fix(host-agent): allow platform runtime env files #382

Merged

pdurlej merged 1 commit from codex/fix/host-agent-platform-env-files into main

2026-05-19 01:03:06 +02:00

codex commented

2026-05-19 00:56:21 +02:00

Collaborator

Canary status: missing — rely on required Forgejo checks before merge

Canary Context Pack

Product story

Finish the last minio-init cutoff smoke without weakening the platform-host-agent boundary. platformctl apply now passes the canonical platform runtime env files to Docker Compose, and the host wrapper needs to allow exactly those known files.

What changed

Allow /opt/pdurlej-platform/runtime/honcho-providers.env and /opt/pdurlej-platform/runtime/honcho-llm-overrides.env in platform-host-agent-wrapper only for /opt/pdurlej-platform/current.
Add a regression test for the exact docker compose config --quiet command shape seen in the failed minio-init run.

Why it changed

Run #1463 reached the guarded one-shot apply path, but preflight failed with platform-host-agent: denied because the wrapper allowed compose.env but not the two newer Honcho runtime env files.

Files touched

ops/rs2000/platform-host-agent-wrapper
tests/test_platform_host_agent_wrapper.py

Relevant context

#379 minio-init one-shot apply support
#381 auto-apply exit-code capture
ops/rs2000/README.md: wrapper is installed explicitly on RS2000

Runtime evidence

platformctl-auto-apply run #1463: guard allowed, apply preflight denied on the exact env-file list.
Local test: pytest -q tests/test_platform_host_agent_wrapper.py -> 13 passed.

Known constraints

This PR does not install the wrapper. After merge, the reviewed file must be installed to /usr/local/sbin/platform-host-agent-wrapper before retrying minio-init.

Explicit out-of-scope

No arbitrary env-file widening. No production compose changes. No direct MinIO mutation.

Requested decision

Merge after required checks pass, then install the reviewed wrapper on RS2000 and retry the guarded minio-init workflow.

Merge blockers

Any test failure or review finding that the allowlist is broader than these exact runtime files.

Spec sources read

ops/rs2000/platform-host-agent-wrapper — denied command allowlist
tests/test_platform_host_agent_wrapper.py — wrapper contract tests
ops/rs2000/README.md — explicit install contract
control-plane/platformctl/apply.py — command shape that produced denied preflight

Canary status: missing — rely on required Forgejo checks before merge ## Canary Context Pack ### Product story Finish the last `minio-init` cutoff smoke without weakening the platform-host-agent boundary. `platformctl apply` now passes the canonical platform runtime env files to Docker Compose, and the host wrapper needs to allow exactly those known files. ### What changed - Allow `/opt/pdurlej-platform/runtime/honcho-providers.env` and `/opt/pdurlej-platform/runtime/honcho-llm-overrides.env` in `platform-host-agent-wrapper` only for `/opt/pdurlej-platform/current`. - Add a regression test for the exact `docker compose config --quiet` command shape seen in the failed `minio-init` run. ### Why it changed Run #1463 reached the guarded one-shot apply path, but preflight failed with `platform-host-agent: denied` because the wrapper allowed `compose.env` but not the two newer Honcho runtime env files. ### Files touched - `ops/rs2000/platform-host-agent-wrapper` - `tests/test_platform_host_agent_wrapper.py` ### Relevant context - #379 `minio-init` one-shot apply support - #381 auto-apply exit-code capture - `ops/rs2000/README.md`: wrapper is installed explicitly on RS2000 ### Runtime evidence - `platformctl-auto-apply` run #1463: guard allowed, apply preflight denied on the exact env-file list. - Local test: `pytest -q tests/test_platform_host_agent_wrapper.py` -> 13 passed. ### Known constraints This PR does not install the wrapper. After merge, the reviewed file must be installed to `/usr/local/sbin/platform-host-agent-wrapper` before retrying `minio-init`. ### Explicit out-of-scope No arbitrary env-file widening. No production compose changes. No direct MinIO mutation. ### Requested decision Merge after required checks pass, then install the reviewed wrapper on RS2000 and retry the guarded `minio-init` workflow. ### Merge blockers Any test failure or review finding that the allowlist is broader than these exact runtime files. ## Spec sources read - `ops/rs2000/platform-host-agent-wrapper` — denied command allowlist - `tests/test_platform_host_agent_wrapper.py` — wrapper contract tests - `ops/rs2000/README.md` — explicit install contract - `control-plane/platformctl/apply.py` — command shape that produced denied preflight

codex added 1 commit

2026-05-19 00:56:21 +02:00

fix(host-agent): allow platform runtime env files

canary-required / collect-diff (pull_request) Successful in 3s

Details

patchwarden-pr-sanity / collect-diff (pull_request) Successful in 3s

Details

python-ci / Python 3.11 (pull_request) Successful in 36s

Details

python-ci / Python 3.12 (pull_request) Successful in 38s

Details

python-ci / Python 3.13 (pull_request) Successful in 37s