From a6fe0aba0f1bb7c47006e3c7d516fd72e8ae1880 Mon Sep 17 00:00:00 2001 From: tegwick Date: Mon, 19 Oct 2026 13:23:12 +0200 Subject: [PATCH] build: adopt staged work-record index generation Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a15374-f59f-7a31-86d2-d23b5d2ed181 --- .custodian-brief.md | 4 ++-- .generated-work-records.json | 1 + .generated-work-records.mk | 8 ++++++++ Makefile | 7 +++++++ SCOPE.md | 13 +++++++++++++ WORK-RECORDS.md | 4 ++++ 6 files changed, 35 insertions(+), 2 deletions(-) create mode 100644 .generated-work-records.json create mode 100644 .generated-work-records.mk diff --git a/.custodian-brief.md b/.custodian-brief.md index b12bc98..1f9b6fa 100644 --- a/.custodian-brief.md +++ b/.custodian-brief.md @@ -2,7 +2,7 @@ # Custodian Brief — railiance-apps **Domain:** financials -**Last synced:** 2026-10-17 09:42 UTC +**Last synced:** 2026-10-17 10:13 UTC **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* ## Active Workstreams @@ -18,7 +18,7 @@ Progress: 1/5 done | workplan_id: `f6b1d6f6-0abb-5774-87b9-bf3cfb640a3b` - ! T03 — Link accounts and map groups to teams `32c54737` *(wait: Restricting local password sign-in is a founder decision once NetKingdom sign-in is proven.)* - ! T04 — Decide on local password sign-in `728786c9` - *(wait: Waits for the NK-WP-0048-T16 option decision and net-kingdom's answer to the Apps needs-change record.)* + *(wait: Waits for net-kingdom's answer to the Apps 1.3 needs-change record (the-custodian docs/changes/netkingdom-target-2026-10-17/nk48-1.3-owner-review/owner-review-railiance-apps.json: RAPPS-1.3-C1..C3) and the re-frozen 1.3 candidate.)* ### Coulomb-social persistent personal workspace release Progress: 3/4 done | workplan_id: `79abacf8-361e-51ab-829d-40dec8e142d1` diff --git a/.generated-work-records.json b/.generated-work-records.json new file mode 100644 index 0000000..fceeef4 --- /dev/null +++ b/.generated-work-records.json @@ -0,0 +1 @@ +{"version":1,"repo_slug":"railiance-apps"} diff --git a/.generated-work-records.mk b/.generated-work-records.mk new file mode 100644 index 0000000..f44240c --- /dev/null +++ b/.generated-work-records.mk @@ -0,0 +1,8 @@ +# Explicit opt-in recipe; no environment files or external make includes. +CUSTODIAN_SOURCE ?= /home/worsch/the-custodian +GENERATED_REPO_railiance-apps ?= railiance-apps +.PHONY: generated-work-records generated-work-records-check +generated-work-records: + python3 "$(CUSTODIAN_SOURCE)/scripts/generate_staged_work_records.py" --repo . --repo-slug "$(GENERATED_REPO_railiance-apps)" +generated-work-records-check: + python3 "$(CUSTODIAN_SOURCE)/scripts/generate_staged_work_records.py" --repo . --repo-slug "$(GENERATED_REPO_railiance-apps)" --check diff --git a/Makefile b/Makefile index d08e729..7a58d4f 100644 --- a/Makefile +++ b/Makefile @@ -682,3 +682,10 @@ forgejo-release-verify: ## Verify all embedded assets, static executable and new forgejo-release-container: ## Build/verify a deterministic local rootless OCI archive; never publish or deploy /usr/bin/python3 -I tools/forgejo-release-build.py container --workspace "$(FORGEJO_BUILD_WORKSPACE)" + +# CUST-WP-0079-T05: staged-source generation; hook uses the isolated recipe. +.PHONY: generated-work-records generated-work-records-check +generated-work-records: + $(MAKE) --no-print-directory -f .generated-work-records.mk generated-work-records +generated-work-records-check: + $(MAKE) --no-print-directory -f .generated-work-records.mk generated-work-records-check diff --git a/SCOPE.md b/SCOPE.md index e75d84c..586ab7f 100644 --- a/SCOPE.md +++ b/SCOPE.md @@ -270,3 +270,16 @@ keywords: [operator, runbook, sops, cnpg, dry-run, smoke-test, deployment] 9. Run `make check-tools` before deploy work. Run `SOPS_SENTINEL= make check-sops` when app release work touches encrypted SOPS files. + + +## Generated work-record index + +This repository opts into staged-source WORK-RECORDS.md generation through +`.generated-work-records.json` and the isolated `.generated-work-records.mk` +recipe. `make generated-work-records` reuses the State Hub renderer through +the Custodian adapter; `make generated-work-records-check` verifies byte-exact +agreement with staged Markdown. The pre-commit hook uses the isolated recipe, +preserves unstaged index edits by refusing them, and retains the generated-only +commit guard and existing security checks. It does not contact the hub, alter +workplan statuses or grant deployment authority. This consumes shared tooling; +it does not make this repository the provider of the generator capability. diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index 89c6d25..3b77af4 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -43,6 +43,10 @@ | task | RAPPS-WP-0016-T03 | wait | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | | task | RAPPS-WP-0016-T04 | wait | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | | task | RAPPS-WP-0016-T05 | wait | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| task | RAPPS-WP-0016-T06 | done | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| task | RAPPS-WP-0016-T07 | progress | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| task | RAPPS-WP-0016-T08 | progress | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| task | RAPPS-WP-0016-T09 | progress | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | | task | RAPPS-WP-0017-T01 | done | — | workplans/RAPPS-WP-0017-reuse-private-reader-release.md | | task | RAPPS-WP-0017-T02 | done | — | workplans/RAPPS-WP-0017-reuse-private-reader-release.md | | task | RAPPS-WP-0017-T03 | done | — | workplans/RAPPS-WP-0017-reuse-private-reader-release.md |