gowalk-cicd 1.0.114 → 1.0.116

package/CLAUDE.md

@@ -216,6 +216,8 @@ node /path/to/gowalk-cicd/bin/cli.mjs
   signals. Unknown signals remain unclassified; never copy child output or commands into annotations.
   Timeout and cancellation retain the existing bounded sanitized diagnostic after owned-child cleanup;
   preserve the failure code, install deadline and retry fences.
+  Within the bounded capture, retain the CocoaPods primary exception alongside the tail when a long
+  stack or secondary issue-search failure hides it. Redact before selecting the bounded excerpt.
 - The mobile workflow's feature-branch-only `backend-preview` job bootstraps a
   new app before GitHub registers `deploy-backend.yml` on the default branch.
   Default-branch deploys continue through the separate backend workflow.

package/action/.daemux-version

@@ -1 +1 @@
-1.0.114
+1.0.116

package/action/scripts/native_pods_diagnostics.py

@@ -23,6 +23,20 @@ def values(environment: dict[str, str]) -> set[str]:
     return {value for value in found if value}
 
 
+def excerpt(text: str) -> str:
+    lines = text.splitlines()
+    tail = "\n".join(lines[-30:])[-4000:]
+    start = next((index for index in range(len(lines) - 1, -1, -1)
+                  if lines[index].strip() == "### Error"), None)
+    if start is None:
+        return tail
+    primary = "\n".join(lines[start:start + 6])[:1200]
+    if primary in tail:
+        return tail
+    tail = "\n".join(lines[-(29 - len(primary.splitlines())):])[-(3995 - len(primary)):]
+    return primary + "\n...\n" + tail
+
+
 def diagnostic(log, environment: dict[str, str] | None = None) -> str:
     log.flush()
     log.seek(0, os.SEEK_END)
@@ -44,7 +58,7 @@ def diagnostic(log, environment: dict[str, str] | None = None) -> str:
     text = re.sub(r"\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+", "[token redacted]", text)
     text = re.sub(r"https?://[^\s\"'<>]+", "[URL redacted]", text)
     text = re.sub(r"[A-Za-z0-9_+/=-]{32,}", "[long value redacted]", text)
-    return "\n".join(text.splitlines()[-30:])[-4000:]
+    return excerpt(text)
 
 
 def refuse(code: str, log, exception):

package/action/scripts/test_native_pods_diagnostics.py

@@ -37,3 +37,30 @@ class DiagnosticsTests(unittest.TestCase):
         self.assertLessEqual(len(result.splitlines()), 30)
         pem = b"-----BEGIN PRIVATE KEY-----\nPRIVATE_PEM_VALUE\n-----END PRIVATE KEY-----\n"
         self.assertNotIn("PRIVATE_PEM_VALUE", diagnostic(io.BytesIO(pem), {}))
+
+    def test_cocoapods_primary_exception_survives_long_stack_and_secondary_failure(self):
+        body = ('Analyzing dependencies\n### Error\n\n```\n'
+                'FixturePodError - cannot install dependency 12.3\n'
+                'Authorization: Bearer fixture-private-value\n'
+                'https://fixture-user:fixture-password@example.invalid/private\n')
+        body += ''.join(f'/ruby/gems/example/file_{index}.rb:12:in helper_{index}\n' for index in range(80))
+        body += '```\nTEMPLATE END\nSearching for inspections failed: secondary query refused\n'
+        result = diagnostic(io.BytesIO(body.encode()), {})
+        self.assertIn('FixturePodError - cannot install dependency 12.3', result)
+        self.assertIn('secondary query refused', result)
+        self.assertNotIn('fixture-private-value', result)
+        self.assertNotIn('fixture-password', result)
+        self.assertNotIn('example.invalid', result)
+        self.assertLessEqual(len(result), 4000)
+        self.assertLessEqual(len(result.splitlines()), 30)
+        self.assertEqual(diagnostic(io.BytesIO(result.encode()), {}), result)
+
+    def test_primary_exception_survives_character_bound_as_well_as_line_bound(self):
+        body = '### Error\n\n```\nFixturePodError - initial failure\n'
+        body += ('frame with many ordinary path components ' * 8 + '\n') * 28
+        body += 'secondary cleanup failure\n'
+        result = diagnostic(io.BytesIO(body.encode()), {})
+        self.assertIn('FixturePodError - initial failure', result)
+        self.assertIn('secondary cleanup failure', result)
+        self.assertLessEqual(len(result), 4000)
+        self.assertLessEqual(len(result.splitlines()), 30)

package/android-action/.daemux-version

@@ -1 +1 @@
-1.0.114
+1.0.116

package/backend-action/.daemux-version

@@ -1 +1 @@
-1.0.114
+1.0.116

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gowalk-cicd",
-  "version": "1.0.114",
+  "version": "1.0.116",
   "description": "Zero-config GitHub Actions delivery for iOS TestFlight and Android Google Play.",
   "type": "module",
   "bin": {

package/templates/deploy.yml

@@ -581,9 +581,19 @@ jobs:
         run: |
           echo "::notice title=play_review_pending::{\"schema\":\"gowalk-cicd/play-review-pending.v1\",\"package\":\"${PACKAGE}\",\"track\":\"${TRACK}\",\"version_code\":\"${VERSION_CODE}\"}"
 
+      # Saved even when the build failed OR the job ran out of time. The cache
+      # holds DOWNLOADS, not build outputs: Gradle's `modules-2` store is
+      # content-addressed and re-verified on use, and a partial fetch never
+      # enters it. `!cancelled()` still skipped exactly the case that matters —
+      # a job cancelled at its own `timeout-minutes` — which deadlocked every
+      # app's FIRST Android release: a cold build that exceeds the cap is
+      # cancelled before this step, so nothing is cached, so the next attempt is
+      # cold too. Foundy (2026-09-09) spent 39 of its 45 minutes in
+      # `flutter_bundle` with no cache entry for the repository at all, while an
+      # app with a warm cache finishes the same job in 13 minutes.
       - name: Save Gradle dependencies
         if: >-
-          ${{ !cancelled() && steps.mode.outputs.mode == 'local'
+          ${{ always() && steps.mode.outputs.mode == 'local'
               && steps.gradle_cache.outputs.cache-primary-key != ''
               && steps.gradle_cache.outputs.cache-hit != 'true' }}
         uses: actions/cache/save@caa296126883cff596d87d8935842f9db880ef25