Skip to content

refactor: harden build provenance and releases - #59

Merged
bashrusakh merged 28 commits into
mainfrom
refactor/deskforge-corrective-pr
Aug 20, 2026
Merged

refactor: harden build provenance and releases#59
bashrusakh merged 28 commits into
mainfrom
refactor/deskforge-corrective-pr

Conversation

@bashrusakh

@bashrusakh bashrusakh commented Aug 12, 2026

Copy link
Copy Markdown
Owner

Summary

  • Resolves the main merge conflict while retaining service-scoped production Compose commands and the valid API development command.
  • Enforces one CustomPreset per (user_id, name) with schema 283, a duplicate-data preflight, portable GORM upsert, and concurrency coverage.
  • Requires a provider-owned workflow identity marker before approval, preparation, or secret-bearing dispatch; unguarded tags fail closed.
  • Requires a stored v2 producer manifest to match canonical output before provider-backed publication, recovery, detail/download, reuse, or handoff.
  • Records the current migration and workflow boundaries without claiming live-provider, cross-DB, or release evidence.

Validation

  • GOWORK=off go vet ./...
  • GOWORK=off go test ./...
  • GOWORK=off go test -race ./...
  • npm run build
  • docker compose -f docker/docker-compose.yml config --quiet
  • git diff --check
  • Native final review of the effective PR diff and focused RustDesk workflow review.

Local Rust checks remain environment-blocked by missing Perl FindBin and the Rust Clippy component; current GitHub CI is the required final Rust/Docker evidence for this pushed revision.

Workflow deployment gate

RustDesk PR #7 merged into rustqs/workflows at ced31ae07f69c20119b88212b10d2eb2df651c97. Production dispatch remains disabled pending a newly signed, provider-verified immutable protected workflow tag (for example workflow-v1.2.0) and live DeskForge reapproval/reverification. GitHub selector/SHA binding is not claimed atomic.

Remaining limits

  • MySQL/PostgreSQL migration and read/write coverage remain unverified.
  • No live provider build, artifact delivery, or clean offline build is claimed.

@coderabbitai

coderabbitai Bot commented Aug 12, 2026

Copy link
Copy Markdown

Important

  • 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: f3975d5b-a549-4429-aed4-087534e98a98


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@bashrusakh
bashrusakh merged commit bfc2a4c into main Aug 20, 2026
10 checks passed
@bashrusakh
bashrusakh deleted the refactor/deskforge-corrective-pr branch August 20, 2026 14:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant