fix(applier): make --fix able to land a commit

[hyperpolymath]

Until now, scripts/apply-workflow-pins-remote.sh --fix could not land a commit on any repo. That covers both the scheduled apply-workflow-pins.yml job and manual runs. A live canary on metadatastician/_pathroot found two defects:

1. createCommitOnBranch input passed as a string. -F input=<json> makes gh send a JSON string, and GitHub rejects it: Variable $input of type CreateCommitOnBranchInput! was provided invalid value. The new commit_payload builds the whole request body with jq, and it is sent with gh api graphql --input -. The returned oid must be 40 hex characters.
2. A 404 was read as "the branch exists". On a 404, gh api …/git/ref/heads/<b> --jq .object.sha prints the error body on stdout. The applier took that as the branch's head and never created the branch. Now only a 40-hex SHA counts.

If the commit fails, the applier now deletes the branch it just created.

Evidence

• --self-test: all controls pass, including the new commit_payload sends input as an object control.
• Mutant check: a valid mutant that sends input as a string (| .variables.input |= tojson) is caught by that control.
• Live run of this branch: --fix --only metadatastician/_pathroot opened chore(ci): re-point standards reusable-workflow pins to 11ba299dca22 metadatastician/_pathroot#36. Its commit is GitHub-Verified and changes only the 5 standards pins.

🤖 Generated with Claude Code

https://claude.ai/code/session_016L7GFo3yGQ2vK9YgKL2wsP

[coderabbitai]

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 53 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 373f3c84-d112-4b27-999e-82208be73e88

📥 Commits

Reviewing files that changed from the base of the PR and between 11ba299 and 74194ea.

📒 Files selected for processing (1)

• scripts/apply-workflow-pins-remote.sh

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}