grok-reviewer-andresmgsl df075b9ecf fix: review round — pin-wins candidates, no BOX_RAW_KIND guess ... Address codex REQUEST_CHANGES + claude's live Forgejo measurements: - ref_candidate_urls is host-only: same refs/tags then refs/heads on every forge (Forgejo serves both paths; bare /archive/<ref> no longer special). - bootstrap box raw fetch tries /raw/tag/ then /raw/branch/ and never guesses kind from spelling; download is separate from execute. - BOX_HOST defaults through RIG_HOST; comments narrow the zero-GitHub claim (box@0.9.0 installer still hardcodes GitHub for its archive). - SC2016 suppressions on the new grep assertions; tests updated.		2026-07-29 14:42:59 +00:00
..
lib	fix: the --version read cannot die ahead of its own refusal	2026-07-28 09:26:17 +00:00
bootstrap-tenant.sh	test: drive cron converge against stubbed systemctl	2026-07-25 19:11:13 +00:00
bootstrap-undo.sh	feat: Forgejo-native CI — a ci-box tenant and a forgejo-runner family	2026-07-27 20:40:54 +00:00
bootstrap.sh	fix: review round — pin-wins candidates, no BOX_RAW_KIND guess	2026-07-29 14:42:59 +00:00
coolify-backup-install.sh	feat: install channel is forge-agnostic (RIG_HOST / BOX_HOST)	2026-07-29 14:33:38 +00:00
coolify-install.sh	feat(bootstrap)!: machine roles carry a -server suffix; staging-server restored	2026-07-20 00:36:00 +00:00
db.sh	feat(db): bring ad-hoc dump/restore on-box as rig db	2026-07-17 15:16:35 +00:00
forgejo-runner-install.sh	fix: --version is refused at parse time, not at the 404	2026-07-28 16:18:33 +00:00
forgejo-runner-remove.sh	fix: one checksum policy, labeler coverage, orphaned-unit removal	2026-07-27 21:19:33 +00:00
forgejo-runner-status.sh	feat: Forgejo-native CI — a ci-box tenant and a forgejo-runner family	2026-07-27 20:40:54 +00:00
manifest.sh	feat: /etc/rig/manifest — which rig converged this machine, and when	2026-07-20 12:48:39 +00:00
platform.sh	feat(platform): ID names the machine — a namespaced sha256 of /etc/machine-id, computed at run time, stored nowhere (#95)	2026-07-24 07:48:45 +00:00
runner-install.sh	fix: headless credential prompts refuse loudly, naming their variable (#42)	2026-07-19 12:15:08 +00:00
runner-remove.sh	fix: headless credential prompts refuse loudly, naming their variable (#42)	2026-07-19 12:15:08 +00:00
runner-repoint.sh	fix: headless credential prompts refuse loudly, naming their variable (#42)	2026-07-19 12:15:08 +00:00
runner-status.sh	fix(runner): install refuses a box registered to another repo	2026-07-13 14:57:28 +00:00
template-lint.sh	test: cover machine template registry	2026-07-25 11:00:21 +00:00
users-apply.sh	fix: gate 'users apply' on an empty file that would revoke everyone	2026-07-20 12:25:09 +00:00
users-close-root.sh	fix: don't read a missing /run/sshd as a broken sshd config	2026-07-20 17:58:10 +00:00
users-status.sh	fix(users): review findings — invoker gate, real SSH revocation, StrictModes-shaped close-root gate, trait-aware box role	2026-07-17 20:01:19 +00:00