Skip to content

ci(e2e): sample rebuild pressure more frequently - #7511

Merged
jyaunches merged 4 commits into
mainfrom
codex/7144-rebuild-pressure-cadence
Jul 25, 2026
Merged

ci(e2e): sample rebuild pressure more frequently#7511
jyaunches merged 4 commits into
mainfrom
codex/7144-rebuild-pressure-cadence

Conversation

@apurvvkumaria

@apurvvkumaria apurvvkumaria commented Jul 25, 2026

Copy link
Copy Markdown
Collaborator

Summary

The two rebuild-Hermes E2E lanes now record runner pressure every 15 seconds instead of once per minute, increasing resolution around short-lived BuildKit memory spikes that can precede runner loss. Every other E2E target retains the 60-second cadence, and the existing bounded, numeric-only evidence and finalization behavior remain unchanged.

Related Issue

Part of #7144.

Changes

  • Select a 15-second comparison-sample interval only for rebuild-hermes and rebuild-hermes-stale-base.
  • Preserve the 60-second default for dashboard, Discord, Shields, and every other or unknown target.
  • Protect the target mapping, qualifying live-environment wiring, and selected 15-second/30-second timer deadlines with focused progress-fixture tests.
  • Document that faster rebuild sampling may reach the shared 256-record bound early, while reserving the finalization slot and allowing the existing lower-frequency evidence path to continue.

Type of Change

  • Code change (feature, bug fix, or refactor)
  • Code change with doc updates
  • Doc only (prose changes, no code sample modifications)
  • Doc only (includes code sample changes)

Quality Gates

  • Tests added or updated for changed behavior
  • Existing tests cover changed behavior — justification:
  • Tests not applicable — justification:
  • Docs updated for user-facing behavior changes
  • Docs not applicable — justification: This changes maintainer-only E2E diagnostics; the internal sampling contract is documented in test/e2e/README.md.
  • Sensitive paths changed (security, policy, credentials, preflight, onboarding, inference, runner, sandbox, or messaging)
  • Sensitive-path review completed or maintainer-approved waiver recorded — reviewer/approval link/justification: Independent Codex Desktop review of the complete diff through exact head 4f875025c passed, including merge-resolution integrity, deterministic scheduling, and live-environment wiring coverage. The 15-second cadence is limited to two targets, retains one timer and the bounded ledger/finalization contract, invokes no Docker command, and persists only numeric or fixed-enum telemetry without command lines, environment values, container names, or raw process names.
  • Non-success, skipped, or missing CI check accepted by maintainer — check name, approval link, and follow-up issue:

Documentation Writer Review

  • Documentation writer subagent reviewed the completed changes
  • Result: docs-updated
  • Evidence: test/e2e/README.md documents the target-specific cadence, bounded-record behavior, reserved finalization slot, and fallback evidence path. No user-facing documentation change is needed.
  • Agent: Codex Desktop

DGX Station Hardware Evidence

  • Tested on DGX Station
  • Tested commit: Not applicable
  • Station profile/scenario: Not applicable
  • Result: Not applicable
  • Supporting evidence: Not applicable

Verification

  • PR description includes a Signed-off-by: line and every commit appears as Verified in GitHub
  • Normal pre-commit, commit-msg, and pre-push hooks passed, or npm run check:diff passed when hooks were skipped or unavailable
  • Targeted behavior tests pass for the current change set, or tests are marked not applicable above — npx vitest run --project e2e-support test/e2e/support/e2e-progress-fixture.test.ts test/e2e/support/e2e-progress-resource-sampling.test.ts: 2 files and 26 tests passed; npm run typecheck:cli and npm run test:titles:check also passed.
  • Applicable broad gate passed — npm test for broad runtime/test-harness changes; npm run check for repo-wide validation/coverage changes — not run for this narrow cadence selector; GitHub CI is the broad gate.
  • Quality Gates section completed with required justifications or waivers
  • No secrets, API keys, or credentials committed
  • npm run docs builds without warnings (doc changes only)
  • Doc pages follow the style guide (doc changes only)
  • New doc pages include SPDX header and frontmatter (new pages only)

Signed-off-by: Apurv Kumaria akumaria@nvidia.com

Summary by CodeRabbit

  • New Features

    • Added configurable resource sampling for runner comparisons.
    • Hermes rebuild comparisons now sample approximately every 15 seconds; other comparisons retain the approximately 60-second cadence.
    • Improved peak memory usage evidence while preserving existing reporting and privacy safeguards.
    • Added fallback behavior using the existing five-minute snapshot when periodic sampling is unavailable.
  • Tests

    • Added coverage validating sampling intervals, progress wiring, and scheduled resource samples.

