gowalk-cicd 1.0.116 → 1.0.117

package/action/.daemux-version

@@ -1 +1 @@
-1.0.116
+1.0.117

package/android-action/.daemux-version

@@ -1 +1 @@
-1.0.116
+1.0.117

package/android-action/flutter-setup/action.yml

@@ -49,6 +49,13 @@ inputs:
     description: Git clone source
     required: false
     default: https://github.com/flutter/flutter.git
+  archive-budget-seconds:
+    description: >-
+      Seconds the proxied SDK archive transfer may take. Raise it in a release
+      job, whose own timeout is far longer than a validation job's; the helper
+      clamps it and the partial archive is cached either way.
+    required: false
+    default: ''
 outputs:
   CHANNEL:
     value: ${{ steps.flutter-action.outputs.CHANNEL }}
@@ -196,6 +203,7 @@ runs:
         ${{ inputs.cache == 'true' && format('{0}/gowalk-flutter-archives', runner.temp) || '' }}
       GOWALK_FLUTTER_RELEASE_CACHE: ${{ steps.release-metadata.outputs.path }}
       GOWALK_FLUTTER_RELEASE_PIN: ${{ steps.release-metadata.outputs.pin }}
+      GOWALK_FLUTTER_ARCHIVE_BUDGET_S: ${{ inputs.archive-budget-seconds }}
     with:
       channel: ${{ steps.flutter-action.outputs.CHANNEL }}
       flutter-version: ${{ steps.flutter-action.outputs.VERSION }}

package/android-action/scripts/flutter_manifest.py

@@ -9,6 +9,29 @@ import time
 from urllib.parse import urlsplit
 
 import flutter_download
+
+#: Seconds an archive transfer may take before its receipt is published. The
+#: enclosing job's own room is the only thing that bounds it usefully, and the
+#: two differ by a factor of three: a validation job must report inside 30
+#: minutes, while a release job has 45-60. A default-branch deploy cannot
+#: restore the SDK cache a task branch built (GitHub scopes branch caches away
+#: from the default branch), so it downloads the whole archive through the
+#: account's residential exit at a few hundred KB/s — and a fixed 20-minute cap
+#: made that a guaranteed failure: obd-scanner's release retained 428 MB of its
+#: archive, failed on curl 28, and shipped nothing (2026-09-09).
+ARCHIVE_BUDGET_S = 1200
+MAX_ARCHIVE_BUDGET_S = 3000
+
+
+def archive_budget() -> int:
+    """The archive deadline, from ``GOWALK_FLUTTER_ARCHIVE_BUDGET_S`` when the
+    workflow declares one. Clamped: never below the current default, never
+    beyond a release job's own timeout."""
+    try:
+        declared = int(os.environ.get("GOWALK_FLUTTER_ARCHIVE_BUDGET_S", "") or ARCHIVE_BUDGET_S)
+    except ValueError:
+        return ARCHIVE_BUDGET_S
+    return max(ARCHIVE_BUDGET_S, min(declared, MAX_ARCHIVE_BUDGET_S))
 import flutter_archive_cache
 import flutter_release_cache
 
@@ -23,7 +46,7 @@ def download(arguments: list[str], directory: Path) -> int:
     if kind == "archive":
         flutter_download.archive_digest()
     child_env = {**os.environ, "NO_PROXY": "", "no_proxy": ""}
-    deadline, code, http, proxy_http = time.monotonic() + (60 if kind == "manifest" else 1200), 1, 0, 0
+    deadline, code, http, proxy_http = time.monotonic() + (60 if kind == "manifest" else archive_budget()), 1, 0, 0
     destination = directory / "download"
     destination.touch(mode=0o600, exist_ok=True)
     destination.chmod(0o600)

package/android-action/scripts/test_flutter_download_budget.py

@@ -38,5 +38,47 @@ class DownloadBudgetTests(unittest.TestCase):
         self.assertNotIn("fixture-secret", error.getvalue())
 
 
+class ArchiveBudgetTests(unittest.TestCase):
+    def test_a_release_job_may_declare_more_archive_room_than_a_validation_job(self):
+        with patch.dict(os.environ, {}, clear=False):
+            os.environ.pop("GOWALK_FLUTTER_ARCHIVE_BUDGET_S", None)
+            self.assertEqual(flutter_manifest.archive_budget(), 1200)
+            os.environ["GOWALK_FLUTTER_ARCHIVE_BUDGET_S"] = "2100"
+            self.assertEqual(flutter_manifest.archive_budget(), 2100)
+            # Never shorter than the default, never past a release job's timeout,
+            # and a malformed value is the default rather than a refusal.
+            os.environ["GOWALK_FLUTTER_ARCHIVE_BUDGET_S"] = "60"
+            self.assertEqual(flutter_manifest.archive_budget(), 1200)
+            os.environ["GOWALK_FLUTTER_ARCHIVE_BUDGET_S"] = "999999"
+            self.assertEqual(flutter_manifest.archive_budget(), 3000)
+            os.environ["GOWALK_FLUTTER_ARCHIVE_BUDGET_S"] = "not-a-number"
+            self.assertEqual(flutter_manifest.archive_budget(), 1200)
+            os.environ["GOWALK_FLUTTER_ARCHIVE_BUDGET_S"] = ""
+            self.assertEqual(flutter_manifest.archive_budget(), 1200)
+
+    def test_a_declared_budget_actually_extends_the_transfer_deadline(self):
+        elapsed = [0.0]
+
+        def transfer(_url, destination, _kind, remaining, _env):
+            elapsed[0] += min(600, remaining)
+            with destination.open("ab") as output:
+                output.write(b"partial")
+            return 28, 200, 200
+
+        with tempfile.TemporaryDirectory() as directory, contextlib.redirect_stderr(io.StringIO()):
+            with patch.dict(os.environ, HTTPS_PROXY="http://fixture:secret@localhost:1",
+                            GOWALK_FLUTTER_ARCHIVE_SHA256="a" * 64,
+                            GOWALK_FLUTTER_ARCHIVE_BUDGET_S="2100"):
+                with patch.object(flutter_manifest.time, "monotonic", side_effect=lambda: elapsed[0]), \
+                        patch.object(flutter_manifest.time, "sleep", side_effect=lambda seconds: None), \
+                        patch.object(flutter_manifest.flutter_download, "transfer", side_effect=transfer):
+                    flutter_manifest.download(["--connect-timeout", "15", "--retry", "5",
+                        "https://fixture.invalid/flutter_infra_release/releases/stable/linux/sdk.tar.xz"],
+                        Path(directory))
+        # The declared deadline bounds the pass, not the two 600 s attempts a
+        # 1200 s default allowed: the last attempt gets the remaining 300 s.
+        self.assertEqual(elapsed[0], 2100)
+
+
 if __name__ == "__main__":
     unittest.main()

package/android-action/scripts/test_google_bootstrap_wiring.py

@@ -20,6 +20,9 @@ class BootstrapWiringTests(unittest.TestCase):
             if step is install:
                 expected_env["GOWALK_FLUTTER_ARCHIVE_CACHE"] = (
                     "${{ inputs.cache == 'true' && format('{0}/gowalk-flutter-archives', runner.temp) || '' }}")
+                # Only the step that actually transfers the archive carries the
+                # caller's declared budget; the dry-run resolve must not.
+                expected_env["GOWALK_FLUTTER_ARCHIVE_BUDGET_S"] = "${{ inputs.archive-budget-seconds }}"
             self.assertEqual(step["env"], expected_env)
             self.assertEqual(step["with"]["cache"], "false")
             self.assertEqual(step["with"]["pub-cache"], "false")
@@ -38,6 +41,11 @@ class BootstrapWiringTests(unittest.TestCase):
                     self.assertEqual(job["env"]["GOOGLE_STORE_PROXY_URL"],
                                      "${{ secrets.GOOGLE_STORE_PROXY_URL }}")
                     self.assertNotIn("continue-on-error", step)
+                    # A release job runs on the default branch, which cannot
+                    # restore a task branch's SDK cache, so it declares the
+                    # archive room its own timeout allows (2026-09-09).
+                    if name == "deploy.yml" and int(job.get("timeout-minutes", 0)) >= 45:
+                        self.assertEqual(step["with"]["archive-budget-seconds"], "2100")
         self.assertEqual(checked, 3)
         setup = yaml.safe_load((ROOT / "android-action/flutter-setup/action.yml").read_text())
         steps = setup["runs"]["steps"]
@@ -65,7 +73,9 @@ class BootstrapWiringTests(unittest.TestCase):
         setup = yaml.safe_load((ROOT / "android-action/flutter-setup/action.yml").read_text())
         inputs = {"channel", "flutter-version", "flutter-version-file", "architecture", "cache", "cache-key",
                   "cache-path", "pub-cache", "pub-cache-key", "pub-cache-path", "dry-run", "git-source"}
-        self.assertEqual(set(setup["inputs"]), inputs)
+        # `archive-budget-seconds` is this action's own knob, not one of the
+        # official action's inputs: it reaches the transfer as an env var.
+        self.assertEqual(set(setup["inputs"]), inputs | {"archive-budget-seconds"})
         resolve = next(step for step in setup["runs"]["steps"] if step.get("id") == "flutter-action")
         for name in inputs - {"cache", "pub-cache", "dry-run"}:
             self.assertEqual(resolve["with"][name], "${{ inputs." + name + " }}")

package/backend-action/.daemux-version

@@ -1 +1 @@
-1.0.116
+1.0.117

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gowalk-cicd",
-  "version": "1.0.116",
+  "version": "1.0.117",
   "description": "Zero-config GitHub Actions delivery for iOS TestFlight and Android Google Play.",
   "type": "module",
   "bin": {

package/templates/deploy.yml

@@ -101,6 +101,12 @@ jobs:
         with:
           channel: stable
           cache: true
+          # A release runs on the default branch, which cannot restore the SDK
+          # cache a task branch built, so it downloads the whole archive through
+          # the account exit. This job has an hour; the helper's own 20-minute
+          # default belongs to a validation job and turned that download into a
+          # guaranteed failure (obd-scanner, 2026-09-09: 428 MB retained, curl 28).
+          archive-budget-seconds: '2100'
       - name: Retain CocoaPods cache process scope
         id: pods-cache-scope
         if: ${{ steps.flutter.outputs.enabled == 'true' }}
@@ -411,6 +417,9 @@ jobs:
         with:
           channel: stable
           cache: true
+          # 35 of this job's 45 minutes; see the iOS job for why a release needs
+          # more archive room than a validation run.
+          archive-budget-seconds: '2100'
       # Flutter apps can depend on private git packages. Most repos in this fleet
       # embed a PAT directly in the pubspec URL, which publishes the token into
       # source and into every fork of the lockfile. Setting the optional