coreci/broker
7
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 10 Wiki Activity

10 Releases 10 Tags

RSS Feed
  • v0.2.3 d3251edc07
    Compare

    v0.2.3: cli-packaging — milestone release Stable

    coreci-bot released this 2026-10-11 00:35:46 +00:00 | 2 commits to main since this release

    Milestone v0.2 — cli-packaging (milestone release)

    The completed v0.1 broker, packaged for distribution. Scope: CLI + distribution only — the broker is byte-identical to v0.1.5 (1390 lines, AC14 cap 1400).

    Phases

    • P0 pre-execution → v0.2.0 — requirements REQ-21..23, decisions D-019..D-022, research (zipapp mechanics, gitea release API, OCI registry v2), plan (3 phases / 12 tasks), grill GO-WITH-CONDITIONS (G-009..G-021, all applied)
    • P1 cli-packaging → v0.2.1 — zipapp build pipeline + boot shim (REQ-21), release tooling: sanctioned secrets loader + gitea attacher (REQ-22)
    • P2 docker-release-integration → v0.2.2 — daemonless OCI publish client (REQ-23), Dockerfile + .dockerignore + docs
    • P3 final-review-ship → v0.2.3 — acceptance matrix, security review (PASS-WITH-FINDINGS: 0 P0 / 1 P1 / 3 P2 — all remediated with regression gates), review + audit GO, this release

    Requirements

    • REQ-21 — coreci-broker-vX.Y.Z.pyz: single-file self-contained CLI (stdlib zipapp, no pip); bundles broker + admin UI + client module; first-boot parity with v0.1 (admin pass printed once, 0600 state files); --version; deterministic builds (two consecutive builds byte-identical)
    • REQ-22 — every release from v0.2.1 carries the .pyz attached (this one included); token discipline: file-only .env* resolution, never shell env; bounded-retry → release_pending escalation never blocks tag+merge
    • REQ-23 — docker container built once per milestone and published as a gitea package: git.coreci.dev/coreci/broker:v0.2.3 + :latest, daemonless stdlib registry client (D-019) — no container runtime required

    Verification

    • Cumulative suite: 356 tests green (1 pre-existing skip: bcrypt not importable locally) — includes the v0.1 AC1–AC14 matrix and the v0.2 acceptance matrix (boot parity through the artifact, reproducibility, self-containment, stub publish/release roundtrips, Dockerfile consistency)
    • Security review: 8 binding axes PASS after remediation; frozen broker zero-delta verified (no v0.2 commit touched coreci_broker.py, client, UI, or reference tools)
    • Release attachment: script-driven (scripts/release.py), idempotent, sha256 computed from the attached file

    CLI install + usage

    1. Download coreci-broker-v0.2.3.pyz from this release's assets.
    2. chmod +x coreci-broker-v0.2.3.pyz then ./coreci-broker-v0.2.3.pyz, or python3 coreci-broker-v0.2.3.pyz (Python 3.11+).
    3. ./coreci-broker-v0.2.3.pyz --version prints v0.2.3.
    4. First boot prints BROKER_ADMIN_PASS=... exactly once and creates .env, broker.db, broker.audit.log (mode 0600) in the state dir (BROKER_ENV_PATH anchors it). Full env contract in the README.

    Artifact sha256 (computed from the attached file):

    sha256:d2cf0d74805e7f927a6690b0ed80652c80281b62ae40086bd41542e3dcfbac80  coreci-broker-v0.2.3.pyz

    Docker usage

    docker pull git.coreci.dev/coreci/broker:v0.2.3   # also :latest
docker run -p 8765:8765 -v broker-state:/state git.coreci.dev/coreci/broker:v0.2.3

    State lives on the /state volume — mount a persistent volume or the admin pass and registrations are lost with the container.

    Escalations (all auto-resolved)

    • E-001/E-002 execution_dispatch — silent subagent dispatch failures on P2-01/P2-02; orchestrator executed directly; both passed independent four-layer verify gates
    • Zero release_pending events across the milestone
    Downloads