Uh oh!
There was an error while loading. Please reload this page.
fix(scheduler): fall back to REST when auto-rebase GraphQL transport fails - #1065
fix(scheduler): fall back to REST when auto-rebase GraphQL transport fails#1065seonghobae wants to merge 7 commits into
Conversation
Bugbot is not enabled for your account, so this pull request was not reviewed. Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs. |
Warning Review limit reached
Next review available in:31 minutes Limit details: You’ve used the included review currently available. You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository. How can I continue?Wait for the limit to reset, then comment An organization admin can change what happens after included review limits in Billing. How do review limits work?CodeRabbit enforces per-developer PR review limits within each organization. For paid Pro and Pro+ reviews, CodeRabbit uses a developer's included PR review attempts over the past 7 days to set the current hourly allowance. At typical activity levels, the full plan allowance applies. Higher sustained activity can lower the allowance until earlier attempts leave the 7-day window. Please refer docs for additional details. Review details⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Plus Run ID: 📒 Files selected for processing (8)
📝 WalkthroughWalkthroughGraphQL의 UTF-8 및 쿼리 리소스 제한 오류를 일시적 오류로 분류합니다. 오류가 지속되면 REST로 열린 PR과 커밋 정보를 조회합니다. 스키마 오류는 기존처럼 전파하며, 폴백과 페이지 제한 동작을 테스트하고 문서화합니다. Changes자동 리베이스 GraphQL REST 폴백
빌드 및 운영 문서
Estimated code review effort: 3 (Moderate) | ~30 minutes Merge Risk:🟡 Moderate · up to The REST fallback can currently skip valid same-repository pull requests and duplicate or omit entries in queues larger than 100, preventing some automatic rebases from running. The PR is not merge-ready until these bounded correctness issues are fixed or explicitly accepted. Sequence Diagram(s)sequenceDiagram
participant AutoRebase
participant GitHubGraphQL
participant GitHubREST
AutoRebase->>GitHubGraphQL: 열린 PR 조회
GitHubGraphQL-->>AutoRebase: UTF-8 또는 query-cost 오류
AutoRebase->>GitHubREST: 열린 PR 목록 및 상세 정보 조회
GitHubREST-->>AutoRebase: PR 및 head commit 정보
AutoRebase-->>AutoRebase: GraphQL 노드 형식으로 변환
🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
✨ Finishing Touches 💡 1📝 Generate docstrings 💡
🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
This comment was marked as resolved.
This comment was marked as resolved.
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
ce20986 to
d42c835Compareseonghobae
commented
Aug 19, 2026
Rebased onto current main |
seonghobae
commented
Aug 19, 2026
Current-head repair: 4914360. Resolved both actionable review findings:
Exact-head evidence:
@opencode-agent @cwl-noema-review please review this exact head. No predecessor review/check transfer, self-approval, bypass, or merge claim. |
This comment was marked as resolved.
This comment was marked as resolved.
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
4914360 to
63d3b23Compareseonghobae
commented
Aug 19, 2026
63d3b23 to
8407dc9Compareseonghobae
commented
Aug 20, 2026
Rebased onto current origin/main c47bee5. Current HEAD: 8407dc9 Validation on this HEAD:
The implementation keeps schema errors fail-closed while falling back to REST only for the documented GraphQL transport/capacity failures. @OpenCode review this exact HEAD. |
8407dc9 to
d080c09Compareseonghobae
commented
Aug 20, 2026
Rebased PR #1065 onto current protected main and revalidated the auto-rebase transport fallback. GraphQL transport/capacity failures fall back to bounded REST, same-repository ownership is verified before commit metadata lookup, unknown mergeable state is refreshed once, and schema/authorization failures remain fail-closed. Proof at this exact head: 54 auto-rebase tests passed; interrogate 100%; compileall and git diff --check passed. Please rerun independent review and protected current-head Checks. The PR remains behind only until GitHub recalculates the new head state; no bypass, self-approval, or merge is claimed. |
d080c09 to
7c3262fCompare![pr-auto-rebase[bot]](https://github.laxmiang.work.gd/r/github.githubassets.com/images/gravatars/gravatar-user-420.png){kind=avatar}
…fails Unicode refs and large org queues aborted DIRTY-head rebase before any repair ran. Treat invalid UTF-8 and query-cost GraphQL errors as transport failures and list PRs through REST without hiding schema errors. Keep NVIDIA_NIM_API_KEY as the model credential.
