project-auto-wizard 0.16.0 → 0.16.2

package/payload/workflows/spring/server-deploy/PROJECT-SPRING-PR-PREVIEW.yaml

@@ -125,10 +125,8 @@ jobs:
           rm -rf .paw-msg
           # The workspace root has no version.yml; pass the language resolved above to every later messages.py call
           export PROJECT_AUTO_WIZARD_LANG="$LANG_CODE"
-          {
-            echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE"
-            echo "PAW_MSG=$(python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview.)"
-          } >> "$GITHUB_ENV"
+          python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview. > "$RUNNER_TEMP/paw-msg.json"
+          echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE" >> "$GITHUB_ENV"
 
       - name: Add 👀 reaction to comment
         if: contains(github.event.comment.body, '/wizard') && contains(github.event.comment.body, 'server')
@@ -235,10 +233,8 @@ jobs:
           rm -rf .paw-msg
           # The workspace root has no version.yml; pass the language resolved above to every later messages.py call
           export PROJECT_AUTO_WIZARD_LANG="$LANG_CODE"
-          {
-            echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE"
-            echo "PAW_MSG=$(python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview.)"
-          } >> "$GITHUB_ENV"
+          python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview. > "$RUNNER_TEMP/paw-msg.json"
+          echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE" >> "$GITHUB_ENV"
           # The deploy script runs on the remote server, where messages.py does not exist:
           # ship the messages it needs as a small shell function (m KEY name=value ...)
           python3 - >> "$GITHUB_ENV" <<'PY'
@@ -283,7 +279,7 @@ jobs:
         uses: actions/github-script@v9
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const prNumber = context.issue.number;
@@ -322,6 +318,7 @@ jobs:
 
       # If a required secret or the Dockerfile is missing, report the missing items and stop instead of surfacing a third-party error such as a docker login failure
       - name: Deploy pre-check (Secrets and Dockerfile)
+        id: precheck
         working-directory: ${{ env.PROJECT_PATH }}
         env:
           DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
@@ -345,15 +342,21 @@ jobs:
             [ -n "$SERVER_PASSWORD" ] || MISSING="$MISSING SERVER_PASSWORD"
           fi
           FAILED=false
+          ITEMS=""
           if [ -n "$MISSING" ]; then
             echo "::error title=$(m wf_preview.precheck_secret_title)::$(m wf_preview.precheck_secret_body missing="$MISSING")"
+            ITEMS="${MISSING# }"
+            ITEMS="${ITEMS// /, }"
             FAILED=true
           fi
           if [ ! -f "$DOCKERFILE" ]; then
             echo "::error title=$(m wf_preview.precheck_dockerfile_title)::$(m wf_preview.precheck_dockerfile_body path="${PROJECT_PATH}/${DOCKERFILE#./}")"
+            ITEMS="${ITEMS:+$ITEMS, }Dockerfile"
             FAILED=true
           fi
           if [ "$FAILED" = "true" ]; then
+            # The failure comment names what blocked the later steps instead of showing them as waiting
+            echo "missing=$ITEMS" >> "$GITHUB_OUTPUT"
             exit 1
           fi
           m wf_preview.precheck_ok
@@ -419,7 +422,7 @@ jobs:
           PAW_IN_STEPS_PROGRESS_OUTPUTS_START_TIME: ${{ steps.progress.outputs.start_time }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const commentId = parseInt(process.env.PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID, 10) || 0;
@@ -484,7 +487,7 @@ jobs:
           PAW_IN_STEPS_BUILD_PROGRESS_OUTPUTS_DOCKER_START: ${{ steps.build_progress.outputs.docker_start }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const commentId = parseInt(process.env.PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID, 10) || 0;
@@ -676,7 +679,7 @@ jobs:
           PAW_IN_STEPS_DOCKER_PROGRESS_OUTPUTS_DEPLOY_START: ${{ steps.docker_progress.outputs.deploy_start }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const commentId = parseInt(process.env.PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID, 10) || 0;
@@ -759,9 +762,11 @@ jobs:
           PAW_IN_STEPS_BUILD_PROGRESS_OUTPUTS_BUILD_DURATION: ${{ steps.build_progress.outputs.build_duration }}
           PAW_IN_STEPS_DOCKER_PROGRESS_OUTPUTS_DOCKER_DURATION: ${{ steps.docker_progress.outputs.docker_duration }}
           PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID: ${{ steps.progress.outputs.comment_id }}
+          PAW_IN_STEPS_PRECHECK_OUTCOME: ${{ steps.precheck.outcome }}
+          PAW_IN_STEPS_PRECHECK_OUTPUTS_MISSING: ${{ steps.precheck.outputs.missing }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const commentId = parseInt(process.env.PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID, 10) || 0;
@@ -782,16 +787,19 @@ jobs:
               buildStatus = m('wf_preview.status_init_failed');
               dockerStatus = '-';
               deployStatus = '-';
+            } else if (process.env.PAW_IN_STEPS_PRECHECK_OUTCOME === 'failure') {
+              // The pre-check stopped the run before any build step: say why nothing ran
+              buildStatus = dockerStatus = deployStatus = m('wf_preview.status_precheck_blocked', { missing: process.env.PAW_IN_STEPS_PRECHECK_OUTPUTS_MISSING || '-' });
             } else if (!buildDuration || buildDuration === '') {
               // Failed at the build stage
               buildStatus = m('wf_preview.status_failed');
-              dockerStatus = m('wf_preview.status_waiting');
-              deployStatus = m('wf_preview.status_waiting');
+              dockerStatus = m('wf_preview.status_not_run');
+              deployStatus = m('wf_preview.status_not_run');
             } else if (!dockerDuration || dockerDuration === '') {
               // Failed at the Docker stage
               buildStatus = m('wf_preview.status_done');
               dockerStatus = m('wf_preview.status_failed');
-              deployStatus = m('wf_preview.status_waiting');
+              deployStatus = m('wf_preview.status_not_run');
               buildTime = buildDuration;
             } else {
               // Failed at the deploy stage
@@ -882,17 +890,15 @@ jobs:
           rm -rf .paw-msg
           # The workspace root has no version.yml; pass the language resolved above to every later messages.py call
           export PROJECT_AUTO_WIZARD_LANG="$LANG_CODE"
-          {
-            echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE"
-            echo "PAW_MSG=$(python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview.)"
-          } >> "$GITHUB_ENV"
+          python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview. > "$RUNNER_TEMP/paw-msg.json"
+          echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE" >> "$GITHUB_ENV"
 
