coilyco-flight-deck/infrastructure

Watch

Migrate fleet Actions scripts to one-line run steps #613

New issue

Closed

opened 2026-07-24 00:31:43 +00:00 by coilyco-ops · 2 comments

coilyco-ops commented

2026-07-24 00:31:43 +00:00

Member

A 2026-07-23 read-only workspace audit found 139 block-scalar run steps across 11 repos:

coilyco-bridge/agentic-os-hardware: 1
coilyco-bridge/agentic-os-kai: 8
coilyco-bridge/deploy: 37
coilyco-flight-deck/agent-compose: 4
coilyco-flight-deck/cli-guard: 30
coilyco-flight-deck/homebrew-tap: 3
coilyco-flight-deck/infrastructure: 15
coilyco-flight-deck/ward: 25
coilyco-flight-deck/ward-mcp: 4
coilyco-gaming/eco-app: 11
coilyco-gaming/factory-game-v3: 1

Done when every listed repo passes the released actions-run-one-line hook, each migration is locally validated and landed through that repos workflow, and no inline script body remains. This issue owns migration only. The existing agentic-os-pin-converge Ansible role owns hook propagation after agentic-os enables the hook in its managed default list.

The actions-run-one-line hook authored in coilyco-flight-deck/agentic-os#673 rejects multiline run commands in GitHub and Forgejo workflows and composite actions. Before the hook joins the managed default catalog, migrate existing consumers to tracked scripts while preserving expression interpolation, env wiring, shell choice, working-directory behavior, and executable modes. A 2026-07-23 read-only workspace audit found 139 block-scalar run steps across 11 repos: * coilyco-bridge/agentic-os-hardware: 1 * coilyco-bridge/agentic-os-kai: 8 * coilyco-bridge/deploy: 37 * coilyco-flight-deck/agent-compose: 4 * coilyco-flight-deck/cli-guard: 30 * coilyco-flight-deck/homebrew-tap: 3 * coilyco-flight-deck/infrastructure: 15 * coilyco-flight-deck/ward: 25 * coilyco-flight-deck/ward-mcp: 4 * coilyco-gaming/eco-app: 11 * coilyco-gaming/factory-game-v3: 1 Done when every listed repo passes the released actions-run-one-line hook, each migration is locally validated and landed through that repos workflow, and no inline script body remains. This issue owns migration only. The existing agentic-os-pin-converge Ansible role owns hook propagation after agentic-os enables the hook in its managed default list.

coilyco-ops added the

autonomy

headless

priority

labels

2026-07-24 00:31:43 +00:00

coilyco-ops referenced this issue from coilyco-flight-deck/agentic-os

2026-07-24 00:31:53 +00:00

Enable actions-run-one-line in the managed default hook catalog #679

coilyco-ops added

priority

and removed

priority

labels

2026-07-29 04:38:09 +00:00

coilyco-ops added

priority

and removed

priority

labels

2026-07-29 06:19:42 +00:00

coilyco-ops referenced this issue from a commit

2026-07-29 12:46:54 +00:00

chore(actions): extract workflow run scripts

coilyco-ops closed this issue

2026-07-29 12:46:54 +00:00

coilyco-ops commented

2026-07-29 12:55:16 +00:00

Author

Member

WARD-WORKFLOW: done ✅

details

workflow: merge-remote-main; review summary: skipped by design for role-separated QA

landed: 86fc595936988cb52180d1e061bf7b27c5080c32
validation: pre-commit, Yamllint, ShellCheck, released actions-run-one-line hook, and canonical Forgejo CI passed.
felt: clean extraction, with one security-sensitive pre-authorization checkout wrinkle.
confidence: high.
surprise: a concurrent landing superseded two runs; its green merge contains the candidate.
follow-up: none. The in-container review gate was intentionally skipped because implementation and QA are role-separated. QA is a separate, opt-in exact-commit verification role bound to the candidate commit above.

WARD-WORKFLOW: done ✅ <details><summary>details</summary> workflow: merge-remote-main; review summary: skipped by design for role-separated QA landed: `86fc595936988cb52180d1e061bf7b27c5080c32` validation: pre-commit, Yamllint, ShellCheck, released actions-run-one-line hook, and canonical Forgejo CI passed. felt: clean extraction, with one security-sensitive pre-authorization checkout wrinkle. confidence: high. surprise: a concurrent landing superseded two runs; its green merge contains the candidate. follow-up: none. The in-container review gate was intentionally skipped because implementation and QA are role-separated. QA is a separate, opt-in exact-commit verification role bound to the candidate commit above. </details>

coilyco-ops commented

2026-07-29 12:55:29 +00:00

Author

Member

WARD-WORKFLOW: reservation-released

release details

Run finished with WARD-WORKFLOW: done ✅.

ward container reap released container engineer-codex-infrastructure-613 (--harness codex): the terminal outcome supersedes the reservation, so a later redispatch no longer needs --override-reservation.

— Codex, via ward agent

WARD-WORKFLOW: reservation-released <details><summary>release details</summary> Run finished with `WARD-WORKFLOW: done ✅`. `ward container reap` released container `engineer-codex-infrastructure-613` (`--harness codex`): the terminal outcome supersedes the reservation, so a later redispatch no longer needs `--override-reservation`. </details>  — Codex, via `ward agent`

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

coilyco-flight-deck/infrastructure#613

No description provided.

Rows
Columns