Gladex Agent Logs

569:[ "$(item_field "$OUT" "promote-gates" status)" = "warning" ] \
578:[ "$(item_field "$OUT" "promote-gates" status)" = "warning" ] \
581:    "$(item_field "$OUT" "promote-gates" detail)"
587:[ "$(item_field "$OUT" "promote-gates" status)" = "warning" ] \
589:    || bad "sandbox repo (no tools/) -> warning (got '$(item_field "$OUT" "promote-gates" status)')"
591:    "$(item_field "$OUT" "promote-gates" detail)"
596:DETAIL="$(item_field "$OUT" "promote-gates" detail)"
597:[ "$(item_field "$OUT" "promote-gates" status)" = "warning" ] \
608:DETAIL="$(item_field "$OUT" "promote-gates" detail)"
> build · mimo-v2.6-flash-free
$ cd /data/repo && sed -n '190,330p' tests/test_system_status_promote_gates.sh
if log:
    try:
        with open(log, "w") as fh:
            fh.write(" ".join(sys.argv[1:]) + "\n")
            fh.write("GATE_PROBE=%s\n" % os.environ.get("GLADEX_GATE_PROBE"))
    except OSError:
        pass

mode = os.environ.get("STUB_PG_MODE", "ready")
if mode == "hang":
    time.sleep(60)
    sys.exit(0)

def gate(name, status, code, detail, child=None):
    # `child`: the binary this gate EXECUTED (only the two gates that run one).
    # The real tool records it right after subprocess.run returns, so a gate
    # that never started a child records nothing - STUB_PG_CHILD below models
    # both shapes, because the divergence guard must tell them apart.
    rec = {"name": name, "status": status, "code": code, "detail": detail}
    if child:
        rec["child"] = child
    return rec

def emit(gates, ready, blocked, dry_run=True, sha="STUB-SHA",
         rc=0, probe=True, force=True):
    if sha == "STUB-SHA":
        # The commit this report records (the real tool's `_head_sha`):
        # STUB_PG_SHA, defaulting to the object id the repo-lint stub records
        # for the same HEAD; ""/"NULL" = git resolved no sha at all.
        raw_sha = os.environ.get("STUB_PG_SHA", "abc1234deadbeef")
        sha = None if raw_sha in ("", "NULL") else raw_sha
    doc = {"tool": "promote-dev-to-prod", "timestamp": "2026-09-24T00:00:00Z",
           "dry_run": dry_run, "force": force, "probe": probe,
           "gates": gates, "ready": ready, "blocked_by": blocked,
           "sha": sha, "performed": False, "exit_code": rc}
    # The binary the commit-lint gate ran, attached the way the real report
    # carries it. Unset/""/"NULL" = an older child that recorded nothing: the
    # guard must read that as "unknown", never as a match.
    child = os.environ.get("STUB_PG_CHILD") or ""
    if child and child != "NULL":
        for g in gates:
            if g.get("name") == "commit-lint":
                g["child"] = child
    # The SECOND pair's gate side: the binary the dev-sync gate executed
    # (the real tool records it right after source-sync-check returns, on the
    # ok and the refusal path alike). STUB_PG_DSCHILD, same three states.
    dschild = os.environ.get("STUB_PG_DSCHILD") or ""
    if dschild and dschild != "NULL":
        for g in gates:
            if g.get("name") == "dev-sync":
                g["child"] = dschild
    # The reviewer mailbox state (newest entry + age) the real report carries,
    # so the row can DATE its refusal. STUB_PG_MB: "NULL" = the key is absent
    # (older child), "EMPTY" = present but no entries, "NOAGE" = an entry the
    # child could not date, else age_seconds.
    mb = os.environ.get("STUB_PG_MB") or "5760"
    age_ref = 5760
    if mb not in ("NULL", "EMPTY", "NOAGE", "BADTS"):
        age_ref = int(mb)
    if mb == "NULL":
        pass  # older child: no mailbox key at all
    elif mb == "EMPTY":
        doc["mailbox"] = {"dir": "mailboxes/reviewer-to-main",
                          "newest": None, "age_seconds": None}
    elif mb == "NOAGE":
        # an entry the child could not date - the report's own stamps still can
        doc["mailbox"] = {"dir": "mailboxes/reviewer-to-main",
                          "newest": NEWEST, "age_seconds": None}
    elif mb == "BADTS":
        # a child stamping the entry its own way: readable to a human, not to
        # this row - the OTHER reason a refusal cannot be dated from stamps.
        doc["mailbox"] = {"dir": "mailboxes/reviewer-to-main",
                          "newest": "2026-09-24 12:58:00", "age_seconds": None}
    else:
        doc["mailbox"] = {"dir": "mailboxes/reviewer-to-main",
                          "newest": NEWEST,
                          "age_seconds": int(mb)}
    ts_knob = (os.environ.get("STUB_PG_TS") or "").strip()
    if ts_knob == "NULL":
        doc.pop("timestamp", None)
    elif ts_knob == "BEFORE":
        doc["timestamp"] = iso_add(NEWEST, -600)
    elif ts_knob:
        doc["timestamp"] = ts_knob
    elif mb not in ("NULL", "EMPTY"):
        doc["timestamp"] = iso_add(NEWEST, age_ref)
    print(json.dumps(doc, separators=(",", ":")))
    sys.exit(0)

