Commit graph

78 commits

Author SHA1 Message Date
codex-bot-andresmgsl
ea6c1a4fe9 feat: resolve repository default branch
All checks were successful
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 15s
2026-08-31 16:54:34 +00:00
codex-bot-andresmgsl
64b3d9df94 feat: fast-forward repository branches
All checks were successful
labels / labels (pull_request) Successful in 11s
ci / test (pull_request) Successful in 16s
2026-08-31 16:51:04 +00:00
fb5cb4746b Merge pull request 'fix: preserve apt signature verification' (#38) from build/1-apt-signed-install into main
All checks were successful
ci / test (push) Successful in 16s
Reviewed-on: #38
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
2026-08-31 16:05:04 +00:00
codex-bot-andresmgsl
2efc76f23e fix: address apt install review round
All checks were successful
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 14s
2026-08-31 15:14:12 +00:00
codex-bot-andresmgsl
9cc9576116 fix: limit apt opt-in to known sqv failure
All checks were successful
labels / labels (pull_request) Successful in 12s
ci / test (pull_request) Successful in 17s
2026-08-31 10:57:32 +00:00
codex-bot-andresmgsl
a89eafaebc fix: require opt-in for unverified apt sources
All checks were successful
labels / labels (pull_request) Successful in 12s
ci / test (pull_request) Successful in 17s
2026-08-31 10:48:42 +00:00
claude-lead-andresmgsl
9f34641545 fix: stop attributing the sqv rejection to the key algorithm
All checks were successful
labels / labels (pull_request) Successful in 11s
ci / test (pull_request) Successful in 17s
Refs #1.

`scripts/install-apt.sh` explained the sqv rejection as a malformed MPI
encoding in an Ed25519 key. The registry does not serve one: at
`api/packages/heavy-duty/debian/repository.key`, `gpg --list-packets`
reports `algo 1` (RSA) with a 2048-bit `pkey[0]`. The explanation was
therefore wrong about the only part of itself that was checkable.

The comment now states the measurement and points at #1 for the cause,
rather than naming a mechanism nobody verified. This satisfies #1's
criterion that `git grep -in 25519` return no hits outside test fixtures,
which it now does.

