From 5defa33cd8476e66f42ffa9dd1147bf646c25498 Mon Sep 17 00:00:00 2001 From: tegwick Date: Mon, 19 Oct 2026 13:15:16 +0200 Subject: [PATCH] build: adopt staged work-record index generation Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a15374-f59f-7a31-86d2-d23b5d2ed181 --- .generated-work-records.json | 1 + .generated-work-records.mk | 8 ++++++++ Makefile | 7 +++++++ SCOPE.md | 17 +++++++++++++++++ WORK-RECORDS.md | 5 +++++ 5 files changed, 38 insertions(+) create mode 100644 .generated-work-records.json create mode 100644 .generated-work-records.mk diff --git a/.generated-work-records.json b/.generated-work-records.json new file mode 100644 index 0000000..59ec3dd --- /dev/null +++ b/.generated-work-records.json @@ -0,0 +1 @@ +{"version":1,"repo_slug":"key-cape"} diff --git a/.generated-work-records.mk b/.generated-work-records.mk new file mode 100644 index 0000000..8a60f24 --- /dev/null +++ b/.generated-work-records.mk @@ -0,0 +1,8 @@ +# Explicit opt-in recipe; no environment files or external make includes. +CUSTODIAN_SOURCE ?= /home/worsch/the-custodian +GENERATED_REPO_SLUG ?= key-cape +.PHONY: generated-work-records generated-work-records-check +generated-work-records: + python3 "$(CUSTODIAN_SOURCE)/scripts/generate_staged_work_records.py" --repo . --repo-slug "$(GENERATED_REPO_SLUG)" +generated-work-records-check: + python3 "$(CUSTODIAN_SOURCE)/scripts/generate_staged_work_records.py" --repo . --repo-slug "$(GENERATED_REPO_SLUG)" --check diff --git a/Makefile b/Makefile index e41dc78..12e12e7 100644 --- a/Makefile +++ b/Makefile @@ -39,3 +39,10 @@ push: image image-tag: docker tag $(IMAGE) $(IMAGE_REGISTRY)/$(IMAGE_REPO):$(IMAGE_TAG) + +# CUST-WP-0079-T05: staged-source generation; hook uses the isolated recipe. +.PHONY: generated-work-records generated-work-records-check +generated-work-records: + $(MAKE) --no-print-directory -f .generated-work-records.mk generated-work-records +generated-work-records-check: + $(MAKE) --no-print-directory -f .generated-work-records.mk generated-work-records-check diff --git a/SCOPE.md b/SCOPE.md index ef9506b..46f4d9e 100644 --- a/SCOPE.md +++ b/SCOPE.md @@ -222,3 +222,20 @@ title: Directory validation and migration artifact generation description: Checks canonical snapshots and produces LLDAP exports, basic Keycloak realm JSON and target-specific LDIF; does not perform or prove a complete live migration. keywords: [migration, identity, lldap, keycloak, ldif, validation] ``` + + +## Repository maintenance reuse + +The tracked `.generated-work-records.json` adopts the Custodian staged-source +adapter for WORK-RECORDS.md. `make generated-work-records` uses the existing +State Hub renderer through `.generated-work-records.mk`; the shared pre-commit +hook runs this isolated recipe only for opted-in repositories. The corresponding +`make generated-work-records-check` is read-only. Canonical repository identity +is explicit and does not depend on the checkout directory. + +Unstaged source changes are preserved; conflicts and unstaged generated-file +changes stop the commit. For `git commit --only`, generate first and include +WORK-RECORDS.md with the selected source paths. Existing generated-only guards +and exact-scope secret scans remain in place. This is repository maintenance, +not a runtime service, authorization decision, deployment or publication. +Other index generators and hub-derived briefs retain their owner boundaries. diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index d86b29b..02a6b4c 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -52,6 +52,7 @@ | workplan | KEY-WP-0039 | active | — | workplans/KEY-WP-0039-openbao-negative-probe-tokens.md | | workplan | KEY-WP-0040 | finished | — | workplans/KEY-WP-0040-mfa-attended-run-findings.md | | workplan | KEY-WP-0041 | finished | — | workplans/KEY-WP-0041-sign-in-diagnosis-page.md | +| workplan | KEY-WP-0042 | proposed | — | workplans/KEY-WP-0042-online-access-token-status.md | | task | ADHOC-2026-09-05-T01 | done | — | workplans/ADHOC-2026-09-05.md | | task | ADHOC-2026-09-07-T01 | done | — | workplans/ADHOC-2026-09-07.md | | task | ADHOC-2026-09-27-T01 | done | — | workplans/ADHOC-2026-09-27.md | @@ -221,4 +222,8 @@ | task | KEY-WP-0040-T02 | done | — | workplans/KEY-WP-0040-mfa-attended-run-findings.md | | task | KEY-WP-0041-T01 | done | — | workplans/KEY-WP-0041-sign-in-diagnosis-page.md | | task | KEY-WP-0041-T02 | done | — | workplans/KEY-WP-0041-sign-in-diagnosis-page.md | +| task | KEY-WP-0042-T01 | progress | — | workplans/KEY-WP-0042-online-access-token-status.md | +| task | KEY-WP-0042-T02 | done | — | workplans/KEY-WP-0042-online-access-token-status.md | +| task | KEY-WP-0042-T03 | todo | — | workplans/KEY-WP-0042-online-access-token-status.md | +| task | KEY-WP-0042-T04 | done | — | workplans/KEY-WP-0042-online-access-token-status.md | | intake | KEY-IN-0001 | closed | — | intakes/intakes.md |