Skip to content

fix(#6266): skip non-source artifacts in lint-mint-embed-sync - #6267

Merged
rh-hemartin merged 1 commit into
mainfrom
agent/6266-skip-non-source-artifacts
Aug 17, 2026
Merged

fix(#6266): skip non-source artifacts in lint-mint-embed-sync#6267
rh-hemartin merged 1 commit into
mainfrom
agent/6266-skip-non-source-artifacts

Conversation

@fullsend-ai-coder

Copy link
Copy Markdown
Contributor

Summary

Fix the lint-mint-embed-sync pre-commit hook to skip non-Go-source artifacts (like coverage.out, .prof, .test) that may appear in internal/mint/ or internal/mintcore/ during development or agent runs. Also adds coverage.out to .gitignore to prevent accidental commits.

Related Issue

Closes #6266

Changes

Testing

  • Verified that coverage.out in internal/mintcore/ no longer triggers a DESYNC error
  • Verified that genuine desync (modifying config.go without updating its embed copy) is still caught
  • Verified that artifacts in internal/mint/ (.out, .prof, .test) are also skipped
  • Tests added/updated for new or modified logic (no Go code changed; script validated manually)

Checklist

  • PR title follows Conventional Commits (correct type, ! for breaking changes)
  • I wrote this contribution myself and can explain all changes in it

Closes #6266

Post-script verification

  • Branch is not main/master (agent/6266-skip-non-source-artifacts)
  • Secret scan passed (gitleaks — 124c49ddf7d55efeb4f8b76fa5502b46405bde50..HEAD)
  • PR body secret scan passed (gitleaks — no-git)

The lint-mint-embed-sync script iterated all non-test files in
internal/mint/ and internal/mintcore/, causing spurious DESYNC
errors when non-Go artifacts (coverage.out, .prof, .test) were
present. This blocked agent workflows that ran `go test
-coverprofile` before the embed-sync pre-commit hook.

Add an allowlist filter to both loops so only *.go, go.mod, and
go.sum files are checked against their .embed counterparts. Any
other file (coverage profiles, test binaries, editor temporaries)
is now skipped. Also add coverage.out to .gitignore to prevent
accidental commits (partially addresses #841).

Note: pre-commit could not run in the sandbox due to network
restrictions (HTTP 403 on git fetch). The post-script runs it
authoritatively on the runner.

Closes #6266
@fullsend-ai-coder
fullsend-ai-coder Bot requested a review from a team as a code owner August 16, 2026 22:07
@fullsend-ai-coder fullsend-ai-coder Bot added the ready-for-review Agent PR ready for human review label Aug 16, 2026
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 16, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 10:08 PM UTC · Completed 10:17 PM UTC

Commit: 150f0d7 · View workflow run →

@codecov

codecov Bot commented Aug 16, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@fullsend-ai-review

Copy link
Copy Markdown

Looks good to me


Labels: PR fixes a bug in the mint embed sync linting script (hack/lint-mint-embed-sync) and is authorized by issue #6266 which is labeled component/mint and type/bug

@fullsend-ai-review fullsend-ai-review Bot added ready-for-merge All reviewers approved — ready to merge component/mint Token mint and cross-boundary credentials type/bug Confirmed defect in existing behavior labels Aug 16, 2026
@rh-hemartin
rh-hemartin added this pull request to the merge queue Aug 17, 2026
Merged via the queue into main with commit 50031ed Aug 17, 2026
34 checks passed
@rh-hemartin
rh-hemartin deleted the agent/6266-skip-non-source-artifacts branch August 17, 2026 09:38
@fullsend-ai-retro

fullsend-ai-retro Bot commented Aug 17, 2026

Copy link
Copy Markdown

🤖 Finished Retro · ✅ Success · Started 9:40 AM UTC · Completed 9:55 AM UTC

Commit: 150f0d7 · View workflow run →

@fullsend-ai-retro

Copy link
Copy Markdown

Retro: PR #6267 — skip non-source artifacts in lint-mint-embed-sync

Outcome: Merged successfully. Clean end-to-end self-healing cycle with no fix rounds.

Timeline

  1. Code agent failure on PR feat(#6263): offload RSA crypto to host Web Crypto API for WASM #6265 (2026-08-16 18:34 UTC) — run 31964970542 failed because the agent ran go test -coverprofile=coverage.out in internal/mintcore/, and the lint-mint-embed-sync pre-commit hook found coverage.out, looked for a non-existent .embed counterpart, and emitted a DESYNC error.
  2. Retro agent filed issue #6266 (21:55 UTC) — identified the root cause and proposed two fix approaches (blocklist vs allowlist).
  3. Triage agent (31974914653, ~4 min) — caught an important gap: the *.go-only filter proposed in the issue would inadvertently skip go.mod and go.sum, which also have .embed counterparts. Recommended an allowlist of *.go|go.mod|go.sum.
  4. Code agent (31975117537, ~7 min) — implemented the triage-recommended allowlist approach in both loops, added coverage.out to .gitignore. Got it right on the first try.
  5. Review agent (31975458482, ~10 min) — approved with "Looks good to me". All CI checks passed.
  6. Human merge (2026-08-17 09:37 UTC) — rh-hemartin approved and merged.

Assessment

This is the self-healing loop working as designed. The retro agent identified the root cause of a code agent failure, filed a well-structured issue, and the triage → code → review pipeline resolved it in ~21 minutes of agent compute with zero rework. The triage agent added genuine value by catching the go.mod/go.sum gap in the proposed fix — a subtle point that could have caused a real bug if missed.

Review quality: The review agent's approval was correct — the change is a 13-line mechanical fix to a shell script that passed all CI checks. The "Looks good to me" summary is appropriate depth for this scope. Existing issues in fullsend-ai/agents already track shell script review improvements (#131, #490, #796).

Autonomy readiness: The human reviewer approved with no comments, matching the review agent's judgment. For this class of change — small, mechanical shell script fixes for bugs identified by the retro agent, with full CI coverage — the review agent's verdict was sufficient. This provides mild evidence for fullsend-ai/fullsend#5353 (tracking autonomy readiness on fully-covered bug fixes).

No proposals. The workflow executed cleanly. No other lint scripts in hack/ share the artifact-sensitivity pattern (all use targeted find queries, git index lookups, or filtered globs). Existing open issues already cover the relevant improvement spaces (shell script review depth, embed sync automation #2965/#2966).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

component/mint Token mint and cross-boundary credentials ready-for-merge All reviewers approved — ready to merge ready-for-review Agent PR ready for human review type/bug Confirmed defect in existing behavior

Projects

None yet

Development

Successfully merging this pull request may close these issues.

lint-mint-embed-sync: skip non-Go-source artifacts like coverage.out

1 participant