gowalk-cicd 1.0.121 → 1.0.123

package/action/.daemux-version

@@ -1 +1 @@
-1.0.121
+1.0.123

package/android-action/.daemux-version

@@ -1 +1 @@
-1.0.121
+1.0.123

package/android-action/scripts/play_preflight_transport.py

@@ -88,7 +88,16 @@ def call(phase: str, operation, *, retry: bool = False, edit_id: str | None = No
         else:
             if not retry or getattr(result, "status_code", None) not in RETRY_STATUSES:
                 if accepted is not None and result.status_code not in accepted:
-                    fail(phase, "provider_refused", attempt, status=result.status_code, edit_id=edit_id)
+                    # A transient upstream status is not a refusal, even where the
+                    # phase may not replay it: `edit_create` never repeats an
+                    # ambiguous insert, so a 503 there ends the build — and calling
+                    # that "provider_refused" sent the next session hunting for a
+                    # configuration Google never objected to (Foundy, 2026-09-09,
+                    # run 34345638488). The remedy for one is to dispatch again;
+                    # for the other it is to change something first.
+                    code = ("provider_unavailable" if result.status_code in RETRY_STATUSES
+                            else "provider_refused")
+                    fail(phase, code, attempt, status=result.status_code, edit_id=edit_id)
                 return result
             if attempt == limit:
                 fail(phase, "provider_unavailable", attempt, status=result.status_code, edit_id=edit_id)

package/android-action/scripts/test_play_preflight_transport.py

@@ -63,6 +63,26 @@ class PreflightTransportTests(unittest.TestCase):
         self.assertIn('"edit_id": "123"', str(caught.exception))
         self.assertEqual(operation.call_count, 3)
 
+    def test_a_transient_status_is_unavailable_even_where_the_phase_cannot_replay(self):
+        """`edit_create` must not repeat an ambiguous insert, but naming its 503 a
+        refusal told the next session to go and fix a configuration Google never
+        objected to. The status decides the word; the retry policy is unchanged."""
+        operation = mock.Mock(return_value=mock.Mock(status_code=503))
+        with self.assertRaises(SystemExit) as caught:
+            transport.call("edit_create", operation, accepted=(200, 404), retry_connect=True)
+        self.assertIn('"code": "provider_unavailable"', str(caught.exception))
+        self.assertIn('"status": 503', str(caught.exception))
+        self.assertIn('"attempts": 1', str(caught.exception))
+        operation.assert_called_once()
+        self.sleep.assert_not_called()
+
+    def test_a_real_refusal_keeps_its_own_word(self):
+        operation = mock.Mock(return_value=mock.Mock(status_code=403))
+        with self.assertRaises(SystemExit) as caught:
+            transport.call("edit_create", operation, accepted=(200, 404), retry_connect=True)
+        self.assertIn('"code": "provider_refused"', str(caught.exception))
+        self.assertIn('"status": 403', str(caught.exception))
+
     def test_refusal_after_retry_records_the_actual_attempt_in_a_safe_annotation(self):
         operation = mock.Mock(side_effect=[mock.Mock(status_code=503), mock.Mock(status_code=403)])
         with self.assertRaises(SystemExit) as caught:

package/backend-action/.daemux-version

@@ -1 +1 @@
-1.0.121
+1.0.123

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gowalk-cicd",
-  "version": "1.0.121",
+  "version": "1.0.123",
   "description": "Zero-config GitHub Actions delivery for iOS TestFlight and Android Google Play.",
   "type": "module",
   "bin": {

package/src/install.mjs

@@ -127,6 +127,70 @@ function copyAction(source, destination, repoRoot, dryRun) {
   return { dest, existed, fileCount };
 }
 