G_VERDICT_OK = gate("verdict", "ok", 0,
                    "VERDICT-20260924-150000-a.md (VERDICT: APPROVE), 1 verdict file(s)")
G_DEVSYNC_OK = gate("dev-sync", "ok", 0,
                    "dev tree (/opt/startup/dev) matches the repo - nothing would be dropped")
G_LINT_OK = gate("commit-lint", "ok", 0,
                 "repo-lint verdict on HEAD clean (165 file(s) linted, exit 0)")
OK3 = [G_VERDICT_OK, G_DEVSYNC_OK, G_LINT_OK]

if mode == "ready":
    emit(OK3, True, [])
elif mode == "verdict-refused":
    emit([gate("verdict", "refused", 5,
               "no verdict in /srv/repo/mailboxes/reviewer-to-main (expected VERDICT-...md containing 'VERDICT: APPROVE')"),
          G_DEVSYNC_OK, G_LINT_OK], False, ["verdict"], rc=0)
elif mode == "dev-refused":
    emit([G_VERDICT_OK,
          gate("dev-sync", "refused", 6,
               "dev tree differs from the repo in 1 file(s): src/php/x.php (only_in_dev) - this promotion copies REPO -> prod, so that work would be silently dropped"),
          G_LINT_OK], False, ["dev-sync"])
elif mode == "lint-refused":
    emit([G_VERDICT_OK, G_DEVSYNC_OK,
          gate("commit-lint", "refused", 7,
               "committed file(s) fail to parse or compile: app/src/php/bad.php")],
         False, ["commit-lint"])
elif mode == "not-evaluated":
    emit([gate("verdict", "refused", 5, "no verdict in /srv/repo/mailboxes/reviewer-to-main")],
         False, ["verdict"], sha=None)
elif mode == "no-dry-run":
    emit(OK3, True, [], dry_run=False)
elif mode == "ready-lie":
    emit([gate("verdict", "refused", 5, "no verdict"), G_DEVSYNC_OK, G_LINT_OK],
         True, ["verdict"])
elif mode == "all-ok-not-ready":
    emit(OK3, False, [])
elif mode == "run-failed":
    emit(OK3, False, [], rc=1)
elif mode == "garbage":
    print("<html><body><h1>502 Bad Gateway</h1></body></html>")
    sys.exit(0)
elif mode == "empty":
    print(json.dumps({"tool": "promote-dev-to-prod", "dry_run": True, "gates": []}))
    sys.exit(0)
elif mode == "nokey":
    print(json.dumps({"tool": "promote-dev-to-prod"}))
    sys.exit(0)
else:
    print("promote stub: unknown STUB_PG_MODE %r" % mode, file=sys.stderr)
    sys.exit(99)
STUBPG
chmod +x "$STUB/promote-stub"

# Scenario source-sync-check: the guard's SECOND sighting of dev == repo (the
$ cd /data/repo && sed -n '1005,1045p' tools/system-status; echo "=== ready summary"; grep -n "promote-ready" tools/system-status
emit("warning", "%s: gates pass but the run failed (exit %s): %s" % (refusal_header(doc), doc.get("exit_code"), summary))
    sys.exit(0)

sha = doc.get("sha")
tag = (" (commit %s)" % clean(str(sha)[:7], 12)) if sha else ""
if ready:
    emit("ok", "promote-ready: verdict, dev-sync and commit-lint all pass%s" % tag)
else:
    emit("warning", "%s: %s%s" % (refusal_header(doc), summary, tag))
PY
)

# Test hooks (env): GLADEX_PROMOTE_BIN (default: promote-dev-to-prod inside the
# repo this dashboard reports on - REPO_DIR-relative, so a sandbox suite that
# points GLADEX_REPO_DIR at a throwaway tree gets "not found" instead of a real
# promotion), GLADEX_PROMOTE_TIMEOUT (default 120). Both documented in --help.
PROMOTE_BIN="${GLADEX_PROMOTE_BIN:-$REPO_DIR/tools/promote-dev-to-prod}"
PROMOTE_TIMEOUT="${GLADEX_PROMOTE_TIMEOUT:-120}"

# The guard's SECOND pair runs its own source-sync-check (hooks documented in
# --help): GLADEX_SOURCE_SYNC_BIN (default: this script's sibling - the same
# sibling-of-this-script default as repo-lint, and the hook that keeps every
# hermetic suite off the real trees) and GLADEX_SOURCE_SYNC_TIMEOUT (default
# 60 s - the same bound promote's own dev-sync gate gives this child).
SSC_BIN="${GLADEX_SOURCE_SYNC_BIN:-$SCRIPT_DIR/source-sync-check}"
SSC_TIMEOUT="${GLADEX_SOURCE_SYNC_TIMEOUT:-60}"

