roar-cli 0.3.1__tar.gz → 0.3.3__tar.gz

{roar_cli-0.3.1 → roar_cli-0.3.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: roar-cli
-Version: 0.3.1
+Version: 0.3.3
 Classifier: Development Status :: 3 - Alpha
 Classifier: Intended Audience :: Developers
 Classifier: Intended Audience :: Science/Research
@@ -103,7 +103,7 @@ bash scripts/install-dev.sh
 when available) and then builds the Rust tracer binaries
 (`roar-tracer`, `roar-tracer-preload`, `roar-tracer-ebpf`, `roard`,
 `roar-proxy`) and stages them into `roar/bin/`. A bare
-`pip install -e .` does *not* build the tracer binaries because they
+`pip install -e .` does _not_ build the tracer binaries because they
 live in separate cargo crates outside the maturin manifest, so
 `roar run` would fail with "No tracer binary found" until the script
 runs. See [Building from source](#building-from-source) below for
@@ -325,6 +325,16 @@ To register SSH auth with GLaaS:
 2. Sign up at <https://glaas.ai> where you can paste your public key
 3. Run `roar auth test` to verify
 
+### `roar login`
+
+Authenticate with GLaaS and store your global login state for attributed publishing and project access. By default, `roar login` starts a browser/device login flow and can then unlock private or project-scoped publication in repositories that use `roar scope`.
+
+```bash
+roar login
+roar login --force
+roar login --token-file ~/.config/roar/auth.json
+```
+
 ### `roar config`
 
 View or set configuration options.
@@ -337,20 +347,20 @@ roar config set <key> <value>
 
 Run `roar config list` to see all available options with descriptions. Common options:
 
-| Key                            | Default                | Description                             |
-| ------------------------------ | ---------------------- | --------------------------------------- |
-| `output.track_repo_files`      | false                  | Include repo files in provenance        |
-| `output.quiet`                 | false                  | Suppress written files report           |
-| `filters.ignore_system_reads`  | true                   | Ignore /sys, /etc, /sbin reads          |
-| `filters.ignore_package_reads` | true                   | Ignore installed package reads          |
-| `filters.ignore_torch_cache`   | true                   | Ignore torch/triton cache               |
-| `filters.ignore_tmp_files`     | true                   | Ignore /tmp files                       |
-| `glaas.url`                    | <https://api.glaas.ai> | GLaaS server URL                        |
-| `glaas.web_url`                | <https://glaas.ai>     | GLaaS web UI URL                        |
-| `registration.public_by_default` | false                | Default `register`/`put` visibility     |
-| `registration.omit.enabled`    | true                   | Enable secret filtering                 |
-| `hash.primary`                 | blake3                 | Primary hash algorithm                  |
-| `logging.level`                | warning                | Log level (debug, info, warning, error) |
+| Key                              | Default                | Description                             |
+| -------------------------------- | ---------------------- | --------------------------------------- |
+| `output.track_repo_files`        | false                  | Include repo files in provenance        |
+| `output.quiet`                   | false                  | Suppress written files report           |
+| `filters.ignore_system_reads`    | true                   | Ignore /sys, /etc, /sbin reads          |
+| `filters.ignore_package_reads`   | true                   | Ignore installed package reads          |
+| `filters.ignore_torch_cache`     | true                   | Ignore torch/triton cache               |
+| `filters.ignore_tmp_files`       | true                   | Ignore /tmp files                       |
+| `glaas.url`                      | <https://api.glaas.ai> | GLaaS server URL                        |
+| `glaas.web_url`                  | <https://glaas.ai>     | GLaaS web UI URL                        |
+| `registration.public_by_default` | false                  | Default `register`/`put` visibility     |
+| `registration.omit.enabled`      | true                   | Enable secret filtering                 |
+| `hash.primary`                   | blake3                 | Primary hash algorithm                  |
+| `logging.level`                  | warning                | Log level (debug, info, warning, error) |
 
 ### `roar dag`
 
@@ -382,6 +392,18 @@ Display recent job execution history.
 roar log                  # Show recent job history
 ```
 
+### `roar scope`
+
+Show or change the default publication scope for the current repo. Scopes connect lineage from this repo to your personal space or to a specific org/project so later `roar register` and `roar put` commands publish in the right place.
+
+```bash
+roar scope status
+roar scope list
+roar scope use private
+roar scope use acme/foundation-models
+roar scope clear
+```
+
 ### `roar label`
 
 Manage local labels for DAGs (sessions), jobs, and artifacts.
@@ -413,6 +435,17 @@ roar label sync job @2
 roar label sync artifact ./outputs/model.pt --dry-run
 ```
 
+### `roar diff <ref-a> <ref-b>`
+
+Compare the lineage of two artifacts, jobs, steps, or sessions to see what changed in their inputs, parameters, code, environment, or pipeline structure. Use it to identify the likely root cause when two outputs differ.
+
+```bash
+roar diff ./model.pkl ./model-v2.pkl
+roar diff @5 @7 --format dag
+roar diff session:current session:<hash>
+roar diff @5 @7 --json
+```
+
 **Entity targets:**
 
 - `dag`: `current` or a session hash prefix

{roar_cli-0.3.1 → roar_cli-0.3.3}/README.md

@@ -54,7 +54,7 @@ bash scripts/install-dev.sh
 when available) and then builds the Rust tracer binaries
 (`roar-tracer`, `roar-tracer-preload`, `roar-tracer-ebpf`, `roard`,
 `roar-proxy`) and stages them into `roar/bin/`. A bare
-`pip install -e .` does *not* build the tracer binaries because they
+`pip install -e .` does _not_ build the tracer binaries because they
 live in separate cargo crates outside the maturin manifest, so
 `roar run` would fail with "No tracer binary found" until the script
 runs. See [Building from source](#building-from-source) below for
@@ -276,6 +276,16 @@ To register SSH auth with GLaaS:
 2. Sign up at <https://glaas.ai> where you can paste your public key
 3. Run `roar auth test` to verify
 
+### `roar login`
+
+Authenticate with GLaaS and store your global login state for attributed publishing and project access. By default, `roar login` starts a browser/device login flow and can then unlock private or project-scoped publication in repositories that use `roar scope`.
+
+```bash
+roar login
+roar login --force
+roar login --token-file ~/.config/roar/auth.json
+```
+
 ### `roar config`
 
 View or set configuration options.
@@ -288,20 +298,20 @@ roar config set <key> <value>
 
 Run `roar config list` to see all available options with descriptions. Common options:
 
-| Key                            | Default                | Description                             |
-| ------------------------------ | ---------------------- | --------------------------------------- |
-| `output.track_repo_files`      | false                  | Include repo files in provenance        |
-| `output.quiet`                 | false                  | Suppress written files report           |
-| `filters.ignore_system_reads`  | true                   | Ignore /sys, /etc, /sbin reads          |
-| `filters.ignore_package_reads` | true                   | Ignore installed package reads          |
-| `filters.ignore_torch_cache`   | true                   | Ignore torch/triton cache               |
-| `filters.ignore_tmp_files`     | true                   | Ignore /tmp files                       |
-| `glaas.url`                    | <https://api.glaas.ai> | GLaaS server URL                        |
-| `glaas.web_url`                | <https://glaas.ai>     | GLaaS web UI URL                        |
-| `registration.public_by_default` | false                | Default `register`/`put` visibility     |
-| `registration.omit.enabled`    | true                   | Enable secret filtering                 |
-| `hash.primary`                 | blake3                 | Primary hash algorithm                  |
-| `logging.level`                | warning                | Log level (debug, info, warning, error) |
+| Key                              | Default                | Description                             |
+| -------------------------------- | ---------------------- | --------------------------------------- |
+| `output.track_repo_files`        | false                  | Include repo files in provenance        |
+| `output.quiet`                   | false                  | Suppress written files report           |
+| `filters.ignore_system_reads`    | true                   | Ignore /sys, /etc, /sbin reads          |
+| `filters.ignore_package_reads`   | true                   | Ignore installed package reads          |
+| `filters.ignore_torch_cache`     | true                   | Ignore torch/triton cache               |
+| `filters.ignore_tmp_files`       | true                   | Ignore /tmp files                       |
+| `glaas.url`                      | <https://api.glaas.ai> | GLaaS server URL                        |
+| `glaas.web_url`                  | <https://glaas.ai>     | GLaaS web UI URL                        |
+| `registration.public_by_default` | false                  | Default `register`/`put` visibility     |
+| `registration.omit.enabled`      | true                   | Enable secret filtering                 |
+| `hash.primary`                   | blake3                 | Primary hash algorithm                  |
+| `logging.level`                  | warning                | Log level (debug, info, warning, error) |
 
 ### `roar dag`
 
@@ -333,6 +343,18 @@ Display recent job execution history.
 roar log                  # Show recent job history
 ```
 
+### `roar scope`
+
+Show or change the default publication scope for the current repo. Scopes connect lineage from this repo to your personal space or to a specific org/project so later `roar register` and `roar put` commands publish in the right place.
+
+```bash
+roar scope status
+roar scope list
+roar scope use private
+roar scope use acme/foundation-models
+roar scope clear
+```
+
 ### `roar label`
 
 Manage local labels for DAGs (sessions), jobs, and artifacts.
@@ -364,6 +386,17 @@ roar label sync job @2
 roar label sync artifact ./outputs/model.pt --dry-run
 ```
 
+### `roar diff <ref-a> <ref-b>`
+
+Compare the lineage of two artifacts, jobs, steps, or sessions to see what changed in their inputs, parameters, code, environment, or pipeline structure. Use it to identify the likely root cause when two outputs differ.
+
+```bash
+roar diff ./model.pkl ./model-v2.pkl
+roar diff @5 @7 --format dag
+roar diff session:current session:<hash>
+roar diff @5 @7 --json
+```
+
 **Entity targets:**
 
 - `dag`: `current` or a session hash prefix

{roar_cli-0.3.1 → roar_cli-0.3.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "maturin"
 
 [project]
 name = "roar-cli"
-version = "0.3.1"
+version = "0.3.3"
 description = "Reproducibility and provenance tracker for ML training pipelines"
 authors = [
     { name="TReqs Team", email="info@treqs.ai" }

roar_cli-0.3.3/roar/__init__.py

@@ -0,0 +1,11 @@
+"""roar - Run Observation & Artifact Registration."""
+
+from importlib.metadata import PackageNotFoundError
+from importlib.metadata import version as _version
+
+try:
+    __version__: str = _version("roar-cli")
+except PackageNotFoundError:
+    __version__ = "0.0.0+unknown"
+
+__all__ = ["__version__"]

{roar_cli-0.3.1 → roar_cli-0.3.3}/roar/analyzers/experiment_trackers.py

@@ -30,9 +30,19 @@ class ExperimentTrackerAnalyzer(Analyzer):
         ".neptune/*",
     ]
 
+    @staticmethod
+    def _all_written_files(context: dict) -> list:
+        """Return unfiltered written files so tracker detection works even
+        when tracker directories are in ignore_paths."""
+        tracer_data = context.get("tracer_data", {})
+        unfiltered = tracer_data.get("written_files", [])
+        if unfiltered:
+            return unfiltered
+        return context.get("written_files", [])
+
     def relevant(self, context: dict) -> bool:
         """Check if any tracker directories were written to."""
-        written = context.get("written_files", [])
+        written = self._all_written_files(context)
         for path in written:
             for _tracker, patterns in self.TRACKER_PATTERNS.items():
                 if any(p in path for p in patterns):
@@ -40,7 +50,7 @@ class ExperimentTrackerAnalyzer(Analyzer):
         return False
 
     def analyze(self, context: dict) -> dict | None:
-        written = context.get("written_files", [])
+        written = self._all_written_files(context)
         env = context.get("env", {})
 
         results: dict[str, Any] = {
@@ -126,7 +136,12 @@ class ExperimentTrackerAnalyzer(Analyzer):
                     run_dir = None
 
             if run_dir and run_dir.exists():
-                # Try to read run metadata
+                # Extract run_id from directory name: run-YYYYMMDD_HHMMSS-<run_id>
+                dir_match = re.match(r"run-\d{8}_\d{6}-(.+)$", run_dir.name)
+                if dir_match:
+                    info["run_id"] = dir_match.group(1)
+
+                # Try to read run metadata for additional fields
                 run_metadata = run_dir / "files" / "wandb-metadata.json"
                 if run_metadata.exists():
                     try:
@@ -135,34 +150,51 @@ class ExperimentTrackerAnalyzer(Analyzer):
                         info["run_id"] = metadata.get("run_id")
                         info["project"] = metadata.get("project")
                         info["entity"] = metadata.get("entity")
-                        if all(k in info for k in ["entity", "project", "run_id"]):
+                        if info.get("entity") and info.get("project") and info.get("run_id"):
                             info["url"] = (
                                 f"https://wandb.ai/{info['entity']}/{info['project']}/runs/{info['run_id']}"
                             )
                     except (OSError, json.JSONDecodeError):
                         pass
 
-                # Also check wandb-summary.json for run info
+                # Parse entity/project/run_id from debug.log.
+                # wandb writes "finishing run <entity>/<project>/<run_id>"
+                # to this file on every online run.
+                debug_log = run_dir / "logs" / "debug.log"
+                if debug_log.exists():
+                    try:
+                        text = debug_log.read_text(errors="replace")
+                        finish_match = re.search(r"finishing run (\S+)/(\S+)/(\S+)", text)
+                        if finish_match:
+                            info["entity"] = finish_match.group(1)
+                            info["project"] = finish_match.group(2)
+                            info["run_id"] = finish_match.group(3)
+                    except OSError:
+                        pass
+
+                # Check wandb-summary.json for runtime
                 summary_file = run_dir / "files" / "wandb-summary.json"
-                if summary_file.exists() and "run_id" not in info:
+                if summary_file.exists():
                     try:
                         with open(summary_file) as f:
                             summary = json.load(f)
-                        # Summary might have _wandb key with run info
                         wandb_info = summary.get("_wandb", {})
                         if "runtime" in wandb_info:
                             info["runtime_seconds"] = wandb_info["runtime"]
                     except (OSError, json.JSONDecodeError):
                         pass
 
-        # Fall back to env vars
-        if "url" not in info:
-            entity = env.get("WANDB_ENTITY", "")
-            project = env.get("WANDB_PROJECT", "")
-            if entity and project:
-                info["entity"] = entity
-                info["project"] = project
-                # Can't get run_id from env alone
+        # Fall back to env vars if entity/project still missing
+        if not info.get("entity"):
+            info["entity"] = env.get("WANDB_ENTITY", "")
+        if not info.get("project"):
+            info["project"] = env.get("WANDB_PROJECT", "")
+
+        # Build URL if we have all three components
+        if info.get("entity") and info.get("project") and info.get("run_id"):
+            info["url"] = (
+                f"https://wandb.ai/{info['entity']}/{info['project']}/runs/{info['run_id']}"
+            )
 
         return info if len(info) > 1 else None
 

{roar_cli-0.3.1 → roar_cli-0.3.3}/roar/application/get/requests.py

@@ -20,3 +20,4 @@ class GetRequest:
     dry_run: bool = False
     force: bool = False
     tag: bool = False
+    step_name: str | None = None

{roar_cli-0.3.1 → roar_cli-0.3.3}/roar/application/get/service.py

@@ -27,12 +27,64 @@ def get_artifacts(request: GetRequest) -> GetResponse:
     is_prefix = request.source.rstrip("/") != request.source or parsed_source.is_prefix
 
     git_commit = None
+    git_branch = None
+    git_repo_url = None
     if not request.dry_run:
         try:
             git_commit = resolve_git_state(repo_root).commit
             logger.debug("Git commit: %s", git_commit)
         except Exception as exc:
             logger.debug("Git operation failed (non-fatal for get): %s", exc)
+        try:
+            import subprocess
+
+            git_branch = (
+                subprocess.check_output(
+                    ["git", "rev-parse", "--abbrev-ref", "HEAD"],
+                    cwd=str(repo_root),
+                    stderr=subprocess.DEVNULL,
+                    text=True,
+                ).strip()
+                or None
+            )
+            git_repo_url = (
+                subprocess.check_output(
+                    ["git", "remote", "get-url", "origin"],
+                    cwd=str(repo_root),
+                    stderr=subprocess.DEVNULL,
+                    text=True,
+                ).strip()
+                or None
+            )
+        except Exception:
+            pass
+
+    git_branch = None
+    git_repo_url = None
+    if not request.dry_run:
+        try:
+            import subprocess
+
+            git_branch = (
+                subprocess.check_output(
+                    ["git", "rev-parse", "--abbrev-ref", "HEAD"],
+                    cwd=str(repo_root),
+                    stderr=subprocess.DEVNULL,
+                    text=True,
+                ).strip()
+                or None
+            )
+            git_repo_url = (
+                subprocess.check_output(
+                    ["git", "remote", "get-url", "origin"],
+                    cwd=str(repo_root),
+                    stderr=subprocess.DEVNULL,
+                    text=True,
+                ).strip()
+                or None
+            )
+        except Exception:
+            pass
 
     with create_database_context(request.roar_dir) as db_ctx:
         service = GetService(
@@ -40,6 +92,7 @@ def get_artifacts(request: GetRequest) -> GetResponse:
             source=parsed_source,
             repo_root=repo_root,
         )
+        t0 = time.time()
         transfer_result = service.get(
             destination=request.destination,
             expected_hash=request.expected_hash,
@@ -47,6 +100,7 @@ def get_artifacts(request: GetRequest) -> GetResponse:
             force=request.force,
             is_prefix=is_prefix,
         )
+        download_duration = time.time() - t0
 
         result = _materialize_get_result(
             db_ctx=db_ctx,
@@ -54,6 +108,9 @@ def get_artifacts(request: GetRequest) -> GetResponse:
             parsed_source=parsed_source,
             transfer_result=transfer_result,
             git_commit=git_commit,
+            git_branch=git_branch,
+            git_repo=git_repo_url,
+            duration_seconds=download_duration,
         )
 
     git_tag_name = None
@@ -91,6 +148,9 @@ def _materialize_get_result(
     parsed_source,
     transfer_result: GetTransferResult,
     git_commit: str | None,
+    git_branch: str | None = None,
+    git_repo: str | None = None,
+    duration_seconds: float = 0.0,
 ) -> GetResponse:
     if transfer_result.dry_run or not transfer_result.success:
         return GetResponse(
@@ -127,6 +187,11 @@ def _materialize_get_result(
         job_type="get",
         output_artifacts=output_artifacts,
         exit_code=0,
+        git_commit=git_commit,
+        git_branch=git_branch,
+        git_repo=git_repo,
+        duration_seconds=duration_seconds,
+        step_name=request.step_name,
     )
     return GetResponse(
         success=True,

{roar_cli-0.3.1 → roar_cli-0.3.3}/roar/application/publish/git_remote.py

@@ -84,10 +84,11 @@ def resolve_canonical_remote(repo_root: Path | str, configured_remote: str | Non
     if not remotes:
         raise GitRemoteError(
             "No git remote configured. `roar register` needs a remote to push "
-            "roar tags to so teammates can resolve GLaaS links.\n"
+            "roar tags to so anyone reading the GLaaS record can resolve them "
+            "back to the commit.\n"
             "Add one: `git remote add origin <url>`.\n"
             "Or skip the push: `roar config set git.push_tags_on_register never` "
-            "(local-only — GLaaS links will not resolve for teammates)."
+            "(commit links on GLaaS may be broken)."
         )
     if len(remotes) > 1:
         raise GitRemoteError(

{roar_cli-0.3.1 → roar_cli-0.3.3}/roar/application/publish/register_tag_push.py

@@ -81,7 +81,7 @@ def _create_local_tags(repo_root: Path, commit_to_tag: Iterable[tuple[str, str]]
                 "If the commit is no longer reachable locally (e.g. rebase, "
                 "garbage collection), recover it via `git reflog` before retrying — "
                 "or set `git.push_tags_on_register=never` to register local-only "
-                "(GLaaS links will not resolve for teammates)."
+                "(commit links on GLaaS may be broken)."
             )
 
 

{roar_cli-0.3.1 → roar_cli-0.3.3}/roar/application/publish/requests.py

@@ -36,3 +36,4 @@ class PutRequest:
     public: bool = False
     anonymous: bool = False
     no_tag: bool = False
+    step_name: str | None = None

{roar_cli-0.3.1 → roar_cli-0.3.3}/roar/application/publish/results.py

@@ -36,6 +36,7 @@ class RegisterLineageResponse:
     secrets_redacted: bool = False
     aborted_by_user: bool = False
     tag_summary: RegisterTagSummary | None = None
+    warnings: list[str] = field(default_factory=list)
 
 
 @dataclass(frozen=True)

{roar_cli-0.3.1 → roar_cli-0.3.3}/roar/application/publish/service.py

@@ -2,6 +2,7 @@
 
 from __future__ import annotations
 
+import contextlib
 import subprocess
 from dataclasses import dataclass, field
 from pathlib import Path
@@ -476,10 +477,17 @@ def register_lineage_target(request: RegisterLineageRequest) -> RegisterLineageR
 
         # P1-23: push roar tags BEFORE writing the GLaaS record so the
         # record never references a tag that doesn't yet exist on the
-        # canonical remote. Fail-closed.
+        # canonical remote. Attributed registers fail-closed here.
+        #
+        # Anonymous registers degrade tag-push failures to warnings: the
+        # user explicitly opted into a no-account publish, so requiring
+        # git-remote auth (a separate concern from GLaaS) would defeat
+        # the whole point. The local tag still gets created; only the
+        # push to the canonical remote is skipped on failure.
         from ...integrations.config import config_get
         from .register_tag_push import TagPushError, ensure_roar_tags_pushed
 
+        tag_push_warning: str | None = None
         try:
             tag_summary = ensure_roar_tags_pushed(
                 repo_root=prepared.git_tag_repo_root or request.cwd,
@@ -493,11 +501,14 @@ def register_lineage_target(request: RegisterLineageRequest) -> RegisterLineageR
                 logger=logger,
             )
         except TagPushError as exc:
-            return RegisterLineageResponse(
-                success=False,
-                artifact_hash=collected_lineage.artifact_hash,
-                error=str(exc),
-            )
+            if not request.anonymous:
+                return RegisterLineageResponse(
+                    success=False,
+                    artifact_hash=collected_lineage.artifact_hash,
+                    error=str(exc),
+                )
+            tag_push_warning = _format_anonymous_tag_push_warning(str(exc))
+            tag_summary = None
 
         service = RegisterService(
             glaas_client=runtime.glaas_client,
@@ -514,6 +525,10 @@ def register_lineage_target(request: RegisterLineageRequest) -> RegisterLineageR
             prepared=prepared,
         )
 
+        warnings: list[str] = []
+        if tag_push_warning:
+            warnings.append(tag_push_warning)
+
         return RegisterLineageResponse(
             success=result.success,
             session_hash=result.session_hash,
@@ -527,11 +542,37 @@ def register_lineage_target(request: RegisterLineageRequest) -> RegisterLineageR
             secrets_redacted=result.secrets_redacted,
             aborted_by_user=result.aborted_by_user,
             tag_summary=tag_summary,
+            warnings=warnings,
         )
     except PublishAuthError as exc:
         return RegisterLineageResponse(success=False, error=str(exc))
 
 
+def _format_anonymous_tag_push_warning(tag_push_error: str) -> str:
+    """Wrap a tag-push failure as a self-contained user-facing warning.
+
+    Anonymous register continues past the push failure (GLaaS publish
+    succeeds), so the message has to (a) make clear the failure is git
+    remote auth, not GLaaS, (b) tell the user GLaaS registration still
+    happened, (c) explain why the missing push matters (the GLaaS
+    record references a tag that doesn't yet exist on the remote, so
+    anyone reading the record can't ``git checkout`` it), and
+    (d) point at the real fix (configure git remote auth + push the
+    tag). We deliberately do *not* suggest
+    ``git.push_tags_on_register=never`` here — that "fix" breaks
+    reproducibility for everyone viewing the GLaaS record, not just
+    silences a local warning.
+    """
+    return (
+        "roar tag push to git remote failed (git auth, not GLaaS) — "
+        "anonymous register continued without pushing the tag.\n"
+        "  The local tag exists, but viewers of the GLaaS record need it "
+        "on the remote to reproduce.\n"
+        "  Fix git remote auth, then push: `git push <remote> <tag>`.\n"
+        f"  Verbatim git error: {tag_push_error}"
+    )
+
+
 def put_artifacts(request: PutRequest) -> PutResponse:
     """Run the `roar put` application workflow."""
     if not request.dry_run:
@@ -610,6 +651,11 @@ def put_artifacts(request: PutRequest) -> PutResponse:
                 git_tag=expected_tag,
             )
 
+            # Apply step name label if provided.
+            if request.step_name and result.success and result.job_id:
+                with contextlib.suppress(Exception):
+                    db_ctx.job_recording._record_step_name_label(result.job_id, request.step_name)
+
     if request.dry_run:
         created_git_tag = None
     else: