Skip to content

feat: public output keeps private topology private #93

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
rldyourmnd merged 1 commit into from
Sep 3, 2026
Merged

feat: public output keeps private topology private #93

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,20 @@ sibling project the same week this note was added.

## [Unreleased]

## [0.0.59] - 2026-09-03

Public output no longer names the private authoring topology. The
publisher generates repository-local commit and pull-request text, then scans
all seven rendered trees and both messages before the first push. The scanner
also found six builder references carrying the same coordinate; their generated
source now describes only the source workspace and tells a public reader to use
the public repository's issues.

The boundary has a mutation control: it plants a private coordinate assembled
from fragments and requires the scanner to refuse it, while the scanner and
public policy never contain the forbidden literal themselves. Historical
commits remain immutable and untouched.

## [0.0.58] - 2026-09-02

A removal answers three ways when nothing records what this build
Expand Down
8 changes: 4 additions & 4 deletions Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

8 changes: 4 additions & 4 deletions Cargo.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ members = [
]

[workspace.package]
version = "0.0.58"
version = "0.0.59"
edition = "2024"
rust-version = "1.89"
license = "AGPL-3.0-or-later"
Expand All @@ -23,9 +23,9 @@ sha2 = "0.11"
# `setup-core::archive`); an inflate loop is not, because its bugs are
# memory-safety bugs and it is not improved by being hand-written here.
miniz_oxide = "0.9"
setup-core = { path = "crates/setup-core", version = "0.0.58" }
provider-v3 = { path = "crates/provider-v3", version = "0.0.58" }
harness-runtime = { path = "crates/harness-runtime", version = "0.0.58" }
setup-core = { path = "crates/setup-core", version = "0.0.59" }
provider-v3 = { path = "crates/provider-v3", version = "0.0.59" }
harness-runtime = { path = "crates/harness-runtime", version = "0.0.59" }

[workspace.lints.rust]
unsafe_code = "forbid"
Expand Down
2 changes: 1 addition & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -179,7 +179,7 @@ release is a convenience, not the authorised copy.

```bash
docker run --rm -v "$HOME/.config:/config" \
ghcr.io/nddev-opennetwork/opencode-setup-system:0.0.58 \
ghcr.io/nddev-opennetwork/opencode-setup-system:0.0.59 \
status --target /config/<dir> --json
```

Expand Down
2 changes: 1 addition & 1 deletion install.ps1
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@
# powershell -ExecutionPolicy Bypass -File install.ps1 -Version 0.1.0
[CmdletBinding()]
param(
[string]$Version = "0.0.58",
[string]$Version = "0.0.59",
[string]$InstallDir = "$env:LOCALAPPDATA\Programs\opencode-setup-system"
)
$ErrorActionPreference = "Stop"
Expand Down
2 changes: 1 addition & 1 deletion install.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ set -eu

REPO="NDDev-OpenNetwork/opencode-setup-system"
BINARY="opencode-setup-system"
VERSION="${1:-0.0.58}"
VERSION="${1:-0.0.59}"
PREFIX="${OPENCODE_INSTALL_DIR:-$HOME/.local/bin}"

case "$(uname -s)" in
Expand Down
2 changes: 1 addition & 1 deletion references/opencode-baseline.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -333,7 +333,7 @@
"version": "1.18.26",
"verified_at": "2026-09-02T00:40:45+00:00"
},
"setup_catalogue_digest": "sha256:2812d268ce40bb989667dcd8afb5632ada2aa73882608decbbed752731d399a9",
"setup_catalogue_digest": "sha256:db280f58e88697d8c2b6c041e97da7af323227138b4f65a40baf14c7bdc26d06",
"previous_software_artifacts": {
"command": "opencode",
"shape": "gzip-tar",
Expand Down
4 changes: 2 additions & 2 deletions setups/nddev-builder/home/skills/nddev-builder/references/validation.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@
## Which repository you are in decides what you can run

This setup ships in two places and the commands below exist in only one of them.
**They belong to the private authoring monorepo, `NDDev-it-com/setup-systems`,
which renders this public tree.** A checkout of this public repository carries
**They belong to the source workspace that publishes this public tree.** A
checkout of this public repository carries
`crates/`, `setups/`, `references/` and `scripts/evidence.py` -- and neither
`scripts/gate.sh` nor `tools/`.

Expand Down
Loading