rdmbair15m5-changelog-20260916-1318-updateroo-intel-source-build-guard

Implemented safety guard against unattended multi-hour source builds on Intel hosts (TASK-20260901-09) in updateRoo, added compile duration estimation, CLI flags, keychain-aware release packaging, and verified 332/332 tests passing.

1. Scope & Hosts Touched

• Hosts: rdmbair15m5 (local agent), rdmsm4x (canonical repository root and issues authority).
• Repositories Touched:
  • rdmsm4x:~/dev/apps/updateRoo (commit 38601da)
  • rdmsm4x:~/dev/issues (commit 67de4d8)
• Ticket Addressed & Resolved:
  • TASK-20260901-09: updateRoo: guard against unattended multi-hour source builds on Intel hosts.

2. Changes Implemented & Verifications

A. updateRoo Intel Unattended Safety Guard & Time Estimators

• Problem: On Intel Macs (x86_64, Tier 3 in Homebrew), packages that have lost bottles automatically fall back to source compilation with no warning. Unattended runs (such as dev_update or updateRoo automated passes) could hang for hours compiling toolchains (e.g. openssl@3 dragging 28 dependents, or llvm/gcc/qt).
• Remediation:
  • UpdateOptions Model: Added public var allowIntelSourceBuilds: Bool (defaulting to false) to ensure unattended runs fail-safe by default.
  • Compile Duration Heuristics (HomebrewIntelBottleAudit): Added estimatedCompileDuration(for:dependentCount:) classifying packages into duration tiers:
    • Heavy toolchains (llvm, gcc, qt, rust, webkit, boost, clang): 2 to 6+ hours
    • Runtime libraries (openssl, python, node, ruby, ffmpeg, imagemagick, icu4c, glib): 15 to 45 minutes
    • CLI tools / utilities: 2 to 15 minutes
    • High cascade warnings when dependents >= 10.
    • Updated diagnostics(for:) to include estimated compile duration.
  • HomebrewScanner.applyUpdates Deferral Logic:
    • Audits unbottled packages on native Intel hosts via HomebrewIntelBottleAudit.
    • When !options.allowIntelSourceBuilds: filters out source-only packages from brew upgrade args, logs explicit deferral notices with duration estimates, and safely upgrades only bottled packages.
    • If all requested formulae require source compilation, skips the build step cleanly and outputs a safety deferral notice.
    • When options.allowIntelSourceBuilds == true: proceeds with source compilation under an extended 6-hour timeout (21600s).
  • CLI Support (updateroo upgrade): Added --allow-source-builds / --allow-intel-source-builds options to CLIMain.swift.
  • Keychain-Aware Signing (build.sh): Updated build.sh to explicitly pass --keychain ~/Library/Keychains/fleet-signing.keychain-db when present, preventing errSecInternalComponent in non-interactive SSH sessions.

B. Empirical Verification Evidence

• Unit & Integration Tests: Executed swift test on rdmsm4x -> exit code 0; 332 tests in 33 suites passed in 100.05s with 0 failures:
  • HomebrewIntelBottleAuditTests: 12/12 passed in 0.002s (including testEstimatedCompileDuration and testDiagnosticsIncludeEstimatedDuration).
  • HomebrewScannerTests: 5/5 passed in 3.17s (including testUpdateOptionsDefaultDisallowsIntelSourceBuilds and testUpdateOptionsAllowIntelSourceBuildsOverride).
• Universal2 Packaging & Code Signing:
  • swift build -c release --arch arm64 --arch x86_64 -> exit code 0.
  • lipo -archs verified Universal2 (x86_64 arm64) for:
    • updateRoo.app/Contents/MacOS/updateRoo
    • dist/updateroo
    • dist/updateRoobar
  • Strict codesigning pass (codesign --verify --deep --strict) -> exit code 0, TeamIdentifier=ZU2882L4HT.

C. Issue Tracking & Fleet State

• Resolved TASK-20260901-09 on rdmsm4x.
• Synchronized issues repository to fleet (git.ecs0.net:git/dev/issues.git) and backup (github.com/richhdoty/rdmsm4x-dev-issues.git).
• Reindexed tickets -> 1,027 tickets indexed in index.sqlite and HTML dashboards regenerated.

3. Outstanding Owner Actions

• None.