docker exec resolves argv[0] against the container's default WORKDIR
instead of the Friendica app dir, so 'bin/console' fails with
"OCI runtime exec failed: no such file or directory". Add --workdir and
invoke console via its absolute path so the addon sync lands
deterministically regardless of the container's default cwd.
Postgres inside the bbb compose stack is briefly unavailable while the
container restarts after the password sync triggers handler reloads.
The single-shot psql call then fails with "connection refused" and the
whole play aborts. Add retries/until so the sync waits through the
transient shutdown window before failing.
Collapse Permission State Announcement from the four-item enumeration
to a one-paragraph rule (sandbox paths + allow/ask/deny counts). Tighten
the multi-statement ban while keeping the anti-loophole clause for
causally-dependent chains. Drop the stale curl/gh api example from the
ask-list pointer. Add a new rule: when a command streams output to a
/tmp/<name>.log, announce the concrete tail -f command so the operator
can follow live.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Flip the default so every make deploy-fresh-purged-apps invocation in
the agent Role Loop and Playwright Spec Loop carries FULL_CYCLE=true.
Pass 1 failure aborts via set -euo pipefail before pass 2 runs, so the
flag is free on the failure path and is the only verification that the
update code path still works on the success path.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Collapse six literal XDG_CACHE_HOME=/tmp/gh-cache gh run/issue list
allow entries into XDG_CACHE_HOME=* gh run list *, XDG_CACHE_HOME=*
gh issue list *, gh run *, and gh issue *. Plain gh run * / gh issue *
are safe because every mutating verb is caught by gh * <verb>* ask or
gh issue transfer* deny. Env-prefix variants stay narrow (no broader
than list) because env prefix bypasses subcommand ask/deny patterns.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Allow read-only gh api GETs (plus XDG_CACHE_HOME=* prefix variant) so
log-fetch invocations with env prefix + redirect stop prompting. Route
every implicit-POST shape through ask: -f/-F/--field/--raw-field/--input
body flags and graphql*. Path-based deny rules keep precedence.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Collapse Permission State Announcement from the four-item enumeration
to a one-paragraph rule (sandbox paths + allow/ask/deny counts). Tighten
the multi-statement ban while keeping the anti-loophole clause for
causally-dependent chains. Drop the stale curl/gh api example from the
ask-list pointer. Add a new rule: when a command streams output to a
/tmp/<name>.log, announce the concrete tail -f command so the operator
can follow live.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Flip the default so every make deploy-fresh-purged-apps invocation in
the agent Role Loop and Playwright Spec Loop carries FULL_CYCLE=true.
Pass 1 failure aborts via set -euo pipefail before pass 2 runs, so the
flag is free on the failure path and is the only verification that the
update code path still works on the success path.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Collapse six literal XDG_CACHE_HOME=/tmp/gh-cache gh run/issue list
allow entries into XDG_CACHE_HOME=* gh run list *, XDG_CACHE_HOME=*
gh issue list *, gh run *, and gh issue *. Plain gh run * / gh issue *
are safe because every mutating verb is caught by gh * <verb>* ask or
gh issue transfer* deny. Env-prefix variants stay narrow (no broader
than list) because env prefix bypasses subcommand ask/deny patterns.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Allow read-only gh api GETs (plus XDG_CACHE_HOME=* prefix variant) so
log-fetch invocations with env prefix + redirect stop prompting. Route
every implicit-POST shape through ask: -f/-F/--field/--raw-field/--input
body flags and graphql*. Path-based deny rules keep precedence.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Centralise the full GitHub Actions workflow catalog in
docs/contributing/tools/actions.md as the single source of truth, link
pipeline.md and workflow.md to it, and introduce
docs/agents/action/push-trigger-pull.md as the authoritative procedure
for the push to draft CI to ready-for-review loop. Retire the stale
flat docs/contributing/tools/agents/claude.md and drop docs README
page-inventories that violate the readme_md.md scope rule.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Centralise the full GitHub Actions workflow catalog in
