fix(host-agent): allow Things compose env file #411

Merged

pdurlej merged 1 commit from codex/fix/platform-host-agent-things-env into main

2026-05-24 09:44:40 +02:00

codex commented

2026-05-24 09:38:44 +02:00

Collaborator

Canary status: missing — not in canary scope; rely on required Forgejo checks before merge

Canary Context Pack

Product story

platformctl-auto-apply needs to run canonical compose from /opt/pdurlej-platform/current without being blocked by runtime secrets that live in separate env files. The current deploy-control F3 apply was blocked because platform-host-agent-wrapper rejected the newly stabilized Things env-file path.

What changed

Allow /opt/pdurlej-platform/runtime/things-compose.env as a canonical current-root compose env file.
Extend the wrapper contract test to cover the full current env-file list.

Why it changed

Run #1712 reached the correct compose command but failed with platform-host-agent: denied because the wrapper allowlist only included compose, Honcho provider, and Honcho LLM override env files.

Files touched

ops/rs2000/platform-host-agent-wrapper
tests/test_platform_host_agent_wrapper.py

Runtime evidence

F3 deploy-control run #1712: preflight.returncode=126, stderr=platform-host-agent: denied.
Runtime things-compose.env is mode-protected and contains only THINGS_* entries; values were not printed.

Known constraints

This PR only updates the source wrapper. After merge, the runtime wrapper at /usr/local/sbin/platform-host-agent-wrapper must be installed from trusted main before retrying the F3 deploy-control apply.

Explicit out-of-scope

No deploy-control container mutation.
No broad env-file wildcarding.
No secret values in repo, PR body, logs, or comments.

Requested decision

Merge after required checks.

Merge blockers

Wrapper test failure.
Any reviewer concern that this path should not be readable by platform-host-agent.

Spec sources read

docs/forgejo-agent-operations.md — Forgejo write/identity rules.
ops/rs2000/platform-host-agent-wrapper — allowlist being updated.
tests/test_platform_host_agent_wrapper.py — wrapper contract tests.

Closes #387

Canary status: missing — not in canary scope; rely on required Forgejo checks before merge ## Canary Context Pack ### Product story `platformctl-auto-apply` needs to run canonical compose from `/opt/pdurlej-platform/current` without being blocked by runtime secrets that live in separate env files. The current deploy-control F3 apply was blocked because `platform-host-agent-wrapper` rejected the newly stabilized Things env-file path. ### What changed - Allow `/opt/pdurlej-platform/runtime/things-compose.env` as a canonical current-root compose env file. - Extend the wrapper contract test to cover the full current env-file list. ### Why it changed Run #1712 reached the correct compose command but failed with `platform-host-agent: denied` because the wrapper allowlist only included compose, Honcho provider, and Honcho LLM override env files. ### Files touched - `ops/rs2000/platform-host-agent-wrapper` - `tests/test_platform_host_agent_wrapper.py` ### Runtime evidence - F3 deploy-control run #1712: `preflight.returncode=126`, `stderr=platform-host-agent: denied`. - Runtime `things-compose.env` is mode-protected and contains only `THINGS_*` entries; values were not printed. ### Known constraints This PR only updates the source wrapper. After merge, the runtime wrapper at `/usr/local/sbin/platform-host-agent-wrapper` must be installed from trusted main before retrying the F3 deploy-control apply. ### Explicit out-of-scope - No deploy-control container mutation. - No broad env-file wildcarding. - No secret values in repo, PR body, logs, or comments. ### Requested decision Merge after required checks. ### Merge blockers - Wrapper test failure. - Any reviewer concern that this path should not be readable by `platform-host-agent`. ## Spec sources read - `docs/forgejo-agent-operations.md` — Forgejo write/identity rules. - `ops/rs2000/platform-host-agent-wrapper` — allowlist being updated. - `tests/test_platform_host_agent_wrapper.py` — wrapper contract tests. Closes #387

codex added 1 commit

2026-05-24 09:38:44 +02:00

fix(host-agent): allow Things compose env file

base-is-main / guard (pull_request) Successful in 1s

Details

canary-required / collect-diff (pull_request) Successful in 4s

Details

patchwarden-pr-sanity / collect-diff (pull_request) Successful in 3s

Details

python-ci / Python 3.11 (pull_request) Successful in 37s

Details

python-ci / Python 3.12 (pull_request) Successful in 43s