Adam Moussa 5fa132205b fix(deploy): use %%...%% for CDK user-data tokens (don't collide with @@ sed) (#21) ... The systemd unit booted with a literal `@@OPENSWE_ENV@@` (fetch-config.sh got the token, not "dev" -> exit 2 -> crash-loop) because user-data.sh is double-templated: CDK substitutes @@tokens@@ AND user-data seds @@tokens@@ into the baked systemd/nginx files. CDK's `.replace(/@@OPENSWE_ENV@@/g, "dev")` clobbered the sed PATTERN (`s|@@OPENSWE_ENV@@|...|` -> `s|dev|...|`, a no-op), so the unit's token never got replaced. Same collision hit @@SERVER_NAME@@ (masked by nginx default_server). Fix: CDK tokens move to a DISTINCT delimiter %%...%% (rendered in app-service.ts); the @@...@@ tokens stay for the baked-template seds. No AMI rebuild (templates unchanged). Add a guard test asserting no unresolved %%CDK%% token survives in the synthesized user-data. Also add .github/scripts/** to build-artifacts paths so script-only changes trigger a publish. jest 20/20; tsc + shellcheck clean; rendered user-data: OPENSWE_ENV="dev", SERVER_NAME="openswe-dev.seahaven.com", @@ sed patterns preserved, 16872 B.		2026-06-26 19:06:37 -04:00
..
build-artifacts.yml	fix(deploy): use %%...%% for CDK user-data tokens (don't collide with @@ sed) (#21)	2026-06-26 19:06:37 -04:00
cd-infra.yml	ci: path-filtered infra CI/CD + dual OIDC roles + prod approval gate (T18) (#15)	2026-06-26 16:11:22 -04:00
ci-infra.yml	ci: path-filtered infra CI/CD + dual OIDC roles + prod approval gate (T18) (#15)	2026-06-26 16:11:22 -04:00
ci.yml	test(open-swe): add Playwright E2E for the Slack → PR → web handoff (#1583)	2026-06-22 12:54:46 -07:00
pr_lint.yml	chore(deps): bump python-dotenv from 1.2.1 to 1.2.2 (#1212)	2026-05-01 22:27:21 +00:00
promote_dev_to_prod.yml	ci: promote dev → main (prod), not a separate prod branch (#3)	2026-06-26 13:49:02 -04:00
reviewer_eval.yml	feat: Run reviewer eval in a GitHub Action; dashboard becomes read-only (#1556)	2026-06-16 19:38:36 -07:00