project-auto-wizard 0.16.1 → 0.16.2

package/payload/workflows/go/PROJECT-GO-PR-PREVIEW.yaml

@@ -121,10 +121,8 @@ jobs:
           rm -rf .paw-msg
           # The workspace root has no version.yml; pass the language resolved above to every later messages.py call
           export PROJECT_AUTO_WIZARD_LANG="$LANG_CODE"
-          {
-            echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE"
-            echo "PAW_MSG=$(python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview.)"
-          } >> "$GITHUB_ENV"
+          python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview. > "$RUNNER_TEMP/paw-msg.json"
+          echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE" >> "$GITHUB_ENV"
 
       - name: Add 👀 reaction to comment
         if: contains(github.event.comment.body, '/wizard') && contains(github.event.comment.body, 'server')
@@ -231,10 +229,8 @@ jobs:
           rm -rf .paw-msg
           # The workspace root has no version.yml; pass the language resolved above to every later messages.py call
           export PROJECT_AUTO_WIZARD_LANG="$LANG_CODE"
-          {
-            echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE"
-            echo "PAW_MSG=$(python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview.)"
-          } >> "$GITHUB_ENV"
+          python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview. > "$RUNNER_TEMP/paw-msg.json"
+          echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE" >> "$GITHUB_ENV"
           # The deploy script runs on the remote server, where messages.py does not exist:
           # ship the messages it needs as a small shell function (m KEY name=value ...)
           python3 - >> "$GITHUB_ENV" <<'PY'
@@ -279,7 +275,7 @@ jobs:
         uses: actions/github-script@v9
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const prNumber = context.issue.number;
@@ -318,6 +314,7 @@ jobs:
 
       # If a required secret or the Dockerfile is missing, report the missing items and stop instead of surfacing a third-party error such as a docker login failure
       - name: Deploy pre-check (Secrets and Dockerfile)
+        id: precheck
         working-directory: ${{ env.PROJECT_PATH }}
         env:
           DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
@@ -341,15 +338,21 @@ jobs:
             [ -n "$SERVER_PASSWORD" ] || MISSING="$MISSING SERVER_PASSWORD"
           fi
           FAILED=false
+          ITEMS=""
           if [ -n "$MISSING" ]; then
             echo "::error title=$(m wf_preview.precheck_secret_title)::$(m wf_preview.precheck_secret_body missing="$MISSING")"
+            ITEMS="${MISSING# }"
+            ITEMS="${ITEMS// /, }"
             FAILED=true
           fi
           if [ ! -f "$DOCKERFILE" ]; then
             echo "::error title=$(m wf_preview.precheck_dockerfile_title)::$(m wf_preview.precheck_dockerfile_body path="${PROJECT_PATH}/${DOCKERFILE#./}")"
+            ITEMS="${ITEMS:+$ITEMS, }Dockerfile"
             FAILED=true
           fi
           if [ "$FAILED" = "true" ]; then
+            # The failure comment names what blocked the later steps instead of showing them as waiting
+            echo "missing=$ITEMS" >> "$GITHUB_OUTPUT"
             exit 1
           fi
           m wf_preview.precheck_ok
@@ -390,7 +393,7 @@ jobs:
           PAW_IN_STEPS_PROGRESS_OUTPUTS_DOCKER_START: ${{ steps.progress.outputs.docker_start }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const commentId = parseInt(process.env.PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID, 10) || 0;
@@ -579,7 +582,7 @@ jobs:
           PAW_IN_STEPS_DOCKER_PROGRESS_OUTPUTS_DEPLOY_START: ${{ steps.docker_progress.outputs.deploy_start }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const commentId = parseInt(process.env.PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID, 10) || 0;
@@ -659,9 +662,11 @@ jobs:
         env:
           PAW_IN_STEPS_DOCKER_PROGRESS_OUTPUTS_DOCKER_DURATION: ${{ steps.docker_progress.outputs.docker_duration }}
           PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID: ${{ steps.progress.outputs.comment_id }}
+          PAW_IN_STEPS_PRECHECK_OUTCOME: ${{ steps.precheck.outcome }}
+          PAW_IN_STEPS_PRECHECK_OUTPUTS_MISSING: ${{ steps.precheck.outputs.missing }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const commentId = parseInt(process.env.PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID, 10) || 0;
@@ -680,10 +685,13 @@ jobs:
               // Failed before the progress comment was created (initialization stage)
               dockerStatus = m('wf_preview.status_init_failed');
               deployStatus = '-';
+            } else if (process.env.PAW_IN_STEPS_PRECHECK_OUTCOME === 'failure') {
+              // The pre-check stopped the run before any build step: say why nothing ran
+              dockerStatus = deployStatus = m('wf_preview.status_precheck_blocked', { missing: process.env.PAW_IN_STEPS_PRECHECK_OUTPUTS_MISSING || '-' });
             } else if (!dockerDuration || dockerDuration === '') {
-              // Failed at the Docker build stage
+              // Failed at the Docker build stage; the deploy step never ran
               dockerStatus = m('wf_preview.status_failed');
-              deployStatus = m('wf_preview.status_waiting');
+              deployStatus = m('wf_preview.status_not_run');
             } else {
               // Failed at the deploy stage
               dockerStatus = m('wf_preview.status_done');
@@ -770,17 +778,15 @@ jobs:
           rm -rf .paw-msg
           # The workspace root has no version.yml; pass the language resolved above to every later messages.py call
           export PROJECT_AUTO_WIZARD_LANG="$LANG_CODE"
-          {
-            echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE"
-            echo "PAW_MSG=$(python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview.)"
-          } >> "$GITHUB_ENV"
+          python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview. > "$RUNNER_TEMP/paw-msg.json"
+          echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE" >> "$GITHUB_ENV"
 
       - name: Extract branch name from issue comment
         id: extract
         uses: actions/github-script@v9
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const issueNumber = context.issue.number;
@@ -825,7 +831,7 @@ jobs:
         uses: actions/github-script@v9
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const issueNumber = context.issue.number;
@@ -891,10 +897,8 @@ jobs:
           rm -rf .paw-msg
           # The workspace root has no version.yml; pass the language resolved above to every later messages.py call
           export PROJECT_AUTO_WIZARD_LANG="$LANG_CODE"
-          {
-            echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE"
-            echo "PAW_MSG=$(python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview.)"
-          } >> "$GITHUB_ENV"
+          python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview. > "$RUNNER_TEMP/paw-msg.json"
+          echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE" >> "$GITHUB_ENV"
           # The deploy script runs on the remote server, where messages.py does not exist:
           # ship the messages it needs as a small shell function (m KEY name=value ...)
           python3 - >> "$GITHUB_ENV" <<'PY'
@@ -927,7 +931,7 @@ jobs:
           PAW_IN_NEEDS_GET_BRANCH_FROM_ISSUE_OUTPUTS_ISSUE_NUMBER: ${{ needs.get-branch-from-issue.outputs.issue_number }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const branchName = process.env.PAW_IN_NEEDS_GET_BRANCH_FROM_ISSUE_OUTPUTS_BRANCH_NAME;
@@ -1006,7 +1010,7 @@ jobs:
           PAW_IN_NEEDS_GET_BRANCH_FROM_ISSUE_OUTPUTS_ISSUE_NUMBER: ${{ needs.get-branch-from-issue.outputs.issue_number }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const issueNumber = parseInt(process.env.PAW_IN_NEEDS_GET_BRANCH_FROM_ISSUE_OUTPUTS_ISSUE_NUMBER, 10) || 0;
@@ -1049,6 +1053,7 @@ jobs:
 
       # If a required secret or the Dockerfile is missing, report the missing items and stop instead of surfacing a third-party error such as a docker login failure
       - name: Deploy pre-check (Secrets and Dockerfile)
+        id: precheck
         if: steps.check_branch.outputs.exists == 'true'
         working-directory: ${{ env.PROJECT_PATH }}
         env:
@@ -1073,15 +1078,21 @@ jobs:
             [ -n "$SERVER_PASSWORD" ] || MISSING="$MISSING SERVER_PASSWORD"
           fi
           FAILED=false
+          ITEMS=""
           if [ -n "$MISSING" ]; then
             echo "::error title=$(m wf_preview.precheck_secret_title)::$(m wf_preview.precheck_secret_body missing="$MISSING")"
+            ITEMS="${MISSING# }"
+            ITEMS="${ITEMS// /, }"
             FAILED=true
           fi
           if [ ! -f "$DOCKERFILE" ]; then
             echo "::error title=$(m wf_preview.precheck_dockerfile_title)::$(m wf_preview.precheck_dockerfile_body path="${PROJECT_PATH}/${DOCKERFILE#./}")"
+            ITEMS="${ITEMS:+$ITEMS, }Dockerfile"
             FAILED=true
           fi
           if [ "$FAILED" = "true" ]; then
+            # The failure comment names what blocked the later steps instead of showing them as waiting
+            echo "missing=$ITEMS" >> "$GITHUB_OUTPUT"
             exit 1
           fi
           m wf_preview.precheck_ok
@@ -1128,7 +1139,7 @@ jobs:
           PAW_IN_STEPS_PROGRESS_OUTPUTS_DOCKER_START: ${{ steps.progress.outputs.docker_start }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const commentId = parseInt(process.env.PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID, 10) || 0;
@@ -1323,7 +1334,7 @@ jobs:
           PAW_IN_NEEDS_GET_BRANCH_FROM_ISSUE_OUTPUTS_ISSUE_NUMBER: ${{ needs.get-branch-from-issue.outputs.issue_number }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const commentId = parseInt(process.env.PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID, 10) || 0;
@@ -1406,10 +1417,12 @@ jobs:
           PAW_IN_NEEDS_GET_BRANCH_FROM_ISSUE_OUTPUTS_BRANCH_NAME: ${{ needs.get-branch-from-issue.outputs.branch_name }}
           PAW_IN_STEPS_DOCKER_PROGRESS_OUTPUTS_DOCKER_DURATION: ${{ steps.docker_progress.outputs.docker_duration }}
           PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID: ${{ steps.progress.outputs.comment_id }}
+          PAW_IN_STEPS_PRECHECK_OUTCOME: ${{ steps.precheck.outcome }}
+          PAW_IN_STEPS_PRECHECK_OUTPUTS_MISSING: ${{ steps.precheck.outputs.missing }}
           PAW_IN_NEEDS_GET_BRANCH_FROM_ISSUE_OUTPUTS_ISSUE_NUMBER: ${{ needs.get-branch-from-issue.outputs.issue_number }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const commentId = parseInt(process.env.PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID, 10) || 0;
@@ -1426,9 +1439,13 @@ jobs:
             if (!commentId) {
               dockerStatus = m('wf_preview.status_init_failed');
               deployStatus = '-';
+            } else if (process.env.PAW_IN_STEPS_PRECHECK_OUTCOME === 'failure') {
+              // The pre-check stopped the run before any build step: say why nothing ran
+              dockerStatus = deployStatus = m('wf_preview.status_precheck_blocked', { missing: process.env.PAW_IN_STEPS_PRECHECK_OUTPUTS_MISSING || '-' });
             } else if (!dockerDuration || dockerDuration === '') {
+              // Failed at the Docker build stage; the deploy step never ran
               dockerStatus = m('wf_preview.status_failed');
-              deployStatus = m('wf_preview.status_waiting');
+              deployStatus = m('wf_preview.status_not_run');
             } else {
