codex-bot-andresmgsl
e5ead6a0b3
test: decouple missing changelog sentinel
labels / labels (pull_request) Successful in 13s
ci / test (pull_request) Successful in 18s
2026-09-02 20:03:12 +00:00
codex-bot-andresmgsl
571e1b1f1f
feat: publish release assets through stoke
labels / labels (pull_request) Successful in 12s
ci / test (pull_request) Successful in 17s
2026-09-02 09:23:21 +00:00
codex-bot-andresmgsl
e3f4703e13
feat: extract publishable changelog sections
labels / labels (pull_request) Successful in 13s
ci / test (pull_request) Successful in 17s
2026-09-02 09:21:09 +00:00
codex-bot-andresmgsl
1aa6dc26a1
test: specify changelog section extraction
labels / labels (pull_request) Successful in 11s
ci / test (pull_request) Failing after 16s
2026-09-02 09:19:18 +00:00
codex-bot-andresmgsl
d84062af54
test: enforce scope coverage and parity
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 15s
2026-09-01 13:42:26 +00:00
codex-bot-andresmgsl
112f946802
fix: cover repository scope surfaces
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 16s
2026-09-01 13:40:03 +00:00
codex-bot-andresmgsl
902ada1623
fix: enforce package lock version parity
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 15s
2026-08-31 20:06:46 +00:00
codex-bot-andresmgsl
c900f47d77
test: reject ceremony pin suffix drift
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 15s
2026-08-31 19:30:33 +00:00
codex-bot-andresmgsl
21fcb1fdb1
docs: qualify every ceremony source record
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 15s
2026-08-31 19:29:55 +00:00
codex-bot-andresmgsl
c5e0d25c49
Merge remote-tracking branch 'origin/main' into build/36-ceremony-pin-proof
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 16s
2026-08-31 19:25:51 +00:00
codex-bot-andresmgsl
3fac8096f7
test: require exact ceremony workflow pins
labels / labels (pull_request) Successful in 11s
ci / test (pull_request) Successful in 18s
2026-08-31 18:38:54 +00:00
codex-bot-andresmgsl
52e8d45b78
test: pin ceremony governance source
labels / labels (pull_request) Successful in 11s
ci / test (pull_request) Successful in 18s
2026-08-31 18:32:58 +00:00
codex-bot-andresmgsl
316bec5855
fix: reconcile repository sync races
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 15s
2026-08-31 17:14:13 +00:00
codex-bot-andresmgsl
04e6ba60e8
docs: explain repository sync boundaries
labels / labels (pull_request) Successful in 16s
ci / test (pull_request) Successful in 28s
2026-08-31 16:59:10 +00:00
codex-bot-andresmgsl
b21a1387a5
feat: sync safe tags and support dry runs
labels / labels (pull_request) Successful in 16s
ci / test (pull_request) Successful in 30s
2026-08-31 16:57:02 +00:00
codex-bot-andresmgsl
ea6c1a4fe9
feat: resolve repository default branch
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 15s
2026-08-31 16:54:34 +00:00
codex-bot-andresmgsl
64b3d9df94
feat: fast-forward repository branches
labels / labels (pull_request) Successful in 11s
ci / test (pull_request) Successful in 16s
2026-08-31 16:51:04 +00:00
fb5cb4746b
Merge pull request 'fix: preserve apt signature verification' ( #38 ) from build/1-apt-signed-install into main
...
