Add guarded Forgejo Actions artifact API operations #697

New issue

Closed

opened 2026-07-24 06:20:54 +00:00 by coilyco-ops · 0 comments

coilyco-ops commented

2026-07-24 06:20:54 +00:00

Member

Blocked by coilyco-flight-deck/infrastructure#620.

Related to coilyco-flight-deck/infrastructure#600. That issue governs package and attachment retention. This issue governs Forgejo Actions artifacts and exposes the API surface that later retention automation may consume.

Goal

AOS adds guarded Forgejo 16 Actions artifact operations for listing, downloading, and deleting workflow artifacts.

Work

AOS exposes artifact listing, metadata lookup, download, and deletion through ward ops forgejo.
AOS accepts stable repository and run identifiers and handles pagination with bounded output.
Downloads are binary-safe, reject unsafe archive paths, and do not overwrite an existing destination by default.
Delete operations require exact artifact identity and pass through the existing destructive-action guard surface.
AOS distinguishes Actions artifacts from packages, OCI images, release assets, and issue attachments in commands and documentation.
Tests cover multiple attempts, expired artifacts, duplicate names, missing artifacts, unsafe paths, authorization failures, and deletion.
Infrastructure #600 consumes this surface only after its retention policy explicitly includes Actions artifacts.

Done

The operator can list and download a selected Actions artifact without using the Forgejo web UI.
The operator can delete exactly one selected artifact with an auditable guarded operation.
AOS prevents accidental bulk deletion and unsafe extraction or overwrite.
Tests demonstrate pagination, binary integrity, and destructive-action boundaries.

Blocked by coilyco-flight-deck/infrastructure#620. Related to coilyco-flight-deck/infrastructure#600. That issue governs package and attachment retention. This issue governs Forgejo Actions artifacts and exposes the API surface that later retention automation may consume. ## Goal AOS adds guarded Forgejo 16 Actions artifact operations for listing, downloading, and deleting workflow artifacts. ## Work * AOS exposes artifact listing, metadata lookup, download, and deletion through `ward ops forgejo`. * AOS accepts stable repository and run identifiers and handles pagination with bounded output. * Downloads are binary-safe, reject unsafe archive paths, and do not overwrite an existing destination by default. * Delete operations require exact artifact identity and pass through the existing destructive-action guard surface. * AOS distinguishes Actions artifacts from packages, OCI images, release assets, and issue attachments in commands and documentation. * Tests cover multiple attempts, expired artifacts, duplicate names, missing artifacts, unsafe paths, authorization failures, and deletion. * Infrastructure #600 consumes this surface only after its retention policy explicitly includes Actions artifacts. ## Done * The operator can list and download a selected Actions artifact without using the Forgejo web UI. * The operator can delete exactly one selected artifact with an auditable guarded operation. * AOS prevents accidental bulk deletion and unsafe extraction or overwrite. * Tests demonstrate pagination, binary integrity, and destructive-action boundaries.

coilyco-ops added the

autonomy

live-collab

priority

labels

2026-07-29 03:44:59 +00:00

coilyco-ops closed this issue

2026-07-29 05:59:21 +00:00