-                event(
-                    "health_alert_repo_undetermined",
-                    level=logging.WARNING, check="crash_loop",
-                    crashes=crashes,
-                )
-            else:
+            if alert_repo:
                 detail = (
                     f"service crashed {crashes} times in the last "
                     f"{CRASH_WINDOW_MINUTES} minutes"
@@ -676,6 +674,12 @@ def _run_health_check_locked(config: RunnerConfig, *, run_command) -> list[str]:
                     dispatchable=(kind == "bug"),
                 )
                 alerts.append("crash_loop")
+            elif not alerts_off:
+                event(
+                    "health_alert_repo_undetermined",
+                    level=logging.WARNING, check="crash_loop",
+                    crashes=crashes,
+                )
         # 2. Repeated same-fingerprint run failures (#246 scene).
         for finding in repeated_failure_findings(state):
             key = (
@@ -748,12 +752,7 @@ def _run_health_check_locked(config: RunnerConfig, *, run_command) -> list[str]:
                         time.time() - state["last_pickup_ts"],
                     ),
                 )
-                if not alert_repo:
-                    event(
-                        "health_alert_repo_undetermined",
-                        level=logging.WARNING, check="stale_pickup",
-                    )
-                else:
+                if alert_repo:
                     create_health_issue(
                         alert_repo, "stale_pickup",
                         (
@@ -764,6 +763,11 @@ def _run_health_check_locked(config: RunnerConfig, *, run_command) -> list[str]:
                         run_command=run_command,
                     )
                     alerts.append("stale_pickup")
+                elif not alerts_off:
+                    event(
+                        "health_alert_repo_undetermined",
+                        level=logging.WARNING, check="stale_pickup",
+                    )
     finally:
         save_health_state(state_path, state)
     return alerts

{orbi_cli-0.7.26 → orbi_cli-0.7.28}/src/orbi_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: orbi-cli
-Version: 0.7.26
+Version: 0.7.28
 Summary: Orbi — local AI development worker: claims GitHub Issues, runs Pi in isolated worktrees, and delivers PRs (GitHub Issues + labels are the only state store).
 Author: xqliu
 License-Expression: AGPL-3.0-only OR LicenseRef-Sustainable-Use-1.0

{orbi_cli-0.7.26 → orbi_cli-0.7.28}/tests/test_ci_failure_issue_workflow.py

@@ -3,7 +3,7 @@
 The workflow (`.github/workflows/ci-failure-issue.yml`) is the runtime entry
 of the CI failure triage: it reacts to the COMPLETED runs of the `CI`
 workflow (`on: workflow_run`), holds the minimal explicit permissions
-(`actions: read`, `contents: read`, `issues: write`, `pull-requests: write`)
+(`actions: read`, `contents: read`, `issues: write`, `pull-requests: read`)
 and runs the triage
 script with the workflow token. These tests fail when the workflow is
 missing, stops watching the CI workflow, gains extra permissions, or can
@@ -111,7 +111,9 @@ def test_minimal_explicit_permissions():
         "actions": "read",        # read the completed CI run's jobs
         "contents": "read",       # check out the triage script
         "issues": "write",        # create/update/close the bug Issue
-        "pull-requests": "write",  # resolve PRs and write PR comments
+        # Issue #1988: the triage writes nothing to a PR — only the recovery
+        # guard reads the recovery run's PR (commits/{sha}/pulls).
+        "pull-requests": "read",
     }
 
 
@@ -127,9 +129,8 @@ def test_single_job_runs_the_triage_script():
 
 
 def test_no_step_installs_the_package():
-    """Issue #1776 acceptance 3: the triage imports the engine's one
-    delivery-branch check straight from the checkout's `src` (the script's
-    own sys.path bootstrap), so the job installs nothing."""
+    """The job runs the triage script straight from the checkout, so it
+    installs nothing (the script imports no engine module, Issue #1988)."""
     commands = [
         str(step.get("run", "")) for step in steps_of(load_workflow())
         if step.get("run")