101 commits

Author	SHA1	Message	Date
Agent	0b0e8f8608	fix: fix: hire-an-agent fails — unbound user_pass, admin auth, silent repo creation failure, unauthenticated clone (#184)	2026-04-03 12:39:10 +00:00
Agent	603dd92a3d	fix: escape $ signs with backslash for docker-compose runtime interpolation (#182)	2026-04-03 08:48:24 +00:00
Agent	554998c6c9	fix: proper docker-compose variable expansion (bash at gen, compose at runtime) (#182)	2026-04-03 08:40:32 +00:00
Agent	ca73bc24c6	fix: escape dollar signs in docker-compose override to prevent secret exposure (#182)	2026-04-03 08:27:52 +00:00
Agent	99adbc9fb5	fix: feat: hire-an-agent should support --local-model to auto-configure llama agents (#182)	2026-04-03 08:19:51 +00:00
Agent	fcb4b1ec40	fix: fix: disinto release fails to load FORGE_OPS_REPO from project config (#180)	2026-04-03 07:43:48 +00:00
Agent	6a808c85a0	fix: fix: WOODPECKER_HOST in docker-compose.yml overrides .env — OAuth2 redirect still mismatches (#178)	2026-04-03 07:33:41 +00:00
Agent	e8beabfd05	fix: fix: Woodpecker token auto-generation fails — OAuth2 redirect URI mismatch (#172)	2026-04-03 07:19:22 +00:00
Agent	6b104ae8e9	fix: fix: disinto release creates branch from dirty working tree (#168)	2026-04-03 06:58:39 +00:00
Agent	531f41a8e5	fix: fix: disinto release writes vault TOML to vault/pending/ instead of vault/actions/ (#167)	2026-04-03 06:48:42 +00:00
Agent	a916904e76	fix: correct merge_when_checks_succeed to true for auto-merge (#170)	2026-04-03 06:37:13 +00:00
Agent	7b9c483477	fix: feat: vault PRs should auto-merge after approval (#170)	2026-04-03 06:29:35 +00:00
Agent	25e9d21989	fix: fix: disinto release uses undefined PROJECT_REPO variable (#166)	2026-04-03 06:16:51 +00:00
Claude	5324d5fcfb	fix: fix: disinto init repo creation silently fails — wrong API endpoint for user namespace (#164) ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-03 05:53:30 +00:00
Agent	aa17336274	fix: fix: disinto init fails on re-run — admin password not persisted (#158)	2026-04-02 21:46:54 +00:00
Agent	83ce8a7981	fix: feat: disinto init should set up branch protection on Forgejo (#10)	2026-04-02 21:22:37 +00:00
Agent	e07e718060	fix: fix: dispatcher admin check fails — is_admin not visible to non-admin tokens (#152)	2026-04-02 18:01:14 +00:00
Agent	697f96d3aa	fix: add SKIP_PUSH env var to skip push for smoke test	2026-04-02 13:26:13 +00:00
Agent	f1c41cf493	fix: add architect-bot to bot_token_vars in disinto init	2026-04-02 13:22:40 +00:00
Agent	a3bd8eaac3	fix: bug: bin/disinto init — env_file unbound variable at line 765 (#145)	2026-04-02 11:58:03 +00:00
Agent	a2d5d71c04	fix: feat: CI log access — disinto ci-logs + dev-agent CI failure context (#136)	2026-04-02 08:20:21 +00:00
Agent	e40ea2acf2	fix: bug: dispatcher PR lookup fails — --diff-filter=A misses merge commits (#129)	2026-04-01 20:09:34 +00:00
Agent	e617999074	fix: correct build context for agents Dockerfile	2026-04-01 18:16:56 +00:00
Agent	ad0b0e181f	fix: bug: agents Dockerfile build fails — SOPS checksum download unreachable (#120)	2026-04-01 18:14:18 +00:00
Agent	941cc4ba65	fix: bug: dispatcher fails in edge container — lib/env.sh not available (#119)	2026-04-01 17:58:04 +00:00
Agent	e8b9f07a6b	fix: resolve unbound variable human_user in setup_ops_repo	2026-04-01 15:02:13 +00:00
Agent	ae3d6f20a0	fix: bug: disinto init does not set up human user as site admin or ops repo collaborator (#113)	2026-04-01 14:50:27 +00:00
Agent	fef058081f	fix: feat(20g): migrate all remaining agents to .profile + remove ops repo journal dirs (#90)	2026-04-01 14:16:13 +00:00
Agent	a7ad6eb32a	fix: feat: versioned releases — vault-gated tag, image build, and deploy (#112)	2026-04-01 14:03:49 +00:00
Agent	0d2ed587c1	fix: feat(20d): branch protection on .profile repos — admin-only formula merge (#87)	2026-04-01 08:22:36 +00:00
