External/roboco
1
0
Fork 0
mirror of https://github.com/rennf93/roboco.git synced 2026-08-03 07:23:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat(deploy): enable external-PR review by default in the compose

Browse Source 
Wire the external-PR settings into the orchestrator env in both compose
files: ROBOCO_EXTERNAL_PR_ENABLED defaults to true (overridable via .env),
with require_human_confirm kept true and the poll-interval/allowlist knobs
documented inline. The config default stays off (safe for library use); the
deployment compose turns the read-only review on. The code default is
unchanged — only the shipped compose flips it.

Read-only: enabling this only discovers inbound external/fork PRs and posts
one change-request. The supersede that builds contributor code is still
CEO-triggered and human-confirm gated.
This commit is contained in:
Renn F
2026-06-17 01:04:18 +02:00
parent 7a8c083c31
commit e9a3b55999
2 changed files with 18 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker-compose.yaml
+9
View File
@@ -284,6 +284,15 @@ services:
# _reap_stale_claims uses (the one that was killing in-progress work). # _reap_stale_claims uses (the one that was killing in-progress work).
ROBOCO_CLAIM_STALE_SECONDS: "1800" ROBOCO_CLAIM_STALE_SECONDS: "1800"
ROBOCO_STALE_CLAIM_REAP_SECONDS: "1800" ROBOCO_STALE_CLAIM_REAP_SECONDS: "1800"
# External-PR review. When on, the org discovers inbound external/fork PRs
# and the PR reviewer posts one change-request — READ-ONLY (it never runs
# contributor code). The supersede that fetches + builds their code is
# separately CEO-triggered and stays gated by require_human_confirm.
# Override either via .env. (Config default is off; this enables it here.)
ROBOCO_EXTERNAL_PR_ENABLED: ${ROBOCO_EXTERNAL_PR_ENABLED:-true}
ROBOCO_EXTERNAL_PR_REQUIRE_HUMAN_CONFIRM: ${ROBOCO_EXTERNAL_PR_REQUIRE_HUMAN_CONFIRM:-true}
# ROBOCO_EXTERNAL_PR_POLL_INTERVAL_SECONDS: "300"
# ROBOCO_EXTERNAL_PR_AUTHOR_ALLOWLIST: '["corey"]' # empty = every external PR
volumes: volumes:
# Docker socket - allows spawning agent containers # Docker socket - allows spawning agent containers
- /var/run/docker.sock:/var/run/docker.sock - /var/run/docker.sock:/var/run/docker.sock
docker-compose.yml
+9
View File
@@ -284,6 +284,15 @@ services:
# _reap_stale_claims uses (the one that was killing in-progress work). # _reap_stale_claims uses (the one that was killing in-progress work).
ROBOCO_CLAIM_STALE_SECONDS: "1800" ROBOCO_CLAIM_STALE_SECONDS: "1800"
ROBOCO_STALE_CLAIM_REAP_SECONDS: "1800" ROBOCO_STALE_CLAIM_REAP_SECONDS: "1800"
# External-PR review. When on, the org discovers inbound external/fork PRs
# and the PR reviewer posts one change-request — READ-ONLY (it never runs
# contributor code). The supersede that fetches + builds their code is
# separately CEO-triggered and stays gated by require_human_confirm.
# Override either via .env. (Config default is off; this enables it here.)
ROBOCO_EXTERNAL_PR_ENABLED: ${ROBOCO_EXTERNAL_PR_ENABLED:-true}
ROBOCO_EXTERNAL_PR_REQUIRE_HUMAN_CONFIRM: ${ROBOCO_EXTERNAL_PR_REQUIRE_HUMAN_CONFIRM:-true}
# ROBOCO_EXTERNAL_PR_POLL_INTERVAL_SECONDS: "300"
# ROBOCO_EXTERNAL_PR_AUTHOR_ALLOWLIST: '["corey"]' # empty = every external PR
volumes: volumes:
# Docker socket - allows spawning agent containers # Docker socket - allows spawning agent containers
- /var/run/docker.sock:/var/run/docker.sock - /var/run/docker.sock:/var/run/docker.sock