feat(automation): run life-os hourly NVIDIA NIM review repair

[seonghobae]

Buyer-perceivable gap

Hourly NVIDIA NIM review repair never scanned ContextualWisdomLab/life-os. Live LifeOS pull requests such as ContextualWisdomLab/life-os#206, ContextualWisdomLab/life-os#205, ContextualWisdomLab/life-os#199, ContextualWisdomLab/life-os#198, and ContextualWisdomLab/life-os#145 target protected main and stalled while Clearfolio, DiskSage, and fast-mlsirm received heartbeats.

Change

• Thin scheduled caller at minute 6, base_branch: main, one dispatch, two-hour same-head retry.
• Job-scoped id-token: write so the reusable scheduler can mint the OpenCode App fallback from GitHub OIDC.
• Maps only PR_REVIEW_MERGE_TOKEN and OPENCODE_APPROVE_TOKEN. Never NVIDIA_NIM_API_KEY on the caller. Never COPILOT_GITHUB_TOKEN.
• Independent pull_request / push / compileall path contracts.
• Local 2× pytest + coverage + interrogate at 100% on this head (1122 passed).

Do not self-approve. Merge remains subject to two-approval + last-pusher ruleset. GitHub review/Checks wait is not a blocker.

Refs ContextualWisdomLab/life-os#206, ContextualWisdomLab/life-os#205, ContextualWisdomLab/life-os#199, ContextualWisdomLab/life-os#198, and ContextualWisdomLab/life-os#145.

---

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 8f9e3bdc-dd38-4dd6-97cc-991e77cf64d7

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[seonghobae]

Rebased onto current main 9e9f59f3; resolved shared hourly-contract conflicts by preserving both current-main and life-os paths. Caller tests passed (6 passed); actionlint passed on both changed workflows; diff check passed. Project #1 is In Progress.

[seonghobae]

Current-head evidence: exact head d744b80, based on current main bbedc1a. Rebased the original Life OS hourly caller. Caller tests: 34 passed; hourly workflow actionlint and git diff --check passed. Hosted protected checks remain; no bypass used.

[seonghobae]

Rebased onto current origin/main c47bee5 and preserved the existing hourly caller path set.

Current HEAD: 8246a49

Validation on this HEAD:

• pytest -q tests/test_life_os_hourly_review_caller.py: 6 passed
• actionlint: caller and hourly dispatcher passed
• compileall and git diff --check passed

@OpenCode review this exact HEAD after the rebase.

[seonghobae]

@opencode-agent review the exact current head $head_oid against protected base 2cce96f. Rebased this hourly caller onto current main; contract tests, changed-workflow actionlint, and diff --check were run on the exact rebased source. The caller keeps explicit target identity, bounded dispatch/retry, OIDC/approved secret scope, and no COPILOT token forwarding. Treat predecessor reviews/checks as historical and do not approve from queued or status-only evidence.

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no potential bugs to report.

View in Devin Review to see 1 additional finding.