Agent	da3df3e39a	fix: feat(20a): disinto hire-an-agent subcommand + retrofit dev-qwen (#83)	2026-04-01 07:19:33 +00:00
Agent	aad21dc084	fix: chore: tear down old vault scripts — prepare for PR-based vault (#73)	2026-03-31 20:38:05 +00:00
Agent	dc545a817b	fix: chore(26a): delete action-agent.sh, action-poll.sh, and action/AGENTS.md (#65) ... - Delete action/ directory and all its contents - Remove action-bot from bin/disinto bot token mapping and collaborator lists - Remove FORGE_ACTION_TOKEN from lib/env.sh and .env.example - Remove action-bot from FORGE_BOT_USERNAMES in lib/env.sh and .env.example - Update .woodpecker/agent-smoke.sh to remove action script checks - Update AGENTS.md: remove action agent from description and table - Update lib/AGENTS.md: remove action-agent references from sourced by columns - Update docs/PHASE-PROTOCOL.md: remove action-agent reference - Update docs/AGENT-DESIGN.md: remove action-agent from agent table - Update planner/AGENTS.md: update action formula execution reference - Update README.md: update formula-driven execution reference Part of #26 — retire action-agent system.	2026-03-31 19:42:25 +00:00
Agent	01943edfc3	fix: Bug: docker-compose.yml has escaped backslashes in ${HOME} variables (#62)	2026-03-31 19:29:30 +00:00
Agent	4bcd2c275b	fix: refactor: rename vault-runner → runner and vault-run → run (#43)	2026-03-29 12:43:18 +00:00
Agent	8ab1009b15	feat: custom edge container Dockerfile with dispatcher dependencies ... - Create docker/edge/Dockerfile with bash, jq, curl, git, docker-cli - Create docker/edge/dispatcher.sh as placeholder no-op loop - Update edge service to build from ./docker/edge instead of caddy:alpine image - Mount Docker socket into edge container for dispatcher access - Mount dispatcher.sh as read-only volume	2026-03-29 08:57:20 +00:00
Agent	711e650190	fix: secrets migrate-vault: missing post-encrypt verification step (#39)	2026-03-29 08:10:35 +00:00
dev-bot	98a71f9192	Merge pull request 'fix: feat: disinto secrets migrate — encrypt existing plaintext .env (#33)' (#37) from fix/issue-33 into main	2026-03-28 19:19:19 +00:00
Claude	ec58cb1745	fix: suppress terminal echo for secret input and guard against overwrites ... - Use `read -rs` to hide typed secret value from terminal - Prompt for confirmation before overwriting an existing secret Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-28 19:10:55 +00:00
Claude	1b52761336	fix: feat: disinto secrets add — store individual encrypted secrets (#31) ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-28 19:10:55 +00:00
Agent	e0fe5c80ea	fix: feat: disinto secrets migrate — encrypt existing plaintext .env (#33)	2026-03-28 19:10:46 +00:00
Agent	3d84390a54	fix: fix: mount age key directory into agents containers (#32)	2026-03-28 18:53:35 +00:00
johba	8c368c632e	feat: set 5-minute pipeline timeout after WP repo activation ... Prevents smoke-init and other heavy CI steps from hanging for 40+ min. Applied automatically during disinto init. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-28 14:41:17 +00:00
johba	481f9fc53a	fix: set Docker network for WP CI step containers ... CI step containers spawned by the WP agent (running on host network) cannot resolve Docker service names like forgejo. Setting WOODPECKER_BACKEND_DOCKER_NETWORK puts CI containers on the compose network so they can reach Forgejo for git clone. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-28 10:14:01 +00:00
johba	83bd909378	fix: allow webhooks to private hosts in Forgejo compose template ... Forgejo blocks outgoing webhooks to non-allowlisted hosts by default. Woodpecker CI requires webhook delivery for pipeline triggering. Setting ALLOWED_HOST_LIST=private allows webhooks to any RFC1918 address. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-28 10:09:59 +00:00
