fix(w7): pin pogodowa-babcia registry artifact #464

Merged

pdurlej merged 1 commit from codex/w7-registry-cleanup into main

2026-05-25 01:01:00 +02:00

codex commented

2026-05-25 00:41:08 +02:00

Collaborator

Canary status: missing — rely on required Forgejo checks before merge

Canary Context Pack

Product story

pogodowa-babcia is already live and smoke-tested on RS2000, but runtime is temporarily using a local image. This PR removes that desired-state drift by pinning the published Forgejo Packages artifact for the same app commit.

What changed

Published git.pdurlej.com/pdurlej/pogodowa-babcia:f03f3e5-amd64 through the Infisical-held package PAT.
Pinned the compose default image, module source/artifact metadata, runbook, roadmap, and W7 output to the new digest.

Why it changed

The local RS2000 image was only a rescue path after the app needed a writable /app/data fix. The platform desired state should now use the registry artifact.

Files touched

compose/apps/compose.yaml
modules/pogodowa-babcia/module.yaml
modules/pogodowa-babcia/runbook.md
state/STATUS_NOW.md
state/cycle/W7-product-integrations-output.md
state/roadmap/current-platform-roadmap.md

Relevant context

W7a runtime smoke is green in state/cycle/W7-product-integrations-output.md.
The new image was inspected as an OCI index containing a linux/amd64 manifest.

Runtime evidence

No production service was recreated by this PR. Registry publish evidence:

image: git.pdurlej.com/pdurlej/pogodowa-babcia:f03f3e5-amd64
digest: sha256:e4b1f1787fd9c9b323c5cbc84e333906f93ee1f0b5bfd1f18d154fd350aa9bfe
platform: linux/amd64

Known constraints

After merge, recreate only pogodowa-babcia and repeat the existing W7a smoke. Do not restart unrelated services.

Explicit out-of-scope

W7b / #235 OpenClaw mail-consumer loop.
TLS CA cleanup for the tailnet smoke client.
Any broad W8 module upgrade.

Requested decision

Merge if required checks pass, then deploy/recreate only pogodowa-babcia from registry.

Merge blockers

Module schema validation failure.
Compose image digest mismatch.
Required Forgejo checks red.

Spec sources read

state/cycle/W7-product-integrations-output.md — current W7a evidence and drift.
modules/pogodowa-babcia/module.yaml — module source/artifact metadata.
modules/pogodowa-babcia/runbook.md — operator runbook image pin.
compose/apps/compose.yaml — compose image pin.
state/STATUS_NOW.md — operator-facing status.
state/roadmap/current-platform-roadmap.md — W7/W8 roadmap state.
docs/forgejo-agent-operations.md — Forgejo identity/write contract.

Tests

git diff --check
python3 control-plane/platformctl/tools/validate_module.py modules/pogodowa-babcia/module.yaml
PYTHONPATH=control-plane python3 -m pytest control-plane/platformctl/tests/test_forgejo_workflow_lint_contract.py control-plane/platformctl/tests/test_forgejo_ci_scripts_contract.py -q → 47 passed
docker buildx imagetools inspect git.pdurlej.com/pdurlej/pogodowa-babcia:f03f3e5-amd64 → digest and linux/amd64 manifest verified

Canary status: missing — rely on required Forgejo checks before merge ## Canary Context Pack ### Product story `pogodowa-babcia` is already live and smoke-tested on RS2000, but runtime is temporarily using a local image. This PR removes that desired-state drift by pinning the published Forgejo Packages artifact for the same app commit. ### What changed - Published `git.pdurlej.com/pdurlej/pogodowa-babcia:f03f3e5-amd64` through the Infisical-held package PAT. - Pinned the compose default image, module source/artifact metadata, runbook, roadmap, and W7 output to the new digest. ### Why it changed The local RS2000 image was only a rescue path after the app needed a writable `/app/data` fix. The platform desired state should now use the registry artifact. ### Files touched - `compose/apps/compose.yaml` - `modules/pogodowa-babcia/module.yaml` - `modules/pogodowa-babcia/runbook.md` - `state/STATUS_NOW.md` - `state/cycle/W7-product-integrations-output.md` - `state/roadmap/current-platform-roadmap.md` ### Relevant context - W7a runtime smoke is green in `state/cycle/W7-product-integrations-output.md`. - The new image was inspected as an OCI index containing a `linux/amd64` manifest. ### Runtime evidence No production service was recreated by this PR. Registry publish evidence: ```text image: git.pdurlej.com/pdurlej/pogodowa-babcia:f03f3e5-amd64 digest: sha256:e4b1f1787fd9c9b323c5cbc84e333906f93ee1f0b5bfd1f18d154fd350aa9bfe platform: linux/amd64 ``` ### Known constraints After merge, recreate only `pogodowa-babcia` and repeat the existing W7a smoke. Do not restart unrelated services. ### Explicit out-of-scope - W7b / #235 OpenClaw mail-consumer loop. - TLS CA cleanup for the tailnet smoke client. - Any broad W8 module upgrade. ### Requested decision Merge if required checks pass, then deploy/recreate only `pogodowa-babcia` from registry. ### Merge blockers - Module schema validation failure. - Compose image digest mismatch. - Required Forgejo checks red. ## Spec sources read - `state/cycle/W7-product-integrations-output.md` — current W7a evidence and drift. - `modules/pogodowa-babcia/module.yaml` — module source/artifact metadata. - `modules/pogodowa-babcia/runbook.md` — operator runbook image pin. - `compose/apps/compose.yaml` — compose image pin. - `state/STATUS_NOW.md` — operator-facing status. - `state/roadmap/current-platform-roadmap.md` — W7/W8 roadmap state. - `docs/forgejo-agent-operations.md` — Forgejo identity/write contract. ## Tests - `git diff --check` - `python3 control-plane/platformctl/tools/validate_module.py modules/pogodowa-babcia/module.yaml` - `PYTHONPATH=control-plane python3 -m pytest control-plane/platformctl/tests/test_forgejo_workflow_lint_contract.py control-plane/platformctl/tests/test_forgejo_ci_scripts_contract.py -q` → 47 passed - `docker buildx imagetools inspect git.pdurlej.com/pdurlej/pogodowa-babcia:f03f3e5-amd64` → digest and `linux/amd64` manifest verified

codex added 1 commit

2026-05-25 00:41:08 +02:00

fix(w7): pin pogodowa-babcia registry artifact

base-is-main / guard (pull_request) Successful in 2s

Details

canary-required / collect-diff (pull_request) Successful in 5s

Details

patchwarden-pr-sanity / collect-diff (pull_request) Successful in 4s

Details

platformctl plan / auto-apply scope (pull_request) Successful in 21s

Details

canary-required / canary (pull_request) Successful in 14s