Temporary ubuntu-runner diagnostics (removed before merge)

Author: MaxFreedomPollard

.github/workflows/debug-ubuntu.yml

@@ -0,0 +1,15 @@
+name: Debug ubuntu vault-locked
+on:
+  push:
+    branches: [claude/compassionate-pare-5bb471]
+jobs:
+  debug:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - run: pip install -e .[dev]
+      - run: python debug_ubuntu_locked.py

debug_ubuntu_locked.py

@@ -0,0 +1,54 @@
+"""Temporary: instrument the ubuntu-runner-only failure of
+tests/test_menubar.py::test_creating_a_vault_really_works. Deleted before merge."""
+import json, os, pathlib, subprocess, sys, tempfile
+
+td = tempfile.mkdtemp()
+home = pathlib.Path(td) / "home"
+home.mkdir()
+os.environ["HOME"] = str(home)
+os.environ["HERMES_HOME"] = str(home / ".hermes")
+os.environ["OPENCLAW_HOME"] = str(home / ".openclaw")
+
+from compartment import menubar, session, platforms  # noqa: E402
+
+vault = str(home / ".compartment" / "memory.vault")
+print("== env ==")
+print("uid:", os.getuid(), "| HOME:", os.environ["HOME"])
+print("machine-id:", repr(open("/etc/machine-id").read()) if os.path.exists("/etc/machine-id") else "ABSENT")
+print("dbus id:", os.path.exists("/var/lib/dbus/machine-id"))
+print("btime:", [l for l in open("/proc/stat") if l.startswith("btime")])
+print("shm before:", os.listdir("/dev/shm"))
+
+ok, msg = menubar.create_vault(vault, "CorrectHorse", "CorrectHorse")
+print("== create_vault ==", ok, "|", msg)
+sdir = session._session_dir()
+print("session dir:", sdir, "->", os.listdir(sdir))
+print("holder name:", session._holder())
+print("shm after init:", os.listdir("/dev/shm"))
+f = session._file_for(vault)
+print("credential file:", f, "exists:", f.is_file())
+if f.is_file():
+    print("credential doc:", json.loads(f.read_text())["v"], "vault field ok")
+
+print("== raw CLI status child ==")
+argv = menubar._cli_argv()
+out = subprocess.run([*argv, "--vault", vault, "status"], capture_output=True, text=True)
+print("rc:", out.returncode)
+print("stdout:", out.stdout[:1200])
+print("stderr:", out.stderr[:1200])
+print("credential file after status:", f.is_file())
+
+print("== in-process session.get ==")
+try:
+    got = session.get(vault)
+    print("get ->", "KEY" if got else "None", "| file still there:", f.is_file())
+except Exception as exc:
+    print("get raised:", type(exc).__name__, exc)
+
+print("== fetch_state ==")
+st = menubar.fetch_state(vault)
+print("locked:", st["locked"], "| error:", st["error"], "| records:", st["records"])
+print("== second CLI status ==")
+out2 = subprocess.run([*argv, "--vault", vault, "status"], capture_output=True, text=True)
+print("rc:", out2.returncode, "| locked in json:", '"locked": true' in out2.stdout or '"locked": True' in out2.stdout)
+print("stderr2:", out2.stderr[:400])