+// A workflow overwrite is wholesale: the template replaces the consumer's file.
+// Anything that repo had tuned for itself is gone, and until now silently — the
+// only thing standing between an app and a broken deploy was somebody reading
+// the diff. obd-scanner adopted twice in one morning and both times the
+// template's `runtime-env: ${{ secrets.BACKEND_RUNTIME_ENV }}` replaced an
+// inline runtime env for a secret that repo does not define; adopting it as
+// written would have deployed an empty environment (2026-09-09).
+//
+// So say what changed. This is a receipt, not a merge: the template still wins,
+// and the adopting session is told exactly which of its own bindings to put
+// back. Workflows are committed files, so nothing here is secret material —
+// values are truncated only to keep the report readable.
+const BINDING = /^\s*([A-Za-z0-9_.-]+):\s*(\S.*?)\s*$/;
+const REPORT_LIMIT = 20;
+
+function bindings(text) {
+  // Every distinct `key: value` pair, not one per key. Keys like
+  // `timeout-minutes` appear many times across jobs and an app tunes a
+  // particular one; keying by name alone reported the first occurrence and
+  // silently missed exactly the binding that had been changed.
+  const found = new Map();
+  for (const line of String(text).split('\n')) {
+    const match = BINDING.exec(line);
+    if (!match) continue;
+    const [, key, value] = match;
+    if (!found.has(key)) found.set(key, new Set());
+    found.get(key).add(value);
+  }
+  return found;
+}
+
+function short(value) {
+  const text = String(value).replace(/\s+/g, ' ').trim();
+  return text.length > 80 ? text.slice(0, 77) + '...' : text;
+}
+
+export function changedBindings(before, after) {
+  const old = bindings(before), fresh = bindings(after);
+  const changes = [];
+  for (const [key, values] of old) {
+    const now = fresh.get(key);
+    for (const value of values) {
+      if (now && now.has(value)) continue;          // this exact pair survived
+      changes.push({ key, before: value, after: now ? [...now].join(' | ') : null });
+    }
+  }
+  return changes;
+}
+
+function reportOverwrite(relative, before, after) {
+  const changes = changedBindings(before, after);
+  if (!changes.length) return changes;
+  console.log(`  ${relative}: ${changes.length} binding(s) this repo had set were replaced by the template.`);
+  console.log('  Restore the ones this app owns before committing:');
+  for (const change of changes.slice(0, REPORT_LIMIT)) {
+    console.log(`    ${change.key}: ${short(change.before)}`
+      + (change.after === null ? '  ->  (removed)' : `  ->  ${short(change.after)}`));
+  }
+  if (changes.length > REPORT_LIMIT) {
+    console.log(`    ...and ${changes.length - REPORT_LIMIT} more; read the full diff.`);
+  }
+  return changes;
+}
+
 function copyWorkflow(repoRoot, dryRun) {
   const dest = join(repoRoot, WORKFLOW_DEST_REL);
   const existed = existsSync(dest);
@@ -135,8 +199,10 @@ function copyWorkflow(repoRoot, dryRun) {
     return { dest, existed };
   }
   ensureDir(dirname(dest));
+  const previous = existed ? readFileSync(dest, 'utf8') : '';
   cpSync(WORKFLOW_TEMPLATE, dest, { force: true });
   console.log(`  ${existed ? 'Overwrote' : 'Created'} ${WORKFLOW_DEST_REL}`);
+  if (existed) reportOverwrite(WORKFLOW_DEST_REL, previous, readFileSync(dest, 'utf8'));
   return { dest, existed };
 }
 
@@ -148,8 +214,10 @@ function copyBackendWorkflow(repoRoot, dryRun) {
     return;
   }
   ensureDir(dirname(dest));
+  const previous = existed ? readFileSync(dest, 'utf8') : '';
   cpSync(BACKEND_WORKFLOW_TEMPLATE, dest, { force: true });
   console.log(`  ${existed ? 'Overwrote' : 'Created'} ${BACKEND_WORKFLOW_DEST_REL}`);
+  if (existed) reportOverwrite(BACKEND_WORKFLOW_DEST_REL, previous, readFileSync(dest, 'utf8'));
 }
 
 function writeVersionMarkers(repoRoot, dryRun) {
@@ -244,8 +312,12 @@ export async function runInstall({ dryRun = false } = {}) {
       console.log(`  [dry-run] ${webWorkflowExisted ? 'overwrite' : 'create'} ${WEB_WORKFLOW_DEST_REL}`);
     } else {
       ensureDir(dirname(webWorkflowDest));
+      const webWorkflowPrevious = webWorkflowExisted ? readFileSync(webWorkflowDest, 'utf8') : '';
       cpSync(WEB_WORKFLOW_TEMPLATE, webWorkflowDest, { force: true });
       console.log(`  ${webWorkflowExisted ? 'Overwrote' : 'Created'} ${WEB_WORKFLOW_DEST_REL}`);
+      if (webWorkflowExisted) {
+        reportOverwrite(WEB_WORKFLOW_DEST_REL, webWorkflowPrevious, readFileSync(webWorkflowDest, 'utf8'));
+      }
     }
   }