core-devops 862a90a316 fix(runtime): complete crewai/deepagents/gemini-cli removal + fail-closed on unresolvable runtime ... Addresses core-security REQUEST-CHANGES (review 4269) on PR #1385 (RFC internal#483). The original removal was incomplete and silently changed behavior: 1. manifest.json workspace_templates still listed crewai/deepagents/ gemini-cli. handlers.knownRuntimes (the workspace-create admission allowlist) is built at boot from manifest.json via runtime_registry.go — NOT from provisioner.knownRuntimes — so a create request for a "removed" runtime was still admitted. Removed the 3 entries; the manifest now resolves to the 6 kept template-backed runtimes (claude-code, hermes, openclaw, codex, langgraph, autogen) + injected meta-runtimes. langgraph/autogen retained intentionally — not in the internal#483 removal set and still in provisioner.knownRuntimes. 2. selectImage silently fell back to DefaultImage (langgraph) for any named-but-unresolvable runtime: a user asking for crewai got a langgraph container with no signal. selectImage now returns (string, error) and rejects a NAMED-but-unresolvable runtime with ErrUnresolvableRuntime (naming the offending runtime). Start propagates it; the existing markProvisionFailed path already broadcasts WorkspaceProvisionFailed + records the message. Implements the CTO hardgate directive (feedback_platform_must_hardgate_base_contract — fail-closed, no silent degrade). The genuinely-unspecified (empty) runtime remains a distinct legitimate path → DefaultImage. go build ./... and go test ./internal/provisioner/ ./internal/handlers/ ./internal/imagewatch/ ./internal/registry/ ./internal/models/ all pass. selectImage tests updated to assert the new fail-closed contract (new expected values verified against the security finding, not made-green). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-05-16 15:36:16 -07:00
..
cmd	fix(main): heal ADMIN_TOKEN placeholder in global_secrets on startup (#831)	2026-05-13 22:42:32 +00:00
internal	fix(runtime): complete crewai/deepagents/gemini-cli removal + fail-closed on unresolvable runtime	2026-05-16 15:36:16 -07:00
migrations	feat(workspace): add broadcast and talk-to-user platform abilities	2026-05-15 12:03:08 -07:00
pkg/provisionhook	feat(#1957): wire gh-identity plugin into workspace-server	2026-04-24 15:01:41 +00:00
.air.toml	feat(local-dev): air-based hot-reload for workspace-server	2026-05-08 08:10:50 -07:00
.ci-force	chore: force Platform(Go) CI run on main — validate go vet clean	2026-04-21 15:43:19 +00:00
.gitignore	feat(local-dev): containerize platform + canvas stack via docker-compose (closes #126)	2026-05-08 10:53:39 -07:00
.golangci.yaml	chore(workspace-server): add golangci.yaml disabling errcheck	2026-04-24 07:16:54 +00:00
Dockerfile	fix(platform): install docker-cli-buildx in workspace-server image (mc#765 follow-up)	2026-05-12 22:14:46 -07:00
Dockerfile.dev	ci(docker): pin base image digests in all Dockerfiles	2026-05-09 23:56:39 +00:00
Dockerfile.tenant	fix(dockerfile-tenant): chown /org-templates to canvas user so !external resolver can mkdir cache	2026-05-09 19:40:52 -07:00
entrypoint-tenant.sh	fix(memory-plugin): gate sidecar spawn on cutover-active	2026-05-05 12:39:03 -07:00
go.mod	fix(handlers): synchronize async DB users in race tests	2026-05-14 09:37:52 -07:00
go.sum	[core-lead-agent] fix(core#228): cascade fixes for PluginResolver — make main compile	2026-05-10 09:46:35 +00:00