CCI report: f5545243-eff4-4b9f-92ad-614a44ef62e9

Request message

{
  "request": "trigger",
  "version": 1,
  "event_type": "patch",
  "repository": {
    "id": "rad:z3gqcJUoA1n9HaHKufZs5FCSGazv5",
    "name": "heartwood",
    "description": "Radicle Heartwood Protocol & Stack",
    "private": false,
    "default_branch": "master",
    "delegates": [
      "did:key:z6MksFqXN3Yhqk8pTJdUGLwATkRfQvwZXPqR2qMEhbS9wzpT",
      "did:key:z6MktaNvN1KVFMkSRAiN4qK5yvX1zuEEaseeX5sffhzPZRZW",
      "did:key:z6MkireRatUThvd3qzfKht1S44wpm4FEWSSa4PRMTSQZ3voM",
      "did:key:z6MkgFq6z5fkF2hioLLSNu1zP2qEL1aHXHZzGH1FLFGAnBGz",
      "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz"
    ]
  },
  "action": "Created",
  "patch": {
    "id": "942696775c06df96f3924e0ea84c5a7bf6336a6b",
    "author": {
      "id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
      "alias": null
    },
    "title": "protocol: fix private refs leak via subscribe",
    "state": {
      "status": "open",
      "conflicts": []
    },
    "before": "6ba619f9a636fecfe5f30b36ebb6b8c06774d5cb",
    "after": "e60c034163e03b50436b4b26f885e6b0f5e534e5",
    "commits": [
      "e60c034163e03b50436b4b26f885e6b0f5e534e5"
    ],
    "target": "6ba619f9a636fecfe5f30b36ebb6b8c06774d5cb",
    "labels": [],
    "assignees": [],
    "revisions": [
      {
        "id": "942696775c06df96f3924e0ea84c5a7bf6336a6b",
        "author": {
          "id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
          "alias": null
        },
        "description": "There are three code paths that emit refs announcements:\n\n- When you publish your own refs (`announce_own_refs`)\n- When you relay received refs (`relay`)\n- When you reply to Subscribe (`handle_message`)\n\nThe first two correctly filter the receivers of the announcement with\n`doc.is_visible_to`, but replies to Subscribe don't, causing refs announcements\nfrom private repos to leak to users not on the visiblity allow list.\n\nThe patch adds a new test to verify that ref announcements relayed via\nsubscribe correctly apply visibility filtering, thereby ensuring private repo\nrefs are only propagated to users on the allow list. It also fixes the leak\nby applying filtering in `handle_message`",
        "base": "71a91042d96bb994c4cd4311d85f5cd1a6311b4e",
        "oid": "4024bac1f4d503144534ff8afc5f57f85ad4a64c",
        "timestamp": 1785420034
      },
      {
        "id": "a0521b982460201428c10aad3bcbeb1af65ca6ad",
        "author": {
          "id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
          "alias": null
        },
        "description": "node/test: fix the dedpulication test\n\nensure that all mock repos are public and in storage so that they don't\nget filtered out in case of ambiguity about their visiblity.",
        "base": "71a91042d96bb994c4cd4311d85f5cd1a6311b4e",
        "oid": "7e5378a3e1b36e81622aaf3b4b15d9f487c5a167",
        "timestamp": 1785426405
      },
      {
        "id": "b4b0c3d82248a1f78f355952c072563b408f20eb",
        "author": {
          "id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
          "alias": null
        },
        "description": "Squash, reword comments and commit message, rebase.",
        "base": "6ba619f9a636fecfe5f30b36ebb6b8c06774d5cb",
        "oid": "e60c034163e03b50436b4b26f885e6b0f5e534e5",
        "timestamp": 1786539976
      }
    ]
  }
}

Send response

{
  "response": "triggered",
  "run_id": {
    "id": "f5545243-eff4-4b9f-92ad-614a44ef62e9"
  },
  "info_url": "https://cci.rad.levitte.org//f5545243-eff4-4b9f-92ad-614a44ef62e9.html"
}

Checkout the source (in /opt/radcis/ci.rad.levitte.org/cci/state/f5545243-eff4-4b9f-92ad-614a44ef62e9/w)

Started at: 2026-08-12 15:06:23.712913+02:00

Commands:

Read the repo configuration (.radicle/native.yaml in /opt/radcis/ci.rad.levitte.org/cci/state/f5545243-eff4-4b9f-92ad-614a44ef62e9/w)

shell: 'export RUSTDOCFLAGS=''-D warnings''


  cargo --version

  rustc --version


  cargo fmt --check

  cargo clippy --all-targets --workspace -- --deny warnings

  cargo build --all-targets --workspace

  cargo doc --workspace --no-deps --all-features

  cargo test --workspace --no-fail-fast

  '

Run the script

Commands:

Send result

{
  "response": "finished",
  "result": "failure"
}