chore(jails): CI guard for agent-jail package drift vs clawdie-iso #115

Merged

clawdie merged 1 commit from chore/agent-jail-drift-check into main

2026-06-20 22:42:12 +02:00

clawdie commented

2026-06-20 22:39:59 +02:00

Owner

Implements the cross-repo drift guard discussed after #70/PR #81.

The agent-jail package set is hand-synced across two repos — this repo's agent-jail-bootstrap.sh (PKGS=) and clawdie-iso's pkg-list-jails.txt # agent-jail section. Nothing caught future drift; this adds a CI guard.

packaging/freebsd/check-agent-jail-pkgs.sh — pure POSIX sh; extracts PKGS= here, fetches the clawdie-iso list over HTTP (override via ISO_PKG_LIST_URL), diffs the two sets, exits non-zero on mismatch.
.forgejo/workflows/ci.yml — new agent-jail-pkgs job runs it on every push/PR.

Same shape as the CARGO_CRATES drift check. Verified green in sync (5 packages); negative test flags missing packages and exits 1.

Note: single-sided — fires on colibri CI and compares against clawdie-iso main.

🤖 Generated with Claude Code

Implements the cross-repo drift guard discussed after #70/PR #81. The agent-jail package set is hand-synced across two repos — this repo's `agent-jail-bootstrap.sh` (`PKGS=`) and clawdie-iso's `pkg-list-jails.txt` `# agent-jail` section. Nothing caught future drift; this adds a CI guard. - `packaging/freebsd/check-agent-jail-pkgs.sh` — pure POSIX sh; extracts `PKGS=` here, fetches the clawdie-iso list over HTTP (override via `ISO_PKG_LIST_URL`), diffs the two sets, exits non-zero on mismatch. - `.forgejo/workflows/ci.yml` — new `agent-jail-pkgs` job runs it on every push/PR. Same shape as the CARGO_CRATES drift check. Verified green in sync (5 packages); negative test flags missing packages and exits 1. Note: single-sided — fires on colibri CI and compares against clawdie-iso `main`. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

clawdie added 1 commit 2026-06-20 22:40:02 +02:00

chore(jails): CI guard for agent-jail package drift vs clawdie-iso

CI / rust (pull_request) Has been cancelled

Details

CI / markdown (pull_request) Has been cancelled

Details

CI / port (pull_request) Has been cancelled

Details

CI / agent-jail-pkgs (pull_request) Has been cancelled

Details

f4d6730c97

Closes the gap left after #70/PR #81: the agent-jail package set is hand-synced
across two repos (this bootstrap's PKGS= and clawdie-iso pkg-list-jails.txt
"# agent-jail" section) with nothing catching future drift.

- check-agent-jail-pkgs.sh: pure POSIX sh; extracts PKGS= here, fetches the
  clawdie-iso list over HTTP (ISO_PKG_LIST_URL overridable), diffs the two sets,
  reports the delta, exits non-zero on mismatch.
- ci.yml: new `agent-jail-pkgs` job runs it on every push/PR.

Same shape as the CARGO_CRATES drift check. Verified: green in sync (5 pkgs);
negative test flags missing packages and exits 1; ci.yml valid YAML.
Single-sided (fires on colibri CI); the clawdie-iso list is fetched from main.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>