ci(cmux-tui): skip docs-only artifact publishes

TE
7d ago
+50-5

The NEXT cmux-tui artifact publisher used the full cmux-tui tree for its key while the push trigger ran on every branch. A docs-only commit under cmux-tui/docs/** therefore created an unpublished key that nightly and app consumers could try to fetch.

This change:

  • skips the R2 publisher for pushes containing only cmux-tui/docs/**;
  • excludes that non-runtime subtree from v2 tree-key construction, while preserving v1 compatibility and embedded runtime docs such as the acpmux schema;
  • adds regression coverage for docs-only key reuse and the retry workflow trigger contract.

The trigger and key behavior are aligned with the setup/recovery design map in HQ #5123.

Validation: PYTHONPATH=tests python3 -m unittest tests.test_tui_publish_workflow_security tests.test_cmux_tui_artifacts_retry; bash scripts/cmux-next/tests/tree-key-v2.test.sh; bash scripts/cmux-next/tests/tree-key-embeds.test.sh; python3 scripts/ci/check_cmux_tui_tree_inputs.py.

Agent session: agent session