chore(deploy): wire OWN_DEVELOPER_IDS for §25.3 own-portfolio (#1169) #1181

Merged

bot-backend merged 1 commit from chore/deploy-own-developer-ids into main

2026-06-09 13:20:40 +00:00

bot-backend commented

2026-06-09 13:15:08 +00:00

Collaborator

Summary

Wire OWN_DEVELOPER_IDS into the prod deploy (mirror of the LLM_ENABLED wiring) so the §25.3 own-portfolio cannibalization (#1169) is pipeline-managed/reproducible. vars.OWN_DEVELOPER_IDS → SSH deploy env → conditional write to backend/.env.runtime (only when non-empty; unset → cannibalization keeps proxy). Non-sensitive (public companyGroup ids). No literal id in the workflow (refs only).

Captures the value already set live on prod (OWN_DEVELOPER_IDS=6208 = PRINZIP, verified against domrf_kn → 28 projects; get_own_portfolio confirmed live).

Test plan

yaml.safe_load(deploy.yml) → OK; sh -n on the conditional block → OK
no literal id/secret (grep 6208/sk- empty — only ${{ vars.OWN_DEVELOPER_IDS }})
verbatim mirror of the reviewed LLM_ENABLED pattern (#1178): env block + envs list + conditional .env.runtime write
activation already verified live: settings.own_developer_ids=[6208], own-portfolio=28 PRINZIP projects, /health 200

Owner action (bot can't — 403)

Set Forgejo Variable OWN_DEVELOPER_IDS=6208 (repo Settings → Actions → Variables) for full pipeline management. Until then it's live via .env.runtime (survives git reset --hard, .gitignored).

Refs #1169

## Summary Wire `OWN_DEVELOPER_IDS` into the prod deploy (mirror of the LLM_ENABLED wiring) so the §25.3 own-portfolio cannibalization (#1169) is pipeline-managed/reproducible. `vars.OWN_DEVELOPER_IDS` → SSH deploy env → conditional write to `backend/.env.runtime` (only when non-empty; unset → cannibalization keeps proxy). Non-sensitive (public companyGroup ids). **No literal id in the workflow** (refs only). Captures the value already set live on prod (`OWN_DEVELOPER_IDS=6208` = PRINZIP, verified against `domrf_kn` → 28 projects; `get_own_portfolio` confirmed live). ## Test plan - [x] `yaml.safe_load(deploy.yml)` → OK; `sh -n` on the conditional block → OK - [x] no literal id/secret (grep `6208`/`sk-` empty — only `${{ vars.OWN_DEVELOPER_IDS }}`) - [x] verbatim mirror of the reviewed LLM_ENABLED pattern (#1178): env block + envs list + conditional `.env.runtime` write - [x] activation already verified live: `settings.own_developer_ids=[6208]`, own-portfolio=28 PRINZIP projects, `/health` 200 ## Owner action (bot can't — 403) Set Forgejo **Variable** `OWN_DEVELOPER_IDS=6208` (repo Settings → Actions → Variables) for full pipeline management. Until then it's live via `.env.runtime` (survives `git reset --hard`, `.gitignored`). Refs #1169

bot-backend added 1 commit 2026-06-09 13:15:08 +00:00

chore(deploy): wire OWN_DEVELOPER_IDS into prod env for §25.3 own-portfolio (#1169 )

CI / changes (push) Successful in 6s

Details

CI / backend-tests (push) Has been skipped

Details

CI / frontend-tests (push) Has been skipped

Details

Deploy / changes (push) Successful in 6s

Details

Deploy / build-worker (push) Successful in 32s

Details

Deploy / build-frontend (push) Successful in 30s

Details

CI / changes (pull_request) Successful in 5s

Details

CI / backend-tests (pull_request) Has been skipped

Details

CI / frontend-tests (pull_request) Has been skipped

Details

Deploy / build-backend (push) Successful in 35s

Details

Deploy / deploy (push) Successful in 1m3s

Details

d7960276b1

Mirror the LLM_ENABLED wiring for OWN_DEVELOPER_IDS (own-portfolio
cannibalization, #1169): forward vars.OWN_DEVELOPER_IDS into the SSH deploy
(env block + envs list) and write it to backend/.env.runtime ONLY when
non-empty (conditional, like OPENAI_API_KEY/LLM_ENABLED). Non-sensitive
(public companyGroup ids) → actions variable. Unset → cannibalization keeps
the proxy (dormant). No literal id in the workflow (refs only).

Captures in the pipeline the value already set live on prod via .env.runtime
(OWN_DEVELOPER_IDS=6208 = PRINZIP, verified against domrf_kn → 28 projects).
Owner must set Forgejo Variable OWN_DEVELOPER_IDS=6208 for full pipeline
management; meanwhile the .env.runtime line holds (survives git reset).

Refs #1169