mesh-toolsandClaude 2e32f47e45 Read branch protection as the forge's administrator, so builds register again ...

The forge answers a repository's protection rules to its administrator
alone, and the tools' account no longer is one (ADR 0365), so every
delivery building a module failed at the controller's build-source check
with a 403. gitea_branch_protection_get now reads the rules with the
administrator account (ADR 0375); it only reads, and the protection set
and every write stay refused to the tools' account. Issue 772.

Co-Authored-By: Claude <noreply@anthropic.com>

2026-10-15 00:18:39 +00:00

..

announcing.test.ts

Make the forge's tools act as an account of their own, not the administrator (issue 469, ADR 0365 clause 2)

2026-10-14 22:28:25 +00:00

checks.test.ts

Cover a held merge only when the forge says a later delivered merge contains it (review of #150)

2026-10-09 02:57:18 +02:00

delivery.test.ts

Put the merge check back to pending before a recheck asks it (hq issue 305)

2026-10-08 10:11:26 +02:00

gate.test.ts

Route a recheck's pending through the gitea module's one writer of mesh/merge-gate

2026-10-12 12:20:23 +02:00

guard.test.ts

Make the forge's tools act as an account of their own, not the administrator (issue 469, ADR 0365 clause 2)

2026-10-14 22:28:25 +00:00

pages.test.ts

Name the package each controller-repository image compiles, and say a renamed file under both names (hq ADR 0267, issue 363)

2026-10-10 02:58:31 +02:00

paging.test.ts

Page the announcer through every open pull request updated since its last look

2026-10-12 20:52:27 +02:00

protection-read.test.ts

Read branch protection as the forge's administrator, so builds register again

2026-10-15 00:18:39 +00:00

protection.test.ts

gitea: give the controller what it maps a pull request onto the graph with; set both check statuses; protect a branch by tool (hq ADR 0237)

2026-10-06 21:56:04 +02:00

pulls.test.ts

Say where a pending merge check is: queued since when, then building on which machine (hq issue 446)

2026-10-11 03:14:06 +02:00

rule-cases.json

guard.ts: cover every branch for a rule Go's regexp reads otherwise, and hold both matchers to one table (issue 539)

2026-10-12 12:51:22 +02:00

secret-setting.test.ts

Keep every password, token and API key the vault's, never a setting (hq issue 342)

2026-10-13 07:32:19 +02:00

teams.test.ts

lab: a read-only forge account of its own, and no credential left on disk after a stop (hq issue 624, review 196)

2026-10-13 14:00:59 +02:00

token.test.ts

Make the forge's tools act as an account of their own, not the administrator (issue 469, ADR 0365 clause 2)

2026-10-14 22:28:25 +00:00

tools-account.test.ts

Make the forge's tools act as an account of their own, not the administrator (issue 469, ADR 0365 clause 2)

2026-10-14 22:28:25 +00:00

trunk.test.ts

Give the build agent a judge cache of its own, and prove a release branch's move puts its verdicts out of date

2026-10-14 13:48:30 +00:00

webhook.test.ts

Make the forge's webhook a system one, and say whether its events are heard (hq issue 729)

2026-10-14 23:28:41 +02:00