7c3262f to
b087140Compare
This comment was marked as resolved.
This comment was marked as resolved.
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
seonghobae
commented
Aug 20, 2026
Current-head validation for a8bc3bb: corrected the shared Strix gate to block only CRITICAL/HIGH/MEDIUM severity, while retaining Low/INFO artifacts and neutralizing workflow-only non-assessable scope without medium-or-higher evidence. Added a focused regression contract. Passed: 55 pr_auto_rebase tests, actionlint for Strix, bash -n for the Strix harness, and git diff --check. Please review this exact head; merge remains gated on an independent non-author approval and terminal protected checks. |
seonghobae
commented
Aug 20, 2026
@opencode-agent Please review the current PR head a8bc3bb on the exact branch. Re-check the Strix threshold/scope gate, the auto-rebase source changes, current mergeability, and required checks. Do not approve a stale head. |
seonghobae
commented
Aug 20, 2026
Current-head failure triage for central run 32405555474: the failing Hourly cadence, immutable source, NIM credential, and conflict scope / exact-head-path-policy wrapper is executing the shared Strix fallback contract tests, not the PR's product files. The concrete failures are stale assertions in tests/test_strix_nvidia_nim_not_found_fallback.py that do not accept the current vulnerability-count signal. The root-cause repair is central PR #1177 at exact head a6ab307, which narrows the retry classifier and updates those assertions. No unrelated source patch is warranted on this PR; regenerate this PR's exact-head checks after #1177 is normally merged. |
seonghobae
commented
Aug 20, 2026
Current-head repair is pushed at . The shared Strix vulnerability contract now keeps Critical/High/Medium evidence fail-closed and treats only non-assessable/info-only provider output as neutral. Focused regression tests and shell syntax checks passed. @opencode-agent review this exact HEAD; do not transfer predecessor approval or merge. |
seonghobae
commented
Aug 20, 2026
Current-head repair is pushed at SHA 4b883d8c7e4d66c381403f8eb0aad84676a7352. The shared Strix vulnerability contract keeps Critical/High/Medium evidence fail-closed and treats only non-assessable/info-only provider output as neutral. Focused regression tests and shell syntax checks passed. @opencode-agent review this exact HEAD; do not transfer predecessor approval or merge. |
seonghobae
commented
Aug 21, 2026
Exact-head review renewal
The three still-valid pagination/ownership review threads are addressed and resolved. Merge remains subject to terminal protected Checks and independent approval. |
This comment was marked as resolved.
This comment was marked as resolved.
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
seonghobae
commented
Aug 21, 2026
Strix finding repaired at current head 21692fd. The report identified that a zero human-activity window disabled the recent-human-commit guard. The scheduler now rejects non-positive windows at both the helper and CLI boundaries, with regression coverage; 57 auto-rebase tests pass locally. Please rerun Strix and the complete protected Checks on this exact head. |
| # Only medium-or-higher findings are blocking evidence. Low and INFO | ||
| # reports are retained as artifacts but do not block merge progress; | ||
| # the configured Strix threshold is MEDIUM. Keep the severity branch | ||
| # anchored away from identifiers such as STRIX_FAIL_ON_MIN_SEVERITY. | ||
| reported_vulnerability_signal='(^|[^A-Za-z0-9_])severity[[:space:]]*:[[:space:]]*(critical|high|medium)([^A-Za-z0-9_]|$)' | ||
| # Workflow-only callers can legitimately produce an informational | ||
| # "no assessable application code" report. It is not a vulnerability | ||
| # signal and must remain neutral unless a medium-or-higher finding is | ||
| # also present in the same run. | ||
| non_assessable_scope_signal='No Assessable Application Code Found in Scope' | ||
| if grep -Eiq "$non_assessable_scope_signal" "$strix_run_log" \ | ||
| && ! grep -Eiq "$reported_vulnerability_signal" "$strix_run_log"; then | ||
| echo "::warning title=Strix scope not assessable::Strix received workflow-only scope and produced no medium-or-higher vulnerability evidence; treating the informational scope result as neutral." | ||
| exit 0 |
There was a problem hiding this comment.
