This directory tracks the Python adapter currently deployed for the
CompleteTech-hosted dogfood GitHub App at webhook.complete.tech.
The adapter is intentionally deployment-specific. It is not the canonical Rust worker implementation; it exists so hosted dogfood behavior can be reviewed, reproduced, and changed through PRs instead of invisible server edits.
coven_github_adapter.py- webhook handler, task runner, PR evidence capture, Codex-backed headless runtime invocation, and dogfood comment publisher.
The deployment expects secrets and mutable state to be supplied outside git:
GITHUB_APP_PRIVATE_KEY_PATHor.coven-github-private-key.pemGITHUB_APP_IDCOVEN_GITHUB_STATE_DIRCOVEN_GITHUB_POLICY_PATHCOVEN_CODE_BIN- Codex OAuth tokens under the deployed account's
.coven-codedirectory
Do not commit private keys, webhook secrets, OAuth tokens, generated task state, workspaces, or attempt artifacts.
- Emits headless contract v2 session briefs.
- Captures PR checkout metadata and changed-file patches before invoking
coven-code. - Publishes visible structured review evidence, including
reviewed_files,supporting_files, findings, test evidence, no-findings rationale, and limitations.