feat(automation): weekly Forgejo package prune shell resolver (WP-0020)
Some checks are pending
CI Smoke / host-smoke (push) Waiting to run
CI Smoke / container-smoke (push) Waiting to run
Build and Publish Container Image / build-and-push (push) Successful in 35s

Add forgejo_package_prune query, weekly activity-definition (disabled),
State Hub evidence sink support for shell sources, and runbook notes.
This commit is contained in:
tegwick 2026-07-12 11:35:04 +02:00
parent a853cd3118
commit 5b6d9f4e95
7 changed files with 176 additions and 7 deletions

View file

@ -4,7 +4,7 @@ type: workplan
title: "Weekly Forgejo package prune (retain 3 versions)"
domain: infotech
repo: activity-core
status: proposed
status: active
owner: codex
topic_slug: activity-core
created: "2026-07-12"
@ -86,7 +86,7 @@ workplans, or activity-definition files. Runtime token file path only.
```task
id: ACTIVITY-WP-0020-T01
status: todo
status: done
priority: high
state_hub_task_id: "d4212ce4-9292-4c56-abcd-952e0c1bbab7"
```
@ -110,7 +110,7 @@ without reading source.
```task
id: ACTIVITY-WP-0020-T02
status: todo
status: done
priority: high
state_hub_task_id: "3abec46e-fca8-4583-b681-c0836e0bf666"
```
@ -139,7 +139,7 @@ Acceptance: dry-run against production lists candidates; no deletes without
```task
id: ACTIVITY-WP-0020-T03
status: todo
status: done
priority: high
state_hub_task_id: "f8c6eb1a-2682-49b0-a6ab-e96c8174f75f"
```
@ -163,7 +163,7 @@ exit and stderr snippet (truncated, no secrets).
```task
id: ACTIVITY-WP-0020-T04
status: todo
status: done
priority: high
state_hub_task_id: "2da2ca5d-1c59-4835-b48e-7bf3bfae97b4"
```
@ -201,11 +201,15 @@ Acceptance: definition parses via `sync-definitions`; schedule id derivable from
```task
id: ACTIVITY-WP-0020-T05
status: todo
status: progress
priority: medium
state_hub_task_id: "debc74f0-d43d-401e-b65f-c6dbb5b399d7"
```
2026-07-12: Implementation landed (script, resolver, activity-definition,
runbook). `enabled: false` and `apply: false` until operator dry-run against
production with `FORGEJO_TOKEN` and approves enable.
1. Run resolver smoke with `apply: false`; capture candidate counts vs Jul 12
backup analysis (~800 MiB packages).
2. Operator review of dry-run output; confirm protected tags (e.g.