Pin gh and gum so mise run check works in cloud agent sandboxes - #465
Merged
Conversation
The gate could not start in cloud agent sessions: mise resolves the entire [tools] set before dispatching any task, and the two entries floating on latest (aqua:cli/cli, aqua:charmbracelet/gum) need a GitHub releases-list API call that the sandbox proxy 403s for repos outside the session scope. An exact pin skips the list call and downloads the release asset directly, which the sandbox allows - the already-pinned aqua:supabase/cli proved this all along. Verified in a cloud sandbox: with both tools pinned, mise install succeeds and the full gate (including the Deno island) runs green. This retires docs/dev/in-progress/mise-in-cloud-sandbox.md - its open question is answered and the durable rationale now lives in the .mise.toml comment and docs/dev/testing.md. CLAUDE.md's claim that cloud sessions cannot run the gate is updated to match.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
SYNOPSIS
Pin the two
latest-spec aqua tools in.mise.tomlsomise run checkruns in cloud agent sandboxes; retire the in-progress investigation doc.PURPOSE
Cloud agent sessions could not run the gate through mise at all:
mise installaborted before any task ran, forcing the raw pnpm fallback, which skips the Deno island (functions-check,functions-test).DESCRIPTION
mise resolves the entire
[tools]set before dispatching any task. Two entries floated onlatest(aqua:cli/cli,aqua:charmbracelet/gum), and resolvinglatestrequires a GitHub releases-list API call the sandbox proxy 403s for repos outside the session scope - so the gate died even though it uses neither tool. The already-pinnedaqua:supabase/cliinstalled fine, proving pins skip the list call.This PR pins
cli/cli@2.74.0andcharmbracelet/gum@0.16.2, with a comment above the pins explaining why floating specs are forbidden. Verified in a cloud sandbox:mise installsucceeds and the full gate runs green including the Deno island (jsr.io and npmjs are reachable, so deno resolves live even with a cold cache).Docs: retires
docs/dev/in-progress/mise-in-cloud-sandbox.md(its open question - "would pinning unblock the gate?" - is now answered yes), graduates the rationale intodocs/dev/testing.md's gotcha, and corrects CLAUDE.md's claim that cloud sessions cannot run the gate.Notes:
latestspec breaks the sandbox gate again; testing.md documents the misleading error it surfaces as ("no versions found matching date filter" - there is no date filter)Generated by Claude Code