core-devops 862a90a316 fix(runtime): complete crewai/deepagents/gemini-cli removal + fail-closed on unresolvable runtime ... Addresses core-security REQUEST-CHANGES (review 4269) on PR #1385 (RFC internal#483). The original removal was incomplete and silently changed behavior: 1. manifest.json workspace_templates still listed crewai/deepagents/ gemini-cli. handlers.knownRuntimes (the workspace-create admission allowlist) is built at boot from manifest.json via runtime_registry.go — NOT from provisioner.knownRuntimes — so a create request for a "removed" runtime was still admitted. Removed the 3 entries; the manifest now resolves to the 6 kept template-backed runtimes (claude-code, hermes, openclaw, codex, langgraph, autogen) + injected meta-runtimes. langgraph/autogen retained intentionally — not in the internal#483 removal set and still in provisioner.knownRuntimes. 2. selectImage silently fell back to DefaultImage (langgraph) for any named-but-unresolvable runtime: a user asking for crewai got a langgraph container with no signal. selectImage now returns (string, error) and rejects a NAMED-but-unresolvable runtime with ErrUnresolvableRuntime (naming the offending runtime). Start propagates it; the existing markProvisionFailed path already broadcasts WorkspaceProvisionFailed + records the message. Implements the CTO hardgate directive (feedback_platform_must_hardgate_base_contract — fail-closed, no silent degrade). The genuinely-unspecified (empty) runtime remains a distinct legitimate path → DefaultImage. go build ./... and go test ./internal/provisioner/ ./internal/handlers/ ./internal/imagewatch/ ./internal/registry/ ./internal/models/ all pass. selectImage tests updated to assert the new fail-closed contract (new expected values verified against the security finding, not made-green). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-05-16 15:36:16 -07:00
..
artifacts
buildinfo
bundle	fix(staging): resolve 3 go vet failures	2026-05-13 09:50:45 +00:00
channels	channels: add SendAdapter injection + handler test coverage for Test and Send	2026-05-14 09:30:11 +00:00
crypto
db
envx
events	fix(platform): clear golangci-lint findings	2026-05-12 22:53:22 -07:00
handlers	chore(runtime): remove crewai/deepagents/gemini-cli from the runtime catalog	2026-05-16 15:17:26 -07:00
imagewatch
memory	fix(go): remove ineffectual pgplugin index increment	2026-05-13 14:32:41 -07:00
messagestore
metrics
middleware	fix(platform): clear golangci-lint findings	2026-05-12 22:53:22 -07:00
models	chore(runtime): remove crewai/deepagents/gemini-cli from the runtime catalog	2026-05-16 15:17:26 -07:00
orgtoken
pendinguploads
plugins	fix(platform): clear golangci-lint findings	2026-05-12 22:53:22 -07:00
provisioner	fix(runtime): complete crewai/deepagents/gemini-cli removal + fail-closed on unresolvable runtime	2026-05-16 15:36:16 -07:00
provlog
registry	handlers/internal: fix db.DB pollution in registry and scheduler test helpers	2026-05-14 12:58:03 +00:00
router	feat(workspace): add broadcast and talk-to-user platform abilities	2026-05-15 12:03:08 -07:00
scheduler	handlers/internal: fix db.DB pollution in registry and scheduler test helpers	2026-05-14 12:58:03 +00:00
supervised
textutil
ws	chore: drop org_layout_test, hub.go, hub_test.go (already in staging with better coverage)	2026-05-13 18:04:00 +00:00
wsauth