autonomic-bot 51c3280163 feat(drone): enroll drone + gitea SCM dep (M1 implementation) ...

- tests/gitea/recipe_meta.py: gitea as install-time dep provider; sqlite3
  overlay EXTRA_ENV, health path /api/healthz, relaxed access for CI use
- tests/drone/recipe_meta.py: DEPS=["gitea"]; health /healthz; 600s timeout
- tests/drone/install_steps.sh: wires GITEA_CLIENT_ID + GITEA_DOMAIN +
  client_secret Docker secret + DRONE_USER_CREATE before single drone deploy
- tests/drone/functional/test_scm_configured.py: Playwright-free SCM test —
  follows /login redirect, asserts final URL is gitea dep's OAuth2 authorize
  endpoint with matching client_id (per Adversary pre-probe REVIEW-drone.md)
- tests/drone/PARITY.md: backup structural-skip justified (no backupbot labels)
- runner/harness/sso.py: setup_gitea_oauth() — creates gitea admin user via
  CLI + OAuth2 app via API, returns {admin_user, admin_password, client_id,
  client_secret} for install_steps.sh consumption
- runner/run_recipe_ci.py: _enrich_deps_with_sso now handles gitea dep (calls
  setup_gitea_oauth; keycloak path unchanged)
- tests/unit/test_gitea_dep.py: unit tests for gitea dep path — meta loading,
  SSO routing, SCM redirect assertion logic (parametrized)
- machine-docs: STATUS/JOURNAL/BACKLOG-drone.md phase state files initialized

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-11 21:31:43 +00:00

..

BACKLOG-1b.md

refactor(1b): RL6 — move Builder protocol files into machine-docs/ (README stays root)

2026-05-27 22:35:30 +01:00

BACKLOG-1c.md

refactor(1b): RL6 — move Builder protocol files into machine-docs/ (README stays root)

2026-05-27 22:35:30 +01:00

BACKLOG-1d.md

DONE(1d): Phase 1d complete — DG1-DG8 all Adversary cold-verified PASS, NO VETO

2026-05-28 02:26:03 +01:00

BACKLOG-1e.md

status(1e): HC1 PASS; E3/HC4 CLAIMED — no-regression rationale + docs done

2026-05-28 04:11:14 +01:00

BACKLOG-2.md

review(2:F2-14c): PASS — mumble full lifecycle incl real upgrade-to-latest 0.2.0->1.0.0 GREEN cold-verified (fork removed via UPGRADE_EXTRA_ENV, voice/web/config on latest, P2/P3/P4 real, clean teardown); LAST DONE-VETO checklist item. F2-15 CLOSED (discourse PARITY.md)

2026-05-31 05:26:17 +00:00

BACKLOG-2b.md

claim(2b): deploy budget confirmed minimal+enforced (1+N_cold_deps); B1-B4 claimed

2026-05-31 05:35:46 +00:00

BACKLOG-2pc.md

review(2pc): PASS gate 2pc (re-claim 9e73ebd) — PC1+PC2+PC3 cold-verified; F2pc-1 CLEARED. git==host: docker-prune.nix+swarm.nix byte-identical to /root/cc-ci, committed units now ci-docker-prune = live (enabled+active), old docker-prune.timer not-found. Live re-confirm: no-op prune@<80% images 18->18, cold->warm redis reuse. Pressure-branch keep-cache property structural (image prune w/o --all). PC2 PAT nptest2+retention+no-mirror, PC3 teardown-keeps-images+bogus-tag-fails GREEN from prior pass.

2026-05-29 09:52:28 +01:00

BACKLOG-2w.md

claim(2w): Gate WC1+WC1.1+WC1.2 CLAIMED — warm keycloak headline e2e GREEN + concurrency/reaping + rollback/holds proven

2026-05-29 01:40:32 +01:00

BACKLOG-3.md

status(3): ## DONE — U5 PASS (Adversary @15b3057); all R1–R8 Adversary-verified, no VETO

2026-05-31 13:17:44 +00:00

BACKLOG-5.md

review(5): A5-7 CLOSED + §4 cron PASS + full gate M5 PASS @23:20Z

2026-06-01 23:21:45 +00:00

BACKLOG-bsky.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

BACKLOG-conc.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

BACKLOG-drone.md

feat(drone): enroll drone + gitea SCM dep (M1 implementation)

