Re-express ward upgrade (brew self-update) as a ward-kdl exec-dialect grant (after pkg brew #94/#95) #173

New issue

Closed

opened 2026-06-18 07:44:01 +00:00 by coilysiren · 3 comments

coilysiren commented

2026-06-18 07:44:01 +00:00

Owner

What

cmd/ward/upgrade.go runs a hand-rolled, audited brew sequence (brew update + brew upgrade coilyco-flight-deck/tap/ward, or brew outdated under --dry) via verb.Spec + (*Runner).WrapVerb + the egress-proxied exec path. It is the ward-specific twin of coily upgrade.

This is the same brew-exec surface that ward#95 ("re-express ward pkg brew as ward-kdl") and ward#94 (pkg passthroughs -> ward-kdl exec-dialect guardfile) convert. Once the brew exec dialect exists, ward upgrade is a thin, fixed-argv exec-dialect grant (or a delegation to the pkg-brew guardfile pinned to the coilyco-flight-deck/tap/ward formula), not a hand-rolled verb.Spec.

Asked-for change

After ward#94/#95 land, re-express ward upgrade as a ward-kdl exec-dialect grant: fixed brew update + brew upgrade coilyco-flight-deck/tap/ward, --dry -> brew outdated.
Keep the egress-row + stderr-tail audit capture (or confirm the ward-kdl exec transport already captures it).
Drop the bespoke upgradeAction / runUpgrade Go once parity is proven.

Dependency: ward#94 and ward#95 (the brew exec dialect must exist first).

Part of the coily -> ward -> ward-kdl consolidation (epic ward#91, milestone #6).

## What `cmd/ward/upgrade.go` runs a hand-rolled, audited brew sequence (`brew update` + `brew upgrade coilyco-flight-deck/tap/ward`, or `brew outdated` under `--dry`) via `verb.Spec` + `(*Runner).WrapVerb` + the egress-proxied exec path. It is the ward-specific twin of `coily upgrade`. This is the same brew-exec surface that ward#95 ("re-express `ward pkg brew` as ward-kdl") and ward#94 (pkg passthroughs -> ward-kdl exec-dialect guardfile) convert. Once the brew exec dialect exists, `ward upgrade` is a thin, fixed-argv exec-dialect grant (or a delegation to the pkg-brew guardfile pinned to the `coilyco-flight-deck/tap/ward` formula), not a hand-rolled `verb.Spec`. ## Asked-for change - After ward#94/#95 land, re-express `ward upgrade` as a ward-kdl exec-dialect grant: fixed `brew update` + `brew upgrade coilyco-flight-deck/tap/ward`, `--dry` -> `brew outdated`. - Keep the egress-row + stderr-tail audit capture (or confirm the ward-kdl exec transport already captures it). - Drop the bespoke `upgradeAction` / `runUpgrade` Go once parity is proven. Dependency: ward#94 and ward#95 (the brew exec dialect must exist first). Part of the coily -> ward -> ward-kdl consolidation (epic ward#91, milestone #6).

coilyco-ops added this to the coily to ward to ward-kdl consolidation milestone

2026-06-18 07:51:53 +00:00

coilyco-ops added the

consult

labels

2026-06-24 04:15:18 +00:00

coilyco-ops commented

2026-06-24 17:26:33 +00:00

Member

Re-triage (goose-triage method, claude-macos-kais-macbook-pro-2 as the judgment engine, 2026-06-24)

P3 - Re-express ward upgrade as a ward-kdl grant, concrete, blocked on #94/#95.
consult - Blocked on the brew exec dialect, human-gated until those land.

**Re-triage** (goose-triage method, claude-macos-kais-macbook-pro-2 as the judgment engine, 2026-06-24) - **P3** - Re-express ward upgrade as a ward-kdl grant, concrete, blocked on #94/#95. - **consult** - Blocked on the brew exec dialect, human-gated until those land.

coilyco-ops commented

2026-06-24 17:28:51 +00:00

Member

Re-triage (goose-triage method, claude-macos-kais-macbook-pro-2 as the judgment engine, 2026-06-24)

P3 - Re-express ward upgrade as a ward-kdl grant, concrete, blocked on #94/#95.
consult - Blocked on the brew exec dialect, human-gated until those land.

coilysiren referenced this issue

2026-06-26 16:20:18 +00:00

ward-kdl: ops forgejo-key - read the forgejo token from k3s external-secrets (kubectl), strictly single-key #386

coilysiren added

and removed

labels

2026-07-01 04:29:55 +00:00

coilysiren referenced this issue

2026-07-01 05:02:08 +00:00

ward-kdl: ops forgejo-key - read the forgejo token from k3s external-secrets (kubectl), strictly single-key #386

coilyco-ops commented

2026-07-02 00:22:47 +00:00

Member

Stays consult: gated on the pkg-brew ward-kdl conversion (#94/#95); becomes a thin exec-dialect grant once those land. Recorded by Claude Code (Fable) during the 2026-07-01 ward launch triage session with Kai.

coilysiren closed this issue

2026-07-04 10:36:44 +00:00