       - name: Extract branch name from issue comment
         id: extract
         uses: actions/github-script@v9
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const issueNumber = context.issue.number;
@@ -937,7 +943,7 @@ jobs:
         uses: actions/github-script@v9
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const issueNumber = context.issue.number;
@@ -1003,10 +1009,8 @@ jobs:
           rm -rf .paw-msg
           # The workspace root has no version.yml; pass the language resolved above to every later messages.py call
           export PROJECT_AUTO_WIZARD_LANG="$LANG_CODE"
-          {
-            echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE"
-            echo "PAW_MSG=$(python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview.)"
-          } >> "$GITHUB_ENV"
+          python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview. > "$RUNNER_TEMP/paw-msg.json"
+          echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE" >> "$GITHUB_ENV"
           # The deploy script runs on the remote server, where messages.py does not exist:
           # ship the messages it needs as a small shell function (m KEY name=value ...)
           python3 - >> "$GITHUB_ENV" <<'PY'
@@ -1039,7 +1043,7 @@ jobs:
           PAW_IN_NEEDS_GET_BRANCH_FROM_ISSUE_OUTPUTS_ISSUE_NUMBER: ${{ needs.get-branch-from-issue.outputs.issue_number }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const branchName = process.env.PAW_IN_NEEDS_GET_BRANCH_FROM_ISSUE_OUTPUTS_BRANCH_NAME;
@@ -1117,7 +1121,7 @@ jobs:
           PAW_IN_NEEDS_GET_BRANCH_FROM_ISSUE_OUTPUTS_ISSUE_NUMBER: ${{ needs.get-branch-from-issue.outputs.issue_number }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const issueNumber = parseInt(process.env.PAW_IN_NEEDS_GET_BRANCH_FROM_ISSUE_OUTPUTS_ISSUE_NUMBER, 10) || 0;
@@ -1160,6 +1164,7 @@ jobs:
 