Signed-off-by: Apurv Kumaria <akumaria@nvidia.com>
@apurvvkumaria apurvvkumaria self-assigned this Jul 25, 2026
@coderabbitai

coderabbitai Bot commented Jul 25, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

📝 Walkthrough

Walkthrough

Runner-comparison progress sampling now uses 15-second intervals for Hermes rebuild lanes and 60-second intervals elsewhere. Tests cover interval selection, live wiring, and timer scheduling, while documentation updates describe the v2 ledger bound and fallback behavior.

Changes

Runner comparison sampling

Layer / File(s) Summary
Lane-specific cadence selection and validation
test/e2e/fixtures/e2e-test.ts, test/e2e/support/e2e-progress-fixture.test.ts, test/e2e/support/e2e-progress-resource-sampling.test.ts
Adds lane-specific interval selection, centralizes live progress sampling options, validates qualifying and non-qualifying environments, and tests 15-second timer scheduling.
Ledger bound and sampling contract documentation
test/e2e/README.md, tools/e2e/runner-comparison-schema.mts
Documents the differentiated cadence, shared bound, reserved final slot, swap initialization, and fallback behavior.

Estimated code review effort: 2 (Simple) | ~10 minutes

Sequence Diagram(s)

sequenceDiagram
  participant E2EFixture
  participant startTestProgress
  participant appendRunnerComparisonSample
  E2EFixture->>startTestProgress: configure resourceSampleIntervalMs and recordResourceSample
  startTestProgress->>appendRunnerComparisonSample: emit periodic resource sample
  appendRunnerComparisonSample-->>E2EFixture: record labeled sample
Loading

Possibly related PRs

  • NVIDIA/NemoClaw#7457: Modifies the runner-comparison periodic sampling flow extended by these cadence changes.

Suggested labels: area: observability

Suggested reviewers: prekshivyas, laitingsheng, cv

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly matches the main change: increasing sampling frequency for rebuild E2E pressure evidence.
✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch codex/7144-rebuild-pressure-cadence

Comment @coderabbitai help to get the list of available commands.

@apurvvkumaria apurvvkumaria added integration: hermes Hermes integration behavior area: e2e End-to-end tests, nightly failures, or validation infrastructure platform: container Affects Docker, containerd, Podman, or images area: performance Latency, throughput, resource use, benchmarks, or scaling v0.0.96 labels Jul 25, 2026
@github-code-quality

github-code-quality Bot commented Jul 25, 2026

Copy link
Copy Markdown
Contributor

Code Coverage Overview

Languages: TypeScript

TypeScript / code-coverage/plugin

The overall coverage in commit 4f87502 in the codex/7144-rebuild-p... branch remains at 96%, unchanged from commit 3c88ec3 in the main branch.

TypeScript / code-coverage/cli

The overall coverage in commit 4f87502 in the codex/7144-rebuild-p... branch remains at 80%, unchanged from commit 3c88ec3 in the main branch.

Show a code coverage summary of the most impacted files.
File main 3c88ec3 codex/7144-rebuild-p... 4f87502 +/-
src/lib/domain/.../connect-env.ts 97% 89% -8%
src/lib/inferen...del-registry.ts 100% 97% -3%
src/lib/adapter.../auth-config.ts 96% 96% 0%
src/lib/inferen...lama-version.ts 100% 100% 0%
src/lib/sandbox...rce-identity.ts 87% 87% 0%
src/lib/state/m...lock-storage.ts 97% 97% 0%
src/lib/state/m...-acquisition.ts 84% 89% +5%
src/lib/inferen...time-context.ts 87% 93% +6%

Updated July 25, 2026 02:37 UTC

@github-actions

github-actions Bot commented Jul 25, 2026

Copy link
Copy Markdown
Contributor

PR Review Advisor — Informational

Advisor assessment: Informational / high confidence
Next action: No advisor follow-up needed.
Findings: 0 blockers · 0 warnings · 0 suggestions
Status: No actionable findings remain in the canonical review ledger.