johba	38a7253c11	fix: WP CI agent gRPC: use host networking to bypass Docker bridge (#813) ... Docker bridge networking inside LXD (and potentially other nested container environments) breaks gRPC/HTTP2 between containers. The gRPC handshake times out because HTTP/2 frames are not properly forwarded. Fix: run the WP agent with network_mode: host + privileged, connecting to the server via localhost:9000 (port mapped from the server container). - Add port 9000 mapping to woodpecker server - Switch agent to network_mode: host with privileged: true - Connect agent to localhost:9000 instead of woodpecker:9000 - Add WOODPECKER_GRPC_SECURE=false - Move healthcheck to port 3333 (avoid clash with Forgejo on 3000) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-28 09:40:44 +00:00
johba	883cdc812c	fix: compose template: SSH mount, PROJECT_REPO_ROOT, revert WOODPECKER_HOST ... - Add ~/.ssh mount to agents container (needed for mirror pushes) - Add PROJECT_REPO_ROOT env to agents and vault-runner containers - Revert WOODPECKER_HOST to http://woodpecker:8000 (localhost breaks gRPC) - Remove WOODPECKER_GRPC_ADDR (did not fix gRPC issue) - Keep WOODPECKER_OPEN for OAuth2 first-user registration Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-28 09:24:19 +00:00
johba	12d4e6925b	fix: disinto init OAuth2 + WP v3 compatibility (#812, #814) ... - Rewrite URL-encoded Docker-internal hostnames in OAuth2 redirect - Submit all Forgejo grant form fields (client_id, state, redirect_uri, granted) - Add WOODPECKER_OPEN to compose template for first user OAuth registration - Add WOODPECKER_GRPC_ADDR to compose template - Fix WP repo activation: use query param with numeric Forgejo repo ID - WP v3 PAT creation via session cookie + CSRF header Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-28 08:37:14 +00:00
johba	1912a24c46	feat: edge proxy + staging container to docker stack (#807) ... This PR implements issue #764 by adding two Caddy-based containers to the disinto docker stack: ## Changes ### Edge Proxy Service - Caddy reverse proxy serving on ports 80/443 - Routes /forgejo/* -> Forgejo:3000 - Routes /ci/* -> Woodpecker:8000 - Default route -> staging container ### Staging Service - Caddy static file server for staging artifacts - Serves a default "Nothing shipped yet" page - CI pipelines can write to the staging-site volume to update content ### Files Modified - bin/disinto: Updated generate_compose() to add edge + staging services - bin/disinto: Added generate_caddyfile() function - bin/disinto: Added generate_staging_index() function - docker/staging-index.html: New default staging page ## Acceptance Criteria - [x] disinto init generates docker-compose.yml with edge + staging services - [x] Edge proxy routes /forgejo/*, /ci/*, and default routes correctly - [x] Staging container serves default "Nothing shipped yet" page - [x] docker/ directory contains Caddyfile template generated by disinto init - [x] disinto up starts all containers including edge and staging Co-authored-by: johba <johba@users.noreply.codeberg.org> Reviewed-on: https://codeberg.org/johba/disinto/pulls/807	2026-03-28 07:58:17 +01:00
johba	ef544f58f9	fix: disinto init: auto-generate WOODPECKER_TOKEN for repo activation (#779) (#790) ... Fixes #779 ## Changes Auto-generate WOODPECKER_TOKEN during disinto init by automating the Forgejo OAuth2 login flow after the compose stack starts. Adds generate_woodpecker_token() function that: logs into Forgejo web UI, drives the OAuth2 authorize/consent flow, completes the Woodpecker callback to get a session token, then creates a persistent personal access token via Woodpecker API. Saves to .env so activate_woodpecker_repo() can use it immediately. Failures are non-fatal (guarded with || true). Co-authored-by: openhands <openhands@all-hands.dev> Reviewed-on: https://codeberg.org/johba/disinto/pulls/790 Reviewed-by: Disinto_bot <disinto_bot@noreply.codeberg.org>	2026-03-27 14:01:28 +01:00