conductor/rune
1
2 Fork 1
Code Issues 38 Pull Requests 32 Actions 10 Packages Projects Releases 564 Wiki Activity
3,728 Commits 141 Branches 657 Tags
ed790561ba5e560deb2f2fafc76fa6c40dcaf794
Commit Graph
4 Commits
Author SHA1 Message Date
Nick 4eefc15837 fix(lifecycle+auth): canonical gitea auth path, terminalization helper, fault-injection gaps (T15 Parts A-E)
CI Pipeline / best-practices (push) Successful in 8s
Details
Auto-version and Release / release (push) Failing after 13s
Details
CI Pipeline / documentation (push) Successful in 5s
Details
CI Pipeline / canary (push) Successful in 33s
Details
CI Pipeline / lint (push) Failing after 41s
Details
CI Pipeline / type-check (push) Successful in 27s
Details
CI Pipeline / gitea-offline (push) Successful in 14s
Details
CI Pipeline / unit-tests (push) Successful in 59s
Details
CI Pipeline / required-checks (push) Successful in 1s
Details
deploy / deploy (push) Successful in 37s
Details 
- scripts/gitea_auth.py: single credential ladder (env -> 0600 token file ->
  git credential fill); 6 consumers migrated off direct os.environ reads
- rune_operator: consolidate 5 duplicated failure blocks into
  _terminalize_execution_failure; fix 3 fault-injection gaps:
  (1) dual-module PreparedTool identity split crashed approval-path saves,
  (2) fallback-model failure escaped send_task (created/pending orphan),
  (3) running-transition save uncaught (running-with-no-owner)
- envelope task.status now agrees with canonical ledger (awaiting_approval)
- orphan task_ac35f4e287c8 terminalized failed with durable evidence
- tests: gitea auth ladder (6), lifecycle fault matrix (9 boundaries +
  restart/reload + helper contract); 1280 green in ci-venv; ratchet 352/80
 2026-09-11 20:15:57 +01:00
Nick 179893039e fix(pipeline): catch URLError in create_release error path (#192) 2026-09-07 15:26:33 +01:00
Nick 52e0bb0034 fix(pipeline): derive release API URLs in-script from workflow base coordinates (#192) 
Spec-gate finding 1: create_release.py hard-read LIST_API_URL/RELEASE_API_URL
but auto-version.yml only ever passed RELEASE_SERVER_URL/RELEASE_REPO —
KeyError at runtime on both the PR-closed and safety-net release paths.

The script now derives both URLs from the base coordinates (explicit env
still overrides for direct use), and the workflow env blocks stay unchanged.
Adds tests/test_workflow_script_contract.py: a systematic guard that parses
every workflow env contract (step env + $GITHUB_ENV exports + shell exports)
against each invoked script's hard os.environ reads, plus an honesty check
that derived-default keys are never bare-subscripted.

Red evidence: contract test failed on both create_release invocations
(missing LIST_API_URL/RELEASE_API_URL); honesty test failed on the bare
subscripts. Green: 18/18.
 2026-09-07 13:49:33 +01:00
Nick 98bdd5a70d feat(pipeline): push-triggered release safety net (#192) 2026-09-07 12:04:59 +01:00