jschoubben 11acf04976 CAT-G2: the package seats write as an account of their own, the tools' token reads packages ...

Design 51 keeps each holder's write side as an own secret beside a read-only tool token. The Go
bundle wrote as the forge's administrator; it now reads with the tools' token (read:package added)
and writes with the mesh-packages account's token (write:package alone), which the watcher makes,
mints, keeps and renews.

Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig

2026-11-04 14:14:14 +01:00

..

account_test.go

Make the forge's tools act as an account of their own, not the administrator (issue 469, ADR 0365 clause 2)

2026-10-14 22:28:25 +00:00

applypatch_test.go

Anchor patch hunks as git apply does, refuse patches touching non-100644 files by their real mode, survive bare-CR context lines (issue 1604 review)

2026-10-21 09:52:10 +00:00

applypatch.go

Anchor patch hunks as git apply does, refuse patches touching non-100644 files by their real mode, survive bare-CR context lines (issue 1604 review)

2026-10-21 09:52:10 +00:00

commit.go

Anchor patch hunks as git apply does, refuse patches touching non-100644 files by their real mode, survive bare-CR context lines (issue 1604 review)

2026-10-21 09:52:10 +00:00

copy_test.go

Let a commit copy files from another forge repository, so a large move is not typed through the caller

2026-10-20 01:07:28 +00:00

copy.go

Let a commit copy files from another forge repository, so a large move is not typed through the caller

2026-10-20 01:07:28 +00:00

forge_test.go

CAT-G2: the package seats write as an account of their own, the tools' token reads packages

2026-11-04 14:14:14 +01:00

forge.go

CAT-G1, G2: the forge's Go bundle serves both package seats' verbs into its package registry, for both packages

2026-11-04 13:43:59 +01:00

main.go

CAT-G1, G2: the forge's Go bundle serves both package seats' verbs into its package registry, for both packages

2026-11-04 13:43:59 +01:00

patchfile_test.go

Let gitea_commit take a large patch from a hash-checked spool file (issue 852)

2026-10-15 20:39:13 +00:00

patchfile.go

Let gitea_commit take a large patch from a hash-checked spool file (issue 852)

2026-10-15 20:39:13 +00:00

reads.go

gitea forge bundle: name the parent the forge used, match protection rules as the forge does, bound a commit's size and a search's time (issue 539)

2026-10-12 12:51:22 +02:00

rules.go

gitea forge bundle: name the parent the forge used, match protection rules as the forge does, bound a commit's size and a search's time (issue 539)

2026-10-12 12:51:22 +02:00

search.go

gitea forge bundle: name the parent the forge used, match protection rules as the forge does, bound a commit's size and a search's time (issue 539)

2026-10-12 12:51:22 +02:00

templates_test.go

gitea: raise the forge's sshd MaxStartups to 100:30:200, so a burst of the mesh's machines fetching at once is not dropped

2026-10-30 01:38:58 +01:00