ci / test (push) Successful in 16s
Reviewed-on: #38
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
2026-08-31 16:05:04 +00:00
codex-bot-andresmgsl
2efc76f23e
fix: address apt install review round
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 14s
2026-08-31 15:14:12 +00:00
codex-bot-andresmgsl
9cc9576116
fix: limit apt opt-in to known sqv failure
labels / labels (pull_request) Successful in 12s
ci / test (pull_request) Successful in 17s
2026-08-31 10:57:32 +00:00
codex-bot-andresmgsl
a89eafaebc
fix: require opt-in for unverified apt sources
labels / labels (pull_request) Successful in 12s
ci / test (pull_request) Successful in 17s
2026-08-31 10:48:42 +00:00
codex-bot-andresmgsl
769a3c8aba
fix: read apt credentials through sudo
labels / labels (pull_request) Successful in 9s
ci / test (pull_request) Successful in 13s
2026-08-30 11:40:41 +00:00
codex-bot-andresmgsl
a28b2ffd74
feat: support private apt registry credentials
labels / labels (pull_request) Successful in 9s
ci / test (pull_request) Successful in 13s
2026-08-30 11:34:06 +00:00
codex-bot-andresmgsl
acb46d0707
fix: keep apt signature verification on transient failures
labels / labels (pull_request) Successful in 9s
ci / test (pull_request) Successful in 14s
2026-08-30 11:31:24 +00:00
codex-bot-andresmgsl
3c0709189e
fix: validate release asset uploads
labels / labels (pull_request) Successful in 8s
ci / test (pull_request) Successful in 14s
2026-08-30 11:08:01 +00:00
codex-bot-andresmgsl
8293c83531
test: cover backpressured release uploads
labels / labels (pull_request) Successful in 8s
ci / test (pull_request) Successful in 14s
2026-08-30 10:07:32 +00:00
codex-bot-andresmgsl
1371ec9aa9
docs: document release asset workflow
labels / labels (pull_request) Successful in 8s
ci / test (pull_request) Successful in 13s
2026-08-30 09:58:06 +00:00
codex-bot-andresmgsl
d1c80db665
feat: add release asset commands
labels / labels (pull_request) Successful in 8s
ci / test (pull_request) Successful in 13s
2026-08-30 09:56:21 +00:00
codex-bot-andresmgsl
0fac095509
feat: stream release asset uploads
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 17s
2026-08-30 09:48:02 +00:00
codex-bot-andresmgsl
914e4c444b
feat: support organization-owned repo creation
labels / labels (pull_request) Failing after 19s
ci / test (pull_request) Has been cancelled
2026-08-21 06:35:41 +00:00
codex-bot-andresmgsl
db36cf2efc
Fix governance roster and mirror claims
ci / test (pull_request) Successful in 24s
2026-08-20 23:23:51 +00:00
codex-bot-andresmgsl
47aed6f1de
Vendor ceremony doctrine and scope mapping
ci / test (pull_request) Successful in 23s
2026-08-19 20:56:10 +00:00
codex-bot-andresmgsl
e86ce95180
Add governance config validation
ci / test (pull_request) Successful in 24s
2026-08-19 19:23:21 +00:00
codex-bot-andresmgsl
7b372eb2dc
Add labels to issue creation
ci / test (pull_request) Has been cancelled
2026-08-18 00:45:00 +00:00
kimi-reviewer-andresmgsl
0531bde366
Add issue show/comment, --json output, and pr review --commit
ci / test (pull_request) Has been cancelled
2026-07-26 22:00:47 +00:00
87b3cf98d9
Merge pull request 'auth login: default to least-privilege token scopes' ( #19 ) from fix/auth-login-scopes into main
ci / test (push) Waiting to run
2026-07-26 22:00:12 +00:00
907917a870
Merge pull request 'install-apt: fail fast when the registry has no Release file' ( #18 ) from fix/install-apt-fail-fast into main
ci / test (push) Waiting to run
2026-07-26 22:00:09 +00:00
kimi-reviewer-andresmgsl
955ce393fc
auth login: default to least-privilege token scopes ( #9 )
...
Tokens minted by stoke auth login previously got read/write on every
non-admin scope. Default to the reduced set the common issue/PR/repo
commands need (read/write issue + repository, read user + organization),
add --full-scopes to restore the old behavior and --scopes <csv> for a
custom list, and print the granted scopes after login.
2026-07-26 21:43:06 +00:00
kimi-reviewer-andresmgsl
8255c568b1
install-apt: fail fast with a clear message when the registry has no Release file
2026-07-26 21:41:16 +00:00
3e93b20ae6
Add stoke repo clone with ephemeral token handling ( #14 )
...
Closes #13 .
Independently verified end-to-end: token absent from .git, clean remote URL,
no extraHeader persisted. 53/53 tests pass.
