mirror of
https://github.com/Sea-Haven-Industries/open-swe.git
synced 2026-09-30 13:53:15 +00:00
Adam Moussa
b3fc62da80
Plan step C4 (docs/upstream-sync/domain-reorg/reorg-build-plan.md, approved
decisions 1-2): split the 2,590-line agent/webapp.py monolith into
agent/webhooks/common.py (shared verify/dispatch helpers), agent/api/app.py
(composition), agent/api/health.py (/health + /webhooks/run-complete), and
per-source {github,linear,slack,jira,confluence}_routes.py. Atlassian
Connect lifecycle + descriptor routes (/connect/*) fold into
confluence_routes.py; webapp.py becomes the upstream-shaped compatibility
shim (from .api.app import app). langgraph.json http.app stays
agent.webapp:app via the shim.
Fork content, upstream layout: linear/slack route files verified
content-identical to upstream 8356eb34 and taken verbatim; github_routes is
upstream + the fork's CI auto-fix trigger wiring; jira/confluence routes are
fork-only, transformed to the same common.X / service.X module-attribute
style. All signature verification (GitHub HMAC, Slack, Linear
timestamp-freshness, verify_jira_secret + opt-in HMAC/timestamp/IP
allowlist, Connect JWT/qsh), token-attribution gating, TID-COLLIDE-01 repo
binding, _is_repo_auto_review_enabled gates, and public-repo org gate move
unchanged.
Handlers rewired from webapp.X to common.X; test monkeypatch sites across
26 files + conftest.py + e2e/harness.py retargeted to
webhook_common/handler/route modules per upstream's pattern. Residual
agent.webapp importers: only the shim, langgraph.json http.app, Makefile
uvicorn target, and docs (doc-path updates land in C7).
Gates: ruff check + format, pytest --co, full unit (1637 passed), full
Playwright E2E vs real langgraph dev (9/9), residual-importer sweep.
92 lines
3.6 KiB
Python
92 lines
3.6 KiB
Python
"""Shared environment + constants for the full-flow E2E.
|
|
|
|
Imported FIRST by both the agent graph entrypoint and the HTTP harness, before
|
|
any ``agent.*`` module — several webhook/auth/slack constants are read into module
|
|
globals at import time, so the env must be set beforehand.
|
|
|
|
Everything here only configures *boundaries* (which sandbox, which fake API
|
|
URLs, where git writes its global config). The agent code itself is unchanged.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import os
|
|
from pathlib import Path
|
|
|
|
REPO_ROOT = Path(__file__).resolve().parents[2]
|
|
TMP = Path(os.environ.setdefault("E2E_TMP", str(Path(__file__).parent / ".e2e-tmp")))
|
|
|
|
# Demo repo the fake GitHub serves and the agent operates on.
|
|
OWNER = "fakeorg"
|
|
REPO = "demo"
|
|
BASE_BRANCH = "main"
|
|
FEATURE_BRANCH = "add-greet"
|
|
PR_TITLE = "Add greet() helper"
|
|
FEATURE_FILE = "greet.py"
|
|
|
|
# Fixed Slack identifiers so the mock UI and assertions are deterministic.
|
|
BOT_USER_ID = "U0BOT"
|
|
BOT_USERNAME = "open-swe"
|
|
DEMO_CHANNEL = "C_DEMO"
|
|
HUMAN_USER = "U_HUMAN"
|
|
|
|
PORT = os.environ.setdefault("E2E_PORT", "2024")
|
|
BASE_URL = os.environ.setdefault("E2E_BASE", f"http://127.0.0.1:{PORT}")
|
|
|
|
_GH_DIR = TMP / "github"
|
|
_WORK_DIR = TMP / "work"
|
|
BARE_REMOTE = _GH_DIR / f"{OWNER}__{REPO}.git"
|
|
|
|
_DEFAULTS = {
|
|
# Sandbox: real local provider, rooted in a throwaway temp dir.
|
|
"SANDBOX_TYPE": "local",
|
|
"LOCAL_SANDBOX_ROOT_DIR": str(_WORK_DIR),
|
|
# Keep git's --global writes (bot identity) out of the user's ~/.gitconfig.
|
|
"GIT_CONFIG_GLOBAL": str(TMP / "gitconfig-global"),
|
|
"GIT_CONFIG_SYSTEM": "/dev/null",
|
|
# Path the scripted agent clones from (a local bare repo = "fake GitHub").
|
|
"E2E_REMOTE": str(BARE_REMOTE),
|
|
# Webhook signing + bot identity.
|
|
"GITHUB_WEBHOOK_SECRET": "test-github-secret",
|
|
"SLACK_SIGNING_SECRET": "test-slack-secret",
|
|
"SLACK_BOT_TOKEN": "xoxb-test-token",
|
|
"SLACK_BOT_USER_ID": BOT_USER_ID,
|
|
"SLACK_BOT_USERNAME": BOT_USERNAME,
|
|
# Slack runs resolve the repo from this when the channel/thread carry none.
|
|
"DEFAULT_REPO_OWNER": OWNER,
|
|
"DEFAULT_REPO_NAME": REPO,
|
|
# Bot-token-only mode: lets Slack runs proceed without a per-user OAuth token.
|
|
"LANGSMITH_API_KEY_PROD": "test-bot-mode",
|
|
# SDK client target (same dev server).
|
|
"LANGGRAPH_URL": BASE_URL,
|
|
# Dashboard: the "Open in Web" link target + session-cookie signing. Use
|
|
# 127.0.0.1 (not localhost) so the local-dev LLM-key check stays skipped.
|
|
"DASHBOARD_BASE_URL": BASE_URL,
|
|
"DASHBOARD_API_BASE_URL": BASE_URL,
|
|
"DASHBOARD_ALLOWED_ORIGINS": BASE_URL,
|
|
"DASHBOARD_JWT_SECRET": "test-dashboard-jwt-secret",
|
|
}
|
|
|
|
# Named test users (the Slack sender dropdown + the dashboard login picker, and
|
|
# the identities the automated tests log in as). Each maps a Slack sender id to
|
|
# a dashboard login with a matching email, so the Slack thread's owner (resolved
|
|
# by email) is the same person when they sign in. The first (Alice) is the
|
|
# default Slack sender, hence the default thread owner.
|
|
TEST_USERS = [
|
|
{"name": "Alice", "slack_id": "U_ALICE", "login": "alice", "email": "alice@example.com"},
|
|
{"name": "Bob", "slack_id": "U_BOB", "login": "bob", "email": "bob@example.com"},
|
|
]
|
|
|
|
# The default Slack sender / thread owner; a session with this email may continue
|
|
# the thread on the web. Any other logged-in user is read-only.
|
|
SAME_USER = {"login": TEST_USERS[0]["login"], "email": TEST_USERS[0]["email"]}
|
|
OTHER_USER = {"login": TEST_USERS[1]["login"], "email": TEST_USERS[1]["email"]}
|
|
|
|
for _k, _v in _DEFAULTS.items():
|
|
os.environ.setdefault(_k, _v)
|
|
|
|
for _d in (TMP, _GH_DIR, _WORK_DIR):
|
|
_d.mkdir(parents=True, exist_ok=True)
|
|
|
|
FAKE_GITHUB_API = f"{BASE_URL}/fake-gh"
|
|
FAKE_SLACK_API = f"{BASE_URL}/fake-slack"
|