docs/contributing/tools/actions.md as the single source of truth, link
pipeline.md and workflow.md to it, and introduce
docs/agents/action/push-trigger-pull.md as the authoritative procedure
for the push to draft CI to ready-for-review loop. Retire the stale
flat docs/contributing/tools/agents/claude.md and drop docs README
page-inventories that violate the readme_md.md scope rule.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
AGENTS.md:
- Replace "SPOT" with "single source of truth"
- Split loading rules: CONTRIBUTING.md, docs/contributing/ walk, docs/agents/ walk — each an explicit MUST
- Add Tool-Specific Extensions section binding Claude Code → CLAUDE.md, Gemini CLI → GEMINI.md
- Extend reload trigger to cover tool-specific extension file
- Make sandbox.network bullet prescriptive (replace "govern" with conditional MUSTs)
- Drop architectural description from permission model intro
- Fix Temporary Files: treat settings.json as SPOT, stop duplicating allowWrite contents
- Collapse redundant Role-Specific bullets
CLAUDE.md:
- Strip rhetorical amplifiers; rule-form only
- Forbid multi-statement chains with any separator (;, newline, &&, ||), subshells and brace groups included
- Forbid shell heredoc for file creation; direct to Write/Edit
- Drop recap bullets already covered by explicit rules above
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Mirrors the XDG_CACHE_HOME=* gh run view * precedent: leading env-prefixes fall out of the auto-allow heuristic. Narrow namespace, sandbox boundaries still bound every write / read / network call.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Parallel to head *: tail is the right-hand-side twin that lives after && / | and would otherwise decline auto-allow.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
AGENTS.md:
- Replace "SPOT" with "single source of truth"
- Split loading rules: CONTRIBUTING.md, docs/contributing/ walk, docs/agents/ walk — each an explicit MUST
- Add Tool-Specific Extensions section binding Claude Code → CLAUDE.md, Gemini CLI → GEMINI.md
- Extend reload trigger to cover tool-specific extension file
- Make sandbox.network bullet prescriptive (replace "govern" with conditional MUSTs)
- Drop architectural description from permission model intro
- Fix Temporary Files: treat settings.json as SPOT, stop duplicating allowWrite contents
- Collapse redundant Role-Specific bullets
CLAUDE.md:
- Strip rhetorical amplifiers; rule-form only
- Forbid multi-statement chains with any separator (;, newline, &&, ||), subshells and brace groups included
- Forbid shell heredoc for file creation; direct to Write/Edit
- Drop recap bullets already covered by explicit rules above
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Mirrors the XDG_CACHE_HOME=* gh run view * precedent: leading env-prefixes fall out of the auto-allow heuristic. Narrow namespace, sandbox boundaries still bound every write / read / network call.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Parallel to head *: tail is the right-hand-side twin that lives after && / | and would otherwise decline auto-allow.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- Allow Bash(docker *) under test-only host assumption; keep run/build/push/login in ask
- Catch synonyms: docker container run, docker image build, docker buildx build, docker image push
- New security.md enumerates 9 trust assumptions as single source for rationale
- Shorten settings.md rationales to link by assumption number (DRY)
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- Allow Bash(docker *) under test-only host assumption; keep run/build/push/login in ask
- Catch synonyms: docker container run, docker image build, docker buildx build, docker image push
- New security.md enumerates 9 trust assumptions as single source for rationale
- Shorten settings.md rationales to link by assumption number (DRY)
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- Add Bash(echo *) and Bash(head *) to allow list for chained stdout/read primitives.
- Move Bash(for *)/Bash(while *)/Bash(until *) to deny: hard-enforces the
CLAUDE.md loop-forbidden rule so violations fail fast and force refactor
to single-command / grep / xargs forms.
- Drop redundant /tmp/* scoping from Bash(XDG_CACHE_HOME=* gh run view *)
and Bash(tee *); sandbox.filesystem.allowWrite is the authoritative
write boundary, so path restrictions on the allow rule added only
maintenance, no safety.
