fix(api): honor upstream docker repair success

apps/api/src/services/auto_repair_service.py

@@ -1057,6 +1057,38 @@ class AutoRepairService:
             required_scope="write",
         )
 
+    def _upstream_repair_success_result(
+        self,
+        incident: Incident,
+        command: str,
+    ) -> str | None:
+        """Treat trusted upstream host repair labels as a successful no-op.
+
+        Some host monitors already perform the Docker restart before sending the
+        alert.  Re-running the restart from AwoooP would create duplicate
+        disruption; the flywheel should record that the execute stage converged
+        and leave evidence in the execution row instead.
+        """
+
+        if "docker restart" not in (command or "").lower():
+            return None
+
+        labels = self._incident_labels(incident)
+        repair_result = str(labels.get("repair_result") or "").strip().lower()
+        repair_action = str(labels.get("repair_action") or "").strip().lower()
+        if repair_result not in {"success", "succeeded", "ok"}:
+            return None
+        if repair_action not in {"restart", "restarted", "docker_restart", "docker-restart"}:
+            return None
+
+        container_name = self._resolve_container_name_for_incident(incident, command)
+        source = str(labels.get("source") or "upstream_monitor").strip() or "upstream_monitor"
+        target = f" container={container_name}" if container_name else ""
+        return (
+            "SUCCESS: upstream repair already completed "
+            f"(source={source} action={repair_action} result={repair_result}{target})"
+        )
+
     def preview_read_only_ssh_mcp_route(
         self,
         incident: Incident,
@@ -1313,6 +1345,10 @@ class AutoRepairService:
 
         # 2026-04-06 Claude Code: Sprint 3 — repair_by_uri (URI scheme 路由)
         if step.action_type == ActionType.SSH_COMMAND:
+            upstream_success = self._upstream_repair_success_result(incident, step.command)
+            if upstream_success is not None:
+                return upstream_success
+
             route = self._route_legacy_ssh_command_to_mcp(incident, step.command)
             if route is not None:
                 return await self._execute_ssh_mcp_route(incident, route)