gowalk-cicd 1.0.191 → 1.0.192

package/backend-action/install_runtime.py

@@ -96,13 +96,14 @@ def update_commands(content, target, owners):
     for owner in owners:
         if not re.fullmatch(r'[a-z0-9-]{1,40}', owner):
             raise ValueError('release_owner_invalid')
-        pattern = re.compile(r'command="/usr/bin/python3 /opt/gowalk-cicd-runtime/\d+\.\d+\.\d+'
+        pattern = re.compile(r'command="(?P<python>/usr/bin/python3(?: -B)?) /opt/gowalk-cicd-runtime/\d+\.\d+\.\d+'
                              r'/backend-action/ssh_gate\.py ' + re.escape(owner) + r'"')
         matches = [index for index, line in enumerate(lines) if pattern.search(line)]
         if len(matches) != 1 or 'restrict' not in lines[matches[0]].split(' ')[0].split(','):
             raise ValueError('release_owner_command_ambiguous')
-        replacement = 'command="/usr/bin/python3 ' + str(target / 'backend-action/ssh_gate.py') + ' ' + owner + '"'
-        lines[matches[0]] = pattern.sub(lambda _match: replacement, lines[matches[0]])
+        destination = str(target / 'backend-action/ssh_gate.py') + ' ' + owner + '"'
+        lines[matches[0]] = pattern.sub(lambda match: 'command="' + match['python'] + ' ' + destination,
+                                       lines[matches[0]])
     return ''.join(lines)
 
 

package/backend-action/runtime_projection.py

@@ -3,7 +3,7 @@ import math
 import re
 
 SCHEMA = 'gowalk-cicd/backend-runtime-diagnostics.v1'
-READER_VERSION = '1.0.191'
+READER_VERSION = '1.0.192'
 PROJECT = r'[a-z0-9][a-z0-9-]{0,79}'
 SERVICE = r'[a-z0-9][a-z0-9_-]{0,63}'
 SHA = r'[a-f0-9]{40}'

package/docs/BACKEND_SSH_GATE.md

@@ -96,8 +96,8 @@ Use the published package's `backend-action/install_runtime.py` with its npm arc
 For example, after transferring those verified public files to task-owned host scratch:
 
 ```sh
-python3 install_runtime.py --archive gowalk-cicd-1.0.191.tgz --integrity "$PACKAGE_INTEGRITY" \
-  --version 1.0.191 --owner robot --owner vpnrobot
+python3 install_runtime.py --archive gowalk-cicd-1.0.192.tgz --integrity "$PACKAGE_INTEGRITY" \
+  --version 1.0.192 --owner robot --owner vpnrobot
 ```
 
 The root-only installer verifies integrity/name/version again, installs only package-owned backend helpers under
@@ -105,6 +105,7 @@ The root-only installer verifies integrity/name/version again, installs only pac
 `/root/.ssh/authorized_keys`. It refuses missing/duplicate owners, nonrestricted entries, untrusted paths and
 changed existing release bytes; it never provisions keys or changes another entry. Exact replay verifies the
 release and leaves keys unchanged. A fixed receipt confirms the version and owners without key contents.
+The established `/usr/bin/python3 -B` spelling is accepted and preserves `-B`; other interpreter flags refuse.
 It changes no app source, runtime profile, container, database, service timer or deployment freeze. Preserve the
 previous release directory; this is ordinary released-helper installation, not app-state recovery.
 Verify a fresh scoped readback through each owner and keep that receipt with the exact npm integrity and release.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gowalk-cicd",
-  "version": "1.0.191",
+  "version": "1.0.192",
   "description": "Zero-config GitHub Actions delivery for iOS TestFlight and Android Google Play.",
   "type": "module",
   "bin": {