PG_STATUS="warning"
PG_DETAIL="cannot verify: promote-dev-to-prod not found in the reported repo"
if command -v python3 >/dev/null 2>&1 && [[ -x "$PROMOTE_BIN" ]]; then
    PG_OUT=""
    PG_RC=0
    PG_OUT=$(GLADEX_REPO_DIR="$REPO_DIR" GLADEX_GATE_PROBE=1 \
             timeout "$PROMOTE_TIMEOUT" \
             "$PROMOTE_BIN" --dry-run --force --format json 2>/dev/null) || PG_RC=$?
    if [[ "$PG_RC" == "124" || "$PG_RC" == "137" ]]; then
        # Killed by our own budget: an inconclusive child, never a verdict.
        PG_DETAIL="cannot verify: promote-dev-to-prod timed out after ${PROMOTE_TIMEOUT}s"
    else
        # The guard's SECOND pair's own sighting: this run's source-sync-check
        # answering "does dev match the repo?" a second time, independently of
=== ready summary
82:            echo "  ok 'promote-ready'      verdict, dev-sync AND commit-lint all pass"
616:#   all three gates pass                 -> ok "promote-ready: ..."
1011:    emit("ok", "promote-ready: verdict, dev-sync and commit-lint all pass%s" % tag)
> build · mimo-v2.6-flash-free

Select another run log from the list above. Only files matching run-YYYYMMDD-HHMMSS-N.log are readable.

[Fri Sep 25 08:51:03 2026] 127.0.0.1:39572 Accepted
[Fri Sep 25 08:51:03 2026] 127.0.0.1:39572 Closing
[Fri Sep 25 08:51:03 2026] 127.0.0.1:39584 Accepted
[Fri Sep 25 08:51:03 2026] 127.0.0.1:39584 Closing
[Fri Sep 25 08:51:03 2026] 127.0.0.1:39588 Accepted
[Fri Sep 25 08:51:03 2026] 127.0.0.1:39588 Closing
[Fri Sep 25 08:51:03 2026] 127.0.0.1:39590 Accepted
[Fri Sep 25 08:51:03 2026] 127.0.0.1:39590 Closing
[Fri Sep 25 08:51:03 2026] 127.0.0.1:39592 Accepted
[Fri Sep 25 08:51:03 2026] 127.0.0.1:39592 Closing
[Fri Sep 25 08:51:03 2026] 127.0.0.1:39594 Accepted
[Fri Sep 25 08:51:03 2026] 127.0.0.1:39594 Closing
[Fri Sep 25 08:51:11 2026] 127.0.0.1:48670 Accepted
[Fri Sep 25 08:51:11 2026] 127.0.0.1:48670 Closing
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48686 Accepted
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48686 Closing
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48700 Accepted
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48700 Closing
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48714 Accepted
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48714 Closing
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48728 Accepted
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48728 Closing
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48736 Accepted
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48736 Closing
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48748 Accepted
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48748 Closing
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48758 Accepted
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48758 Closing
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48774 Accepted
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48774 Closing
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48780 Accepted
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48780 Closing
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48796 Accepted
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48796 Closing
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48804 Accepted
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48804 Closing
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48814 Accepted
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48814 Closing
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48818 Accepted
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48818 Closing
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48828 Accepted
[Fri Sep 25 08:51:12 2026] 127.0.0.1:48828 Closing
[Fri Sep 25 08:51:44 2026] 127.0.0.1:48126 Accepted
[Fri Sep 25 08:51:44 2026] 127.0.0.1:48126 Closing
[Fri Sep 25 08:52:36 2026] 127.0.0.1:56500 Accepted
[Fri Sep 25 08:52:36 2026] 127.0.0.1:56500 Closing
[Fri Sep 25 08:52:36 2026] 127.0.0.1:56516 Accepted
[Fri Sep 25 08:52:36 2026] 127.0.0.1:56516 Closing
[Fri Sep 25 08:52:36 2026] 127.0.0.1:56518 Accepted
[Fri Sep 25 08:52:36 2026] 127.0.0.1:56518 Closing
[Fri Sep 25 08:52:36 2026] 127.0.0.1:56520 Accepted
[Fri Sep 25 08:52:36 2026] 127.0.0.1:56520 Closing
[Fri Sep 25 08:52:36 2026] 127.0.0.1:56532 Accepted
[Fri Sep 25 08:52:36 2026] 127.0.0.1:56532 Closing
[Fri Sep 25 08:52:36 2026] 127.0.0.1:56536 Accepted
[Fri Sep 25 08:52:36 2026] 127.0.0.1:56536 Closing
[Fri Sep 25 08:52:36 2026] 127.0.0.1:56548 Accepted
[Fri Sep 25 08:52:36 2026] 127.0.0.1:56548 Closing
[Fri Sep 25 08:52:38 2026] 127.0.0.1:56558 Accepted