gitea: set any field of a branch's protection or a repository's settings, saying whether each trunk stays protected (issue 1126, ADR 0566) #549

Merged

mesh-tools merged 5 commits from feat/protect-as-trunk into main 2026-10-28 16:02:33 +00:00

Conversation 1 Commits 5 Files Changed 6

+645 -7

5 Commits

Author	SHA1	Message	Date
jschoubben	16ea3824b5	gitea: gate and judge every trunk the gate's source names, not main alone ... The operator, 2026-10-28: the gates and trunk_rule apply to every trunk, the branches the mesh installs from, and later there may be more than main. The trunks are read at the call from mesh-delivery-gate's source, in one function (trunksOf), and fall back to main, said, only when it names none. A force-push onto any trunk is refused, and trunk_rule says whether the branch asked is a trunk.	2026-10-28 16:52:50 +01:00
jschoubben	fabb62da00	gitea: refuse a force-push onto a rule covering main until the module can ask the operator's Approve for it ... The operator, 2026-10-28: a call waits for their Approve only if it removes branch protection or allows a force-push to main. No TypeScript tool can ask yet (no asker in the TypeScript SDK; ADR 0286's mark is not built in the runner), so such a call is refused with nothing sent, and every other call runs at once. No tool removes a rule.	2026-10-28 16:48:55 +01:00
jschoubben	8068cf74a7	gitea: read a repository's settings back in the forge's own form, and take the settings it was missing ... enable_prune is never in the forge's answer and mirror_interval comes back as a Go duration, so a write that worked failed its read-back. The first is now said as not read back, the second compared as a duration. allow_merge_update, default_update_style and has_code are taken, projects_mode needs has_projects true, and the description names what is left out: the name, the tracker and wiki objects, and the mirror's credentials.	2026-10-28 16:44:11 +01:00
jschoubben	6e97ba3867	gitea: fail a protection or settings write the forge answered and did not apply, and take every field gitea 1.27.3 edits ... Gitea reads the push whitelist and force-push allowlist flags only beside their parent set true and passes over a missing default branch, both with a 200, so the tool said set for what did not change. It now refuses a dependent field without its parent, reads the rule back and names each field not applied, and says what the forge changed beside the call. The bypass allowlist fields complete the 32. gitea_repo_settings_set_full sets a repository's settings, its default branch among them, as the forge's administrator: gitea_default_branch_set is refused as mesh-tools.	2026-10-28 16:39:54 +01:00
jschoubben	448310908c	gitea: set any field of a branch protection rule through a tool, so a trunk's merge whitelist and override need no hand at the forge ... gitea_branch_protection_set_full takes every field of gitea's branch protection API by its own name, changes only those given, writes as the forge's administrator, logs the required why, answers the rule before and after, and says whether the controller's trunk rule (judgedRule in mesh-control build_source.go) now holds. The operator, 2026-10-28: a generic tool for any configuration; design 47 L2 needs de-spiegel's main set as a trunk.	2026-10-28 16:25:16 +01:00