Behaviour is unchanged: this commit edits a comment. The automatic
fallback this file still performs contradicts ruling B and is NOT fixed
here — that work is still owed on !38.
2026-08-31 10:39:02 +00:00
25c7267ecd docs: move the .ceremony/ pin record to 0.6.3
All checks were successful
ci / test (push) Successful in 14s
The mirror was re-vendored from ceremony 0.6.3; this file still named 0.6.1 as
the pin in both places.
2026-08-30 22:15:58 +00:00
5ec01f56b7 docs: re-vendor .ceremony/ from ceremony 0.6.3
Some checks failed
ci / test (push) Has been cancelled
#39 moved the two workflow callers to 0.6.3 but left the doctrine mirror at
0.6.1, so BUILDER.md was missing the three clauses that govern signal-then-ready
(ceremony#330, the undraft order, and ceremony#336). Re-vendored all six
manifest files and moved the pin recorded in .ceremony/README.md.
2026-08-30 22:15:50 +00:00
f9a8ad46f4 docs: re-vendor .ceremony/ from ceremony 0.6.3
Some checks failed
ci / test (push) Has been cancelled
#39 moved the two workflow callers to 0.6.3 but left the doctrine mirror at
0.6.1, so BUILDER.md was missing the three clauses that govern signal-then-ready
(ceremony#330, the undraft order, and ceremony#336). Re-vendored all six
manifest files and moved the pin recorded in .ceremony/README.md.
2026-08-30 22:15:49 +00:00
6cd2bb583a docs: re-vendor .ceremony/ from ceremony 0.6.3
Some checks are pending
ci / test (push) Waiting to run
#39 moved the two workflow callers to 0.6.3 but left the doctrine mirror at
0.6.1, so BUILDER.md was missing the three clauses that govern signal-then-ready
(ceremony#330, the undraft order, and ceremony#336). Re-vendored all six
manifest files and moved the pin recorded in .ceremony/README.md.
2026-08-30 22:15:47 +00:00
1c6d8cce73 docs: re-vendor .ceremony/ from ceremony 0.6.3
Some checks failed
ci / test (push) Has been cancelled
#39 moved the two workflow callers to 0.6.3 but left the doctrine mirror at
0.6.1, so BUILDER.md was missing the three clauses that govern signal-then-ready
(ceremony#330, the undraft order, and ceremony#336). Re-vendored all six
manifest files and moved the pin recorded in .ceremony/README.md.
2026-08-30 22:15:46 +00:00
cca75fef3e docs: re-vendor .ceremony/ from ceremony 0.6.3
Some checks failed
ci / test (push) Has been cancelled
#39 moved the two workflow callers to 0.6.3 but left the doctrine mirror at
0.6.1, so BUILDER.md was missing the three clauses that govern signal-then-ready
(ceremony#330, the undraft order, and ceremony#336). Re-vendored all six
manifest files and moved the pin recorded in .ceremony/README.md.
2026-08-30 22:15:45 +00:00
125e44afe9 docs: re-vendor .ceremony/ from ceremony 0.6.3
Some checks are pending
ci / test (push) Waiting to run
#39 moved the two workflow callers to 0.6.3 but left the doctrine mirror at
0.6.1, so BUILDER.md was missing the three clauses that govern signal-then-ready
(ceremony#330, the undraft order, and ceremony#336). Re-vendored all six
manifest files and moved the pin recorded in .ceremony/README.md.
2026-08-30 22:15:44 +00:00
92ba146b44 fix: bump ceremony pin to 0.6.3
All checks were successful
ci / test (push) Successful in 14s
Closes #39. 0.6.1 has no draft guard in its Forgejo mergeability mapping, so
the sweep marks every draft PR as blocker:conflict (see !38). The guard landed
in ceremony d3b7984, first tagged 0.6.2.
2026-08-30 19:28:13 +00:00
4a62f7e0cf fix: bump ceremony pin to 0.6.3
Some checks are pending
ci / test (push) Waiting to run
Closes #39. 0.6.1 has no draft guard in its Forgejo mergeability mapping, so
the sweep marks every draft PR as blocker:conflict (see !38). The guard landed
in ceremony d3b7984, first tagged 0.6.2.
2026-08-30 19:28:12 +00:00
033a40c7a0 Merge pull request 'feat: upload release assets' (#37) from build/25-release-assets into main
All checks were successful
ci / test (push) Successful in 13s
Reviewed-on: #37
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
2026-08-30 13:12:37 +00:00
codex-bot-andresmgsl
769a3c8aba fix: read apt credentials through sudo
All checks were successful
labels / labels (pull_request) Successful in 9s
ci / test (pull_request) Successful in 13s
2026-08-30 11:40:41 +00:00
codex-bot-andresmgsl
c7971eefe0 docs: document authenticated apt installs
All checks were successful
labels / labels (pull_request) Successful in 9s
ci / test (pull_request) Successful in 13s
2026-08-30 11:35:08 +00:00
codex-bot-andresmgsl
a28b2ffd74 feat: support private apt registry credentials
All checks were successful
labels / labels (pull_request) Successful in 9s
ci / test (pull_request) Successful in 13s
2026-08-30 11:34:06 +00:00
codex-bot-andresmgsl
acb46d0707 fix: keep apt signature verification on transient failures
All checks were successful
labels / labels (pull_request) Successful in 9s
ci / test (pull_request) Successful in 14s
2026-08-30 11:31:24 +00:00
codex-bot-andresmgsl
3c0709189e fix: validate release asset uploads
All checks were successful
labels / labels (pull_request) Successful in 8s
ci / test (pull_request) Successful in 14s
2026-08-30 11:08:01 +00:00
codex-bot-andresmgsl
8293c83531 test: cover backpressured release uploads
All checks were successful
labels / labels (pull_request) Successful in 8s
ci / test (pull_request) Successful in 14s
2026-08-30 10:07:32 +00:00
codex-bot-andresmgsl
1371ec9aa9 docs: document release asset workflow
All checks were successful
labels / labels (pull_request) Successful in 8s
ci / test (pull_request) Successful in 13s
2026-08-30 09:58:06 +00:00
codex-bot-andresmgsl
d1c80db665 feat: add release asset commands
All checks were successful
labels / labels (pull_request) Successful in 8s
ci / test (pull_request) Successful in 13s
2026-08-30 09:56:21 +00:00
codex-bot-andresmgsl
0fac095509 feat: stream release asset uploads
All checks were successful
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 17s
2026-08-30 09:48:02 +00:00
c09943ea32 Merge pull request 'feat: support organization-owned repository creation' (#35) from build/24-repo-create-owner into main
All checks were successful
ci / test (push) Successful in 24s
Reviewed-on: #35
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
2026-08-21 23:18:38 +00:00
codex-bot-andresmgsl
ccaeb8ee4e docs: document repo create owner routing
Some checks failed
labels / labels (pull_request) Successful in 20s
ci / test (pull_request) Has been cancelled
2026-08-21 06:37:04 +00:00
codex-bot-andresmgsl
914e4c444b feat: support organization-owned repo creation
Some checks failed
labels / labels (pull_request) Failing after 19s
ci / test (pull_request) Has been cancelled
2026-08-21 06:35:41 +00:00
95f9eb8060 Merge pull request 'Adopt ceremony labels and review machinery' (#31) from build/30-ceremony-adoption into main
All checks were successful
ci / test (push) Successful in 24s
Reviewed-on: #31
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
2026-08-21 06:31:24 +00:00
codex-bot-andresmgsl
db36cf2efc Fix governance roster and mirror claims
All checks were successful
ci / test (pull_request) Successful in 24s
2026-08-20 23:23:51 +00:00
codex-bot-andresmgsl
47aed6f1de Vendor ceremony doctrine and scope mapping
All checks were successful
ci / test (pull_request) Successful in 23s
2026-08-19 20:56:10 +00:00
codex-bot-andresmgsl
9efe4bf717 Verify governance configuration in CI
All checks were successful
ci / test (pull_request) Successful in 23s
2026-08-19 19:26:29 +00:00
codex-bot-andresmgsl
a935b84ef8 Add ceremony label workflows
All checks were successful
ci / test (pull_request) Successful in 22s
2026-08-19 19:25:15 +00:00
codex-bot-andresmgsl
e86ce95180 Add governance config validation
All checks were successful
ci / test (pull_request) Successful in 24s
2026-08-19 19:23:21 +00:00
4c6185898e Merge pull request 'Add label support to issue creation' (#29) from build/26-issue-create-labels into main
All checks were successful
ci / test (push) Successful in 22s
Reviewed-on: #29
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
Reviewed-by: cluade-bot-andresmgsl <andres+1@heavyduty.builders>
2026-08-19 19:15:33 +00:00
codex-bot-andresmgsl
a62a753656 Document issue create labels
Some checks failed
ci / test (pull_request) Has been cancelled
2026-08-18 00:46:47 +00:00
codex-bot-andresmgsl
7b372eb2dc Add labels to issue creation
Some checks failed
ci / test (pull_request) Has been cancelled
2026-08-18 00:45:00 +00:00
ee0cb85c7b Merge pull request 'Add issue show/comment, --json output, and pr review --commit' (#20) from feat/issue-cmds-json-review-commit into main
Some checks failed
ci / test (push) Has been cancelled
ci / test (pull_request) Has been cancelled
2026-07-26 22:01:19 +00:00
kimi-reviewer-andresmgsl
0531bde366 Add issue show/comment, --json output, and pr review --commit
Some checks failed
ci / test (pull_request) Has been cancelled
2026-07-26 22:00:47 +00:00
87b3cf98d9 Merge pull request 'auth login: default to least-privilege token scopes' (#19) from fix/auth-login-scopes into main
Some checks are pending
ci / test (push) Waiting to run
2026-07-26 22:00:12 +00:00
907917a870 Merge pull request 'install-apt: fail fast when the registry has no Release file' (#18) from fix/install-apt-fail-fast into main
Some checks are pending
ci / test (push) Waiting to run
2026-07-26 22:00:09 +00:00
c85be2e083 Merge pull request 'Add CI workflow for PRs and main pushes' (#17) from ci/pr-main-tests into main
Some checks are pending
ci / test (push) Waiting to run
2026-07-26 22:00:00 +00:00
kimi-reviewer-andresmgsl
955ce393fc auth login: default to least-privilege token scopes (#9)
Tokens minted by stoke auth login previously got read/write on every
non-admin scope. Default to the reduced set the common issue/PR/repo
commands need (read/write issue + repository, read user + organization),
add --full-scopes to restore the old behavior and --scopes <csv> for a
custom list, and print the granted scopes after login.
2026-07-26 21:43:06 +00:00
kimi-reviewer-andresmgsl
8255c568b1 install-apt: fail fast with a clear message when the registry has no Release file 2026-07-26 21:41:16 +00:00
kimi-reviewer-andresmgsl
b4b38d1d97 Add CI workflow for PRs and main pushes
Some checks failed
ci / test (pull_request) Has been cancelled
2026-07-26 21:39:57 +00:00
1165ee22c3 Merge pull request 'design: stoke brand system (replaces #12, without the 23MB of binaries)' (#16) from design/brand-system-v2 into main
Reviewed-on: #16
2026-07-26 21:28:22 +00:00
f5a44021da design: stoke brand system, without the 23MB of binaries
Replaces #12, which committed every generated render into the repo. Rebuilt on
a clean branch because merging the original would have written those blobs into
main's history permanently, even with a later commit deleting them.

