jschoubben 312d824e4f GIT13: the forge module keeps no trusted callers; who may call a verb is the seat definition's ...

The config value callers, the package seats' list of callers with its watch, and the seat git's caller judgement are gone:
the grants part grants by each definition's callers and the bus refuses the rest.

Builds: design 47 G §68, §127, §313, §321

Claude-Session: https://claude.ai/code/session_01JG73KEq4zoDfM9WtYpcQgZ

2026-11-11 11:43:18 +01:00

..

announce.test.ts

GIT5: the forge's push webhook of a branch says branch-moved with the new head on the seat

2026-11-11 11:32:33 +01:00

announcing.test.ts

Ask the Approve as soon as the checks pass, with no ready mark (issue 1022)

2026-10-17 20:44:54 +02:00

bind.test.ts

Start the gitea bundle's binds without awaiting them, so its handshake is answered while a refused bind is asked again (issue 1793)

2026-10-22 00:45:54 +02:00

bundle-import.test.ts

GIT1, GIT2, GIT3, GIT10: the forge module serves the seat git's verbs and says its events, retires its acting tools, follows the catalog half

2026-11-11 11:31:24 +01:00

checks.test.ts

Cover a held merge only when the forge says a later delivered merge contains it (review of #150)

2026-10-09 02:57:18 +02:00

commit-trees.test.ts

gitea_commit_trees answers the files of whole directories, so the indexer can digest a mesh package without a clone (ADR 0593 §2)

2026-11-02 18:31:29 +01:00

delivery.test.ts

GIT1, GIT2, GIT3, GIT10: the forge module serves the seat git's verbs and says its events, retires its acting tools, follows the catalog half

2026-11-11 11:31:24 +01:00

gate.test.ts

GIT1, GIT2, GIT3, GIT10: the forge module serves the seat git's verbs and says its events, retires its acting tools, follows the catalog half

2026-11-11 11:31:24 +01:00

guard.test.ts

GIT13: the forge module keeps no trusted callers; who may call a verb is the seat definition's

2026-11-11 11:43:18 +01:00

kept.test.ts

GIT1, GIT2, GIT3, GIT10: the forge module serves the seat git's verbs and says its events, retires its acting tools, follows the catalog half

2026-11-11 11:31:24 +01:00

mainrules.test.ts

Gate the token mint's main-rule write by keep-main-rules too

2026-10-23 15:57:44 +02:00

merge-retry.test.ts

Merge an approved group only when every member merges now, and let no other merge land between its members (issue 1275)

2026-10-26 14:53:22 +01:00

no-org-create.test.ts

Test that the gitea module makes the organisation's repositories from its config, protected before any team reaches them, and that no tool creates in the organisation (issue 1124, ADR 0428)

2026-10-18 16:45:49 +02:00

no-ready-mark.test.ts

Ask the Approve as soon as the checks pass, with no ready mark (issue 1022)

2026-10-17 20:44:54 +02:00

pages.test.ts

Name the package each controller-repository image compiles, and say a renamed file under both names (hq ADR 0267, issue 363)

2026-10-10 02:58:31 +02:00

paging.test.ts

gitea: set a default branch and a pull request's base by named tools; announce a retargeted pull request again (issue 1422)

2026-10-28 11:07:31 +01:00

pool-cap.test.ts

Forge database pool caps are config values and a change recreates the forge (issue 1966, recovery)

2026-11-08 03:33:16 +01:00

protection-full.test.ts

GIT1, GIT2, GIT3, GIT10: the forge module serves the seat git's verbs and says its events, retires its acting tools, follows the catalog half

2026-11-11 11:31:24 +01:00

protection-read.test.ts

gitea: require no status on main, judge mesh/check in the merge tool instead (ADR 0534)

2026-10-23 12:01:57 +02:00

protection.test.ts

gitea: keep the operator's own login on main's merge whitelist beside mesh-tools (ADR 0534 §2)

2026-10-23 12:10:10 +02:00

pulls.test.ts

gitea: remove the code bound to no event since ADR 0571 clause 13: the verdict setter, the controller's checked and plan types, the build seat's started (issue 1126)

2026-11-04 11:00:53 +01:00

rule-cases.json

guard.ts: cover every branch for a rule Go's regexp reads otherwise, and hold both matchers to one table (issue 539)

2026-10-12 12:51:22 +02:00

secret-setting.test.ts

Keep every password, token and API key the vault's, never a setting (hq issue 342)

2026-10-13 07:32:19 +02:00

siblings.test.ts

gitea: remove what only tests called: the gate writer's verdict and its ask and history weighing, the late-verdict comment, the check-duration writer, the sibling record's two writers (issue 1126)

2026-11-04 11:05:50 +01:00

team-rights.test.ts

gitea_team_rights: refuse a forge user that does not exist; keep ForgeRepository's doc comment on it (issue 1563)

2026-10-27 21:54:51 +01:00

token.test.ts

GIT1, GIT2, GIT3, GIT10: the forge module serves the seat git's verbs and says its events, retires its acting tools, follows the catalog half

2026-11-11 11:31:24 +01:00

tools-account.test.ts

GIT1, GIT2, GIT3, GIT10: the forge module serves the seat git's verbs and says its events, retires its acting tools, follows the catalog half

2026-11-11 11:31:24 +01:00

trunk.test.ts

gitea: remove what only tests called: the gate writer's verdict and its ask and history weighing, the late-verdict comment, the check-duration writer, the sibling record's two writers (issue 1126)

2026-11-04 11:05:50 +01:00

views.test.ts

GIT1, GIT2, GIT3, GIT10: the forge module serves the seat git's verbs and says its events, retires its acting tools, follows the catalog half

2026-11-11 11:31:24 +01:00

watch.test.ts

Gitea announces from the forge's events and one pass at the start, not by polling (issue 1422)

2026-10-28 12:05:03 +01:00

webhook.test.ts

Gitea announces from the forge's events and one pass at the start, not by polling (issue 1422)

2026-10-28 12:05:03 +01:00