- Update docs/contributing/tools/agents/claude/settings.md to match.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- Add Bash(echo *) and Bash(head *) to allow list for chained stdout/read primitives.
- Move Bash(for *)/Bash(while *)/Bash(until *) to deny: hard-enforces the
CLAUDE.md loop-forbidden rule so violations fail fast and force refactor
to single-command / grep / xargs forms.
- Drop redundant /tmp/* scoping from Bash(XDG_CACHE_HOME=* gh run view *)
and Bash(tee *); sandbox.filesystem.allowWrite is the authoritative
write boundary, so path restrictions on the allow rule added only
maintenance, no safety.
- Update docs/contributing/tools/agents/claude/settings.md to match.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Why: `make` invocations and `… 2>&1 | tee /tmp/<log>` pipelines regularly
fall outside the sandbox auto-allow heuristic and trigger unnecessary
approval prompts. Adding targeted allow entries removes the friction
while keeping the write scope of `tee` bounded to /tmp.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Why: per-file grep wrapped in loops repeatedly triggered sandbox approval
prompts. Tighten CLAUDE.md to make the loop ban absolute and point to
grep / the Grep tool as the required alternative.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Closes Verification checkboxes in requirement 003. Each spec exercises
the `lookup('applications')` + `lookup('users')` pathway end-to-end:
login via lookup('users'), OIDC round-trip from dashboard (where the
app supports it), canonical-domain DOM assertion, and a full CSP
assertion covering every directive emitted by csp_filters.build_csp_header
(15 directives), meta-parity, enforced policy (not Report-Only), and
zero securitypolicyviolation events.
The dashboard spec is extended in place with the CSP + canonical-domain
assertions while keeping its existing login/logout coverage.
rerun-spec.sh is pointed at the Jinja template + the staged copy of
package.json (the repo has templates/package.json.j2, not files/package.json),
so the inner spec-only iteration loop works without re-deploying.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- Remove sidekiq from config (disabled service)
- Remove biber user creation - users access via OIDC
- Refactor tasks/main.yml to use sys-stk-full with flush_handlers pattern
- Fix database service key: 'database' -> 'postgres'
- Restore dmbs_excl.yml.j2 include in compose template
- Add subnet to 10_networks.yml to fix bare default network key
- Remove SSL cert env vars (handled by NGINX proxy)
- Keep DECIDIM_FORCE_SSL for correct URL generation
- Use robust selectors in Playwright (getByLabel + input[type=password])
- Remove biber from Playwright tests and env template
Why: `make` invocations and `… 2>&1 | tee /tmp/<log>` pipelines regularly
fall outside the sandbox auto-allow heuristic and trigger unnecessary
approval prompts. Adding targeted allow entries removes the friction
while keeping the write scope of `tee` bounded to /tmp.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Narrow CSP directive list to what csp_filters.build_csp_header actually
emits today, and record the binding implementation decisions (personas,
realms, iteration mode, batching, credential sources) under a new
Clarifications subsection so they supersede ambiguous checkbox reads.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Why: per-file grep wrapped in loops repeatedly triggered sandbox approval
prompts. Tighten CLAUDE.md to make the loop ban absolute and point to
grep / the Grep tool as the required alternative.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Markdown-only commits previously skipped every hook because the single
make-test hook excludes .md/.rst/.txt. Add a guarded make-test-lint hook
that triggers only when no non-md file is staged, so md-only commits
still run lint. Mixed commits stay covered by make test via its test-lint
dependency.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Markdown-only commits previously skipped every hook because the single
make-test hook excludes .md/.rst/.txt. Add a guarded make-test-lint hook
that triggers only when no non-md file is staged, so md-only commits
still run lint. Mixed commits stay covered by make test via its test-lint
dependency.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Create contributor rules for the applications and users lookup plugins so
contributors understand the lookup-only access pattern and are not tempted
to reintroduce inline data in the removed group_vars files. Mark all 34
acceptance criteria in requirement 003 as satisfied.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Raw `variables.get("applications")` returns unrendered placeholder inside
nested template lookups, causing get_app_conf to silently return False for
all apps. Switch to get_merged_applications which merges role defaults with
inventory overrides, fixing iframe rendering for mailu and other apps.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Add explicit Bash allow entries for command shapes that slip past the
sandbox auto-allow heuristic: `gh run list *` (jq pipes in --jq string
confuse the parser), `grep *` (to back the new CLAUDE.md rule against
for-loops around per-file greps), and `wc *` (read-only, any flag).
