[matteius]

What changes

The agent-candidate workflow creates a DigitalOcean Kimi session, clones the repository in its sandbox, sends the issue prompt, and exits after a three-second wait. The agent uses automatic tool approval and pushes to the dedicated matteius/lightNVR fork. Actions are disabled on that fork. A signed push webhook opens a ready-for-review PR back to this repository; no LightNVR PR is merged automatically.

The PR broker is deployed as a shared DigitalOcean Function and its source is tracked in the private opensensor/storefront repository. A daily housekeeping job there removes issue sessions after 24 hours without an event and deletes saved configs.

Validation

• DigitalOcean manifest and workflow shell syntax validated.
• Detached DigitalOcean smoke run cloned LightNVR as the agent user and received a prompt after the launching command timed out at three seconds. The agent reported the fork remote and base commit; the test session and config were removed.
• Fork deploy key can push; fork webhook returned HTTP 200 for signed push probes. Actions are disabled on the fork.
• PR broker tests passed: signature rejection, branch filtering, label checks, and duplicate delivery handling.
• Issue Audit & fix WCAG 2.2 AA accessibility across the web UI #647 was not relabeled. Its existing PR Agent: Audit & fix WCAG 2.2 AA accessibility across the web UI #648 remains separate and needs manual review.

This PR updates future issue-label runs only. The existing #647 run used the former attached workflow.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!