🔍 Strix gate now only blocks on medium-or-higher findings
The strix.yml change replaces reported_vulnerability_signal='Vulnerabilities[[:space:]]+[1-9]|(^|[^A-Za-z0-9_])severity[[:space:]]*:' with a narrower severity: (critical|high|medium) matcher and adds a No Assessable Application Code Found in Scope neutral-skip branch (strix.yml). This is a deliberate loosening of the security gate: any run that reports only LOW/INFO findings (or a count via the removed Vulnerabilities N signal) combined with a backend-unavailable or non-assessable-scope signal will now exit 0 instead of failing the required check. The anchoring (^|[^A-Za-z0-9_])severity correctly avoids matching the STRIX_FAIL_ON_MIN_SEVERITY env line (preceded by _). The change is documented as intentional (MEDIUM threshold), but note it is bundled into an auto-rebase PR and depends on Strix emitting severities in plain severity: <level> form rather than JSON ("severity": "..."), which this regex would not match — same as the prior regex.
Was this helpful? React with 👍 or 👎 to provide feedback.
| ) | ||
| payload = gh_api_json(path) | ||
| if not payload: | ||
| break | ||
| for raw in payload: | ||
| detail = raw |
There was a problem hiding this comment.
📝 Info: REST fallback issues one commit GET per same-repo PR plus a detail GET per unknown state
In the REST fallback path, fetch_open_prs_rest (pr_auto_rebase.py) always performs a detail GET for each PR (the list endpoint /repos/{repo}/pulls never returns mergeable_state, so state is always "" and every PR triggers gh_api_json(f"repos/{repo}/pulls/{number}")), and rest_auto_rebase_pr_node then performs an additional commits/{sha} GET for every same-repository PR. For the cited ~58-PR org queue this is roughly 2N REST calls on the fallback path, which itself only runs after GraphQL was already rate-limited/capacity-limited. Functionally correct and bounded by max_prs, but worth being aware of as an additional REST load precisely when the API is already under pressure; unlike the merge scheduler's variant, no &base= filter is applied to prune non-target-base PRs earlier.
Was this helpful? React with 👍 or 👎 to provide feedback.
| def is_graphql_transport_failure(exc: Exception) -> bool: | ||
| """Return whether a GraphQL failure is transport/capacity rather than schema or auth.""" | ||
| message = str(exc) | ||
| folded = message.lower() | ||
| if any(marker in message or marker.lower() in folded for marker in GRAPHQL_TRANSPORT_FALLBACK_MARKERS): | ||
| return True | ||
| return is_transient_github_api_error(exc) |
There was a problem hiding this comment.
📝 Info: Schema-error fail-closed relies on gh error message text matching
is_graphql_transport_failure (pr_auto_rebase.py) distinguishes transport/capacity failures from schema/auth failures purely by substring matching on the exception message (the two GRAPHQL_TRANSPORT_FALLBACK_MARKERS plus the shared transient-error family). This is inherently coupled to gh/GitHub error wording; if GitHub changes the phrasing of "Resource limits for this query exceeded" or "invalid UTF-8 string", the fallback silently stops working and reverts to hard-failing. The test suite pins the current wording, so drift would be caught only if GitHub's wording is mirrored into tests. Worth noting as a maintenance fragility, not a current bug.
Was this helpful? React with 👍 or 👎 to provide feedback.
| committed_date = (commit_meta.get("author") or {}).get("date") or (commit_meta.get("committer") or {}).get( | ||
| "date" | ||
| ) |
There was a problem hiding this comment.
📝 Info: REST human-activity window uses git author date, GraphQL uses committer date
In the REST node (pr_auto_rebase.py) committedDate is set from the commit's git author date preferentially (commit_meta.get("author").date), falling back to the committer date. The GraphQL query (pr_auto_rebase.py) instead exposes committedDate, which is the committer date. These can diverge for amended/rebased commits where the committer date is recent but the author date is old. Since head_commit_by_recent_human (pr_auto_rebase.py) uses this timestamp to skip branches with recent human activity, the REST path could classify a freshly re-pushed commit as old and rebase over active human work. In practice a genuinely human push produces a fresh author date too, so impact is limited, but the two code paths are not semantically identical.
Was this helpful? React with 👍 or 👎 to provide feedback.
| state = str(raw.get("mergeable_state") or "").lower() | ||
| if state in {"", "unknown"}: | ||
| detail = gh_api_json(f"repos/{repo}/pulls/{int(raw['number'])}") or raw |
There was a problem hiding this comment.
