codex-bot-andresmgsl

codex-bot-andresmgsl commented on pull request heavy-duty/stoke#67

2026-09-04 02:59:14 +00:00

fix: keep Debian publish token out of curl argv

📣 round answered at head 4d17b8b1131e921dea43d6f04c3d45bb028d39e1

codex-bot-andresmgsl commented on pull request heavy-duty/stoke#67

2026-09-04 02:58:58 +00:00

fix: keep Debian publish token out of curl argv

Build complete at head 4d17b8b1131e921dea43d6f04c3d45bb028d39e1.

publish-deb.sh now creates one trap-owned temporary directory after token validation, writes the authorization header there at…

codex-bot-andresmgsl pushed to build/62-publish-deb-token at heavy-duty/stoke

2026-09-04 02:56:48 +00:00

4d17b8b113 docs: record private Debian publish headers

codex-bot-andresmgsl pushed to build/62-publish-deb-token at heavy-duty/stoke

2026-09-04 02:55:59 +00:00

dcb169e8ab fix: protect Debian publish credentials

codex-bot-andresmgsl created pull request heavy-duty/stoke#67

2026-09-04 02:55:11 +00:00

fix: keep Debian publish token out of curl argv

codex-bot-andresmgsl created branch build/62-publish-deb-token in heavy-duty/stoke

2026-09-04 02:54:49 +00:00

codex-bot-andresmgsl pushed to build/62-publish-deb-token at heavy-duty/stoke

2026-09-04 02:54:49 +00:00

1dfa2c173d test: cover private deb publish credentials

codex-bot-andresmgsl commented on issue heavy-duty/stoke#62

2026-09-04 02:48:37 +00:00

scripts/publish-deb.sh — keep the release token out of curl's argv, the contract publish-release.sh already keeps one step later

Starting work on #62 as codex-bot-andresmgsl.

Design / plan of record:

Extend the existing publish-deb runtime harness, stubbing only external curl, to capture argv plus the referenced…

codex-bot-andresmgsl commented on pull request heavy-duty/stoke#66

2026-09-04 02:30:03 +00:00

fix: report unauthenticated auth state honestly

📣 round answered at head 133523200262aaa8f4a47c594a524677ace9b026

codex-bot-andresmgsl commented on pull request heavy-duty/stoke#66

2026-09-04 02:29:52 +00:00

fix: report unauthenticated auth state honestly

Round answered whole for head bf84b19a073219e04c14df264100d5d6d400e443; fixes are pushed at 133523200262aaa8f4a47c594a524677ace9b026.

GLM blocking: removed only the local-only stderr-empty…

codex-bot-andresmgsl pushed to build/64-auth-state at heavy-duty/stoke

2026-09-04 02:29:08 +00:00

1335232002 test: tolerate Node floor module warning

codex-bot-andresmgsl commented on pull request heavy-duty/stoke#66

2026-09-04 02:27:10 +00:00

fix: report unauthenticated auth state honestly

🔧 addressing round on head bf84b19a073219e04c14df264100d5d6d400e443

Round analysis:

GLM blocking — agree: the new localOnly stderr-empty assertion is not portable to the declared Node…

codex-bot-andresmgsl commented on pull request heavy-duty/stoke#66

2026-09-04 01:58:28 +00:00

fix: report unauthenticated auth state honestly

📣 round answered at head bf84b19a073219e04c14df264100d5d6d400e443

codex-bot-andresmgsl commented on pull request heavy-duty/stoke#66

2026-09-04 01:57:50 +00:00

fix: report unauthenticated auth state honestly

Build complete at head bf84b19a073219e04c14df264100d5d6d400e443.

Added the supplied-token logout notice without changing --local-only or tokenId-backed revocation branches.
Made…

codex-bot-andresmgsl pushed to build/64-auth-state at heavy-duty/stoke

2026-09-04 01:56:42 +00:00

bf84b19a07 docs: record auth state fixes

codex-bot-andresmgsl pushed to build/64-auth-state at heavy-duty/stoke

2026-09-04 01:56:25 +00:00

aedce42c56 fix: report unauthenticated auth state honestly

codex-bot-andresmgsl created pull request heavy-duty/stoke#66

2026-09-04 01:55:35 +00:00

fix: report unauthenticated auth state honestly

codex-bot-andresmgsl created branch build/64-auth-state in heavy-duty/stoke

2026-09-04 01:55:22 +00:00

codex-bot-andresmgsl pushed to build/64-auth-state at heavy-duty/stoke

2026-09-04 01:55:22 +00:00

ed3f234b8e test: cover unauthenticated auth state

codex-bot-andresmgsl commented on issue heavy-duty/stoke#64

2026-09-04 01:52:36 +00:00

src/cli.js — stoke auth tells the truth about a token it cannot revoke, and exits non-zero when there is no session

Starting work as @codex-bot-andresmgsl.

Design: keep the change inside the existing auth actions. For logout, add only the supplied-token/non-local branch before config deletion, reusing the…