gowalk-cicd 1.0.196 → 1.0.197

package/backend-action/runtime_image_health.py

@@ -5,6 +5,7 @@ import re
 import subprocess
 
 from runtime_healthcheck import bounded_tmpfs, cache_healthcheck
+from runtime_model import escape_interpolation
 
 
 def eligible(service):
@@ -17,7 +18,14 @@ def eligible(service):
 def image_health(command, name, service):
     reference = service.get('image')
     if not reference:
-        result = subprocess.run(command + ['config', '--images', name],
+        resolver = list(command)
+        option = next((flag for flag in ('--file', '-f') if flag in resolver), None)
+        if option:
+            resolver[resolver.index(option) + 1] = '-'
+        else:
+            resolver.extend(['--file', '-'])
+        selected = {'services': {name: {'build': '.'}}}
+        result = subprocess.run(resolver + ['config', '--images', name], input=json.dumps(selected),
                                 capture_output=True, text=True, timeout=30, check=True)
         references = result.stdout.split()
         if len(references) != 1:
@@ -44,6 +52,7 @@ def inherit_healthchecks(model, command):
         candidate = copy.deepcopy(service)
         candidate.setdefault('healthcheck', {})['test'] = health['Test']
         if cache_healthcheck(candidate):
+            candidate['healthcheck']['test'] = escape_interpolation(candidate['healthcheck']['test'])
             service['healthcheck'] = candidate['healthcheck']
             service.update(image=image['Id'], pull_policy='never')
             changed = True

package/docs/BACKEND_HEALTHCHECKS.md

@@ -36,6 +36,10 @@ wraps only a missing Compose test, retaining explicit timing and disabled/custom
 launch model pins the transformed service to that inspected image ID with pulling disabled, so a
 moving tag cannot substitute another image's healthcheck. Explicit registry-refresh policies and
 non-build services retain their existing image/pull behavior. No pre-build image healthcheck is reused.
+Imported image commands escape literal dollars once at the Compose boundary, preserving Python
+strings and container-shell expansion without interpreting them against the deployment host environment.
+Default image names resolve from an isolated service model with the same Compose project name;
+dependency images cannot make that selection ambiguous.
 
 ## Adopt an existing API
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gowalk-cicd",
-  "version": "1.0.196",
+  "version": "1.0.197",
   "description": "Zero-config GitHub Actions delivery for iOS TestFlight and Android Google Play.",
   "type": "module",
   "bin": {