fix: resolve the lockfile to @hanzogui/shell 7.6.3 #27
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Sync to Hanzo Git | |
| # The ONLY GitHub Actions workflow in this repo — and it runs ZERO CI. | |
| # | |
| # THE LAW: all CI/CD is NATIVE. Build, test, release, deploy and e2e live in | |
| # `.hanzo/workflows` and run on our own runners against git.hanzo.ai. GitHub is | |
| # a remote humans and agents also push to; GitHub Actions' single job is to tell | |
| # native git that a push happened. | |
| # | |
| # ONE implementation of the sync: `.hanzo/workflows/sync-from-github.yml` | |
| # (in-cluster fast-forward, fail-loud on divergence, dispatches the release). | |
| # This workflow does not re-implement it — it just fires it NOW instead of | |
| # waiting for its next timer tick, so a GitHub push lands natively in seconds. | |
| # If this nudge fails (or GitHub Actions is down for the org), the timer still | |
| # converges: the sync is idempotent by construction. | |
| on: | |
| push: | |
| branches: [main] | |
| workflow_dispatch: {} | |
| concurrency: | |
| group: sync-to-hanzo-git | |
| cancel-in-progress: true | |
| jobs: | |
| nudge: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| steps: | |
| - name: Tell git.hanzo.ai to pull main now | |
| env: | |
| # Instance token for git.hanzo.ai (repo secret; the value lives in KMS | |
| # at hanzo/prod:/git/admin-token). Absent ⇒ the timer tick still syncs. | |
| HANZO_GIT_TOKEN: ${{ secrets.HANZO_GIT_TOKEN }} | |
| run: | | |
| set -uo pipefail | |
| if [ -z "${HANZO_GIT_TOKEN:-}" ]; then | |
| echo "HANZO_GIT_TOKEN unset — native sync picks this push up on its next tick." | |
| exit 0 | |
| fi | |
| # git.hanzo.ai's own software API is /api/v1 (upstream surface, kept | |
| # verbatim) — our /v1-only law governs Hanzo services, not this host. | |
| if curl -fsS --max-time 20 --retry 2 --retry-delay 3 -X POST \ | |
| -H "Authorization: token ${HANZO_GIT_TOKEN}" \ | |
| -H "Content-Type: application/json" \ | |
| "https://git.hanzo.ai/api/v1/repos/hanzoai/app/actions/workflows/sync-from-github.yml/dispatches" \ | |
| -d '{"ref":"main"}'; then | |
| echo "native sync dispatched — build/test/release run on our runners" | |
| else | |
| echo "dispatch failed (non-fatal) — the 10-minute timer tick converges" | |
| fi |