2 Commits

Include renames

Author	SHA1	Message	Date
vh	462d528bef	fix(soong-lab-ci): webhook auto-deploy real root cause = gitea ALLOWED_HOST_LIST + add listener logging ... The ufw fix (prior commit) was necessary but insufficient. The DECISIVE blocker was gitea webhook.ALLOWED_HOST_LIST = 'external, 10.100.0.0/16' (NH3 only) — corviduo-dev is 10.250.50.152 (Anaheim), so gitea refused to deliver ('deny 10.250.50.152') and never opened the TCP connection. Fixed to 'external, 10.0.0.0/8' (whole fleet, matches the ufw choice) + gitea restart. Listener now logs every delivery (source-IP/hmac_ok/ref/action) — the old log_message=pass silence hid the whole failure. Proven end-to-end: real gitea delivery -> hmac_ok=True, ref=main, 202 deploying -> green deploy.	2026-07-14 09:19:38 -07:00
vh	fb556586e3	feat(soong-lab-ci): green-gated push-to-deploy CI/CD for the soong-lab studio ... Vuong-directed. gitea webhook (push→main) → HMAC listener on corviduo-dev:9010 → clone (read-only deploy key) → uv sync + pytest → redeploy soong-lab-studio.service ONLY on green (running studio untouched on red). Validated end-to-end 2026-07-13. Canonical copies of the deploy script + listener + unit; runbook in docs/runbooks.	2026-07-13 14:16:26 -07:00