       # If a required secret or the Dockerfile is missing, report the missing items and stop instead of surfacing a third-party error such as a docker login failure
       - name: Deploy pre-check (Secrets and Dockerfile)
+        id: precheck
         if: steps.check_branch.outputs.exists == 'true'
         working-directory: ${{ env.PROJECT_PATH }}
         env:
@@ -1184,15 +1189,21 @@ jobs:
             [ -n "$SERVER_PASSWORD" ] || MISSING="$MISSING SERVER_PASSWORD"
           fi
           FAILED=false
+          ITEMS=""
           if [ -n "$MISSING" ]; then
             echo "::error title=$(m wf_preview.precheck_secret_title)::$(m wf_preview.precheck_secret_body missing="$MISSING")"
+            ITEMS="${MISSING# }"
+            ITEMS="${ITEMS// /, }"
             FAILED=true
           fi
           if [ ! -f "$DOCKERFILE" ]; then
             echo "::error title=$(m wf_preview.precheck_dockerfile_title)::$(m wf_preview.precheck_dockerfile_body path="${PROJECT_PATH}/${DOCKERFILE#./}")"
+            ITEMS="${ITEMS:+$ITEMS, }Dockerfile"
             FAILED=true
           fi
           if [ "$FAILED" = "true" ]; then
+            # The failure comment names what blocked the later steps instead of showing them as waiting
+            echo "missing=$ITEMS" >> "$GITHUB_OUTPUT"
             exit 1
           fi
           m wf_preview.precheck_ok
@@ -1235,7 +1246,7 @@ jobs:
           PAW_IN_STEPS_PROGRESS_OUTPUTS_START_TIME: ${{ steps.progress.outputs.start_time }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const commentId = parseInt(process.env.PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID, 10) || 0;
@@ -1308,7 +1319,7 @@ jobs:
           PAW_IN_STEPS_BUILD_PROGRESS_OUTPUTS_DOCKER_START: ${{ steps.build_progress.outputs.docker_start }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const commentId = parseInt(process.env.PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID, 10) || 0;
@@ -1506,7 +1517,7 @@ jobs:
           PAW_IN_NEEDS_GET_BRANCH_FROM_ISSUE_OUTPUTS_ISSUE_NUMBER: ${{ needs.get-branch-from-issue.outputs.issue_number }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const commentId = parseInt(process.env.PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID, 10) || 0;
@@ -1592,10 +1603,12 @@ jobs:
           PAW_IN_STEPS_BUILD_PROGRESS_OUTPUTS_BUILD_DURATION: ${{ steps.build_progress.outputs.build_duration }}
           PAW_IN_STEPS_DOCKER_PROGRESS_OUTPUTS_DOCKER_DURATION: ${{ steps.docker_progress.outputs.docker_duration }}
           PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID: ${{ steps.progress.outputs.comment_id }}
+          PAW_IN_STEPS_PRECHECK_OUTCOME: ${{ steps.precheck.outcome }}
+          PAW_IN_STEPS_PRECHECK_OUTPUTS_MISSING: ${{ steps.precheck.outputs.missing }}
           PAW_IN_NEEDS_GET_BRANCH_FROM_ISSUE_OUTPUTS_ISSUE_NUMBER: ${{ needs.get-branch-from-issue.outputs.issue_number }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const commentId = parseInt(process.env.PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID, 10) || 0;
@@ -1614,14 +1627,17 @@ jobs:
               buildStatus = m('wf_preview.status_init_failed');
               dockerStatus = '-';
               deployStatus = '-';
+            } else if (process.env.PAW_IN_STEPS_PRECHECK_OUTCOME === 'failure') {
+              // The pre-check stopped the run before any build step: say why nothing ran
+              buildStatus = dockerStatus = deployStatus = m('wf_preview.status_precheck_blocked', { missing: process.env.PAW_IN_STEPS_PRECHECK_OUTPUTS_MISSING || '-' });
             } else if (!buildDuration || buildDuration === '') {
               buildStatus = m('wf_preview.status_failed');
-              dockerStatus = m('wf_preview.status_waiting');
-              deployStatus = m('wf_preview.status_waiting');
