rig/changelog.d/111.md

### Changed

- `install.sh` and bootstrap's box fetch take `RIG_HOST` / `BOX_HOST` so a Forgejo origin can serve the install channel (#111). Archive candidates are host-only (`refs/tags` then `refs/heads` on every forge); box's raw fetch tries `/raw/tag/` then `/raw/branch/` and never guesses kind from spelling. `BOX_HOST` defaults through `RIG_HOST`.
feat: install channel is forge-agnostic (RIG_HOST / BOX_HOST) install.sh resolves releases and archive URLs through RIG_HOST (default GitHub), using Forgejo's single /archive/<ref>.tar.gz form and the same /releases/latest redirect grammar. Bootstrap's box fetch gets BOX_HOST with forge-aware raw-file URLs. Refusal hints and coolify Documentation= stop pointing only at GitHub. Closes #111 2026-07-29 14:33:38 +00:00			`### Changed`

fix: review round — pin-wins candidates, no BOX_RAW_KIND guess Address codex REQUEST_CHANGES + claude's live Forgejo measurements: - ref_candidate_urls is host-only: same refs/tags then refs/heads on every forge (Forgejo serves both paths; bare /archive/<ref> no longer special). - bootstrap box raw fetch tries /raw/tag/ then /raw/branch/ and never guesses kind from spelling; download is separate from execute. - BOX_HOST defaults through RIG_HOST; comments narrow the zero-GitHub claim (box@0.9.0 installer still hardcodes GitHub for its archive). - SC2016 suppressions on the new grep assertions; tests updated. 2026-07-29 14:42:59 +00:00			- `install.sh` and bootstrap's box fetch take `RIG_HOST` / `BOX_HOST` so a Forgejo origin can serve the install channel (#111). Archive candidates are host-only (`refs/tags` then `refs/heads` on every forge); box's raw fetch tries `/raw/tag/` then `/raw/branch/` and never guesses kind from spelling. `BOX_HOST` defaults through `RIG_HOST`.