Model lanes

  • GPT-5.6 Terra (primary): Completed · high confidence · 0 blockers · 0 warnings · 0 suggestions
  • Nemotron 3 Ultra (second opinion): Completed · high confidence · 0 blockers · 0 warnings · 0 suggestions
  • Model comparison: normalized findings match; normalized E2E selections differ; severity counts match.

Nemotron output stays in workflow artifacts and does not change the assessment above.

E2E guidance

Advisory only. E2E / PR Gate selects and runs jobs independently.

Recommended E2E: cloud-onboard, credential-sanitization, security-posture

2 optional E2E recommendations
  • rebuild-hermes
  • rebuild-hermes-stale-base

Workflow run details

This automated review informs maintainers. Warnings and suggestions do not require a response. A maintainer decides whether to merge.

Signed-off-by: Apurv Kumaria <akumaria@nvidia.com>
Signed-off-by: Apurv Kumaria <akumaria@nvidia.com>
@apurvvkumaria

Copy link
Copy Markdown
Collaborator Author

Fix-forward: dispatched the documented manual run-control-plane fallback for exact head 390ccb2d7f7cd311318c896ba38045facc4fc928 and base 623c87394fd461be3ebcac100031be312663b588: https://github.com/NVIDIA/NemoClaw/actions/runs/30139289431. All ordinary and self-hosted checks are green, and the canonical review ledger has no unresolved findings; this run supplies the remaining credentialed E2E evidence. An independent approval is still required because the PR is self-authored.

Signed-off-by: Apurv Kumaria <akumaria@nvidia.com>
@apurvvkumaria

Copy link
Copy Markdown
Collaborator Author

The exact-head CI retry is green at 4f875025c4e2f74cbe6ef33dd33842a2164550f3. The controller selected credential-bearing cloud-onboard, credential-sanitization, and security-posture checks, so I dispatched the documented maintainer control-plane fallback for this exact head/base pair: https://github.com/NVIDIA/NemoClaw/actions/runs/30140798236. Merge readiness remains gated on its verified E2E evidence and independent review.

@apurvvkumaria

Copy link
Copy Markdown
Collaborator Author

Exact-head credentialed E2E is complete for head 4f875025c4e2f74cbe6ef33dd33842a2164550f3 and base 0719dba738b796b01cbc60280c672eda17d3ba74. The successful maintainer controller run 30140798236 dispatched E2E run 30140811319; cloud onboarding, credential sanitization, and both OpenClaw/Hermes security-posture jobs all passed. A later duplicate controller dispatch failed closed because the one-time pending authorization state had already been consumed; no test failed and no rerun is needed. Independent PR approval is still required.

@jyaunches
jyaunches merged commit 3370e93 into main Jul 25, 2026
145 of 151 checks passed
@jyaunches
jyaunches deleted the codex/7144-rebuild-pressure-cadence branch July 25, 2026 15:50
@cv cv mentioned this pull request Jul 26, 2026
23 tasks
apurvvkumaria pushed a commit that referenced this pull request Jul 27, 2026
<!-- markdownlint-disable MD041 -->
## Summary

Add the canonical `docs/changelog/2026-07-25.mdx` release entry with the
exact `## v0.0.96` heading.
The entry reconciles all 90 first-parent commits since v0.0.95 with all
92 merged PRs in the live `v0.0.96` label ledger and groups the
user-visible changes by operator journey.