📝 Info: REST unknown mergeable_state is refreshed at most once
fetch_open_prs_rest re-GETs a PR detail only when the list mergeable_state is empty or unknown (pr_auto_rebase.py). GitHub's list endpoint omits mergeable_state entirely, so every PR incurs one detail GET, and if GitHub has not finished computing merge status the detail may still return unknown, in which case the PR is classified UNKNOWN and skipped (no retry). This matches the documented intent in docs/doctoring/auto-rebase-graphql-rest-fallback.md ('refresh unknown mergeable_state with one GET'), so it is by design, but it means transiently-unknown PRs are silently skipped for that run.
Was this helpful? React with 👍 or 👎 to provide feedback.
seonghobae
commented
Aug 21, 2026
Reconciled the branch with protected main at exact pre-push head 21692fd and pushed merge commit ff661f1. The merge preserves the positive human-window guard and current central scheduler/contract changes. Fresh verification: 317 focused pytest tests passed and the merge diff is whitespace-clean. Please review/check current head ff661f1; no force-push or protection bypass used. |
There was a problem hiding this comment.
Pull request overview
OpenCode reviewed the current-head evidence but found unresolved reviewer or review-agent threads before approval.
Findings
1. HIGH .github/workflows/opencode-review.yml:1 - Unresolved reviewer thread blocks automated approval
- Problem: OpenCode reached an APPROVE control result, but the approval step found unresolved, non-outdated human or review-agent thread evidence on the current pull request.
- Root cause: Reviewer and review-agent feedback can arrive after bounded model evidence is prepared, so the approval step must re-query GitHub immediately before publishing an approval.
- Fix: Address or resolve the listed reviewer thread(s), then re-run OpenCode on the current head.
- Regression test: Keep the approval gate querying reviewThreads(first: 100) after model output and before create_pull_review APPROVE, including bot review agents other than OpenCode itself.
Review thread evidence
Latest unresolved reviewer thread evidence
.github/workflows/strix.yml line 884
- Latest reviewer comment: @devin-ai-integration at 2026-08-21T19:44:36Z
- Comment URL: #1065 (comment)
- Comment excerpt: <!-- devin-review-comment {"id": "ANALYSIS_pr-review-job-324285eae0b64b7e9255b0159c2aa4a7_0001", "file_path": ".github/workflows/strix.yml", "start_line": 870, "end_line": 884, "side": "RIGHT", "kind": "analysis"} --> / 🔍 Strix gate now only blocks on medium-or-higher findings / The strix.yml change replaces 'reported_vulnerability_signal='Vulnerabilities[[:space:]]+[1-9]|(^|[^A-Za-z0-9_])severity[[:space:]]*:'' with a narrower 'severity: (critical|high|medium)' matcher and adds a 'No Assessable Application Code Found in Scope' neutral-skip branch ([stri
scripts/ci/pr_auto_rebase.py line 246
- Latest reviewer comment: @devin-ai-integration at 2026-08-21T19:44:37Z
- Comment URL: #1065 (comment)
- Comment excerpt: <!-- devin-review-comment {"id": "ANALYSIS_pr-review-job-ab243f7c2e9a43ba84e73657c381101f_0003", "file_path": "scripts/ci/pr_auto_rebase.py", "start_line": 241, "end_line": 246, "side": "RIGHT", "kind": "analysis"} --> / 📝 Info: REST fallback issues one commit GET per same-repo PR plus a detail GET per unknown state / In the REST fallback path, 'fetch_open_prs_rest' (pr_auto_rebase.py) always performs a
scripts/ci/pr_auto_rebase.py line 170
- Latest reviewer comment: @devin-ai-integration at 2026-08-21T19:44:39Z
- Comment URL: #1065 (comment)
- Comment excerpt: <!-- devin-review-comment {"id": "ANALYSIS_pr-review-job-3fc779a7d5674dc295faaae1a0eab66f_0003", "file_path": "scripts/ci/pr_auto_rebase.py", "start_line": 164, "end_line": 170, "side": "RIGHT", "kind": "analysis"} --> / 📝 Info: Schema-error fail-closed relies on gh error message text matching / 'is_graphql_transport_failure' (pr_auto_rebase.py) distinguishes transport/capacity failures from schema/auth
