4 Commits

Include renames

Author	SHA1	Message	Date
weichenandCursor	8dda121c0d	Fetch and build the three pinned RDM SHAs in CI ... Why: test-pg only cloned the default branch, so prev_sha and legacy_sha were never built or attested. Evidence: SELF python3 -m unittest tests.test_ci_credentials tests.test_lifecycle_pin (11 tests, exit 0). Impact: the lifecycle suite prints the combination inventory and keeps login and rdm.ping as NOT_RUN. Refs: .task/feature-svc-d3-real-scenarios.md Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-13 02:59:44 +00:00
weichenandCursor	bf347c1dbc	Add real pin tests for refuse and version switch ... Why: The lifecycle gate only ran four realcombo cases. A legacy candidate and a missing or mismatched identity row must be refused before the old process stops, and the prev/sha pins must switch without changing the identity row. Evidence: SELF unittest of the four LifecycleRealTests methods exited 0 against a private RDM clone. The pin moved to the identity merge and a later commit on the same backend pin, because the previous card-close SHAs build a binary with no ensure/verify. Impact: make test still skips this class unless SVC_TEST_REAL, SVC_RDM_SRC_DIR and SVC_REAL_RDM_BIN are set. make test-lifecycle now runs the module. Login and rdm.ping stay NOT_RUN. Refs: tests/integration/lifecycle/rdm.pin Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-13 02:05:05 +00:00
weichenandCursor	67d6fd81cd	Require the real lifecycle gate and fault rollback ... Why: The live deploy journal never called fault injection, and test-lifecycle failed closed on login so CI could not require the real combination cases. Evidence: SELF python3 -m unittest tests.test_svc_u2.U2ReleaseTests -q exit 0 (35 ok, 1 skipped) on 3602a87; receipt sha256 9b5785577751e8e9e7947cf9700fb8854b1c80142f34273ae25f3097ee4c9aa8. Impact: test-pg builds the Dev binary and runs make test-lifecycle. Login and full-track deploy without SVC_RDM_ORIGIN stay NOT_RUN. No live data move and no account CLI. Refs: recovery plan D2/D3; Dev #485 Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-13 01:14:27 +00:00
weichenandCursor	e8f84b8cf1	Add a reversible release switch and a lifecycle pin ... Why: an update that stops the old process and overwrites the binary cannot get the previous version back, and a migration the old binary cannot read must be refused before that stop. CI also had no fixed RDM SHA to build from. Evidence: python3 -m unittest tests.test_svc_identity tests.test_svc_recover tests.test_svc_deploy_txn tests.test_lifecycle_pin passed. make test-lifecycle exits 2 when AGENT_PG_TEST_DSN is unset. Impact: installs land in releases/<rid> and current switches with mv -T. Deploy keeps the desired state and rolls back a non-terminal journal. Schema compatFloor above the installed target is refused unless --migrate-schema --confirm is paired with a backup. test-lifecycle fails closed without PostgreSQL and an RDM checkout. Login stays NOT_RUN. Refs: recovery plan r3.1 D2 and D3; Backend feature/d1-identity-open Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-12 14:43:27 +00:00