2026-07-26 21:24:42 +00:00
036364f844
Address review: pager owns limit/page, reject GET+input, label delete exclusivity
2026-07-26 20:52:29 +00:00
355fcc1f67
Add release, label, and api commands (v1.3.0)
2026-07-26 20:31:07 +00:00
1b990d523a
Add stoke repo clone with ephemeral token handling ( #13 )
...
Clone repositories from the configured Forgejo instance using the stored
session. The token is passed to git through GIT_CONFIG_* environment-based
config (http.<url>.extraHeader) with GIT_TERMINAL_PROMPT=0, so it never
appears in the remote URL, on the command line, in logs, or in the cloned
repository's .git/config. Git streams its own output and its exit status is
forwarded to the caller.
Supports an optional destination directory plus --branch, --depth and
--origin. Adds tests covering destination handling, exit-status
propagation, remote naming, depth validation and credential redaction.
2026-07-23 22:44:21 +00:00
kimi-reviewer-andresmgsl
7deab688a2
Fix install-apt test return after rebase
2026-07-23 00:08:06 +00:00
d959d2a6f4
Polish PR review CLI and harden install-apt (v1.2.1)
...
- Accept approve/approved review event aliases; print review html_url
- Harden pr show against missing user/head/base; clarify body-file wins
- Add tests for whitespace-only comments, approved alias, review URL
- Timeout the CLI-boundary HTTP fixture; clean up install-apt test trees
- Clearer refuse-to-overwrite message when nodesource.list already exists
- Merge Node 22 NodeSource bootstrap (from fix/apt-nodejs-bootstrap)
2026-07-23 00:06:15 +00:00
41b65a2bbd
Merge pull request 'install-apt: bootstrap Node 22 when distro nodejs cannot satisfy the dependency' ( #5 ) from fix/apt-nodejs-bootstrap into main
2026-07-22 23:19:04 +00:00
0ecd935528
install-apt: address review nits — apt-readable file modes, test cleanup, clearer refusal error
...
- chmod 0644 every keyring and sources.list entry after writing: tee
inherits the caller's umask, and under e.g. umask 077 apt's
unprivileged _apt user could not read the keyring
- Tests now run the script under umask 077 and assert the 0644 modes
(mutation-checked: dropping the chmod fails a test), and remove their
temp directories on exit
- Refusal error now states that metadata was already refreshed before
concluding the existing nodesource.list is unsuitable
Verified on fresh debian:13 under umask 077: all four files 0644,
install succeeds. npm test 32/32.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-22 23:17:20 +00:00
444470301c
test: stubbed shell tests for the NodeSource bootstrap logic
...
Covers the scenarios codex-reviewer recommended: suitable candidate
already present (incl. epoch stripping), missing metadata healed by a
refresh, bootstrap on too-old distro nodejs, bootstrap failure, and the
refuse-to-overwrite branch for a user-managed nodesource.list. Every
scenario runs under a localized LC_ALL with an apt-cache stub that only
emits the English Candidate: label under LC_ALL=C, so locale-safe
parsing is regression-tested (mutation-checked: dropping LC_ALL=C fails
3 tests).
install-apt.sh gains STOKE_APT_ETC to redirect /etc/apt to a throwaway
directory under test, following the script's existing env-override
pattern. Real-container flow re-verified on debian:13.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-22 22:01:51 +00:00
kimi-reviewer-andresmgsl
d88cb484d3
Address PR #4 review feedback
...
- pr comment now rejects whitespace-only bodies and preserves raw body.
- pr review accepts request_changes alias in addition to request-changes.
- Add CLI-boundary regression test proving review body-file whitespace is
preserved through the CLI and sent byte-for-byte to the API.
- Update README option help text for the new alias.
2026-07-22 21:57:30 +00:00
kimi-reviewer-andresmgsl
d56e509649
Preserve raw review body while validating emptiness
...
Validate non-APPROVED reviews using trim().length, but send the original
unmodified body to the API so Markdown whitespace is preserved.
2026-07-22 21:37:56 +00:00