scripts/ci/pr_auto_rebase.py line 194
- Latest reviewer comment: @devin-ai-integration at 2026-08-21T19:44:40Z
- Comment URL: #1065 (comment)
- Comment excerpt: <!-- devin-review-comment {"id": "ANALYSIS_pr-review-job-f4543fc0ae764caa95f08b0d1dd9cbad_0001", "file_path": "scripts/ci/pr_auto_rebase.py", "start_line": 192, "end_line": 194, "side": "RIGHT", "kind": "analysis"} --> / 📝 Info: REST human-activity window uses git author date, GraphQL uses committer date / In the REST node (pr_auto_rebase.py) 'committedDate' is set from the commit's git author date pr
scripts/ci/pr_auto_rebase.py line 249
Latest reviewer comment: @devin-ai-integration at 2026-08-21T19:44:42Z
Comment URL: #1065 (comment)
Comment excerpt: <!-- devin-review-comment {"id": "ANALYSIS_pr-review-job-f4543fc0ae764caa95f08b0d1dd9cbad_0003", "file_path": "scripts/ci/pr_auto_rebase.py", "start_line": 247, "end_line": 249, "side": "RIGHT", "kind": "analysis"} --> / 📝 Info: REST unknown mergeable_state is refreshed at most once / 'fetch_open_prs_rest' re-GETs a PR detail only when the list 'mergeable_state' is empty or 'unknown' ([pr_auto_rebase.py](https://github.com/contextualwisdomlab/.github/blob/21692fd95e3971b8099bf8fa6d6b872fa8aaab46/scripts/ci/pr_auto_rebase.py#L243-L245 "scripts/ci/pr_auto_
Result: REQUEST_CHANGES
Reason: unresolved reviewer or review-agent thread(s) were present before approval.
Head SHA:
ff661f115ae0c6f41e7a2fab304ace3e648b3988Workflow run: 32842798170
Workflow attempt: 1
Changed-File Evidence Map
flowchart LR
PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
Evidence --> S1["Workflow: strix.yml"]
S1 --> I1["GitHub Actions review job"]
I1 --> Conflict["Merge conflict blocks this path"]
Conflict --> V1["actionlint plus required checks"]
Evidence --> S2["Changed file (4 files)"]
S2 --> I2["repository behavior"]
I2 --> Conflict["Merge conflict blocks this path"]
Conflict --> V2["required checks"]
Evidence --> S3["Docs: auto-rebase-graphql-rest-fallback.md"]
S3 --> I3["operator or user guidance"]
I3 --> Conflict["Merge conflict blocks this path"]
Conflict --> V3["docs review"]
Evidence --> S4["CI script: pr_auto_rebase.py"]
S4 --> I4["review and security gate shell path"]
I4 --> Conflict["Merge conflict blocks this path"]
Conflict --> V4["bash -n plus Strix self-test"]
Evidence --> S5["Test (2 files)"]
S5 --> I5["regression suite"]
I5 --> Conflict["Merge conflict blocks this path"]
Conflict --> V5["targeted test run"]
OpenCode Review Overview
Pull request overviewOpenCode reviewed the current-head evidence but found unresolved reviewer or review-agent threads before approval. Findings1. HIGH .github/workflows/opencode-review.yml:1 - Unresolved reviewer thread blocks automated approval
Review thread evidenceLatest unresolved reviewer thread evidence
|
Root cause
The merge scheduler (
ContextualWisdomLab/.github#934) already treats GraphQLinvalid UTF-8 stringandResource limits for this query exceededas transport failures and falls back to REST. Auto-rebase still listed open PRs through GraphQL only, so Unicode refs and the live 58-plus-PR org queue aborted DIRTY-head repair before any rebase ran.Bounded fix
pr_auto_rebase.unknownmergeable_statewith one GET, and load the head commit so the human-activity window still applies.rest_pr_node(reviews/checks/files are out of scope).docs/doctoring/auto-rebase-graphql-rest-fallback.md.Merge gate
Do not self-approve. Arm squash auto-merge. Two-approval + last-pusher 405 is the ruleset, not a coding stop. GitHub review/Checks wait is not a blocker.
NVIDIA_NIM_API_KEYremains the model credential; do not useCOPILOT_GITHUB_TOKEN.Summary by CodeRabbit
버그 수정
문서
테스트