## Changes

- Add the parser-safe dated MDX changelog entry for v0.0.96 with
root-absolute links to the focused user guides.
- Source summary:
- [#7194](#7194) ->
`docs/changelog/2026-07-25.mdx`: Document persistent baseline network
policy exclusions and their inspection, rebuild, and snapshot behavior.
- [#7188](#7188),
[#7427](#7427), and
[#7546](#7546) ->
`docs/changelog/2026-07-25.mdx`: Document DNS-backed HTTPS inference
routing, keyless loopback endpoints, and provider-marker isolation.
- [#7238](#7238) ->
`docs/changelog/2026-07-25.mdx`: Document blueprint sandbox and provider
identifier validation before state writes or OpenShell calls, with
bounded terminal-safe rejection previews.
- [#7319](#7319),
[#7274](#7274),
[#7528](#7528),
[#7353](#7353), and
[#7560](#7560) ->
`docs/changelog/2026-07-25.mdx`: Document the managed default gateway
service, onboarding readiness, and container-runtime identity
safeguards.
- [#7349](#7349),
[#7498](#7498),
[#7406](#7406),
[#7196](#7196),
[#7559](#7559),
[#7421](#7421),
[#7510](#7510),
[#7295](#7295), and
[#7565](#7565) ->
`docs/changelog/2026-07-25.mdx`: Document gateway-scoped status,
lifecycle diagnostics, managed MCP recovery, delete-edge safeguards, and
fail-closed CLI prompt and command output.
- [#7591](#7591) ->
`docs/changelog/2026-07-25.mdx`: Document opt-in authenticated MCP
tool-name discovery, its bounded and names-only contract, probe
interaction, and rebuild requirement.
- [#7305](#7305),
[#7480](#7480),
[#7471](#7471),
[#7365](#7365), and
[#7541](#7541) ->
`docs/changelog/2026-07-25.mdx`: Document installer version checks,
version-tag reporting, license guidance, WSL Ollama selection, and DGX
Station vLLM detection.
- [#7482](#7482),
[#7466](#7466),
[#7208](#7208),
[#7434](#7434), and
[#7586](#7586) ->
`docs/changelog/2026-07-25.mdx`: Document Ollama resource details,
reasoning precedence, Hermes onboarding behavior, and preserved managed
Hermes BuildKit failures.

- [#6830](#6830),
[#7492](#7492),
[#7563](#7563), and
[#7582](#7582) ->
`docs/changelog/2026-07-25.mdx`: Document the authoritative OpenClaw
production lock, fixed managed-image dependencies, immutable Hermes base
adoption, and Hermes image-size reduction.
- [#7505](#7505),
[#7530](#7530),
[#7547](#7547),
[#7508](#7508),
[#7548](#7548),
[#7549](#7549),
[#7537](#7537),
[#7534](#7534),
[#7515](#7515),
[#7511](#7511),
[#7551](#7551),
[#7562](#7562),
[#7575](#7575),
[#7496](#7496),
[#7594](#7594),
[#7595](#7595), and
[#7599](#7599) ->
`docs/changelog/2026-07-25.mdx`: Summarize release validation, transient
and bounded dispatch reconciliation, exact pre-tag qualification,
identity revalidation, npm-audit retry, sharding, image reuse, timeout,
telemetry, and workflow-hardening changes.
- Reconciled without separate changelog prose:
- [#7539](#7539),
[#7526](#7526),
[#7507](#7507),
[#7506](#7506),
[#7519](#7519),
[#7516](#7516),
[#7396](#7396),
[#7254](#7254),
[#7583](#7583),
[#7596](#7596), and
[#7598](#7598): Test-harness or
fixture-only changes.
- [#7403](#7403),
[#7161](#7161),
[#6877](#6877),
[#7531](#7531),
[#7525](#7525),
[#7522](#7522),
[#7536](#7536),
[#7552](#7552),
[#7566](#7566),
[#7553](#7553),
[#7561](#7561),
[#7577](#7577),
[#7569](#7569),
[#7585](#7585),
[#7584](#7584),
[#7592](#7592),
[#7580](#7580),
[#7571](#7571),
[#7517](#7517),
[#7589](#7589),
[#7402](#7402),
[#7558](#7558),
[#7544](#7544), and
[#7601](#7601): Dependency,
internal recovery, validation, contributor-workflow, E2E optimization,
telemetry, or CI trust changes with no separate user-facing release
claim.
- [#7556](#7556),
[#7573](#7573),
[#7576](#7576), and
[#7578](#7578): Experimental
repository-maintainer conflict automation with no canonical user
documentation surface.

