From 0ee483e7ead582a12e325cf266a6b50d22345b9b Mon Sep 17 00:00:00 2001
From: homelab-runtime-publisher <homelab-runtime@localhost>
Date: Tue, 21 Jul 2026 10:08:07 +0000
Subject: [PATCH] runtime: publish RUNTIME-RECEIVER-BLOCK-029

---
 .../history/RUNTIME-RECEIVER-BLOCK-029.json   | 30 +++++++++
 .../history/RUNTIME-RECEIVER-BLOCK-029.txt    | 65 +++++++++++++++++++
 runtime/latest.json                           | 18 ++---
 runtime/latest.txt                            | 54 +++++++++++++--
 4 files changed, 151 insertions(+), 16 deletions(-)
 create mode 100644 runtime/history/RUNTIME-RECEIVER-BLOCK-029.json
 create mode 100644 runtime/history/RUNTIME-RECEIVER-BLOCK-029.txt

diff --git a/runtime/history/RUNTIME-RECEIVER-BLOCK-029.json b/runtime/history/RUNTIME-RECEIVER-BLOCK-029.json
new file mode 100644
index 0000000..cb13c21
--- /dev/null
+++ b/runtime/history/RUNTIME-RECEIVER-BLOCK-029.json
@@ -0,0 +1,30 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "RUNTIME-RECEIVER-BLOCK-029",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "gitea-runtime",
+  "started_at_utc": "2026-07-21T10:08:06Z",
+  "finished_at_utc": "2026-07-21T10:08:06Z",
+  "reference_register_checked": true,
+  "reference_sha256": "f6f7749fda946015116cdbbd754c7e7f20356b4a6cf4df330a1b0b8fdf59cbb2",
+  "error_register_checked": true,
+  "error_register_sha256": "ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc",
+  "command_sha256": "619f047ae18b1005d147fefbb1bbaef64c1eb4d040f35abc3fdc8510ed9d3e9f",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "changes_made": false,
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "b29d337315730363cdb092e9e5b50d05b750fa2e2d7d29796274faba627a7fd2",
+  "sanitized_output_sha256": "b29d337315730363cdb092e9e5b50d05b750fa2e2d7d29796274faba627a7fd2",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "            --quiet \\\n            -m \"runtime: publish ${COMMAND_ID}\"\nfi\n\nCOMMIT=\"$(git rev-parse HEAD)\"\nGIT_ASKPASS=/data/gitea/runtime-auth/askpass GIT_TERMINAL_PROMPT=0 git push --quiet http://127.0.0.1:3000/homelab-admin/homelab-public-context.git HEAD:refs/heads/assistant-runtime\nGIT_ASKPASS=/data/gitea/runtime-auth/askpass GIT_TERMINAL_PROMPT=0 git push --quiet http://127.0.0.1:3000/homelab-admin/homelab-public-context.git HEAD:assistant-runtime\n\ngit --git-dir=\"$BARE\" \\\n    fetch \\\n    --quiet \\\n    \"$WORK\" \\\n    refs/heads/assistant-runtime\n\nOLD=\"$(\n    git --git-dir=\"$BARE\" \\\n        rev-parse refs/heads/assistant-runtime \\\n        2>/dev/null ||\n    true\n)\"\n\nif [ -n \"$OLD\" ]\nthen\n    git --git-dir=\"$BARE\" \\\n        update-ref \\\n        refs/heads/assistant-runtime \\\n        \"$COMMIT\" \\\n        \"$OLD\"\nelse\n    git --git-dir=\"$BARE\" \\\n        update-ref \\\n        refs/heads/assistant-runtime \\\n        \"$COMMIT\"\nfi\n\nrm -rf \"$WORK\"\n\nprintf \"%s\\n\" \"$COMMIT\"\n'\n)\"\n\n"
+}
diff --git a/runtime/history/RUNTIME-RECEIVER-BLOCK-029.txt b/runtime/history/RUNTIME-RECEIVER-BLOCK-029.txt
new file mode 100644
index 0000000..40c401b
--- /dev/null
+++ b/runtime/history/RUNTIME-RECEIVER-BLOCK-029.txt
@@ -0,0 +1,65 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=RUNTIME-RECEIVER-BLOCK-029
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=gitea-runtime