2026-06-11 21:31:43 +00:00

BACKLOG-dstamp.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

BACKLOG-kuma.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

BACKLOG-lvl5.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

BACKLOG-mailu.md

review(mailu): M1 PASS @2026-06-11T21:00Z — build #477 LEVEL 5, both /data+/mail volumes tested; ADV-mailu-01 closed

2026-06-11 21:01:19 +00:00

BACKLOG-mirror.md

status(mirror): ## DONE — Ph0-Ph5 all Adversary-verified PASS @01:16Z

2026-06-02 01:14:05 +00:00

BACKLOG-rcust.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

BACKLOG-regression.md

review(regression): A-reg-2+A-reg-3 CLOSED; 6/7 canaries cold-verified; good-significant+PR still pending

2026-06-02 02:18:40 +00:00

BACKLOG-shot.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

BACKLOG.md

refactor(1b): RL6 — move Builder protocol files into machine-docs/ (README stays root)

2026-05-27 22:35:30 +01:00

DECISIONS.md

feat(kuma): implement wizard+monitor Playwright test (tests/uptime-kuma/playwright/)

2026-06-11 18:15:13 +00:00

DEFERRED.md

claim(mailu): M2 — DEFERRED closed; PARITY.md updated with dual-volume evidence; operator summary written; PR#3 open for merge; awaiting Adversary fresh re-trigger

2026-06-11 21:03:51 +00:00

JOURNAL-1b.md

## DONE — Phase 1b complete: RL1-RL6 all Adversary-PASS <24h, no VETO (lint/format + nix/ + machine-docs/ refactor, D1-D10 re-verified cold, nothing weakened)

2026-05-27 22:57:44 +01:00

JOURNAL-1c.md

refactor(1b): RL6 — move Builder protocol files into machine-docs/ (README stays root)

2026-05-27 22:35:30 +01:00

JOURNAL-1d.md

status(1d): DG6 GREEN (build #153 hedgedoc e2e); G4 CLAIMED — requesting Adversary cold-verify DG1-DG8

2026-05-28 02:15:25 +01:00

JOURNAL-1e.md

DONE(1e): Phase 1e complete — HC1-HC4 all Adversary cold-verified PASS, NO VETO

2026-05-28 04:26:42 +01:00

JOURNAL-2.md

journal(2): DONE-VETO checklist complete; plausible Q4.7b mirror+PR#1+run launched

2026-05-31 05:28:57 +00:00

JOURNAL-2b.md

claim(2b): deploy budget confirmed minimal+enforced (1+N_cold_deps); B1-B4 claimed

2026-05-31 05:35:46 +00:00

JOURNAL-2pc.md

claim(2pc): re-claim — F2pc-1 resolved (git==host==ci-docker-prune via b9bbd25)

2026-05-29 09:50:39 +01:00

JOURNAL-2w.md

done(2w): Phase 2w COMPLETE — WC1-WC9 (incl WC1.1/WC1.2) all Adversary-verified, NO VETO

2026-05-29 04:48:02 +01:00

JOURNAL-3.md

journal(3): U3 live-demo start — Drone DB reset discovered, repo reactivated; validating pipeline (build #1 running)

2026-05-31 09:37:21 +00:00

JOURNAL-5.md

claim(5): A5-7 fix — CronCreate mechanism verified (T0-refire 23:18Z, upgrader-cron.log created)

2026-06-01 23:19:32 +00:00

JOURNAL-bsky.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

JOURNAL-conc.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

JOURNAL-drone.md

feat(drone): enroll drone + gitea SCM dep (M1 implementation)

2026-06-11 21:31:43 +00:00

JOURNAL-dstamp.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

JOURNAL-kuma.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

JOURNAL-lvl5.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

JOURNAL-mailu.md

claim(mailu): M1 re-claim — build #477 LEVEL 5; ADV-mailu-01 fixed; /mail Maildir now seeded, wiped, and verified restored; both test_backup_captures_mail_message + test_restore_returns_mail_message PASS

2026-06-11 20:59:39 +00:00

JOURNAL-mirror.md

status(mirror): ## DONE — Ph0-Ph5 all Adversary-verified PASS @01:16Z

2026-06-02 01:14:05 +00:00

JOURNAL-rcust.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

JOURNAL-regression.md

fix(regression): fix relative import (A-reg-1) + consume inbox

2026-06-02 01:37:31 +00:00

JOURNAL-shot.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

JOURNAL.md

refactor(1b): RL6 — move Builder protocol files into machine-docs/ (README stays root)

