gowalk-cicd 1.0.103 → 1.0.104

package/CLAUDE.md

@@ -204,6 +204,8 @@ node /path/to/gowalk-cicd/bin/cli.mjs
   secret. The action writes it to host-side `.runtime.env` with mode 0600 and
   supplies it to Compose after the generated `.env`; never print its content.
   Backend failures emit `backend_deploy_failed` with the fixed runner/host phase and exit code.
+  Its message uses the exact schema/phase/exit envelope documented in README, without JSON braces
+  that multiline secret masking can erase. Never reconstruct masked fields or include arbitrary text.
   Native bundle/Pods failures emit `native_prepare_failed` with fixed refusal codes and observed
   signals. Unknown signals remain unclassified; never copy child output or commands into annotations.
 - The mobile workflow's feature-branch-only `backend-preview` job bootstraps a

package/README.md

@@ -336,6 +336,10 @@ Native bundle and Pods failures emit `native_prepare_failed` with schema
 Backend failures emit `backend_deploy_failed` with schema `gowalk-cicd/backend-deploy-failed.v1`,
 the runner/host `phase` and `exit_code`. These receipts preserve the failed result and exclude
 private command output, commands, hosts and runtime credentials. Empty signals are unclassified.
+The backend message is `gowalk-cicd/backend-deploy-failed.v1 phase=<phase> exit_code=<code>`:
+fixed fields without JSON braces, which GitHub can mask when a multiline secret has brace-only lines.
+Consumers validate the complete envelope, the known phase and exit code 1–255; older JSON messages
+remain readable by the panel. Masked fields are never reconstructed and credential masking stays enabled.
 An interrupted locked Pod fetch can retry once within the existing 900-second install budget.
 `native_pods_retry` (`gowalk-cicd/native-pods-retry.v1`) reports `attempt:2` and `reason:partial_transfer`;
 successful preparation reports `pod_attempts`. Dependency locks, relay and TLS checks remain enforced.

package/action/.daemux-version

@@ -1 +1 @@
-1.0.103
+1.0.104

package/android-action/.daemux-version

@@ -1 +1 @@
-1.0.103
+1.0.104

package/backend-action/.daemux-version

@@ -1 +1 @@
-1.0.103
+1.0.104

package/backend-action/deploy_evidence.sh

@@ -8,8 +8,9 @@ backend_report_failure() {
     remote_setup|initialize_environment|compose_up|discover_port|local_health|configure_vhost|certificate|public_health) ;;
     *) phase=unclassified ;;
   esac
-  printf '::error title=backend_deploy_failed::{"schema":"gowalk-cicd/backend-deploy-failed.v1",'\
-'"phase":"%s","exit_code":%s}\n' "$phase" "$status"
+  # Multiline JSON secrets can make GitHub mask standalone braces. Keep fixed evidence readable.
+  printf '::error title=backend_deploy_failed::gowalk-cicd/backend-deploy-failed.v1 phase=%s exit_code=%s\n' \
+    "$phase" "$status"
   return "$status"
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gowalk-cicd",
-  "version": "1.0.103",
+  "version": "1.0.104",
   "description": "Zero-config GitHub Actions delivery for iOS TestFlight and Android Google Play.",
   "type": "module",
   "bin": {