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=f6f7749fda946015116cdbbd754c7e7f20356b4a6cf4df330a1b0b8fdf59cbb2
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc
+COMMAND_SHA256=619f047ae18b1005d147fefbb1bbaef64c1eb4d040f35abc3fdc8510ed9d3e9f
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGES_MADE=false
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=b29d337315730363cdb092e9e5b50d05b750fa2e2d7d29796274faba627a7fd2
+SANITIZED_OUTPUT_SHA256=b29d337315730363cdb092e9e5b50d05b750fa2e2d7d29796274faba627a7fd2
+OUTPUT_BEGIN
+            --quiet \
+            -m "runtime: publish ${COMMAND_ID}"
+fi
+
+COMMIT="$(git rev-parse HEAD)"
+GIT_ASKPASS=/data/gitea/runtime-auth/askpass GIT_TERMINAL_PROMPT=0 git push --quiet http://127.0.0.1:3000/homelab-admin/homelab-public-context.git HEAD:refs/heads/assistant-runtime
+GIT_ASKPASS=/data/gitea/runtime-auth/askpass GIT_TERMINAL_PROMPT=0 git push --quiet http://127.0.0.1:3000/homelab-admin/homelab-public-context.git HEAD:assistant-runtime
+
+git --git-dir="$BARE" \
+    fetch \
+    --quiet \
+    "$WORK" \
+    refs/heads/assistant-runtime
+
+OLD="$(
+    git --git-dir="$BARE" \
+        rev-parse refs/heads/assistant-runtime \
+        2>/dev/null ||
+    true
+)"
+
+if [ -n "$OLD" ]
+then
+    git --git-dir="$BARE" \
+        update-ref \
+        refs/heads/assistant-runtime \
+        "$COMMIT" \
+        "$OLD"
+else
+    git --git-dir="$BARE" \
+        update-ref \
+        refs/heads/assistant-runtime \
+        "$COMMIT"
+fi
+
+rm -rf "$WORK"
+
+printf "%s\n" "$COMMIT"
+'
+)"
+
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 63de4b1..cb13c21 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,30 +1,30 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "RUNTIME-REAL-PUSH-CANARY-028",
+  "command_id": "RUNTIME-RECEIVER-BLOCK-029",
   "status": "OK",
   "rc": 0,
   "host": "pve01",
-  "mode": "change",
+  "mode": "read-only",
   "component": "gitea-runtime",
-  "started_at_utc": "2026-07-21T09:52:58Z",
-  "finished_at_utc": "2026-07-21T09:52:58Z",
+  "started_at_utc": "2026-07-21T10:08:06Z",
+  "finished_at_utc": "2026-07-21T10:08:06Z",
   "reference_register_checked": true,
   "reference_sha256": "f6f7749fda946015116cdbbd754c7e7f20356b4a6cf4df330a1b0b8fdf59cbb2",
   "error_register_checked": true,
   "error_register_sha256": "ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc",
-  "command_sha256": "dd15b37bad0a7dabd53d62cad1c8f37e5c0f0a216200a8bfe6fd8a6487b3c40f",
+  "command_sha256": "619f047ae18b1005d147fefbb1bbaef64c1eb4d040f35abc3fdc8510ed9d3e9f",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
-  "changes_made": true,
+  "changes_made": false,
   "sanitized": true,
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "f991a816e300b16103e83440578e0749827699f72d85168670ad6161a5a3c161",
-  "sanitized_output_sha256": "f991a816e300b16103e83440578e0749827699f72d85168670ad6161a5a3c161",
+  "raw_evidence_sha256": "b29d337315730363cdb092e9e5b50d05b750fa2e2d7d29796274faba627a7fd2",
+  "sanitized_output_sha256": "b29d337315730363cdb092e9e5b50d05b750fa2e2d7d29796274faba627a7fd2",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "RECEIVER_REAL_PUSH_CANARY=OK\n"