## Type of Change

- [ ] Code change (feature, bug fix, or refactor)
- [ ] Code change with doc updates
- [x] Doc only (prose changes, no code sample modifications)
- [ ] Doc only (includes code sample changes)

## Quality Gates

- [ ] Tests added or updated for changed behavior
- [x] Existing tests cover changed behavior — justification:
`test/changelog-docs.test.ts` validates dated changelog structure,
version headings, and published links.
- [ ] Tests not applicable — justification:
- [x] Docs updated for user-facing behavior changes
- [ ] Docs not applicable — justification:
- [ ] Sensitive paths changed (security, policy, credentials, preflight,
onboarding, inference, runner, sandbox, or messaging)
- [ ] Sensitive-path review completed or maintainer-approved waiver
recorded — reviewer/approval link/justification:
- [ ] Non-success, skipped, or missing CI check accepted by maintainer —
check name, approval link, and follow-up issue:

## Documentation Writer Review

- [x] Documentation writer subagent reviewed the completed changes
- Result: `docs-updated`
- Evidence: Reviewed `docs/changelog/2026-07-25.mdx` at exact head
`0f5dedb47` against 90 first-parent release commits and 92 merged PRs
labeled `v0.0.96`. Verified parser-safe MDX SPDX, the exact version
heading, literal CLI names, writing style, skip terms, all 20
root-absolute published links, and the accepted #7591 opt-in
authenticated discovery bounds. #7544, #7599, and #7601 remain internal
or CI-only release-ledger entries. Changelog tests passed 6/6, the docs
build passed with 0 errors and two pre-existing Fern warnings, and `npm
run check:diff` plus the final diff check passed.
- Agent: Codex Desktop documentation-writer subagent
<!-- docs-review-head-sha: 0f5dedb -->
<!-- docs-review-agents-blob-sha: be20a09 -->

## DGX Station Hardware Evidence

- [ ] Tested on DGX Station
- Tested commit:
- Station profile/scenario:
- Result:
- Supporting evidence:

## Verification

- [x] PR description includes a `Signed-off-by:` line and every commit
appears as `Verified` in GitHub
- [x] Normal `pre-commit`, `commit-msg`, and `pre-push` hooks passed, or
`npm run check:diff` passed when hooks were skipped or unavailable
- [x] Targeted behavior tests pass for the current change set, or tests
are marked not applicable above — `npx vitest run
test/changelog-docs.test.ts`: 6/6 passed.
- [ ] Applicable broad gate passed — `npm test` for broad
runtime/test-harness changes; `npm run check` for repo-wide
validation/coverage changes — command/result: Not applicable to this
prose-only changelog entry.
- [x] Quality Gates section completed with required justifications or
waivers
- [x] No secrets, API keys, or credentials committed
- [ ] `npm run docs` builds without warnings (doc changes only) — the
build passed with 0 errors and 2 existing Fern warnings; the
published-route check passed.
- [x] Doc pages follow the [style
guide](https://github.com/NVIDIA/NemoClaw/blob/main/docs/CONTRIBUTING.md)
(doc changes only)
- [ ] New doc pages include SPDX header and frontmatter (new pages only)
— native changelog files use the required parser-safe MDX SPDX comment
and no frontmatter.

---
Signed-off-by: Carlos Villela <cvillela@nvidia.com>


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Persistent network policy exclusions with consistent restore/exclusion
reporting across rebuilds/snapshots.
* Opt-in MCP tool discovery via `mcp status --tools` with bounded,
redacted authenticated traffic.
* Improved HTTPS inference switching for custom endpoints and refreshed
onboarding/model menu details.
* Refined OpenShell gateway defaults for port `8080`, including more
reliable readiness checks.
* **Bug Fixes**
* Prevent incorrect provider/model restoration after compatible-provider
update failures.
* Preserve managed MCP state after exec loss and tighten gateway/doctor
status scoping.
* **Tests**
* Stronger, fail-closed release validation with hardened
evidence/artifact handoff and bounded timeouts/retries.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Signed-off-by: Prekshi Vyas <prekshiv@nvidia.com>
Co-authored-by: Prekshi Vyas <prekshiv@nvidia.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: e2e End-to-end tests, nightly failures, or validation infrastructure area: performance Latency, throughput, resource use, benchmarks, or scaling integration: hermes Hermes integration behavior platform: container Affects Docker, containerd, Podman, or images

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants