4 Commits

Include renames

Author	SHA1	Message	Date
autonomic-botandClaude Opus 4.7	b7e6cbd7be	feat(1e): HC3 additive generic + op/assertion split (orchestrator owns the op) ... - orchestrator: per mutating tier, run optional pre-op seed hook (ops.py pre_<op>) → perform the op ONCE (harness-owned) → run generic assertion (unless opted out) AND overlay assertion, both against the shared post-op deployment. Op results passed op→assertion via run-scoped CCCI_OP_STATE_FILE. - opt-out: CCCI_SKIP_GENERIC / CCCI_SKIP_GENERIC_<OP> / recipe_meta.SKIP_GENERIC (declarative). - generic.py: split do_* into op primitives (perform_upgrade/backup/restore) + assertions (assert_upgraded/backup_artifact/restore_healthy) reading op_state(); deployed_identity now returns {version,image,chaos} (chaos label ready for HC1). - generic test_<op>.py + all 6 recipe overlays migrated to assertion-only; pre-op seeding moved to per-recipe ops.py (pre_upgrade/pre_backup/pre_restore). install overlays unchanged (no op). - deploy-count stays 1 (op primitives never call deploy_app). lint PASS; 8 unit tests PASS on cc-ci. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-28 03:12:04 +01:00
autonomic-botandClaude Opus 4.7	afd75a48db	feat(1d): migrate keycloak/cryptpad/matrix-synapse/n8n/lasuite-docs overlays to deploy-once contract (DG7) ... Mechanical port to the assertion-only contract (no softened/skipped assertions): install uses live_app + generic.assert_serving (extend) + the recipe's http/playwright/api checks; upgrade seeds its data marker then generic.do_upgrade + asserts survival; backup/restore split into test_backup.py (seed->do_backup->mutate) + new test_restore.py (do_restore->assert original). Recipe-specifics preserved verbatim (keycloak realm+admin-console+kc_admin, matrix/lasuite db-service psql markers, cryptpad/n8n volume markers). No recipe now double-deploys under the deploy-once orchestrator. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-28 01:32:53 +01:00
autonomic-botandClaude Opus 4.7	2cede01ed7	style(1b): auto-format + lint-clean the whole codebase (RL1) ... Mechanical, semantics-preserving cleanup so the codebase passes the new lint stage: - ruff format: all 32 Python files (wraps long signatures, normalizes quotes/blank lines). - nixpkgs-fmt: modules/drone-runner.nix. - shfmt (-i 2 -ci): scripts/*.sh. Lint fixes (reviewed, behavior-preserving — no test weakened): - ruff SIM105: try/except-pass -> contextlib.suppress (abra.py app_config rm; lifecycle.py janitor). - ruff SIM115: open().read() -> with open() (run_recipe_ci.py redaction-values + gitea-token). - statix: merge repeated sops `secrets.*` keys into one `secrets = { ... }` (comments kept); empty fn pattern `{ ... }:` -> `_:` (packages.nix). - deadnix: drop unused lambda args (flake `self`; configuration.nix `lib`; overlay `final` -> `_`). Verified on cc-ci: `scripts/lint.sh` -> lint: PASS; nixosConfigurations.cc-ci evaluates; all Python byte-compiles. The deployed bridge/dashboard/runner source changes hash (reformat), so cc-ci will be rebuilt to the new closure in W2 before the cold D1-D10 re-verification. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-27 20:52:05 +01:00
autonomic-botandClaude Opus 4.7	d6a8f421a7	M6.5: enroll matrix-synapse (recipe #4, DB+media/large-volume) — install verified green ... install 2 passed on host (~2.7m): synapse client API 200 + real versions JSON, no extra config (SYNAPSE_SERVER_NAME=DOMAIN). upgrade/backup author postgres-marker assertions exercising the recipe's pg_backup.sh dump/restore hook (the meaningful matrix data path); verifying next. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-27 05:38:40 +01:00