Authenticate Forgejo Git LFS preclone #1525

Closed
coilyco-ops wants to merge 10 commits from issue-1524 into main
Member

Authenticate private-repository LFS checkout through the sealed Git credential helper, while pinning the LFS endpoint to the approved Forgejo remote. Checkout now has one explicit materialization step, so a rejected batch credential is visible before the harness starts.

  • Skips automatic smudging only during preclone, then pulls LFS objects explicitly.
  • Adds redacted lfs-auth/lfs-checkout recovery gates and pre-start reservation release.
  • Covers authenticated and rejected private LFS batch fixtures; ward exec lint, ward exec vet, and ward exec test pass.

closes #1524
ward.workflow: pull-request-and-merge

Authenticate private-repository LFS checkout through the sealed Git credential helper, while pinning the LFS endpoint to the approved Forgejo remote. Checkout now has one explicit materialization step, so a rejected batch credential is visible before the harness starts. - Skips automatic smudging only during preclone, then pulls LFS objects explicitly. - Adds redacted `lfs-auth`/`lfs-checkout` recovery gates and pre-start reservation release. - Covers authenticated and rejected private LFS batch fixtures; `ward exec lint`, `ward exec vet`, and `ward exec test` pass. closes #1524 ward.workflow: pull-request-and-merge
fix(agent): authenticate LFS preclone (#1524)
Some checks failed
test / test (pull_request) Has been cancelled
803802647c
Author
Member

Forgejo Actions run 2383 (run 10077) was cancelled at its 10-minute workflow timeout, with no failing conclusion. The exposed job target is the placeholder jobs/0, and its log endpoint returns 404, so Forgejo has not provided a failing step to patch. Local ward exec lint, ward exec vet, and ward exec test passed; I am rerunning the official workflow once. If the retry times out again, the runner/log surface needs operator attention.

<!-- ward-agent-ci-failure --> Forgejo Actions run 2383 (run 10077) was cancelled at its 10-minute workflow timeout, with no failing conclusion. The exposed job target is the placeholder `jobs/0`, and its log endpoint returns 404, so Forgejo has not provided a failing step to patch. Local `ward exec lint`, `ward exec vet`, and `ward exec test` passed; I am rerunning the official workflow once. If the retry times out again, the runner/log surface needs operator attention.
Merge branch 'main' into issue-1524
Some checks failed
test / test (pull_request) Failing after 31s
2ba11b2b64
Merge branch 'main' into issue-1524
Some checks failed
test / test (pull_request) Failing after 50s
be6351c83a
Author
Member

Final disposition under parent #1574. Head be6351c83a still has a failing test check, the supported job-log route returns no evidence, and no exact-head QA pass exists. This PR must not merge. The PR is being closed without merge and its remote branch is retained for reference. Issue #1524 remains the replacement implementation contract, blocked on the reliable read-only source gate in #1565 and the supported CI evidence path in coilyco-flight-deck/infrastructure#602. Engineering should redispatch #1524 onto a clean branch only after those gates return decisive evidence.

Final disposition under parent #1574. Head be6351c83a1b3507f20955e9ce76d6cdf7136efb still has a failing test check, the supported job-log route returns no evidence, and no exact-head QA pass exists. This PR must not merge. The PR is being closed without merge and its remote branch is retained for reference. Issue #1524 remains the replacement implementation contract, blocked on the reliable read-only source gate in #1565 and the supported CI evidence path in https://forgejo.coilysiren.me/coilyco-flight-deck/infrastructure/issues/602. Engineering should redispatch #1524 onto a clean branch only after those gates return decisive evidence.
coilyco-ops closed this pull request 2026-07-28 03:47:41 +00:00
Some checks failed
test / test (pull_request) Failing after 50s

Pull request closed

Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
coilyco-flight-deck/ward!1525
No description provided.