+              dockerStatus = m('wf_preview.status_not_run');
+              deployStatus = m('wf_preview.status_not_run');
             } else if (!dockerDuration || dockerDuration === '') {
               buildStatus = m('wf_preview.status_done');
               dockerStatus = m('wf_preview.status_failed');
-              deployStatus = m('wf_preview.status_waiting');
+              deployStatus = m('wf_preview.status_not_run');
               buildTime = buildDuration;
             } else {
               buildStatus = m('wf_preview.status_done');
@@ -1708,10 +1724,8 @@ jobs:
           rm -rf .paw-msg
           # The workspace root has no version.yml; pass the language resolved above to every later messages.py call
           export PROJECT_AUTO_WIZARD_LANG="$LANG_CODE"
-          {
-            echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE"
-            echo "PAW_MSG=$(python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview.)"
-          } >> "$GITHUB_ENV"
+          python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview. > "$RUNNER_TEMP/paw-msg.json"
+          echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE" >> "$GITHUB_ENV"
           # The deploy script runs on the remote server, where messages.py does not exist:
           # ship the messages it needs as a small shell function (m KEY name=value ...)
           python3 - >> "$GITHUB_ENV" <<'PY'
@@ -1841,7 +1855,7 @@ jobs:
           PAW_IN_STEPS_PR_NUMBER_OUTPUTS_NUMBER: ${{ steps.pr_number.outputs.number }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const number = parseInt(process.env.PAW_IN_STEPS_PR_NUMBER_OUTPUTS_NUMBER, 10) || 0;
@@ -1898,10 +1912,8 @@ jobs:
           rm -rf .paw-msg
           # The workspace root has no version.yml; pass the language resolved above to every later messages.py call
           export PROJECT_AUTO_WIZARD_LANG="$LANG_CODE"
-          {
-            echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE"
-            echo "PAW_MSG=$(python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview.)"
-          } >> "$GITHUB_ENV"
+          python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview. > "$RUNNER_TEMP/paw-msg.json"
+          echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE" >> "$GITHUB_ENV"
           # The deploy script runs on the remote server, where messages.py does not exist:
           # ship the messages it needs as a small shell function (m KEY name=value ...)
           python3 - >> "$GITHUB_ENV" <<'PY'
@@ -2008,7 +2020,7 @@ jobs:
           PAW_IN_STEPS_CHECK_RUNNING_OUTCOME: ${{ steps.check_running.outcome }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const number = context.issue.number;
@@ -2101,10 +2113,8 @@ jobs:
           rm -rf .paw-msg
           # The workspace root has no version.yml; pass the language resolved above to every later messages.py call
           export PROJECT_AUTO_WIZARD_LANG="$LANG_CODE"
-          {
-            echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE"
-            echo "PAW_MSG=$(python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview.)"
-          } >> "$GITHUB_ENV"
+          python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview. > "$RUNNER_TEMP/paw-msg.json"
+          echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE" >> "$GITHUB_ENV"
           # The deploy script runs on the remote server, where messages.py does not exist:
           # ship the messages it needs as a small shell function (m KEY name=value ...)
           python3 - >> "$GITHUB_ENV" <<'PY'
@@ -2188,7 +2198,7 @@ jobs:
           PAW_IN_STEPS_EXTRACT_OUTPUTS_BRANCH_NAME: ${{ steps.extract.outputs.branch_name }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const branchName = process.env.PAW_IN_STEPS_EXTRACT_OUTPUTS_BRANCH_NAME;
@@ -2226,6 +2236,7 @@ jobs:
 
