Skip to content

Harden delivery idempotency and public-launch surface - #8

Merged
botirkhaltaev merged 1 commit into
mainfrom
harden/public-launch
Aug 11, 2026
Merged

Harden delivery idempotency and public-launch surface#8
botirkhaltaev merged 1 commit into
mainfrom
harden/public-launch

Conversation

@botirkhaltaev

Copy link
Copy Markdown
Collaborator

Summary

  • Fail-closed webhook delivery after Job.create (release only if terminate confirms); simplify claim/bind; stale reclaim overwrites in place; stateful Dict tests
  • Align admin CRUD (objects.create requires repos; objects.delete clears deliveries); Job.create enforces admission; drop wait-timeout hack / dual APIs; rename job.pyentrypoint.py
  • Public scrub: maintainer CI App → scripts/ci_app.py, SECURITY Advisories + LICENSE copyright, README install/Image bake clarity, AGENTS Learned stripped; CI stays self-hosted

Test plan

  • uv run pytest tests/unit
  • uv run ruff check / ruff format --check / ty check
  • Redeploy scripts/ci_app.py and confirm /health + a workflow_job pickup on self-hosted labels
  • Confirm GitHub webhook still points at dogfood Function URL (and secret unchanged)

Fail closed on bind after Job.create, simplify claim/bind APIs, align admin CRUD and Job admission, and scrub maintainer/dogfood framing for a public-ready repo.
@botirkhaltaev
botirkhaltaev merged commit d8b9e5e into main Aug 11, 2026
1 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant