amsd-pipeline 2.0.76 → 2.0.77

package/install.sh

@@ -237,8 +237,17 @@ if [ -n "$DEST" ]; then
         fi
     fi
     _PKG_REF="${REF:-HEAD}"
-    # FETCH FIRST: a colleague packaging a release just tagged by someone else may not have it yet.
-    git -C "$_GIT_ROOT" fetch --tags --quiet >/dev/null 2>&1 || true
+    # FETCH ONLY FOR A REF THAT IS NOT HERE: a colleague packaging a release just tagged by someone
+    # else may not have it yet. Never for a ref this checkout already holds, and never unbounded or
+    # interactive — an unconditional `git fetch --tags` over ssh sat for 20 minutes with no output
+    # while packaging a local HEAD (amsd-2974 install, 2026-09-28). A fetch that cannot finish in
+    # EPAM_INSTALL_FETCH_TIMEOUT seconds is reported, and the ref check below decides.
+    if ! git -C "$_GIT_ROOT" rev-parse --verify "${_PKG_REF}^{commit}" >/dev/null 2>&1; then
+        _warn "ref '$_PKG_REF' is not in this checkout — fetching tags (at most ${EPAM_INSTALL_FETCH_TIMEOUT:-120}s)"
+        GIT_TERMINAL_PROMPT=0 GIT_SSH_COMMAND="${GIT_SSH_COMMAND:-ssh} -o BatchMode=yes -o ConnectTimeout=15" \
+            timeout "${EPAM_INSTALL_FETCH_TIMEOUT:-120}" git -C "$_GIT_ROOT" fetch --tags --quiet >/dev/null 2>&1 \
+            || _warn "fetching tags did not complete"
+    fi
     if ! git -C "$_GIT_ROOT" rev-parse --verify "${_PKG_REF}^{commit}" >/dev/null 2>&1; then
         _bad "ref '$_PKG_REF' does not exist in this checkout, even after fetching tags"
         exit 1
@@ -303,7 +312,9 @@ if [ -n "$DEST" ]; then
     fi
 
     if [ -n "$_OPCFG_TMP" ]; then
-        restore_operator_config "$DEST" "$_OPCFG_TMP"
+        # The engine's own history of each preserved file, so a value it shipped is never mistaken for an
+        # operator edit (an unedited agent-contract.json froze the 10-01 relative-path fix out of an install).
+        restore_operator_config "$DEST" "$_OPCFG_TMP" "${_GIT_ROOT:-}"
         rm -rf "$_OPCFG_TMP"
     fi
     # RESTORED AFTER the operator config, and cleaned up on its own: the two snapshots are
@@ -371,7 +382,16 @@ RUNNER="$("$NODE_BIN" -e '
   const reg = JSON.parse(fs.readFileSync(process.argv[1], "utf8"));
   const set = reg.sets[process.argv[2]];
   const s = JSON.parse(fs.readFileSync(path.join(path.dirname(process.argv[1]), set.settingsFile), "utf8"));
-  process.stdout.write(Object.keys(s.runners || {})[0] || "");
+  const runner = Object.keys(s.runners || {})[0] || "";
+  // THE BINARY THE RUNNER NEEDS, from the map the engine itself reads (providers.json cliBinary).
+  // A runner is usually its own binary (claude, copilot) and then this changes nothing; codemie-web
+  // is not a binary — it needs `codemie` (2026-09-28). $EPAM_CLI entries keep the runner name.
+  let bin = runner;
+  try {
+    const cb = (JSON.parse(fs.readFileSync(path.join(path.dirname(process.argv[1]), "providers.json"), "utf8")).cliBinary || {})[runner];
+    if (cb && !String(cb).startsWith("$")) bin = cb;
+  } catch { /* no map: the runner name is the binary, as before */ }
+  process.stdout.write(bin);
 ' "$CONFIG/provider-sets.json" "$STACK" 2>/dev/null)"
 if [ -n "$RUNNER" ]; then
     if command -v "$RUNNER" >/dev/null 2>&1; then _ok "$RUNNER (the '$STACK' runner)"
@@ -397,6 +417,39 @@ else
     _bad "python3 is not on PATH — 88 pipeline handlers cannot run without it"; FAILED=1
 fi
 