       # If a required secret or the Dockerfile is missing, report the missing items and stop instead of surfacing a third-party error such as a docker login failure
       - name: Deploy pre-check (Secrets and Dockerfile)
+        id: precheck
         if: steps.check_branch.outputs.exists == 'true'
         working-directory: ${{ env.PROJECT_PATH }}
         env:
@@ -2250,15 +2261,21 @@ jobs:
             [ -n "$SERVER_PASSWORD" ] || MISSING="$MISSING SERVER_PASSWORD"
           fi
           FAILED=false
+          ITEMS=""
           if [ -n "$MISSING" ]; then
             echo "::error title=$(m wf_preview.precheck_secret_title)::$(m wf_preview.precheck_secret_body missing="$MISSING")"
+            ITEMS="${MISSING# }"
+            ITEMS="${ITEMS// /, }"
             FAILED=true
           fi
           if [ ! -f "$DOCKERFILE" ]; then
             echo "::error title=$(m wf_preview.precheck_dockerfile_title)::$(m wf_preview.precheck_dockerfile_body path="${PROJECT_PATH}/${DOCKERFILE#./}")"
+            ITEMS="${ITEMS:+$ITEMS, }Dockerfile"
             FAILED=true
           fi
           if [ "$FAILED" = "true" ]; then
+            # The failure comment names what blocked the later steps instead of showing them as waiting
+            echo "missing=$ITEMS" >> "$GITHUB_OUTPUT"
             exit 1
           fi
           m wf_preview.precheck_ok
@@ -2278,7 +2295,7 @@ jobs:
           PAW_IN_STEPS_EXTRACT_OUTPUTS_CONTAINER_SUFFIX: ${{ steps.extract.outputs.container_suffix }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const projectName = process.env.PROJECT_PATH !== '.' ? process.env.PROJECT_NAME + '-spring' : process.env.PROJECT_NAME;
@@ -2352,7 +2369,7 @@ jobs:
           PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID: ${{ steps.progress.outputs.comment_id }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const commentId = parseInt(process.env.PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID, 10) || 0;
@@ -2420,7 +2437,7 @@ jobs:
           PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID: ${{ steps.progress.outputs.comment_id }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const commentId = parseInt(process.env.PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID, 10) || 0;
@@ -2538,7 +2555,7 @@ jobs:
           PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID: ${{ steps.progress.outputs.comment_id }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const commentId = parseInt(process.env.PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID, 10) || 0;
@@ -2609,9 +2626,11 @@ jobs:
           PAW_IN_STEPS_DOCKER_PROGRESS_OUTPUTS_DOCKER_DURATION: ${{ steps.docker_progress.outputs.docker_duration }}
           PAW_IN_STEPS_EXTRACT_OUTPUTS_BRANCH_NAME: ${{ steps.extract.outputs.branch_name }}
           PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID: ${{ steps.progress.outputs.comment_id }}
+          PAW_IN_STEPS_PRECHECK_OUTCOME: ${{ steps.precheck.outcome }}
+          PAW_IN_STEPS_PRECHECK_OUTPUTS_MISSING: ${{ steps.precheck.outputs.missing }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const commentId = parseInt(process.env.PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID, 10) || 0;
@@ -2629,14 +2648,17 @@ jobs:
               buildStatus = m('wf_preview.status_init_failed');
               dockerStatus = '-';
               deployStatus = '-';
+            } else if (process.env.PAW_IN_STEPS_PRECHECK_OUTCOME === 'failure') {
+              // The pre-check stopped the run before any build step: say why nothing ran
+              buildStatus = dockerStatus = deployStatus = m('wf_preview.status_precheck_blocked', { missing: process.env.PAW_IN_STEPS_PRECHECK_OUTPUTS_MISSING || '-' });
             } else if (!buildDuration || buildDuration === '') {
               buildStatus = m('wf_preview.status_failed');
-              dockerStatus = m('wf_preview.status_waiting');
-              deployStatus = m('wf_preview.status_waiting');
+              dockerStatus = m('wf_preview.status_not_run');
+              deployStatus = m('wf_preview.status_not_run');
             } else if (!dockerDuration || dockerDuration === '') {
               buildStatus = m('wf_preview.status_done');
               dockerStatus = m('wf_preview.status_failed');
-              deployStatus = m('wf_preview.status_waiting');
+              deployStatus = m('wf_preview.status_not_run');
               buildTime = buildDuration;
             } else {
               buildStatus = m('wf_preview.status_done');
@@ -2718,10 +2740,8 @@ jobs:
           rm -rf .paw-msg
           # The workspace root has no version.yml; pass the language resolved above to every later messages.py call
           export PROJECT_AUTO_WIZARD_LANG="$LANG_CODE"
-          {
-            echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE"
-            echo "PAW_MSG=$(python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview.)"
-          } >> "$GITHUB_ENV"
+          python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview. > "$RUNNER_TEMP/paw-msg.json"
+          echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE" >> "$GITHUB_ENV"
           # The deploy script runs on the remote server, where messages.py does not exist:
           # ship the messages it needs as a small shell function (m KEY name=value ...)
           python3 - >> "$GITHUB_ENV" <<'PY'
@@ -2837,7 +2857,7 @@ jobs:
           PAW_IN_STEPS_EXTRACT_OUTPUTS_CONTAINER_SUFFIX: ${{ steps.extract.outputs.container_suffix }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const projectName = process.env.PROJECT_PATH !== '.' ? process.env.PROJECT_NAME + '-spring' : process.env.PROJECT_NAME;
@@ -2898,10 +2918,8 @@ jobs:
           rm -rf .paw-msg
           # The workspace root has no version.yml; pass the language resolved above to every later messages.py call
           export PROJECT_AUTO_WIZARD_LANG="$LANG_CODE"
-          {
-            echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE"
-            echo "PAW_MSG=$(python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview.)"
-          } >> "$GITHUB_ENV"
+          python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview. > "$RUNNER_TEMP/paw-msg.json"
+          echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE" >> "$GITHUB_ENV"
 
