fabro/lib/apps/fabro-cli/tests/it
Scott Werner 9e4af50863 Move stage credentials to Petri's spawn env and let the managed token win
Pin Petri at e46845b, the merge of its executor layer change. The stage
credential layer is now a Petri `SpawnEnv` applied with
`EnvHandle::with_spawn_env`, so Petri forwards every other environment
method and applies the layer to one-shot containers as well as processes.

A container gets the managed GITHUB_TOKEN, but no credential store refresh
or Git helper configuration: the store lives in the scope's sandbox, which
the container does not share.

The managed GITHUB_TOKEN now replaces one set in the workflow environment,
an ACP agent's environment or the sandbox's own, as Fabro's stage
environment did before Petri. The token carries exactly the access the run
declares; a stage that needs other access changes its declaration.

The new pin also keeps a timeout as the failure a partial success came
from: `PartialSuccess.underlying` is now an `UnderlyingFailure`, so the
projection reports "the step timed out" for a partial success converted
from a timeout. The run format moves from 7 to 8, which the attach JSON
snapshot records; runs stored before this pin are refused, as with earlier
format changes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-05 19:26:08 -04:00
..
cmd Move stage credentials to Petri's spawn env and let the managed token win 2026-10-05 19:26:08 -04:00
scenario Expect checkpoint commits from a retried local run 2026-10-01 13:10:13 -04:00
support Build the run's display graph from Petri's admission 2026-09-19 11:41:58 -04:00
workflow fix: address review of the in-process sandbox providers 2026-09-25 12:31:37 -04:00
main.rs refactor: organize crates into three layers 2026-07-23 17:59:34 -04:00