+  "output": "            --quiet \\\n            -m \"runtime: publish ${COMMAND_ID}\"\nfi\n\nCOMMIT=\"$(git rev-parse HEAD)\"\nGIT_ASKPASS=/data/gitea/runtime-auth/askpass GIT_TERMINAL_PROMPT=0 git push --quiet http://127.0.0.1:3000/homelab-admin/homelab-public-context.git HEAD:refs/heads/assistant-runtime\nGIT_ASKPASS=/data/gitea/runtime-auth/askpass GIT_TERMINAL_PROMPT=0 git push --quiet http://127.0.0.1:3000/homelab-admin/homelab-public-context.git HEAD:assistant-runtime\n\ngit --git-dir=\"$BARE\" \\\n    fetch \\\n    --quiet \\\n    \"$WORK\" \\\n    refs/heads/assistant-runtime\n\nOLD=\"$(\n    git --git-dir=\"$BARE\" \\\n        rev-parse refs/heads/assistant-runtime \\\n        2>/dev/null ||\n    true\n)\"\n\nif [ -n \"$OLD\" ]\nthen\n    git --git-dir=\"$BARE\" \\\n        update-ref \\\n        refs/heads/assistant-runtime \\\n        \"$COMMIT\" \\\n        \"$OLD\"\nelse\n    git --git-dir=\"$BARE\" \\\n        update-ref \\\n        refs/heads/assistant-runtime \\\n        \"$COMMIT\"\nfi\n\nrm -rf \"$WORK\"\n\nprintf \"%s\\n\" \"$COMMIT\"\n'\n)\"\n\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index 015c0d3..40c401b 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,25 +1,65 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=RUNTIME-REAL-PUSH-CANARY-028
+COMMAND_ID=RUNTIME-RECEIVER-BLOCK-029
 STATUS=OK
 RC=0
 HOST=pve01
-MODE=change
+MODE=read-only
 COMPONENT=gitea-runtime
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=f6f7749fda946015116cdbbd754c7e7f20356b4a6cf4df330a1b0b8fdf59cbb2
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc
-COMMAND_SHA256=dd15b37bad0a7dabd53d62cad1c8f37e5c0f0a216200a8bfe6fd8a6487b3c40f
+COMMAND_SHA256=619f047ae18b1005d147fefbb1bbaef64c1eb4d040f35abc3fdc8510ed9d3e9f
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
-CHANGES_MADE=true
+CHANGES_MADE=false
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=f991a816e300b16103e83440578e0749827699f72d85168670ad6161a5a3c161
-SANITIZED_OUTPUT_SHA256=f991a816e300b16103e83440578e0749827699f72d85168670ad6161a5a3c161
+RAW_EVIDENCE_SHA256=b29d337315730363cdb092e9e5b50d05b750fa2e2d7d29796274faba627a7fd2
+SANITIZED_OUTPUT_SHA256=b29d337315730363cdb092e9e5b50d05b750fa2e2d7d29796274faba627a7fd2
 OUTPUT_BEGIN
-RECEIVER_REAL_PUSH_CANARY=OK
+            --quiet \
+            -m "runtime: publish ${COMMAND_ID}"
+fi
+
+COMMIT="$(git rev-parse HEAD)"
+GIT_ASKPASS=/data/gitea/runtime-auth/askpass GIT_TERMINAL_PROMPT=0 git push --quiet http://127.0.0.1:3000/homelab-admin/homelab-public-context.git HEAD:refs/heads/assistant-runtime
+GIT_ASKPASS=/data/gitea/runtime-auth/askpass GIT_TERMINAL_PROMPT=0 git push --quiet http://127.0.0.1:3000/homelab-admin/homelab-public-context.git HEAD:assistant-runtime
+
+git --git-dir="$BARE" \
+    fetch \
+    --quiet \
+    "$WORK" \
+    refs/heads/assistant-runtime
+
+OLD="$(
+    git --git-dir="$BARE" \
+        rev-parse refs/heads/assistant-runtime \
+        2>/dev/null ||
+    true
+)"
+
+if [ -n "$OLD" ]
+then
+    git --git-dir="$BARE" \
+        update-ref \
+        refs/heads/assistant-runtime \
+        "$COMMIT" \
+        "$OLD"
+else
+    git --git-dir="$BARE" \
+        update-ref \
+        refs/heads/assistant-runtime \
+        "$COMMIT"
+fi
+
+rm -rf "$WORK"
+
+printf "%s\n" "$COMMIT"
+'
+)"
+
 
 OUTPUT_END
 CHAT_OUTPUT_END