+# A PYTHON ENVIRONMENT THE STACK DECLARES (provider-sets.json pythonEnv): built here, never by hand.
+# codemie-web declares one — the codemie-plugins toolkit its agents reach the codeline through. The
+# path is relative to the install root; the runner reads the same declaration. pip is idempotent, so
+# a re-install converges on the declared (pinned) packages.
+IFS=$'\t' read -r _PYENV_PATH _PYENV_PKGS <<<"$("$NODE_BIN" -e '
+  const reg = require(process.argv[1]);
+  const e = (reg.sets[process.argv[2]] || {}).pythonEnv;
+  if (e && e.path) process.stdout.write(e.path + "\t" + (e.packages || []).join(" "));
+' "$CONFIG/provider-sets.json" "$STACK" 2>/dev/null)"
+if [ -n "${_PYENV_PATH:-}" ] && [ "$CHECK_ONLY" = "1" ]; then
+    # --check builds nothing: the environment and each pinned package must already be there.
+    _pyenv="$ROOT/$_PYENV_PATH"; _pymissing=""
+    for _pkg in ${_PYENV_PKGS:-}; do
+        _want="${_pkg#*==}"; [ "$_want" = "$_pkg" ] && _want=""
+        _have="$("$_pyenv/bin/python" -m pip show "${_pkg%%==*}" 2>/dev/null | sed -n 's/^Version: //p')"
+        { [ -n "$_have" ] && { [ -z "$_want" ] || [ "$_have" = "$_want" ]; }; } || _pymissing="$_pymissing $_pkg"
+    done
+    if [ ! -x "$_pyenv/bin/python" ] || [ -n "$_pymissing" ]; then
+        _bad "the '$STACK' stack's python environment at $_PYENV_PATH is missing or incomplete (${_pymissing# }) — run the installer without --check"; FAILED=1
+    else
+        _ok "python environment for the '$STACK' stack: $_PYENV_PATH (${_PYENV_PKGS:-no packages})"
+    fi
+elif [ -n "${_PYENV_PATH:-}" ]; then
+    _pyenv="$ROOT/$_PYENV_PATH"
+    if [ ! -x "$_pyenv/bin/python" ] && ! python3 -m venv "$_pyenv" >/dev/null 2>&1; then
+        _bad "could not create the '$STACK' stack's python environment at $_pyenv (python3 -m venv)"; FAILED=1
+    elif [ -n "${_PYENV_PKGS:-}" ] && ! "$_pyenv/bin/python" -m pip install -q --disable-pip-version-check $_PYENV_PKGS >/dev/null 2>&1; then
+        _bad "could not install ${_PYENV_PKGS} into $_pyenv — the '$STACK' stack needs them"; FAILED=1
+    else
+        _ok "python environment for the '$STACK' stack: $_PYENV_PATH (${_PYENV_PKGS:-no packages})"
+    fi
+fi
+
 # ── Credentials: what this stack needs, from what it declares ───────────────
 _head "Credentials"
 # .env.example IS GENERATED, never hand-maintained — it went stale in both directions: this repo's
@@ -608,13 +661,19 @@ if [ -n "$EPAM_PROJECT" ] && [ -d "$ROOT/orchestrations/projects/$EPAM_PROJECT"
         if [ -n "$_missing" ]; then
             _warn "project '$EPAM_PROJECT' not configured — missing:$_missing"
         else
-            {
-                echo "# Written by install.sh. NON-SECRET VALUES ONLY — credentials live in .env."
-                echo "PROJECT_NAME=$EPAM_PROJECT"
-                echo "JIRA_URL=$JIRA_URL"
-                echo "JIRA_PROJECT_KEY=$JIRA_PROJECT_KEY"
-                echo "JIRA_CODELINE_ROOT=$JIRA_CODELINE_ROOT"
-            } > "$_cfg"
+            # SET THESE KEYS, KEEP EVERYTHING ELSE. This replaced the whole file: a project's
+            # config.env carries its pauses, baseline branch, JQL and field mappings, and every one
+            # of them was lost to five lines. Each key is replaced where it stands, or appended.
+            "$NODE_BIN" -e '
+              const fs = require("fs"); const [file, ...kv] = process.argv.slice(1);
+              let lines = fs.existsSync(file) ? fs.readFileSync(file, "utf8").split("\n") : [];
+              for (let i = 0; i < kv.length; i += 2) {
+                const k = kv[i], line = k + "=" + kv[i + 1];
+                const at = lines.findIndex((l) => new RegExp("^(export\\s+)?" + k + "=").test(l));
+                if (at >= 0) lines[at] = line; else lines.splice(lines.length && lines[lines.length - 1] === "" ? lines.length - 1 : lines.length, 0, line);
+              }
+              fs.writeFileSync(file, lines.join("\n").replace(/\n*$/, "\n"));
+            ' "$_cfg" PROJECT_NAME "$EPAM_PROJECT" JIRA_URL "$JIRA_URL" JIRA_PROJECT_KEY "$JIRA_PROJECT_KEY" JIRA_CODELINE_ROOT "$JIRA_CODELINE_ROOT"
             _ok "wrote $_cfg (JIRA_URL, JIRA_PROJECT_KEY, JIRA_CODELINE_ROOT)"
         fi
     fi

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "amsd-pipeline",
-  "version": "2.0.76",
+  "version": "2.0.77",
   "description": "Installer for the amsd-pipeline orchestration stack. Clones, packages and provisions the full stack with one command — no separate git clone step.",
   "bin": {
     "amsd-pipeline": "bin/amsd-pipeline.js"