-
released this
2026-10-10 23:14:08 +00:00 | 0 commits to main since this releaseSummary
coreci-broker v0.2.2: the broker packaged as a self-contained CLI zipapp artifact. coreci-broker-v0.2.2.pyz is built by scripts/build_cli.py with a deterministic normalization pass - the same sources rebuild byte-identical on the same environment, so the digest below is meaningful across rebuilds.
Requirements
REQ-22: from the first CLI-building release onward, every gitea release attaches the built coreci-broker artifact alongside the existing source archive. The upload resolves the forge token only via the sanctioned .env* files (never the process environment), asserted non-empty before the first API call.
Verification
The artifact sha256 in the CLI section below is computed from the attached file itself (G-017 - never an argument, never hand-pasted). Re-run the cumulative suite on the tagged commit:
python3 -m unittest discover -s testsCLI install + usage
- Download coreci-broker-v0.2.2.pyz from this release's assets.
- Install: chmod +x coreci-broker-v0.2.2.pyz then ./coreci-broker-v0.2.2.pyz, or run it directly with python3 coreci-broker-v0.2.2.pyz (Python 3.11+).
- Check the build: ./coreci-broker-v0.2.2.pyz --version prints v0.2.2.
- The env contract (every BROKER_* variable) is documented in the README; state is anchored by BROKER_ENV_PATH - the .env file's directory is the state dir and relative paths stay CWD-relative.
- First boot prints BROKER_ADMIN_PASS=... exactly once and creates the .env, broker.db, and broker.audit.log state files with mode 0600; the printed admin pass is not shown again - store it.
Artifact sha256 (computed from the attached file):
sha256:8486d36209e77a5f5c3348f9072a04265e19b447ac274c8bbfdbc22c3d7a696a coreci-broker-v0.2.2.pyzDocker usage
docker pull git.coreci.dev/coreci/broker:v0.2.2
docker run -p 8765:8765 -v broker-state:/state git.coreci.dev/coreci/broker:v0.2.2
State lives on the /state volume (WORKDIR /state; the first boot generates the .env, broker.db, and broker.audit.log there) - mount a persistent volume or the admin pass and any registered apps are lost with the container.
Downloads