refactor: migrate all banned Python to Deno (clean history, replaces #59)#60
Merged
Merged
Conversation
Removes the 4 remaining non-SaltStack Python files (failing the language-policy + rsr-antipattern banned-language CI gates) by porting each to Deno, an allowed runtime. Single clean commit so no commit in history introduces example credential-like strings (gitleaks-safe). - a2ml/scripts/contractiles-a2ml-tool.py -> .js (Deno). JSON emit output byte-identical to the previous json.dumps(sort_keys, indent=2) form; verified against tests/contractiles/expected/*.json. Shell wrappers and a2ml docs now invoke `deno run`. - avow-protocol stamp_example.py -> examples/deno/stamp_example.js using Deno FFI (Deno.dlopen); fake token/signature literals replaced with inert EXAMPLE-* placeholders; zig FFI README updated. - consent-aware-http python/ reference impl -> deno/ (aibdp_middleware.js + example_server.js on Deno.serve); manifest moved, README ported, nodejs cross-link fixed. No banned Python remains; new JS passes node --check. https://claude.ai/code/session_01GTo7dz32ZgxuHXefv8BGqn
4 tasks
hyperpolymath
added a commit
that referenced
this pull request
May 15, 2026
## Summary The **Hypatia Neurosymbolic Analysis (Dogfooding)** job (`hypatia-scan.yml`, job `scan`) has been failing on **100% of runs** across the estate, independent of PR content — red on already-merged PRs (#58, #60) and every new PR (#62). Root cause (inferred from a consistent ~12s fast-fail + workflow logic; the scan step uses `--exit-zero` and the only gate is "warn but don't fail"): the `Setup Elixir` step pinned `elixir-version: '1.19.4'` / `otp-version: '28.3'`, which are **not present in the `setup-beam` version index**, so the step errored immediately and failed the whole job for everyone. This pins to currently-published, resolvable **loose** major/minor versions (`elixir 1.18` / `otp 27`) so patch availability cannot re-break it. ## Changes - `hypatia-scan.yml`: corrected `setup-beam` Elixir/OTP pins + rationale comment. ## Test plan - [ ] `Hypatia Neurosymbolic Analysis (Dogfooding)` goes green on this PR (unrelated no-op change → proves the failure was environmental, not finding-driven). - [ ] Confirm `1.18` / `27` actually build Hypatia's scanner (`mix escript.build`); bump deliberately if the scanner needs newer. - [ ] Follow-up (tracked in companion issue): publish a supported-toolchain matrix in `hyperpolymath/hypatia` + a smoke job there so a bad pin fails *at the source*, not estate-wide. https://claude.ai/code/session_01GTo7dz32ZgxuHXefv8BGqn --- _Generated by [Claude Code](https://claude.ai/code/session_01GTo7dz32ZgxuHXefv8BGqn)_ Co-authored-by: Claude <noreply@anthropic.com>
hyperpolymath
added a commit
that referenced
this pull request
May 15, 2026
## Summary Estate-wide migration of **all 119 `.res` (ReScript, banned 2026-04-30) → `.affine` (AffineScript)**, per language policy. This clears the standing ReScript `antipattern-check` / `Check for Banned Languages` debt (the pre-existing failure noted on #58/#60). Faithful semantic rewrites following the repo's established AffineScript conventions (`module X;`, `pub type`, `fn … -> T { }`, `match`, `Option<T>`, `extern fn … = "mod" "sym";`, `++`), modelled on existing hand-ports (e.g. `axel-protocol/src/AxelSts.affine`). Delivered in 15 reviewable per-subproject commits. ### Progress — COMPLETE (119/119) - [x] 24 × `SafeDOMExample` (canonical dedupe) - [x] axel-protocol, avow-protocol (src/bindings/scripts/telegram-bot) - [x] consent-aware-http (+ rhodium satellite mirror) - [x] all of `lol/` (Lang1000, 5 crawlers, DBP API, OpenCyc, verisimdb, utils, 4 test suites) - [x] 0-ai-gatekeeper mcp-repo-guardian (+ identical `lib/ocaml/` mirror) - [x] panll-panels (React → `h()` lowering) - [x] k9-svc + a2ml Deno bindings - [x] cccp 7-tentacles (Types + 7 agents + RevealSystem) - [x] a2ml prototype compiler (core/Compat/Json/CLI/runners/WASM) **Verification:** `find . -name '*.res'` → zero; both CI banned-language `find` filters return no ReScript. No AffineScript compiler exists in this environment, so ports are not compile-verified — conventions are consistent across all files so any needed correction is mechanical. The `Hypatia` dogfooding check is a pre-existing repo-wide failure unrelated to this migration. ## Test plan - [ ] `antipattern-check` / `Check for Banned Languages` ReScript step passes (no `.res` remain) - [ ] AffineScript compiler review of the ports once available (conventions inferred from existing hand-ports) - [ ] Spot-check round-trip behaviour of A2ml/K9 parser-renderer ports https://claude.ai/code/session_01GTo7dz32ZgxuHXefv8BGqn
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Clean-history replacement for #59 (closed). Eliminates the 4 remaining non-SaltStack Python files — the ones tripping the
Check for Banned Languages/antipattern-checkbanned-language CI gates — by porting each to Deno, an allowed runtime.Delivered as a single commit off
mainso that no commit anywhere in this PR's history introduces the example credential-like strings. (On #59, an intermediate commit re-added pre-existing faketoken/signatureexample literals;gitleaks-actionscans per-commit, so a follow-up fix couldn't clear it. This branch carries the inertEXAMPLE-*placeholders from the first and only commit.)a2ml/scripts/contractiles-a2ml-tool.py…-tool.jsjson.dumps(sort_keys=True, indent=2)— verified againsttests/contractiles/expected/*.json. Wrappers + a2ml docs calldeno run.avow-protocol/.../examples/python/stamp_example.pyexamples/deno/stamp_example.jsctypes→Deno.dlopen; fake literals → inertEXAMPLE-*; zig FFI README updated.consent-aware-http/.../python/{aibdp_middleware,example_server}.py(+README/reqs)…/deno/onDeno.serveVerified in-sandbox (Node shim; no Deno here): byte-identical emit, correct validate exit codes,
node --checkclean on all 4 files, no Python remains under either CI banned-language filter.CODEOWNERS policy (#58) is not included here — it already merged to
main.Test plan
gitleakspasses (no fake secrets in any commit)Check for Banned Languages/antipattern-checkno longer fail on Python (pre-existing ReScript.resdebt is separate/out of scope)cd a2ml && bash scripts/contractiles-a2ml-test.sh(needsdeno)deno run --allow-read --allow-net consent-aware-http/examples/reference-implementations/deno/example_server.js+ the curl checkshttps://claude.ai/code/session_01GTo7dz32ZgxuHXefv8BGqn
Generated by Claude Code