What changed from #12:

- Keeps docs/DESIGN.md and assets/logo-mark.svg (1.4 kB of vector text).
- Drops ~23 MB of PNG/MP4. They live in the Figma file, which was already the
  source of truth and is linked from the doc. stoke's .git is ~23 MB; those
  assets would have doubled it, forever.
- Adds the missing "files" whitelist to package.json. There wasn't one, so
  npm pack shipped the whole working directory: measured 23.7 MB with the
  assets, and it was already shipping the test suite without them. Now 26.7 kB
  across 7 files.

The packaging bug is pre-existing and independent of the design work; the
oversized PR is just what made it visible.

61/61 tests pass; `stoke --version` → 1.3.0.
2026-07-26 21:26:30 +00:00
3e93b20ae6 Add stoke repo clone with ephemeral token handling (#14)
Closes #13.

Independently verified end-to-end: token absent from .git, clean remote URL,
no extraHeader persisted. 53/53 tests pass.
2026-07-26 21:24:42 +00:00
f4b0bdbe4e Merge pull request 'Add release, label, and api commands (v1.3.0)' (#15) from feat/releases-labels-api into main
Some checks failed
release / deb (push) Has been cancelled
Reviewed-on: #15
Reviewed-by: grok-reviewer-andresmgsl <andres+3@heavyduty.builders>
Reviewed-by: codex-reviewer-andresmgsl <andres+2@heavyduty.builders>
2026-07-26 21:02:23 +00:00