Reorder permissions.allow strictly ASC so the Bash entries live
alongside the other allow rules in sort order, matching how ask/deny
are laid out. Document the three new entries in settings.md and add
the "prefer flat commands" guidance to CLAUDE.md Code Execution.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Add explicit Bash allow entries for command shapes where sandbox
auto-allow does not fire reliably (env-variable prefix, output
redirect, &&-chained subcommands). Document the rationale in the
settings reference so future additions follow the same pattern.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Add explicit Bash allow entries for command shapes that slip past the
sandbox auto-allow heuristic: `gh run list *` (jq pipes in --jq string
confuse the parser), `grep *` (to back the new CLAUDE.md rule against
for-loops around per-file greps), and `wc *` (read-only, any flag).
Reorder permissions.allow strictly ASC so the Bash entries live
alongside the other allow rules in sort order, matching how ask/deny
are laid out. Document the three new entries in settings.md and add
the "prefer flat commands" guidance to CLAUDE.md Code Execution.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Add explicit Bash allow entries for command shapes where sandbox
auto-allow does not fire reliably (env-variable prefix, output
redirect, &&-chained subcommands). Document the rationale in the
settings reference so future additions follow the same pattern.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Copy-paste prompt templates with selection matrix routing each workflow
to its SPOT procedure file. Covers development, iteration, testing,
refactor, debug (pipeline/local/log), commit, PR, and requirements.
Replace the single docs/agents/action/debug.md with a debug/ directory
hosting three distinct workflows: local-deploy debugging, fully
automated CI pipeline triage via gh, and inspection of operator-placed
log files. Add full pipeline triage flow (enumerate failed runs and
children, classify branch-caused vs external, dedup-then-create issues
on s.infinito.nexus, iterate per role batches with APPS cap, push the
fix branch, file follow-up issues for unresolved root causes).
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Consolidate gh ask/deny entries via namespace-wildcard patterns, cover
compound subcommands (item-*, field-*, mark-template*), and add a lint
test that enforces ASCII-sorted permission and sandbox arrays in
.claude/settings.json.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Consolidate gh ask/deny entries via namespace-wildcard patterns, cover
compound subcommands (item-*, field-*, mark-template*), and add a lint
test that enforces ASCII-sorted permission and sandbox arrays in
.claude/settings.json.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Lookups for 'service', 'service_registry', and 'applications_current_play'
always re-derive the merged applications mapping from inventory+role defaults
instead of trusting the passed kwargs, which could be shadowed or left
unrendered by nested template evaluations.
Dashboard/keycloak tests now consume the administrator password via
lookup('users','administrator').password so the rendered Playwright .env
matches the realm user provisioned by Ansible. Remove the hardcoded
DASHBOARD_KEYCLOAK_TEST_LOGIN_PASSWORD / KEYCLOAK_LOCAL_REALM_ADMIN_PASSWORD
overrides that previously masked the mismatch.
run_one.yml: drop users/applications from the template vars block. Those
entries created a shadowing context that broke nested lookup('users', ...)
inside lookup('template', ...).
utils/runtime_lookup_data: decrypt Ansible 2.19 EncryptedString values at
the lookup boundary and try templar rendering before falling back to
aggregated defaults when override mappings arrive as placeholders.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