2026-05-27 22:35:30 +01:00

plausible-entrypoint.clickhouse.sh.fixed

backlog(2): plausible Q4.7b scoped + ready (staged hardened entrypoint.clickhouse.sh; mirror+PR+run steps); queued behind Adversary Q4.6/F2-14c verifies

2026-05-31 05:21:23 +00:00

REVIEW-1b.md

review(1b): ✅ RL6 PASS + Adversary FINAL SIGN-OFF — git mv my REVIEW*.md → machine-docs/ (lockstep; Builder moved theirs in 992d87c, README stays root). Watchdog survived (resolve_state prefers machine-docs/; it pinged me from machine-docs/STATUS-1b.md). Refs re-verified (README+install.md updated; no .drone/flake/scripts refs; closure byte-identical 8i3jcad9 unaffected). ALL RL1-RL6 Adversary-PASS, no VETO — Builder cleared to write ## DONE

2026-05-27 22:56:25 +01:00

REVIEW-1c.md

review(1b): ✅ RL6 PASS + Adversary FINAL SIGN-OFF — git mv my REVIEW*.md → machine-docs/ (lockstep; Builder moved theirs in 992d87c, README stays root). Watchdog survived (resolve_state prefers machine-docs/; it pinged me from machine-docs/STATUS-1b.md). Refs re-verified (README+install.md updated; no .drone/flake/scripts refs; closure byte-identical 8i3jcad9 unaffected). ALL RL1-RL6 Adversary-PASS, no VETO — Builder cleared to write ## DONE

2026-05-27 22:56:25 +01:00

REVIEW-1d.md

review(1d): G4 PASS + FINAL sign-off — DG1-DG8 all Adversary cold-verified, NO VETO

2026-05-28 02:25:02 +01:00

REVIEW-1e.md

review(1e): E3/HC4 PASS + FINAL — own !testme build #155 production cold (head_ref==chaos-version full sha, additive, deploy-count=1, no secret leak, clean teardown); NO VETO — Builder may write ## DONE

2026-05-28 04:24:57 +01:00

REVIEW-2.md

review(2:F2-14c): PASS — mumble full lifecycle incl real upgrade-to-latest 0.2.0->1.0.0 GREEN cold-verified (fork removed via UPGRADE_EXTRA_ENV, voice/web/config on latest, P2/P3/P4 real, clean teardown); LAST DONE-VETO checklist item. F2-15 CLOSED (discourse PARITY.md)

2026-05-31 05:26:17 +00:00

REVIEW-2b.md

review(2b): PASS — deploy budget 1+N_cold_deps COLD-verified minimal+enforced (DG4.1 non-vacuous; doc-only claim so B3 holds by construction; mumble real run deploy-count=1 all-tiers-green + prior lasuite-docs=2 cold-dep verdict). doc complete incl WC5 caveat. No VETO. B1-B4 all PASS

2026-05-31 05:38:17 +00:00

REVIEW-2pc.md

review(2pc): PASS gate 2pc (re-claim 9e73ebd) — PC1+PC2+PC3 cold-verified; F2pc-1 CLEARED. git==host: docker-prune.nix+swarm.nix byte-identical to /root/cc-ci, committed units now ci-docker-prune = live (enabled+active), old docker-prune.timer not-found. Live re-confirm: no-op prune@<80% images 18->18, cold->warm redis reuse. Pressure-branch keep-cache property structural (image prune w/o --all). PC2 PAT nptest2+retention+no-mirror, PC3 teardown-keeps-images+bogus-tag-fails GREEN from prior pass.

2026-05-29 09:52:28 +01:00

REVIEW-2w.md

review(2w): WC8 + WC9 (FINAL) — PASS @2026-05-29; ALL WC1-WC9 (incl WC1.1/WC1.2) Adversary cold-verified, NO VETO — DONE authorized

2026-05-29 04:46:30 +01:00

REVIEW-3.md

review(3 U5): PASS — badges+docs+hardening cold-verified; all R1–R8 done; Phase 3 DoD complete

2026-05-31 13:16:19 +00:00

REVIEW-5.md

review(5): A5-7 CLOSED + §4 cron PASS + full gate M5 PASS @23:20Z

2026-06-01 23:21:45 +00:00

REVIEW-bsky.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

REVIEW-conc.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

REVIEW-drone.md

review(drone): pre-probe — SCM-configured test design; /login redirect is the correct tooth

2026-06-11 21:26:11 +00:00

REVIEW-dstamp.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

REVIEW-kuma.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

REVIEW-lvl5.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

REVIEW-mailu.md

review(mailu): M2 PASS @2026-06-11T21:15Z — build #483 LEVEL 5, fresh independent re-trigger; all phase DoD satisfied

2026-06-11 21:16:27 +00:00

REVIEW-mirror.md

review(mirror): Ph4+Ph5 PASS @01:16Z — deploy verified, 3 new recipes triggered <60s

2026-06-02 01:11:45 +00:00

REVIEW-rcust.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

REVIEW-regression.md

review(regression): D-final PASS — all 7 canaries cold-verified; PR#5 open; DoD complete

2026-06-02 03:37:18 +00:00

REVIEW-shot.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

REVIEW.md

review(1b): ✅ RL6 PASS + Adversary FINAL SIGN-OFF — git mv my REVIEW*.md → machine-docs/ (lockstep; Builder moved theirs in 992d87c, README stays root). Watchdog survived (resolve_state prefers machine-docs/; it pinged me from machine-docs/STATUS-1b.md). Refs re-verified (README+install.md updated; no .drone/flake/scripts refs; closure byte-identical 8i3jcad9 unaffected). ALL RL1-RL6 Adversary-PASS, no VETO — Builder cleared to write ## DONE

2026-05-27 22:56:25 +01:00

STATUS-1b.md

## DONE — Phase 1b complete: RL1-RL6 all Adversary-PASS <24h, no VETO (lint/format + nix/ + machine-docs/ refactor, D1-D10 re-verified cold, nothing weakened)

2026-05-27 22:57:44 +01:00

STATUS-1c.md

refactor(1b): RL6 — move Builder protocol files into machine-docs/ (README stays root)

2026-05-27 22:35:30 +01:00

STATUS-1d.md

status(1d): tidy ledger post-DONE (clear In-flight; settle DG6/DG7 lines)

2026-05-28 02:26:34 +01:00

STATUS-1e.md

DONE(1e): Phase 1e complete — HC1-HC4 all Adversary cold-verified PASS, NO VETO

2026-05-28 04:26:42 +01:00

STATUS-2.md

status(2): all 3 DONE-VETO upgrade-to-latest items Adversary-PASSED (ghost/discourse/mumble); remaining = plausible Q4.7b + drone Q4.10 + Q5; executing plausible

2026-05-31 05:27:18 +00:00

STATUS-2b.md

status(2b): ## DONE — B1-B4 all Adversary cold-PASS @05:38Z, no VETO

2026-05-31 05:38:52 +00:00

STATUS-2pc.md

status(2pc): ## DONE — Adversary PASS for PC1+PC2+PC3, F2pc-1 closed, no VETO

2026-05-29 09:53:30 +01:00

STATUS-2w.md

done(2w): Phase 2w COMPLETE — WC1-WC9 (incl WC1.1/WC1.2) all Adversary-verified, NO VETO

2026-05-29 04:48:02 +01:00

STATUS-3.md

status(3): ## DONE — U5 PASS (Adversary @15b3057); all R1–R8 Adversary-verified, no VETO

2026-05-31 13:17:44 +00:00

STATUS-5.md

status(5): ## DONE — all V1-V9 + §4 cron Adversary-verified PASS; cc-ci build complete

2026-06-01 23:22:24 +00:00

STATUS-bsky.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

STATUS-conc.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

STATUS-drone.md

feat(drone): enroll drone + gitea SCM dep (M1 implementation)

2026-06-11 21:31:43 +00:00

STATUS-dstamp.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

STATUS-kuma.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

STATUS-lvl5.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

STATUS-mailu.md

status(mailu): ## DONE — M1+M2 PASS; PR#3 open for operator merge; builds #477+#483 both L5; backup/restore on /data+/mail proven; DEFERRED closed

2026-06-11 21:17:45 +00:00

STATUS-mirror.md

status(mirror): ## DONE — Ph0-Ph5 all Adversary-verified PASS @01:16Z

2026-06-02 01:14:05 +00:00

STATUS-rcust.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

STATUS-regression.md

status(regression): ## DONE — D-final PASS @03:36Z; all 7 canaries verified; phase complete

2026-06-02 03:38:24 +00:00

STATUS-shot.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

STATUS.md

refactor(1b): RL6 — move Builder protocol files into machine-docs/ (README stays root)

2026-05-27 22:35:30 +01:00