       # Report the missing secrets by name instead of surfacing a raw SSH action error
       - name: Deploy pre-check (Secrets)
@@ -2981,7 +2999,7 @@ jobs:
           PAW_IN_STEPS_EXTRACT_OUTPUTS_CONTAINER_SUFFIX: ${{ steps.extract.outputs.container_suffix }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const projectName = process.env.PROJECT_PATH !== '.' ? process.env.PROJECT_NAME + '-spring' : process.env.PROJECT_NAME;

package/src/commands/doctor.js

@@ -18,6 +18,7 @@ import { findMissingScripts } from "../core/copy/simple.js";
 import { resolvePayloadRoot } from "../core/assets.js";
 import { parseExisting } from "../core/version-yml.js";
 import { hooksFor } from "../core/types.js";
+import { OPTIONS } from "../core/options.js";
 import { t } from "../i18n/index.js";
 
 const defaultExec = (cmd, args) => spawnSync(cmd, args, { encoding: "utf8" });
@@ -172,29 +173,22 @@ export function runDoctor(cwd = process.cwd(), { exec = defaultExec } = {}) {
   }
 
   // Show the actual setting: telling a user who turned it on that it is off would misrepresent the current state.
-  const copilotAi = installed ? parseExisting(readFileSync(join(cwd, "version.yml"), "utf8")).options.copilotAi : null;
-  const copilotState = copilotAi === true
-    ? t("cmd.doctor.copilot.on")
-    : copilotAi === false
-      ? t("cmd.doctor.copilot.off")
-      : t("cmd.doctor.copilot.default");
-  add({
-    name: t("cmd.doctor.copilot.name"), label: t("cmd.doctor.copilot.name"), purpose: t("cmd.doctor.copilot.purpose"), status: "INFO",
-    note: [
-      copilotState,
-      t(copilotAi === true ? "cmd.doctor.copilot.creditsOn" : "cmd.doctor.copilot.creditsOff"),
-      t("cmd.doctor.copilot.fallback"),
-    ],
-  });
-
-  // release_automerge is on unless version.yml says false (a missing key also means on), so only an explicit false is reported as off.
-  const releaseAutomerge = installed ? parseExisting(readFileSync(join(cwd, "version.yml"), "utf8")).options.releaseAutomerge : null;
-  add({
-    name: t("cmd.doctor.automerge.name"), label: t("cmd.doctor.automerge.name"), purpose: t("cmd.doctor.automerge.purpose"), status: "INFO",
-    note: releaseAutomerge === false
-      ? [t("cmd.doctor.automerge.off"), t("cmd.doctor.automerge.offHow")]
-      : [t("cmd.doctor.automerge.on"), t("cmd.doctor.automerge.onHow")],
-  });
+  // One item per option that declares a `doctor` spec in the registry; version.yml is read once.
+  const savedParsed = installed ? parseExisting(readFileSync(join(cwd, "version.yml"), "utf8")) : null;
+  const savedOptions = savedParsed ? savedParsed.options : null;
+  for (const o of OPTIONS.filter((opt) => opt.doctor)) {
+    const { prefix, always, notes } = o.doctor;
+    // Without an install there is no saved setting to report
+    if (!savedOptions && !always) continue;
+    // An unrecognized value is a problem to fix (the workflow reads it as off), not just information.
+    const invalid = notes.invalid ? savedParsed?.invalidOptions.find((i) => i.key === o.key) : null;
+    const keys = invalid ? notes.invalid : notes[String(savedOptions?.[o.name] ?? null)];
+    add({
+      name: t(`${prefix}.name`), label: t(`${prefix}.name`), purpose: t(`${prefix}.purpose`),
+      status: invalid ? "WARN" : "INFO",
+      note: keys.map((k) => t(`${prefix}.${k}`, invalid ? { value: invalid.value } : {})),
+    });
+  }
 
   return results;
 }

package/src/commands/dry-run.js

@@ -23,11 +23,12 @@ function versionYmlPreview(context, payloadRoot, targetRoot) {
 
   const vyPath = join(targetRoot, PATHS.versionFile);
   const existingRaw = existsSync(vyPath) ? readFileSync(vyPath, "utf8") : null;
-  const extraTopLevel = existingRaw !== null ? parseExisting(existingRaw).extraTopLevel : [];
+  const prevParsed = existingRaw !== null ? parseExisting(existingRaw) : null;
+  const extraTopLevel = prevParsed ? prevParsed.extraTopLevel : [];
 
   // Use the same render function as the real install; assembling separately drifts the preview whenever an option is added.
   const wouldBe = renderVersionYml(context, readVersionYmlTemplate(payloadRoot), {
-    pathMarkers, extraTopLevel,
+    pathMarkers, extraTopLevel, lastUpdatedBy: prevParsed?.lastUpdatedBy || "",
   });
   // Compare by the same rule as the real install: if only the timestamp lines differ, the install does not rewrite the file either.
   return { existed: existingRaw !== null, changed: existingRaw === null || !sameIgnoringTimestamps(existingRaw, wouldBe) };
@@ -63,7 +64,7 @@ export function planDryRun(mode, context, payloadRoot, targetRoot = ".") {
     droppedPathLines: existingDroppedLines(targetRoot, context.paths),
     // Files the real install also changes; scripts that overwrite existing files in particular must be shown in advance.
     scripts: planScripts(payloadRoot, targetRoot),
-    readme: planVersionSection(targetRoot),
+    readme: planVersionSection(targetRoot, context.language),
     baselineExists: existsSync(join(targetRoot, BASELINE_PATH)),
   };
 }

package/src/commands/full.js

@@ -6,7 +6,7 @@ import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { writeText, findUnwritable } from "../core/fsutil.js";
 import { CliError } from "../core/errors.js";
 import { PATHS } from "../core/paths.js";
-import { renderVersionYml, parseExisting, sameIgnoringTimestamps, droppedPathLines } from "../core/version-yml.js";
+import { renderVersionYml, parseExisting, sameIgnoringTimestamps, droppedPathLines, invalidOptionLines } from "../core/version-yml.js";
 import { readVersionYmlTemplate } from "../core/assets.js";
 import { existingMarkerInDir } from "../core/paths-resolve.js";
 import { addVersionSectionToReadme, README_STATUS_LABEL } from "../core/copy/readme.js";
@@ -28,8 +28,7 @@ import { t } from "../i18n/index.js";
 // payloadRoot: the package's payload/ root. targetRoot: the install target.
 export function runFull(context, payloadRoot, targetRoot = ".", hooks = {}) {
   const { version, types = [], paths = new Map(), branch = "main", versionCode = 1,
-    force = true, now, today, templateVersion = "unknown",
-    includeSemverAuto } = context;
+    force = true, now, today, templateVersion = "unknown" } = context;
 
   // Check permissions before writing anything: stopping midway would leave a half-installed state.
   const blocked = findUnwritable(targetRoot,
@@ -75,10 +74,11 @@ export function runFull(context, payloadRoot, targetRoot = ".", hooks = {}) {
   const extraTopLevel = prevParsed ? prevParsed.extraTopLevel : [];
   // Folders folded into one type entry are not managed after this rewrite; leave a trace in the install log.
   for (const line of droppedPathLines(prevParsed?.droppedPaths, paths)) log.warn("version", "paths", line);
+  for (const line of invalidOptionLines(prevParsed?.invalidOptions)) log.warn("version", "options", line);
 
   // 2. Generate version.yml (render payload/version.yml.template; full regeneration)
   //    A re-run where only the date lines differ does not rewrite it (idempotent).
-  const vyText = renderVersionYml(context, readVersionYmlTemplate(payloadRoot), { pathMarkers, deployValues, extraTopLevel });
+  const vyText = renderVersionYml(context, readVersionYmlTemplate(payloadRoot), { pathMarkers, deployValues, extraTopLevel, lastUpdatedBy: prevParsed?.lastUpdatedBy || "" });
   if (prevVy == null || !sameIgnoringTimestamps(prevVy, vyText)) {
     writeText(vyPath, vyText);
     log.info("version", "write", `version.yml (v${version}, code=${versionCode})`);
@@ -87,7 +87,7 @@ export function runFull(context, payloadRoot, targetRoot = ".", hooks = {}) {
   }
 
   // 3. README version section
-  const readme = addVersionSectionToReadme(version, targetRoot);
+  const readme = addVersionSectionToReadme(version, targetRoot, context.language);
   log.info("readme", readme === "added" ? "append" : "skip", README_STATUS_LABEL[readme] || readme);
 
   // 4. scripts (payload/scripts/*.py -> .github/scripts/): always overwritten, so also record that user edits are lost.
@@ -123,7 +123,7 @@ export function runFull(context, payloadRoot, targetRoot = ".", hooks = {}) {
   const gitignoreUpdated = gitignoreUpdated0 || cleanup.backedUp.length > 0 || storeCleanup.backedUp.length > 0
     || staleCleanup.backedUp.length > 0;
   if (gitignoreUpdated) {
-    const gi = ensureGitignore(targetRoot);
+    const gi = ensureGitignore(targetRoot, context.language);
     log.info("gitignore", gi.created ? "create" : gi.added.length ? "append" : "skip",
       gi.added.length ? `.gitignore += ${gi.added.join(", ")}` : t("cmd.full.log.gitignoreExisting"));
   }

package/src/commands/interactive.js

@@ -6,7 +6,7 @@ import { join } from "node:path";
 import { existsSync, readFileSync } from "node:fs";
 import { resolvePayloadRoot, assertPayload, readTemplateVersion } from "../core/assets.js";
 import { detectTypes, detectVersion, detectDefaultBranch, detectRepoName, makeResolvers, detectMarkers } from "../core/detect-fs.js";
-import { parseExisting, droppedPathLines } from "../core/version-yml.js";
+import { parseExisting, droppedPathLines, invalidOptionLines } from "../core/version-yml.js";
 import { pickReleaseOptions, resolveReleaseOptions } from "../core/release-options.js";
 import { OPTIONS, askableOptions, explicitFromContext } from "../core/options.js";
 import { runBreakingCheck } from "../core/breaking-check.js";
@@ -292,6 +292,9 @@ export async function runInteractive(baseCtx, { cwd = process.cwd(), payloadRoot
   // Announce merged folders only now: the message must follow the folders actually chosen, not the saved ones.
   if (existing?.droppedPaths?.length) io.note?.(droppedPathLines(existing.droppedPaths, paths).join("\n"), t("core.versionYml.pathMergedTitle"));
 
+  // Option values that could not be read are rewritten as false by this run; tell the user before they confirm.
+  if (existing?.invalidOptions?.length) io.note?.(invalidOptionLines(existing.invalidOptions).join("\n"), t("core.versionYml.optionInvalidTitle"));
+
   // In a monorepo the version/build-number files live inside the type folder - detect there now that paths are settled.
   if (versionAutoDetected && [...paths.values()].some((p) => p && p !== ".")) {
     version = detectVersion(cwd, { types, paths, warn: () => {} });
@@ -376,6 +379,7 @@ export async function runInteractive(baseCtx, { cwd = process.cwd(), payloadRoot
   // Completion summary
   io.summary?.({
     mode, types, version, versionCode, branches, developMissing,
+    releaseAutomerge: ctx.includeReleaseAutomerge !== false,
     copiedFiles: result?.workflows?.copiedFiles ?? [],
     autoUpdated: result?.workflows?.autoUpdated ?? [],
     gitignoreUpdated: result?.gitignoreUpdated === true,