               dockerStatus = m('wf_preview.status_done');
               deployStatus = m('wf_preview.status_failed');
@@ -1511,10 +1528,8 @@ jobs:
           rm -rf .paw-msg
           # The workspace root has no version.yml; pass the language resolved above to every later messages.py call
           export PROJECT_AUTO_WIZARD_LANG="$LANG_CODE"
-          {
-            echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE"
-            echo "PAW_MSG=$(python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview.)"
-          } >> "$GITHUB_ENV"
+          python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview. > "$RUNNER_TEMP/paw-msg.json"
+          echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE" >> "$GITHUB_ENV"
           # The deploy script runs on the remote server, where messages.py does not exist:
           # ship the messages it needs as a small shell function (m KEY name=value ...)
           python3 - >> "$GITHUB_ENV" <<'PY'
@@ -1646,7 +1661,7 @@ jobs:
           PAW_IN_STEPS_PR_NUMBER_OUTPUTS_NUMBER: ${{ steps.pr_number.outputs.number }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const number = parseInt(process.env.PAW_IN_STEPS_PR_NUMBER_OUTPUTS_NUMBER, 10) || 0;
@@ -1703,10 +1718,8 @@ jobs:
           rm -rf .paw-msg
           # The workspace root has no version.yml; pass the language resolved above to every later messages.py call
           export PROJECT_AUTO_WIZARD_LANG="$LANG_CODE"
-          {
-            echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE"
-            echo "PAW_MSG=$(python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview.)"
-          } >> "$GITHUB_ENV"
+          python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview. > "$RUNNER_TEMP/paw-msg.json"
+          echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE" >> "$GITHUB_ENV"
           # The deploy script runs on the remote server, where messages.py does not exist:
           # ship the messages it needs as a small shell function (m KEY name=value ...)
           python3 - >> "$GITHUB_ENV" <<'PY'
@@ -1813,7 +1826,7 @@ jobs:
           PAW_IN_STEPS_CHECK_RUNNING_OUTCOME: ${{ steps.check_running.outcome }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const number = context.issue.number;
@@ -1903,10 +1916,8 @@ jobs:
           rm -rf .paw-msg
           # The workspace root has no version.yml; pass the language resolved above to every later messages.py call
           export PROJECT_AUTO_WIZARD_LANG="$LANG_CODE"
-          {
-            echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE"
-            echo "PAW_MSG=$(python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview.)"
-          } >> "$GITHUB_ENV"
+          python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview. > "$RUNNER_TEMP/paw-msg.json"
+          echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE" >> "$GITHUB_ENV"
           # The deploy script runs on the remote server, where messages.py does not exist:
           # ship the messages it needs as a small shell function (m KEY name=value ...)
           python3 - >> "$GITHUB_ENV" <<'PY'
@@ -1938,7 +1949,7 @@ jobs:
           PAW_IN_NEEDS_CHECK_COMMAND_OUTPUTS_CUSTOM_BRANCH: ${{ needs.check-command.outputs.custom_branch }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const branchName = process.env.PAW_IN_NEEDS_CHECK_COMMAND_OUTPUTS_CUSTOM_BRANCH;
@@ -2030,7 +2041,7 @@ jobs:
           PAW_IN_NEEDS_CHECK_COMMAND_OUTPUTS_CUSTOM_BRANCH: ${{ needs.check-command.outputs.custom_branch }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const issueNumber = context.issue.number;
@@ -2073,6 +2084,7 @@ jobs:
 
       # If a required secret or the Dockerfile is missing, report the missing items and stop instead of surfacing a third-party error such as a docker login failure
       - name: Deploy pre-check (Secrets and Dockerfile)
+        id: precheck
         if: steps.branch_info.outputs.branch_exists == 'true'
         working-directory: ${{ env.PROJECT_PATH }}
         env:
@@ -2097,15 +2109,21 @@ jobs:
             [ -n "$SERVER_PASSWORD" ] || MISSING="$MISSING SERVER_PASSWORD"
           fi
           FAILED=false
+          ITEMS=""
           if [ -n "$MISSING" ]; then
             echo "::error title=$(m wf_preview.precheck_secret_title)::$(m wf_preview.precheck_secret_body missing="$MISSING")"
+            ITEMS="${MISSING# }"
+            ITEMS="${ITEMS// /, }"
             FAILED=true
           fi
           if [ ! -f "$DOCKERFILE" ]; then
             echo "::error title=$(m wf_preview.precheck_dockerfile_title)::$(m wf_preview.precheck_dockerfile_body path="${PROJECT_PATH}/${DOCKERFILE#./}")"
+            ITEMS="${ITEMS:+$ITEMS, }Dockerfile"
             FAILED=true
           fi
           if [ "$FAILED" = "true" ]; then
+            # The failure comment names what blocked the later steps instead of showing them as waiting
+            echo "missing=$ITEMS" >> "$GITHUB_OUTPUT"
             exit 1
           fi
           m wf_preview.precheck_ok
@@ -2162,7 +2180,7 @@ jobs:
           PAW_IN_STEPS_PROGRESS_OUTPUTS_DOCKER_START: ${{ steps.progress.outputs.docker_start }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const commentId = parseInt(process.env.PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID, 10) || 0;
@@ -2351,7 +2369,7 @@ jobs:
           PAW_IN_STEPS_DOCKER_PROGRESS_OUTPUTS_DEPLOY_START: ${{ steps.docker_progress.outputs.deploy_start }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const commentId = parseInt(process.env.PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID, 10) || 0;
@@ -2434,9 +2452,11 @@ jobs:
           PAW_IN_NEEDS_CHECK_COMMAND_OUTPUTS_CUSTOM_BRANCH: ${{ needs.check-command.outputs.custom_branch }}
           PAW_IN_STEPS_DOCKER_PROGRESS_OUTPUTS_DOCKER_DURATION: ${{ steps.docker_progress.outputs.docker_duration }}
           PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID: ${{ steps.progress.outputs.comment_id }}
+          PAW_IN_STEPS_PRECHECK_OUTCOME: ${{ steps.precheck.outcome }}
+          PAW_IN_STEPS_PRECHECK_OUTPUTS_MISSING: ${{ steps.precheck.outputs.missing }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const commentId = parseInt(process.env.PAW_IN_STEPS_PROGRESS_OUTPUTS_COMMENT_ID, 10) || 0;
@@ -2451,9 +2471,13 @@ jobs:
             if (!commentId) {
               dockerStatus = m('wf_preview.status_init_failed');
               deployStatus = '-';
+            } else if (process.env.PAW_IN_STEPS_PRECHECK_OUTCOME === 'failure') {
+              // The pre-check stopped the run before any build step: say why nothing ran
+              dockerStatus = deployStatus = m('wf_preview.status_precheck_blocked', { missing: process.env.PAW_IN_STEPS_PRECHECK_OUTPUTS_MISSING || '-' });
             } else if (!dockerDuration || dockerDuration === '') {
+              // Failed at the Docker build stage; the deploy step never ran
               dockerStatus = m('wf_preview.status_failed');
-              deployStatus = m('wf_preview.status_waiting');
+              deployStatus = m('wf_preview.status_not_run');
             } else {
               dockerStatus = m('wf_preview.status_done');
               deployStatus = m('wf_preview.status_failed');
@@ -2536,10 +2560,8 @@ jobs:
           rm -rf .paw-msg
           # The workspace root has no version.yml; pass the language resolved above to every later messages.py call
           export PROJECT_AUTO_WIZARD_LANG="$LANG_CODE"
-          {
-            echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE"
-            echo "PAW_MSG=$(python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview.)"
-          } >> "$GITHUB_ENV"
+          python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview. > "$RUNNER_TEMP/paw-msg.json"
+          echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE" >> "$GITHUB_ENV"
           # The deploy script runs on the remote server, where messages.py does not exist:
           # ship the messages it needs as a small shell function (m KEY name=value ...)
           python3 - >> "$GITHUB_ENV" <<'PY'
@@ -2598,7 +2620,7 @@ jobs:
           PAW_IN_NEEDS_CHECK_COMMAND_OUTPUTS_CUSTOM_BRANCH: ${{ needs.check-command.outputs.custom_branch }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const branchName = process.env.PAW_IN_NEEDS_CHECK_COMMAND_OUTPUTS_CUSTOM_BRANCH;
@@ -2682,7 +2704,7 @@ jobs:
           PAW_IN_STEPS_CONTAINER_INFO_OUTPUTS_CONTAINER_NAME: ${{ steps.container_info.outputs.container_name }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const branchName = process.env.PAW_IN_NEEDS_CHECK_COMMAND_OUTPUTS_CUSTOM_BRANCH;
@@ -2743,10 +2765,8 @@ jobs:
           rm -rf .paw-msg
           # The workspace root has no version.yml; pass the language resolved above to every later messages.py call
           export PROJECT_AUTO_WIZARD_LANG="$LANG_CODE"
-          {
-            echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE"
-            echo "PAW_MSG=$(python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview.)"
-          } >> "$GITHUB_ENV"
+          python3 "$RUNNER_TEMP/paw/messages.py" dump wf_preview. > "$RUNNER_TEMP/paw-msg.json"
+          echo "PROJECT_AUTO_WIZARD_LANG=$LANG_CODE" >> "$GITHUB_ENV"
           # The deploy script runs on the remote server, where messages.py does not exist:
           # ship the messages it needs as a small shell function (m KEY name=value ...)
           python3 - >> "$GITHUB_ENV" <<'PY'
@@ -2867,7 +2887,7 @@ jobs:
           PAW_IN_STEPS_CONTAINER_INFO_OUTPUTS_CONTAINER_NAME: ${{ steps.container_info.outputs.container_name }}
         with:
           script: |
-            const M = JSON.parse(process.env.PAW_MSG);
+            const M = JSON.parse(require('fs').readFileSync(`${process.env.RUNNER_TEMP}/paw-msg.json`, 'utf8'));
             const m = (k, p = {}) => M[k].replace(/\{(\w+)\}/g, (s, n) => (n in p ? p[n] : s));
 
             const branchName = process.env.PAW_IN_NEEDS_CHECK_COMMAND_OUTPUTS_CUSTOM_BRANCH;

package/payload/workflows/python/PROJECT-PYTHON-CI.yaml

@@ -147,6 +147,8 @@ jobs:
       - name: Build verification complete
         env:
           PAW_REF_NAME: ${{ github.ref_name }}
+          # On a PR, github.sha is the temporary merge commit; show the PR head commit instead
+          PAW_COMMIT_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
         run: |
           [ -f "$GITHUB_WORKSPACE/.github/scripts/messages.py" ] || { echo "::error::messages.py is missing; rerun \`npx project-auto-wizard --mode full --force\`"; exit 1; }
           m() { (cd "$GITHUB_WORKSPACE" && python3 .github/scripts/messages.py get "$@"); }
@@ -155,7 +157,7 @@ jobs:
           m cibuild.info_title
           m cibuild.info_project project="${{ env.PROJECT_NAME }}"
           m cibuild.info_branch branch="$PAW_REF_NAME"
-          m cibuild.info_commit sha="${{ github.sha }}"
+          m cibuild.info_commit sha="$(echo "$PAW_COMMIT_SHA" | cut -c1-7)"
           m cibuild.info_time time="$(date -u '+%Y-%m-%d %H:%M:%S UTC')"
 
   # CI Gate: the single job to register as a required check